26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2d:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T76a,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 11246cbde879… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 11246cbde879…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/11246cbde8795e220671f9573702a423ec617d6231bded0e4c9f9f1cf865ad14","keywords":["malware analysis","sandbox report","threat intelligence","11246cbde8795e220671f9573702a423ec617d6231bded0e4c9f9f1cf865ad14"],"about":{"@type":"SoftwareApplication","name":"https://www.npmjs.com/package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-ver-online-en-espanol-latino-itflix%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-ver-facebook%20https:/www.npmjs.com/package/ver-hd-john-wick-4-pelicula-completa-online-en-espanol-cuevana%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-completa-online-sub-espanol-pelis24","applicationCategory":["url"],"identifier":"11246cbde8795e220671f9573702a423ec617d6231bded0e4c9f9f1cf865ad14"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":3},"behavioralIndicators":{"malicious":0,"suspicious":1},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T4090,Observed string: "*/e.exports=function(e){return e.split(" ").map((function(e){return e.slice(0,1).toUpperCase()+e.slice(1)})).join("").replace(/[^ _0-9a-z]/gi,"")}},function(e,t,n){"use strict";t.byteLength=function(e){var t=c(e),n=t[0],r=t[1];return 3*(n+r)/4-r},t.toByteArray=function(e){var t,n,r=c(e),i=r[0],s=r[1],l=new o(function(e,t,n){return 3*(t+n)/4-n}(0,i,s)),u=0,d=s>0?i-4:i;for(n=0;n>16&255,l[u++]=t>>8&255,l[u++]=255&t;2===s&&(t=a[e.charCodeAt(n)]<<2|a[e.charCodeAt(n+1)]>>4,l[u++]=255&t);1===s&&(t=a[e.charCodeAt(n)]<<10|a[e.charCodeAt(n+1)]<<4|a[e.charCodeAt(n+2)]>>2,l[u++]=t>>8&255,l[u++]=255&t);return l},t.fromByteArray=function(e){for(var t,n=e.length,a=n%3,o=[],i=0,s=n-a;is?s:i+16383));1===a?(t=e[n-1],o.push(r[t>>2]+r[t<<4&63]+"==")):2===a&&(t=(e[n-2]<<8)+e[n-1],o.push(r[t>>10]+r[t>>4&63]+r[t<<2&63]+"="));return o.join("")};for(var r=[],a=[],o="undefined"!=typeof Uint8Array?Uint8Array:Array,i="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",s=0,l=i.length;s0)throw new Error("Invalid string. Length must be a multiple of 4");var n=e.indexOf("=");return-1===n&&(n=t),[n,n===t?0:4-n%4]}function u(e,t,n){for(var a,o,i=[],s=t;s>18&63]+r[o>>12&63]+r[o>>6&63]+r[63&o]);return i.join("")}a["-".charCodeAt(0)]=62,a["_".charCodeAt(0)]=63},function(e,t){t.read=function(e,t,n,r,a){var o,i,s=8*a-r-1,l=(1<>1,u=-7,d=n?a-1:0,f=n?-1:1,p=e[t+d];for(d+=f,o=p&(1<<-u)-1,p>>=-u,u+=s;u>0;o=256*o+e[t+d],d+=f,u-=8);for(i=o&(1<<-u)-1,o>>=-u,u+=r;u>0;i=256*i+e[t+d],d+=f,u-=8);if(0===o)o=1-c;else{if(o===l)return i?NaN:1/0*(p?-1:1);i+=Math.pow(2,r),o-=c}return(p?-1:1)*i*Math.pow(2,o-r)},t.write=function(e,t,n,r,a,o){var i,s,l,c=8*o-a-1,u=(1<>1,f=23===a?Math.pow(2,-24)-Math.pow(2,-77):0,p=r?0:o-1,h=r?1:-1,m=t<0||0===t&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(s=isNaN(t)?1:0,i=u):(i=Math.floor(Math.log(t)/Math.LN2),t*(l=Math.pow(2,-i))<1&&(i--,l*=2),(t+=i+d>=1?f/l:f*Math.pow(2,1-d))*l>=2&&(i++,l/=2),i+d>=u?(s=0,i=u):i+d>=1?(s=(t*l-1)*Math.pow(2,a),i+=d):(s=t*Math.pow(2,d-1)*Math.pow(2,a),i=0));a>=8;e[n+p]=255&s,p+=h,s/=256,a-=8);for(i=i<0;e[n+p]=255&i,p+=h,i/=256,c-=8);e[n+p-h]|=128*m}},function(e,t,n){"use strict";n.r(t),n.d(t,"namespace",(function(){return u})),n.d(t,"isNetworkError",(function(){return d})),n.d(t,"isRetryableError",(function(){return h})),n.d(t,"isSafeRequestError",(function(){return m})),n.d(t,"isIdempotentRequestError",(function(){return g})),n.d(t,"isNetworkOrIdempotentRequestError",(function(){return v})),n.d(t,"exponentialDelay",(function(){return b})),n.d(t,"default",(function(){return T}));var r=n(649),a=n.n(r);function o(e,t,n,r,a,o,i){try{var s=e[o](i),l=s.value}catch(e){return void n(e)}s.done?t(l):Promise.resolve(l).then(r,a)}function i(e){return function(){var t=this,n=arguments;return new Promise((function(r,a){var i=e.apply(t,n);function s(e){o(i,r,a,s,l,"next",e)}function l(e){o(i,r,a,s,l,"throw",e)}s(void 0)}))}}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function l(e){for(var t=1;t=500&&e.response.status<=599)}function m(e){return!!e.config&&(h(e)&&-1!==f.indexOf(e.config.method))}function g(e){return!!e.config&&(h(e)&&-1!==p.indexOf(e.config.method))}function v(e){return d(e)||g(e)}function _(){return 0}function b(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:0,t=100*Math.pow(2,e),n=.2*t*Math.random();return t+n}function y(e){var t=e[u]||{};return t.retryCount=t.retryCount||0,e[u]=t,t}function E(){return(E=i((function*(e,t,n,r){var a=n.retryCount(y(e).lastRequestTime=Date.now(),e)),e.interceptors.response.use(null,function(){var n=i((function*(n){var{config:r}=n;if(!r)return Promise.reject(n);var{retries:a=3,retryCondition:o=v,retryDelay:i=_,shouldResetTimeout:s=!1,onRetry:c=(()=>{})}=function(e,t){return l(l({},t),e[u])}(r,t),d=y(r);if(yield function(e,t,n,r){return E.apply(this,arguments)}(a,o,d,n)){d.retryCount+=1;var f=i(d.retryCount,n);if(function(e,t){e.defaults.agent===t.agent&&delete t.agent,e.defaults.httpAgent===t.httpAgent&&delete t.httpAgent,e.defaults.httpsAgent===t.httpsAgent&&delete t.httpsAgent}(e,r),!s&&r.timeout&&d.lastRequestTime){var p=Date.now()-d.lastRequestTime,h=r.timeout-p-f;if(h<=0)return Promise.reject(n);r.timeout=h}return r.transformRequest=[e=>e],c(d.retryCount,n,r),new Promise(t=>setTimeout(()=>t(e(r)),f))}return Promise.reject(n)}));return function(e){return n.apply(this,arguments)}}())}T.isNetworkError=d,T.isSafeRequestError=m,T.isIdempotentRequestError=g,T.isNetworkOrIdempotentRequestError=v,T.exponentialDelay=b,T.isRetryableError=h},function(e,t){e.exports={ORG_ADD_TEAM:"org.add.team",ORG_DELETE_TEAM:"org.delete.team",ORG_ADD_USER:"org.add.user",ORG_REMOVE_USER:"org.remove.user",TEAM_ADD_USER:"team.add.user",TEAM_REMOVE_USER:"team.remove.user",TEAM_ADD_PACKAGE:"team.add.package",TEAM_REMOVE_PACKAGE:"team.remove.package",TEAM_UPDATE_PACKAGE_ACCESS:"team.update.packageaccess",PACKAGE_PUBLISH:"package.publish",PACKAGE_UNPUBLISH:"package.unpublish",PACKAGE_DEPRECATE:"package.deprecate",PACKAGE_ADD_DIST_TAG:"package.add.disttag",PACKAGE_REMOVE_DIST_TAG:"package.remove.disttag",PACKAGE_UPDATE_ACCESS:"package.update.access"}},function(e,t,n){const r=n(5);var a=function(){function e(e,t){for(var n=0;n_HashTable_Mutex" "\Sessions\1\BaseNamedObjects\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "\Sessions\1\BaseNamedObjects\IsoScope_654_IESQMMUTEX_0_303" "\Sessions\1\BaseNamedObjects\IsoScope_654_IESQMMUTEX_0_331" "\Sessions\1\BaseNamedObjects\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}" "Local\InternetShortcutMutex" "IsoScope_654_IESQMMUTEX_0_331" "{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "IsoScope_654_ConnHashTable<1620>_HashTable_Mutex" "IsoScope_654_IESQMMUTEX_0_303" "IsoScope_654_IESQMMUTEX_0_519" "Local\VERMGMTBlockListFileMutex"29:T1f1a,"https://www.npmjs.com/package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-ver-online-en-espanol-latino-itflix%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-ver-facebook%20https:/www.npmjs.com/package/ver-hd-john-wick-4-pelicula-completa-online-en-espanol-cuevana%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-completa-online-sub-espanol-pelis24" (Indicator: "youtube") "URL=https://www.npmjs.com/package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-ver-online-en-espanol-latino-itflix%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-ver-facebook%20https:/www.npmjs.com/package/ver-hd-john-wick-4-pelicula-completa-online-en-espanol-cuevana%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-completa-online-sub-espanol-pelis24" (Indicator: "youtube") "s://www.npmjs.com/package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-ver-online-en-espanol-latino-itflix%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-ver-facebook%20https:/www.npmjs.com/package/ver-hd-john-wick-4-pelicula-completa-online-en-espanol-cuevana%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-completa-online-sub-espanol-pelis24" (Indicator: "youtube") "tps://www.npmjs.com/package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-ver-online-en-espanol-latino-itflix%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-ver-facebook%20https:/www.npmjs.com/package/ver-hd-john-wick-4-pelicula-completa-online-en-espanol-cuevana%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-completa-online-sub-espanol-pelis24" (Indicator: "youtube") "ttps://www.npmjs.com/package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-ver-online-en-espanol-latino-itflix%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-ver-facebook%20https:/www.npmjs.com/package/ver-hd-john-wick-4-pelicula-completa-online-en-espanol-cuevana%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-completa-online-sub-espanol-pelis24" (Indicator: "youtube") "package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-ver-online-en-espanol-latino-itflix%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-ver-facebook%20https:/www.npmjs.com/package/ver-hd-john-wick-4-pelicula-completa-online-en-espanol-cuevana%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-completa-online-sub-espanol-pelis24" (Indicator: "youtube") "-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-ver-online-en-espanol-latino-itflix%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-ver-facebook%20https:/www.npmjs.com/package/ver-hd-john-wick-4-pelicula-completa-online-en-espanol-cuevana%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-completa-online-sub-espanol-pelis24" (Indicator: "youtube") "Program Files\Internet Explorer\iexplore.exe" https://www.npmjs.com/package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-ver-online-en-espanol-latino-itflix%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-ver-facebook%20https:/www.npmjs.com/package/ver-hd-john-wick-4-pelicula-completa-online-en-espanol-cuevana%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-completa-online-sub-espanol-pelis24" (Indicator: "youtube"), "pleta-online-en-espanol-cuevana%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-completa-online-sub-espanol-pelis24" (Indicator: "youtube")2a:T92c,"urlblockindex_1_.bin" has type "data"- [targetUID: N/A] "_52EA07A8-CCE3-11ED-BBEB-080027CABFA5_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "commons.8507eb86e916c99d0ddf_1_.js" has type "UTF-8 Unicode text with very long lines with escape sequences"- [targetUID: N/A] "~DF1259879A194E94B2.TMP" has type "data"- Location: [%TEMP%\~DF1259879A194E94B2.TMP]- [targetUID: 00000000-00001620] "search_2_.json" has type "JSON data"- [targetUID: N/A] "RecoveryStore._4AA6F3B3-CCE3-11ED-BBEB-080027CABFA5_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdo_1_.woff" has type "Web Open Font Format TrueType length 16084 version 1.1"- [targetUID: N/A] "SR7B9IN4.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\SR7B9IN4.txt]- [targetUID: 00000000-00001224] "css_2_.css" has type "ASCII text"- [targetUID: N/A] "search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "not-found.6043664422c45575be29_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "~DF11A7136675A03A74.TMP" has type "data"- Location: [%TEMP%\~DF11A7136675A03A74.TMP]- [targetUID: 00000000-00001620] "7SM148RF.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\7SM148RF.txt]- [targetUID: 00000000-00001620] "2f55441126e3c8d643c4c2d4e852cb4c_1_.png" has type "PNG image data 1000 x 1456 8-bit/color RGBA non-interlaced"- [targetUID: N/A] "styles.5510075f34abacbcebd0_1_.css" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "_4AA6F3B5-CCE3-11ED-BBEB-080027CABFA5_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "~DFB6A2A140EB6A9DDE.TMP" has type "data"- Location: [%TEMP%\~DFB6A2A140EB6A9DDE.TMP]- [targetUID: 00000000-00001620] "N0bX2SlFPv1weGeLZDtgJv7U_1_.woff" has type "Web Open Font Format TrueType length 20408 version 1.1"- [targetUID: N/A] "RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "Y03Z4JOB.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\Y03Z4JOB.txt]- [targetUID: 00000000-00001620]2b:T26da,Pattern match: "https://static.npmjs.com/;var" Pattern match: "https://static.npmjs.com/ab751523d7e1c184769f74eae2b8969f.css},1648:function(e,t,a){e.exports={fileExplorer:_5ae7dfec,srOnly:_34c14f2e,treeList:_6b5f01e6" Pattern match: "https://static.npmjs.com/b0f1a8318363185cc2ea6a40ac23eeb2.png},11:function(t,e){t.exports=https://static.npmjs.com/1996fcfdf7ca81ea795f67f093d7f449.png},1113:function(t,e,n){const" Pattern match: "http://feross.org" Pattern match: "http://underscorejs.org/LICENSE" Pattern match: "https://openjsf.org/" Pattern match: "https://github.com/primer/github-syntax-theme-generator/blob/master/LICENSE" Pattern match: "https://lodash.com/" Pattern match: "https://lodash.com/license" Pattern match: "https://docs.npmjs.com/configuring-two-factor-authentication},two-factor" Pattern match: "https://fb.me/react-polyfills" Pattern match: "https://reactjs.org/docs/error-decoder.html?invariant=+e,n=1;n" Pattern match: "github.com/necolas/normalize.css" Pattern match: "http://tachyons.io" Pattern match: "https://fonts.gstatic.com/s/firamono/v14/N0bX2SlFPv1weGeLZDtgJv7U.woff" Pattern match: "https://fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfedA.woff" Pattern match: "https://fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdo.woff" Pattern match: "https://fonts.googleapis.com/css?family=Fira+Mono" Pattern match: "https://fonts.googleapis.com/css?family=Poppins:400,500,600" Pattern match: "https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600" Pattern match: "npmjs.com/9217931289603102336527431967631023344*" Pattern match: "MUID14A19982AE97600721728B63AF1361FAmsn.com/1025253875776031101815130244467631023344*" Pattern match: "https://static.npmjs.com/57b6941f444dfaaa86fe6eb2a8241130.svg" Pattern match: "https://static.npmjs.com/77a1975e9c223b408cb31330b6a965df.svg" Pattern match: "https://static.npmjs.com/bc0fd45a2d3dc8827bc30618ae03cd62.svg" Pattern match: "https://static.npmjs.com/c07230a8959706cf638a847c59a2ab2b.svg" Pattern match: "https://static.npmjs.com/ca1922cf6824a157752008094d1e9627.svg" Pattern match: "https://www.npmjs.com/package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-complet" Pattern match: "www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-v" Pattern match: "https://csp.withgoogle.com/csp/apps-themesCross-Origin-Resource-Policy" Pattern match: "https://www.msn.com/spartan/ientpgbconfig?locale=en-us&market=usRequest-Context" Pattern match: "http://jedwatson.github.io/classnames" Pattern match: "https://www.figma.com/file/qewGdfS6NAH5yOR3gKtWK9/?node-id=3%3A41" Pattern match: "https://www.npmjs.com" Pattern match: "isdomainmigratedtruewww.msn.com/1025343217728031059570130244467631023344*" Pattern match: "MUIDB2193DD68210A66F3250BCF89204667A9ieonline.microsoft.com/9216252875776031101815129869467631023344*" Pattern match: "https://fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlEw.woff" Pattern match: "https://fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlEw.woff" Pattern match: "https://fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7j.woff" Pattern match: "https://fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdo.woff" Heuristic match: "static.npmjs.com" Pattern match: "SUIDMmicrosoft.com/9216239626854431023461129853842631023344*MUID2193DD68210A66F3250BCF89204667A9microsoft.com/1025252875776031101815129869467631023344*_EDGE_V1microsoft.com/9216252875776031101815129885092631023344*SRCHDAF=NOFORMmicrosoft.com/10243323789440" Pattern match: "SUIDMmicrosoft.com/9216239626854431023461129853842631023344*MUID2193DD68210A66F3250BCF89204667A9microsoft.com/1025252875776031101815129869467631023344*SRCHDAF=NOFORMmicrosoft.com/102433237894403108561027971357230938743*SRCHUIDV=2&GUID=426377958C8445E3B4EA6" Pattern match: "SUIDMmicrosoft.com/9216239626854431023461129853842631023344*SRCHDAF=NOFORMmicrosoft.com/102433237894403108561027971357230938743*SRCHUIDV=2&GUID=426377958C8445E3B4EA69482BD0E747&dmnchg=1microsoft.com/102433237894403108561027971357230938743*SRCHUSRDOB=202201" Pattern match: "https://static.npmjs.com/3dc2ca3d2e53fc894b904d917cf90015.png" Pattern match: "https://static.npmjs.com/abf53a31b2da4657a1a004ee9358551c.png" Pattern match: "www.msn.com/" Pattern match: "www.npmjs.com" Heuristic match: "SE;.WSF;.WSH;.MS" Heuristic match: "ww.npmjs.com" Pattern match: "www.npmjs.com/package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-c" Pattern match: "https://www.npmjs.com/package/jo" Pattern match: "www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-ver-online-en-espanol-latino-itflix%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en" Pattern match: "https://www.npmjs.com/package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-la" Pattern match: "www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-lat" Pattern match: "http://www.windows.com/pctv" Pattern match: "http://go.microsoft.com/fwlink/?linkid=53081" Pattern match: "www.microsoft.com/extender/help" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=30564-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwl" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=70599" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=145837" Pattern match: "http://go.microsoft.com/fwlink/?LinkID=57190" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=145765" Heuristic match: "Example: computer.fabrikam.com" Pattern match: "vista.gallery.microsoft.com/vista/SideShow.aspx" Pattern match: "http://www.icra.org/vocabulary/" Pattern match: "wmploc.dll/Offline_Buy.htm'res://wmploc.dll/Offline_MediaGuide.htm*res://wmploc.dll/Offline_Subscriptions.htm" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=32146res://wmploc.dll/ICW_ErrorPage.htm" Pattern match: "wmploc.dll/Service_Initial.htm" Pattern match: "wmploc.dll/Error_ServiceInfo.htm'res://wmploc.dll/Offline_InfoCenter.htm&res://wmploc.dll/Offline_AlbumInfo.htm" Pattern match: "wmploc.dll/Service_NoFunc.htm%res://wmploc.dll/Service_No_Local.htm" Pattern match: "wmploc.dll/RT_IMAGE/ServiceLarge.png*res://wmploc.dll/RT_IMAGE/ServiceSmall.png*res://wmploc.dll/RT_IMAGE/ServiceSmall.png" Pattern match: "wmploc.dll/Blocked_AlbumInfo.htm&res://wmploc.dll/Blocked_AlbumInfo.htm,http://go.microsoft.com/fwlink/?LinkId=70183'res://wmploc.dll/offline_radioguide.htm" Pattern match: "http://images.metaservices.microsoft.com/cover/6http://redir.metaservices.microsoft.com/redir/buynow/" Pattern match: "redir.metaservices.microsoft.com/dvdcover/P" Pattern match: "http://redir.metaservices.microsoft.com/redir/buynow/" Pattern match: "http://windowsmedia.com/redir/findmedia.asp" Pattern match: "redir.metaservices.microsoft.com/redir/getmdrdvd/" Pattern match: "redir.metaservices.microsoft.com/redir/getmdrcd/?Bhttp://redir.metaservices.microsoft.com/redir/getmdrcdbackground/??http://redir.metaservices.microsoft.com/redir/getmdrcdposturl/?Ihttp://redir.metaservices.microsoft.com/redir/getmdrcdposturlbackground/?=h" Pattern match: "redir.metaservices.microsoft.com/redir/submittoc/?-http://windowsmedia.com/redir/QueryTOCExt.asp1res://wmploc.dll/Offline_MediaInfo_NowPlaying.htm7http://redir.metaservices.microsoft.com/redir/buynowmg/,http://windowsmedia.com/redir/buyticket9.asp" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=321507Optimized" Pattern match: "http://go.microsoft.com/fwlink/?linkid=8792" Pattern match: "http://redir.metaservices.microsoft.com/redir/mediaguide/?9http://redir.metaservices.microsoft.com/redir/radiotuner/,http://windowsmedia.com/redir/QueryTOCNP.asp#Show" Pattern match: "http://windowsmedia.com/redir/services.asp?WMPFriendly=true" Pattern match: "http://www.microsoft.com/windows/windowsmedia/musicservices.aspx?http://redir.metaservices.microsoft.com/redir/allservices/?sv=2?http://redir.metaservices.microsoft.com/redir/allservices/?sv=3?http://redir.metaservices.microsoft.com/redir/allservices/?sv=5" Pattern match: "http://www.w3.org/1999/XSL/Transform" Pattern match: "http://*.microsoft.co.jp" Pattern match: "http://microsoft.*.com" Pattern match: "www.treyresearch.net" Pattern match: "http://treyresearch.net" Heuristic match: "- fineartschool.net" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=226247" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=233329" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=228745" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=787651" Heuristic match: "GridParent.Height = Grid.Height + Grid.Top" Pattern match: "http://www.w3.org/2001/XMLSchema" Pattern match: "http://www.iec.ch" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=121315" Pattern match: "http://go.microsoft.com/fwlink/p/?LinkId=255142" Heuristic match: "\Emt.Gm"2c:T584,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1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"11246cbde8795e220671f9573702a423ec617d6231bded0e4c9f9f1cf865ad14","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1793076059000,"unified_at":"2026-10-27T04:40:59.000Z","metadata":{"hashes":{"sha256":"11246cbde8795e220671f9573702a423ec617d6231bded0e4c9f9f1cf865ad14","sha1":"c9ccc94b5d87dd5bb15b79cfad9bf425fd8b1534","md5":"d80e658c9a96fd77736a224f19d4bb93","sha512":"467b03f6eb7415177843588b17ce99a5c9bbb287e9376bc3c10fbe71fdfaf730711bb56d53d5dc06bc8d63e22ff7156342255acbb4382a423ed8c60cfb5e2326","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://www.npmjs.com/package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-ver-online-en-espanol-latino-itflix%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-ver-facebook%20https:/www.npmjs.com/package/ver-hd-john-wick-4-pelicula-completa-online-en-espanol-cuevana%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-completa-online-sub-espanol-pelis24","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1679958286000,"last_seen":1679958286000,"last_multi_scan":1679958286000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":3},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":4},"sandbox_signatures":{"informative_count":9,"suspicious_count":1,"malicious_count":0,"total":10},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"cleandns":{"name":"CleanDNS","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"CleanDNS","permalink":"https://www.cleandns.com/","extra_fields":[{"name":"domain","value":"npmjs.com"},{"name":"percent","value":0},{"name":"reports_count","value":0}]},"scamadviser":{"name":"ScamAdviser","success":true,"verdict":"clean","status":"clean","progress":100,"data_source":"ScamAdviser","permalink":"https://www.scamadviser.com/?utm_source=hybridanalysis","report_link":"https://www.scamadviser.com/check-website/npmjs.com?utm_source=hybridanalysis","extra_fields":[{"name":"domain","value":"npmjs.com"},{"name":"percent","value":0}]},"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Defense Evasion","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains reference to Base64 character set"}],"sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Contacts server"}],"sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"tactic":"Command and Control","technique":"DNS","attack_id":"T1071.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/004","identifiers":[{"type":"informative","value":"Queries DNS server"}],"sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"suspicious","value":"Drops script (vb/js) files"},{"type":"informative","value":"Dropped files"}],"sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]}],"sandbox_signatures":[{"level":"informative","category":"Anti-Detection/Stealthyness","name":"Contains reference to Base64 character set","description":"$27","origin":"File/Memory","mitre_attack_id":"T1027","relevance":1,"id":"string-338","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"104.16.92.83:443\"\n \"142.250.189.202:443\"\n \"172.217.12.99:443\"\n \"96.7.78.134:443\"","origin":"Network Traffic","mitre_attack_id":"T1071","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"$28","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"$29","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"level":"informative","category":"General","name":"Queries DNS server","description":"\"static.npmjs.com\"\n \"www.npmjs.com\"","origin":"Network Traffic","mitre_attack_id":"T1071.004","relevance":1,"id":"network-51","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$2a","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"level":"informative","category":"Network Related","name":"Found potential IP address in binary/memory","description":"Potential IP \"1.0.0.0\" found in string \"Microsoft.Windows.IsolationAutomation,processorArchitecture=\"x86\",publicKeyToken=\"6595b64144ccf1df\",type=\"win32\",version=\"1.0.0.0\"C:\\Windows\\WinSxS\\manifests\\x86_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.0.0_none_35d357a66c38ade4.manifest\"\n Potential IP \"5.1.0.0\" found in string \"Microsoft.Windows.Shell.rundll32,processorArchitecture=\"x86\",type=\"win32\",version=\"5.1.0.0\"C:\\Windows\\system32\\RunDll32.exe\"\n Potential IP \"5.1.0.0\" found in string \"Microsoft.Windows.InetCore.ieframe,processorArchitecture=\"x86\",type=\"win32\",version=\"5.1.0.0\"C:\\Windows\\system32\\IEFRAME.dll\"\n Potential IP \"5.1.0.0\" found in string \"version=\"5.1.0.0\"\"\n Potential IP \"1.0.1.6\" found in string \"1.0.1.6 (vbl_wcp_d2_drivers.060616-1619)\"\n Potential IP \"1.0.0.0\" found in string \"1.0.0.0,2006\"\n Potential IP \"157.54.23.41\" found in string \"ftp://157.54.23.41/\"\n Potential IP \"1.01.2.70\" found in string \"1.01.2.70 (fbl_dox_dev_ihvs.090312-0417)\"\n \"1.01.2.70\"","origin":"File/Memory","relevance":3,"id":"string-14","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$2b","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"level":"suspicious","category":"Installation/Persistence","name":"Drops script (vb/js) files","description":"\"commons.8507eb86e916c99d0ddf_1_.js\" has type \"UTF-8 Unicode text with very long lines with escape sequences\"- [targetUID: N/A]\n \"not-found.6043664422c45575be29_1_.js\" has type \"ASCII text with very long lines\"- [targetUID: N/A]\n \"minicssextractbug.b3558a1bf61d65b23a03_1_.js\" has type \"ASCII text with very long lines\"- [targetUID: N/A]","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-40","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 2 domains and 2 hosts"}],"sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":35,"imported_dlls_count":120,"dropped_files_count":0,"extracted_files_count":38,"files_written_count":31,"files_deleted_count":0,"registry_keys_created_count":8,"registry_keys_modified_count":0,"registry_keys_deleted_count":1,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":9,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":4,"dns_resolutions_count":2,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment"],"sandbox_reports":[{"id":"6422210d932726797b0e530c","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"undetected","contacted_countries":["USA"],"submit_name":"11246cbde8795e220671f9573702a423ec617d6231bded0e4c9f9f1cf865ad14.url","analysis_start_time":"2023-03-27T23:04:45+00:00","indicators_count":{"informative":9,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"104.16.92.83","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"address":"142.250.189.202","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"address":"172.217.12.99","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"address":"96.7.78.134","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]}],"dns_resolutions":[{"domain":"static.npmjs.com","address":"104.16.92.83","ttl":300,"country":"United States","registrar_name":"DYNAMIC NETWORK SERVICES, INC","registrar_organization":"npm, Inc.","registrar_name_servers":"NS1.P05.DYNECT.NET","registrar_creation_date":"2010-03-19T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"domain":"www.npmjs.com","address":"104.16.92.83","ttl":300,"country":"United States","registrar_name":"DYNAMIC NETWORK SERVICES, INC","registrar_organization":"npm, Inc.","registrar_name_servers":"NS1.P05.DYNECT.NET","registrar_creation_date":"2010-03-19T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}],"processes":[{"pid":3516,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\11246cbde8795e220671f9573702a423ec617d6231bded0e4c9f9f1cf865ad14.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00003516","icon":"$2c"},{"pid":1620,"ppid":3516,"name":"iexplore.exe","command_line":"https://www.npmjs.com/package/john-wick-4-pelicula-completa-online-sub-espanol-latino-repelis%20https:/www.npmjs.com/package/ver-cuevana-3-john-wick-4-completa-2023-en-espanol-repelis-latino-pelis24%20https:/www.npmjs.com/package/ver-hd-john-wick-4-completa-2023-cuevana-en-espanol-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-ver-online-en-espanol-latino-itflix%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-ver-facebook%20https:/www.npmjs.com/package/ver-hd-john-wick-4-pelicula-completa-online-en-espanol-cuevana%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-online-en-espanol-y-latino-youtube%20https:/www.npmjs.com/package/john-wick-4-pelicula-completa-en-espanol-latino-netflix%20https:/www.npmjs.com/package/ver-john-wick-4-pelicula-completa-sub-espanol-y-latino-repelis%20https:/www.npmjs.com/package/john-wick-4-completa-online-sub-espanol-pelis24","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003516","uid":"00000000-00001620"},{"pid":1224,"ppid":1620,"name":"iexplore.exe","command_line":"SCODEF:1620 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00001620","uid":"00000000-00001224"}],"all_imported_dlls":["actxprxy.dll","ntmarta.dll","msvcr90.dll","api-ms-win-core-synch-l1-2-0.dll","gpapi.dll","sechost.dll","api-ms-win-downlevel-version-l1-1-0.dll","wshqos.dll","profapi.dll","normaliz.dll","shlwapi.dll","dhcpcsvc.dll","credssp.dll","ncrypt.dll","msimg32.dll","propsys.dll","URLREDIR.DLL","bcrypt.dll","FWPUCLNT.DLL","mscoree.dll","d2d1.dll","rpcrt4.dll","mswsock.dll","netprofm.dll","srvcli.dll","dnsapi.dll","ws2_32.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","msasn1.dll","setupapi.dll","Wldap32.dll","deploy.dll","dxgi.dll","user32.dll","comdlg32.dll","oleaccrc.dll","dui70.dll","mshtml.dll","msimtf.dll","ole32.dll","rsaenh.dll","schannel.dll","api-ms-win-downlevel-user32-l1-1-0.dll","comctl32.dll","winhttp.dll","wship6.dll","msvcrt.dll","wintrust.dll","ieui.dll","UIAnimation.dll","kernel32.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","uxtheme.dll","xmllite.dll","DWrite.dll","gdi32.dll","sqmapi.dll","advapi32.dll","sxs.dll","msctf.dll","mscorwks.dll","netutils.dll","netapi32.dll","oleacc.dll","d3d11.dll","version.dll","rpcss.dll","ieproxy.dll","bcryptprimitives.dll","IPHLPAPI.DLL","oleaut32.dll","ieframe.dll","urlmon.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","crypt32.dll","cfgmgr32.dll","devobj.dll","iertutil.dll","nsi.dll","WindowsCodecs.dll","RpcRtRemote.dll","cryptbase.dll","ExplorerFrame.dll","usp10.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","cryptsp.dll","imagehlp.dll","lpk.dll","imm32.dll","dwmapi.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","dhcpcsvc6.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","npmproxy.dll","secur32.dll","duser.dll","sspicli.dll","ssv.dll","d3d10warp.dll","KernelBase.dll","nlaapi.dll","WSHTCPIP.DLL","shell32.dll","winnsi.dll","apphelp.dll","mlang.dll","msvcr100.dll","mscoreei.dll","MSOHEV.DLL","jp2ssv.dll","jscript9.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","IEShims.dll","rasadhlp.dll","fltLib.dll","userenv.dll","webio.dll","clbcatq.dll","wkscli.dll","wininet.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"favicon_1_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"favicon_2_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"7SM148RF.txt","sha256":"188bb5509e5862972c3b5a7ed6ee6414d991e58288f4f32eda164fd8dbd612e5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"937XFAUI.txt","sha256":"0df01439f90b99c8473864d7701799b75bb866f77577740b56767af1c6a6d1f5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"GVINO2FO.txt","sha256":"fcb5a382934afcd9532afcbd1b3970a7f38e95f953e2363bdd8e4ed7bfd7f73d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"HOYX7D1J.txt","sha256":"fb8575d91ccc650887fcb2effbfa917e2dd2260b9b37e6fa693f94ed9699c1da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"HSZ295C7.txt","sha256":"1b37a9fcbb13d46565ffcb3f9af7c2fffb10ba0a9df59e503a4fe3f4f9137fbd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"JIH6C7ZR.txt","sha256":"80611969705fc5cd6b7f0772f50163e986269514c5b6dad7ee9fee4ee3293b3a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"SR7B9IN4.txt","sha256":"c45b450b32a64937b6b85bbd94943224f3a0f553745e933f53ec8c90c5bfada0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"Y03Z4JOB.txt","sha256":"e69f85dc09e0ddb904a3d423de8955a383921b31f5ec182b4d6e1f7621ba3dd9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"~DF11A7136675A03A74.TMP","sha256":"a47cb65a4a504a90757377e71f1eb5946a2c4e31b4272c379b18f8fc34c3279d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"~DF1259879A194E94B2.TMP","sha256":"155ed4d0d0d2ff14f580f3820ae3a6af1584bd41ecb9290053a169686629d707","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"~DFB6A2A140EB6A9DDE.TMP","sha256":"8c45ba6844198e31d44eaa68ad62530cdbf2f1737417b431ae0e0c315b3bb977","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"~DFD491AF9C051F5DE1.TMP","sha256":"8c317eac9919cf9d1b3e1922661caa067e77d56bc4733cd035e39ed6521d5866","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"~DFDE5B3C38895F5C8D.TMP","sha256":"d128bfbcb3f11ac39dbaa871389322990de6559ab036ef8c4f0566d04a6e5a4c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"_52EA07A8-CCE3-11ED-BBEB-080027CABFA5_.dat","sha256":"f99a9b6ab13b522c18a700ad4408d94f0a144b26b992e9271efcef817cac8214","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"commons.8507eb86e916c99d0ddf_1_.js","sha256":"ebf9b6e4eeadbecb1efb943f76ecc369e383a796543c9dd91cc18092d3f5c7a9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"search_2_.json","sha256":"19170bd75edc0b5183a2f9fcc3001d9d222deff61e5915ad1127b65ab581a2a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"RecoveryStore._4AA6F3B3-CCE3-11ED-BBEB-080027CABFA5_.dat","sha256":"98251f33a70f1aa455e5a3151deee2a45f57c56ccd89e913723a2deae052e1f2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdo_1_.woff","sha256":"2e6ace04cedde28d7117a7ab3ee4934bdce6f0b269b3f30ffb4e2e06b1fe91f0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"css_2_.css","sha256":"abf5aed5b53f92cda86881cf71191c49e908825a4bdd59a696584461bee8bf48","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"not-found.6043664422c45575be29_1_.js","sha256":"013c4fec896223a66ad0d4181a0c46fe53c9340dddd8ef20888a8f92ef222535","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"2f55441126e3c8d643c4c2d4e852cb4c_1_.png","sha256":"a8b9ca465fefe0829cc33a011be7d5fe98dd800d32667777352bb8b5903dd6ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"styles.5510075f34abacbcebd0_1_.css","sha256":"65594412a93dad1baa681ab6f161f6c64f5eb8e44a7e7d7d1c381deeb77a9bcd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"_4AA6F3B5-CCE3-11ED-BBEB-080027CABFA5_.dat","sha256":"91adb0455ef1d9d435f170cb2c179c0aeadea93daa751cf54e127243f6e3e211","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"N0bX2SlFPv1weGeLZDtgJv7U_1_.woff","sha256":"6d62f792290485796b8647f0a0eca61d8f00c23ec69f8fcba01eb5aea4be3786","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"9cfd2c2e6e97f58caa5b074e02e8b92899ef16ddd30f6cbea27916fe3609a1b8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"_F8BC753A-CCE3-11ED-BBEB-080027CABFA5_.dat","sha256":"315d4c12a9a00a3bd360ac3a24a1ed16f01f10887d94277e5e087097bb7bf80f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"pxiEyp8kv8JHgFVrJJfedA_1_.woff","sha256":"49f0742d602fcc0092b7dbcb7c710849988b0a7094df8979af9c5f151f301d6d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7j_1_.woff","sha256":"96f22b128087b997256dccb88e388342882c5384b3ba7ed5fbe0d0b92f7e60e8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"minicssextractbug.b3558a1bf61d65b23a03_1_.js","sha256":"c41c956b3ba0ee8cbf4441cb0b2998b2e996e884b61484f2daac1f7db70d408d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"pxiByp8kv8JHgFVrLEj6Z1xlEw_1_.woff","sha256":"426316de2a499a38688cfcc92c143d25fa0c45c3afcf2074a84e3563dfa33c23","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"pxiByp8kv8JHgFVrLGT9Z1xlEw_1_.woff","sha256":"316565c31e07631fe1a6a3f605ea1f40d529f7471d8fde952f863287d74bb7f6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"css_1_.css","sha256":"eacc1200103c4ede20a7abb0ac21f9e010f84e920e5a1815db82fe41166a1161","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdo_1_.woff","sha256":"c90e782af8bb58958c6613744b251581cc85af4e74dd2b854a9481b29c3805e4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]}],"files_written":[{"path":"\\FileSystem\\Filters\\FltMgrMsg","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{4AA6F3B5-CCE3-11ED-BBEB-080027CABFA5}.dat","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%TEMP%\\~DFB6A2A140EB6A9DDE.TMP","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\css[1].css","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{4AA6F3B3-CCE3-11ED-BBEB-080027CABFA5}.dat","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%TEMP%\\~DF1259879A194E94B2.TMP","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{52EA07A8-CCE3-11ED-BBEB-080027CABFA5}.dat","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%TEMP%\\~DF11A7136675A03A74.TMP","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\2f55441126e3c8d643c4c2d4e852cb4c[1].png","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.4","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TABBEDBROWSING\\NEWTABPAGE\\","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\DOMAINSUGGESTION\\FILENAMES\\\\","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\DOMAINSUGGESTION\\","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TABBEDBROWSING\\","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\VERSIONMANAGER\\","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TOOLBAR\\","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TABBEDBROWSING\\NEWTABPAGE\\MFV\\MFV","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_1620","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_654_IE_EarlyTabStart_0xdec_Mutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_654_ConnHashTable<1620>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_654_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_654_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"IsoScope_654_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"IsoScope_654_ConnHashTable<1620>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"IsoScope_654_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"IsoScope_654_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_1620","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"IsoScope_654_IE_EarlyTabStart_0xdec_Mutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_654_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"IsoScope_654_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_654_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"6422210d932726797b0e530c"}]}]}},"report_ids":{"sandbox_job_ids":["6422210d932726797b0e530c"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 11246cbde879… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 11246cbde879…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/11246cbde8795e220671f9573702a423ec617d6231bded0e4c9f9f1cf865ad14"}],["$","meta","4",{"property":"og:title","content":"Sample 11246cbde879… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 11246cbde879…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/11246cbde8795e220671f9573702a423ec617d6231bded0e4c9f9f1cf865ad14"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 11246cbde879… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 11246cbde879…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2d","11",{}]]