26:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 2e:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 25:T493,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Ransom.Mole.Generic Sample 15f5cb94b851… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 15f5cb94b851…. Malware family: Ransom.Mole.Generic. Threat score 100/100. 21/27 AV engines flagged this file. 3 malicious and 19 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91","keywords":["Malicious","Ransom.Mole.Generic","malware analysis","sandbox report","threat intelligence","15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91"],"about":{"@type":"SoftwareApplication","name":"file","applicationCategory":["peexe","executable"],"identifier":"15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Ransom.Mole.Generic","antivirusDetections":{"malicious":21,"total":27},"behavioralIndicators":{"malicious":3,"suspicious":19},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T5d1,Spawned process "cmd.exe" with commandline "/C sc stop VVS" (UID: 00013926-00003844) Spawned process "cmd.exe" with commandline "/C vssadmin.exe Delete Shadows /All /Quiet" (UID: 00013934-00003892) Spawned process "sc.exe" with commandline "sc stop VVS" (UID: 00013936-00003876) Spawned process "cmd.exe" with commandline "/C bcdedit /set {default} recoveryenabled No" (UID: 00013945-00003852) Spawned process "vssadmin.exe" with commandline "Delete Shadows /All /Quiet" (UID: 00013954-00003916) Spawned process "cmd.exe" with commandline "/C bcdedit /set {default} bootstatuspolicy ignoreallfailures" (UID: 00013957-00003908) Spawned process "bcdedit.exe" with commandline "bcdedit /set {default} recoveryenabled No" (UID: 00013971-00003600) Spawned process "bcdedit.exe" with commandline "bcdedit /set {default} bootstatuspolicy ignoreallfailures" (UID: 00013981-00003872) Spawned process "notepad.exe" with commandline "%USERPROFILE%\Desktop\_HELP_INSTRUCTIONS_.TXT" (UID: 00026403-00004452) Spawned process "notepad.exe" with commandline "%USERPROFILE%\Desktop\_HELP_INSTRUCTIONS_.TXT" (UID: 00027806-00004632) Spawned process "notepad.exe" with commandline "%USERPROFILE%\Desktop\_HELP_INSTRUCTIONS_.TXT" (UID: 00029204-00004824) Spawned process "notepad.exe" with commandline "%USERPROFILE%\Desktop\_HELP_INSTRUCTIONS_.TXT" (UID: 00030605-00005020) Spawned process "notepad.exe" with commandline "%USERPROFILE%\Desktop\_HELP_INSTRUCTIONS_.TXT" (UID: 00032000-00005240)28:T5b6,"" touched file "C:\Windows\System32\oleaccrc.dll" "" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches" "" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\cversions.1.db" "" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000c.db" "" touched file "%APPDATA%\Microsoft\Windows\Network Shortcuts\_HELP_INSTRUCTIONS_.TXT" "" touched file "%APPDATA%\Microsoft\Windows\Printer Shortcuts\_HELP_INSTRUCTIONS_.TXT" "" touched file "%APPDATA%\Microsoft\Windows\Recent\_HELP_INSTRUCTIONS_.TXT" "" touched file "%APPDATA%\Microsoft\Windows\SendTo\_HELP_INSTRUCTIONS_.TXT" "" touched file "%APPDATA%\Microsoft\Windows\Start Menu\_HELP_INSTRUCTIONS_.TXT" "" touched file "%APPDATA%\Microsoft\Windows\Templates\_HELP_INSTRUCTIONS_.TXT" "cmd.exe" touched file "C:\Windows\AppPatch\sysmain.sdb" "cmd.exe" touched file "C:\Windows\System32\vssadmin.exe" "cmd.exe" touched file "C:\Windows\System32\bcdedit.exe" "vssadmin.exe" touched file "C:\Windows\System32\rsaenh.dll" "vssadmin.exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" "notepad.exe" touched file "%APPDATA%\Microsoft\Windows\Network Shortcuts\_HELP_INSTRUCTIONS_.TXT" "notepad.exe" touched file "%APPDATA%\Microsoft\Windows\Printer Shortcuts\_HELP_INSTRUCTIONS_.TXT"29:T41e,"" read file "C:\Users\desktop.ini" "" read file "C:\Users\%OSUSER%\ntuser.ini" "" read file "C:\Users\%OSUSER%\Contacts\desktop.ini" "" read file "C:\Users\%OSUSER%\Documents\desktop.ini" "" read file "C:\Users\%OSUSER%\Downloads\desktop.ini" "" read file "C:\Users\%OSUSER%\Favorites\desktop.ini" "" read file "C:\Users\%OSUSER%\Favorites\Links\desktop.ini" "" read file "C:\Users\%OSUSER%\Favorites\Links for United States\desktop.ini" "" read file "C:\Users\%OSUSER%\Links\desktop.ini" "" read file "C:\Users\%OSUSER%\Music\desktop.ini" "" read file "C:\Users\%OSUSER%\Pictures\desktop.ini" "" read file "C:\Users\%OSUSER%\Saved Games\desktop.ini" "" read file "C:\Users\%OSUSER%\Saved Games\Microsoft Games\desktop.ini" "" read file "C:\Users\%OSUSER%\Searches\desktop.ini" "" read file "C:\Users\%OSUSER%\Videos\desktop.ini"2a:Ta96,"C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\autoexec.bat" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\config.sys" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Desktop background.png" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Contacts\desktop.ini" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\04bZ.txt" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\0pYWspjURe8aqA.exe" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\0zIG0D.doc" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\4nAn3p.mp3" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\5aFd8vA3PE3A.mp3" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\5F1yaAIKfUGQcmmt.doc" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\66u5Ps.pdf" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\8Uu9ETpS.avi" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\a3Ntx.exe" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\B2OE.pdf" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\b9UD.jpg" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\bg3oTe.doc" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\Bp9aBvvt.txt" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\bwI55TdR2ltk57l.pdf" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\dgQJde60mPXhI.exe" for deletion "C:\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe" marked "C:\Users\%OSUSER%\Downloads\ecazG0z.rar" for deletion2b:T69d,"" opened "C:\autoexec.bat" with delete access "" opened "C:\config.sys" with delete access "" opened "C:\Users\desktop.ini" with delete access "" opened "C:\Users\73b8Bhk\Desktop background.png" with delete access "" opened "C:\Recovery\72d3f4c2-b53f-11e4-b6d9-9157ca704b30\boot.sdi" with delete access "" opened "C:\Recovery\72d3f4c2-b53f-11e4-b6d9-9157ca704b30\Winre.wim" with delete access "" opened "C:\Users\73b8Bhk\ntuser.ini" with delete access "" opened "C:\Users\73b8Bhk\Contacts\desktop.ini" with delete access "" opened "C:\Users\73b8Bhk\Contacts\%OSUSER%.contact" with delete access "" opened "C:\Users\73b8Bhk\Documents\desktop.ini" with delete access "" opened "C:\Users\73b8Bhk\Downloads\01dMtnkBz9.gif" with delete access "" opened "C:\Users\73b8Bhk\Downloads\04bZ.txt" with delete access "" opened "C:\Users\73b8Bhk\Downloads\07Y08HBp.txt" with delete access "" opened "C:\Users\73b8Bhk\Downloads\0gakl8ixtWMkw.doc" with delete access "" opened "C:\Users\73b8Bhk\Downloads\0Og1.rar" with delete access "" opened "C:\Users\73b8Bhk\Downloads\0cuxPf1k3pJ5.pdf" with delete access "" opened "C:\Users\73b8Bhk\Downloads\0pYWspjURe8aqA.exe" with delete access "" opened "C:\Users\73b8Bhk\Downloads\0zIG0D.doc" with delete access "" opened "C:\Users\73b8Bhk\Downloads\1N1A3vlRdYRii5C.mp3" with delete access "" opened "C:\Users\73b8Bhk\Downloads\1q4yvQVxByym4.rar" with delete access2c:T60c,Spawned process "" (UID: 00011724-00003788) Spawned process "cmd.exe" with commandline "/C sc stop VVS" (UID: 00013926-00003844) Spawned process "cmd.exe" with commandline "/C vssadmin.exe Delete Shadows /All /Quiet" (UID: 00013934-00003892) Spawned process "sc.exe" with commandline "sc stop VVS" (UID: 00013936-00003876) Spawned process "cmd.exe" with commandline "/C bcdedit /set {default} recoveryenabled No" (UID: 00013945-00003852) Spawned process "vssadmin.exe" with commandline "Delete Shadows /All /Quiet" (UID: 00013954-00003916) Spawned process "cmd.exe" with commandline "/C bcdedit /set {default} bootstatuspolicy ignoreallfailures" (UID: 00013957-00003908) Spawned process "bcdedit.exe" with commandline "bcdedit /set {default} recoveryenabled No" (UID: 00013971-00003600) Spawned process "bcdedit.exe" with commandline "bcdedit /set {default} bootstatuspolicy ignoreallfailures" (UID: 00013981-00003872) Spawned process "notepad.exe" with commandline "%USERPROFILE%\Desktop\_HELP_INSTRUCTIONS_.TXT" (UID: 00026403-00004452) Spawned process "notepad.exe" with commandline "%USERPROFILE%\Desktop\_HELP_INSTRUCTIONS_.TXT" (UID: 00027806-00004632) Spawned process "notepad.exe" with commandline "%USERPROFILE%\Desktop\_HELP_INSTRUCTIONS_.TXT" (UID: 00029204-00004824) Spawned process "notepad.exe" with commandline "%USERPROFILE%\Desktop\_HELP_INSTRUCTIONS_.TXT" (UID: 00030605-00005020) Spawned process "notepad.exe" with commandline "%USERPROFILE%\Desktop\_HELP_INSTRUCTIONS_.TXT" (UID: 00032000-00005240)2d:T570,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1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1790269386631,"unified_at":"2026-09-24T17:03:06.631Z","metadata":{"hashes":{"sha256":"15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91","sha1":"f339b703192a562dde82596319e8720c30aaa5ed","md5":"c3294c90474063dfb0d28ef8a693a6cb","sha512":"dc61d3420876c30295094db5022c6865bf9918116ecd33528b4cd8bdfa1c392f74368550bf7dfeba591db094f0369f277158fe59adee158c7ec5897fe456de67","ssdeep":"1536:681S/IlaIzMMWFNemrHt01h5nMEUYrpyM5QB7+:blFzMtNemrHuxnMEUYrpyM5QB7+","ssdeep_chunks":["1536:681S/Il","1536:81S/Ila","1536:1S/IlaI","1536:S/IlaIz","1536:/IlaIzM","1536:IlaIzMM","1536:laIzMMW","1536:aIzMMWF","1536:IzMMWFN","1536:zMMWFNe","1536:MMWFNem","1536:MWFNemr","1536:WFNemrH","1536:FNemrHt","1536:NemrHt0","1536:emrHt01","1536:mrHt01h","1536:rHt01h5","1536:Ht01h5n","1536:t01h5nM","1536:01h5nME","1536:1h5nMEU","1536:h5nMEUY","1536:5nMEUYr","1536:nMEUYrp","1536:MEUYrpy","1536:EUYrpyM","1536:UYrpyM5","1536:YrpyM5Q","1536:rpyM5QB","1536:pyM5QB7","1536:yM5QB7+","3072:681S/Il","3072:81S/Ila","3072:1S/IlaI","3072:S/IlaIz","3072:/IlaIzM","3072:IlaIzMM","3072:laIzMMW","3072:aIzMMWF","3072:IzMMWFN","3072:zMMWFNe","3072:MMWFNem","3072:MWFNemr","3072:WFNemrH","3072:FNemrHt","3072:NemrHt0","3072:emrHt01","3072:mrHt01h","3072:rHt01h5","3072:Ht01h5n","3072:t01h5nM","3072:01h5nME","3072:1h5nMEU","3072:h5nMEUY","3072:5nMEUYr","3072:nMEUYrp","3072:MEUYrpy","3072:EUYrpyM","3072:UYrpyM5","3072:YrpyM5Q","3072:rpyM5QB","3072:pyM5QB7","3072:yM5QB7+","1536:blFzMtN","1536:lFzMtNe","1536:FzMtNem","1536:zMtNemr","1536:MtNemrH","1536:tNemrHu","1536:NemrHux","1536:emrHuxn","1536:mrHuxnM","1536:rHuxnME","1536:HuxnMEU","1536:uxnMEUY","1536:xnMEUYr"],"imphash":"4ee17eab498a39bff460821b33acecf4"},"file_info":{"file_name":"file","file_type":["peexe","executable"],"file_type_id":"exe","file_size":67584,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1522396644000,"last_seen":1692822469000,"last_multi_scan":1692822469000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":["ransomware"]},"stats":{"av":{"malicious_count":21,"suspicious_count":0,"total_engines":27},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":0},"sandbox_signatures":{"informative_count":13,"suspicious_count":19,"malicious_count":3,"total":35},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"malicious","threat_name":"Malware/Win32.Generic","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"malicious","threat_name":"Trojan/Win32.Scar","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"malicious","threat_name":"TR/AD.RansomHeur.pgmeu","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"malicious","threat_name":"Generic.Ransom.Mole.5CA8323C","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"malicious","threat_name":"Win.Ransomware.Cryptomix-6489112-0","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"malicious","threat_name":"win/malicious_confidence_100% (W)","status":"malicious","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Generic.Ransom.Mole.5CA8323C (B)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"a variant of Win32/Filecoder.HydraCrypt.L trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"malicious","threat_name":"Ransom/HydraCrypt.c","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"malicious","threat_name":"Trojan ( 00511caa1 )","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Scar.rhtw","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"malicious","threat_name":"Ransomware-GKR!C3294C904740","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Tordev.eyterk","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"malicious","threat_name":"Troj/Ransom-FJE","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"malicious","threat_name":"Ransom_.C6FD08FF","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"malicious","threat_name":"Ransom_.C6FD08FF","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"malicious","threat_name":"W32/Filecoder.FDQG-6265","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"malicious","threat_name":"Trojan.Scar","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"webrootsmd":{"name":"Webroot SMD","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"malicious","threat_name":"Trojan.Scar.Win32.109160","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Ransom.Mole.Generic","sources":[{"report_type":"quickscan","report_id":""}]}]},"sandbox_signatures":[{"level":"informative","category":"Anti-Reverse Engineering","name":"Contains ability to register a top-level exception handler (often used as anti-debugging trick)","description":"SetUnhandledExceptionFilter@KERNEL32.DLL at 00011724-00003788-60179-7-00CB18E0","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-4","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"informative","category":"Environment Awareness","name":"Reads the registry for installed applications","description":"\"\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")\n \"\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")","origin":"Registry Access","relevance":10,"id":"registry-55","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\271069F5_M66\"\n \"DBWinMutex\"\n \"271069F5_M66\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZoneAttributeCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"informative","category":"General","name":"Opened the service control manager","description":"\"sc.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)","origin":"API Call","relevance":10,"id":"api-77","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"informative","category":"General","name":"Runs shell commands","description":"\"/C sc stop VVS\" on 2018-3-30.08:59:19.274\n \"/C vssadmin.exe Delete Shadows /All /Quiet\" on 2018-3-30.08:59:19.375\n \"/C bcdedit /set {default} recoveryenabled No\" on 2018-3-30.08:59:19.465\n \"/C bcdedit /set {default} bootstatuspolicy ignoreallfailures\" on 2018-3-30.08:59:19.635","origin":"Monitored Target","relevance":5,"id":"target-3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"$27","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"informative","category":"Installation/Persistance","name":"Connects to LPC ports","description":"\"\" connecting to \"\\ThemeApiPort\"\n \"notepad.exe\" connecting to \"\\ThemeApiPort\"","origin":"API Call","relevance":1,"id":"api-16","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"informative","category":"Installation/Persistance","name":"Contains ability to lookup the windows account name","description":"GetUserNameW@ADVAPI32.DLL at 00011724-00003788-60179-22-00CB3A50\n GetUserNameW@ADVAPI32.DLL at 00011724-00003788-60179-24-00CB3E60\n GetUserNameW@ADVAPI32.DLL at 00011724-00003788-60179-8-00CB3940\n GetUserNameW@ADVAPI32.DLL at 00011724-00003788-60179-21-00CB3BD0\n GetUserNameW@ADVAPI32.DLL at 00011724-00003788-60179-1-00CB3FE0","origin":"Hybrid Analysis Technology","relevance":5,"id":"stream-28","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"\"yZw6snqBQ28DAzu.exe\" has type \"data\"\n \"dH1rDN9f9.doc\" has type \"data\"\n \"lCEf83Wf7e4nuIMk.doc\" has type \"data\"\n \"dskCEJ.exe\" has type \"data\"\n \"Tmg2wsFHYf9ioO.doc\" has type \"data\"\n \"4EA7DF3A2E19C330DCD4D6CD2FDF9EC0.MOLE66\" has type \"data\"\n \"6847387D0C0029C5FBFEBFC50E290891.MOLE66\" has type \"data\"\n \"DE375FE8205D215E7AE34E8C223AFBAE.MOLE66\" has type \"data\"\n \"A0242BCC22C15EA886ADE16E23863DF0.MOLE66\" has type \"data\"\n \"_HELP_INSTRUCTIONS_.TXT\" has type \"empty\"","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"informative","category":"Installation/Persistance","name":"Touches files in the Windows directory","description":"$28","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Heuristic match: \"NTDETECT.COM\"\n Heuristic match: \"ntdetect.com\"\n Heuristic match: \"TECT.COM\"\n Heuristic match: \"ct.com\"","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"informative","category":"System Security","name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\"\" opened \"\\Device\\KsecDD\"\n \"vssadmin.exe\" opened \"\\Device\\KsecDD\"\n \"notepad.exe\" opened \"\\Device\\KsecDD\"","origin":"API Call","relevance":10,"id":"api-37","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads information about supported languages","description":"\"bcdedit.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")\n \"notepad.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","origin":"Registry Access","relevance":3,"id":"registry-25","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Anti-Detection/Stealthyness","name":"Queries kernel debugger information","description":"\"\" at 00011724-00003788-00000105-40506431\n \"vssadmin.exe\" at 00013954-00003916-00000105-39012809","origin":"API Call","relevance":6,"id":"api-10","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Anti-Detection/Stealthyness","name":"Tries to suppress failures during boot (often used to hide system changes)","description":"Tries to suppress failures during boot \"cmd.exe\" with commandline \"/C bcdedit /set {default} bootstatuspolicy ignoreallfailures\" (UID: 00013957-00003908)\n Tries to suppress failures during boot \"bcdedit.exe\" with commandline \"bcdedit /set {default} bootstatuspolicy ignoreallfailures\" (UID: 00013981-00003872)","origin":"Monitored Target","relevance":8,"id":"target-6","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Environment Awareness","name":"Contains ability to query CPU information","description":"cpuid at 00011724-00003788-60179-170-00CB178A","origin":"Hybrid Analysis Technology","relevance":10,"id":"stream-13","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the active computer name","description":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"sc.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"vssadmin.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","origin":"Registry Access","relevance":5,"id":"registry-35","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the cryptographic machine GUID","description":"\"\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")\n \"vssadmin.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","origin":"Registry Access","relevance":10,"id":"registry-1","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"External Systems","name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"1/67 reputation engines marked \"http://ntdetect.com\" as malicious (1% detection rate)","origin":"External System","relevance":10,"id":"avtest-6","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"General","name":"Reads configuration files","description":"$29","origin":"API Call","relevance":4,"id":"api-6","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Disables startup repair","description":"Disables startup repair \"cmd.exe\" with commandline \"/C bcdedit /set {default} recoveryenabled No\" (UID: 00013945-00003852)\n Disables startup repair \"bcdedit.exe\" with commandline \"bcdedit /set {default} recoveryenabled No\" (UID: 00013971-00003600)","origin":"Monitored Target","relevance":8,"id":"target-5","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Modifies auto-execute functionality by setting/creating a value in the registry","description":"\"\" (Access type: \"SETVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\"; Key: \"BC271069F5\"; Value: \"\"%ALLUSERSPROFILE%\\BC271069F5.exe\"\")\n \"\" (Access type: \"SETVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE\"; Key: \"*BC271069F5\"; Value: \"\"%ALLUSERSPROFILE%\\BC271069F5.exe\"\")","origin":"Registry Access","relevance":8,"id":"registry-0","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"Deletes volume snapshots (often used by ransomware)","description":"Deletes volume snapshots files \"vssadmin.exe\" with commandline \"Delete Shadows /All /Quiet\" (UID: 00013954-00003916)","origin":"Monitored Target","relevance":10,"id":"target-4","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"Detected indicator that file is ransomware","description":"\"!!!All your files are encrypted!!!What to decipher write on mail alpha2018a@aol.comDo not move or delete files!!!!---- Your\" (Source: 00011724-00003788-0000018C-40631846, Indicator: \"files are encrypted\")","origin":"File/Memory","relevance":7,"id":"string-13","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"The analysis extracted a known ransomware file","description":"Found dropped filename \"_HELP_INSTRUCTIONS_.TXT\" which has been seen in the context of ransomware (Indicator: INSTRUCTIONS_)","origin":"Binary File","relevance":5,"id":"binary-9","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"The input sample dropped very many files","description":"The input sample dropped 602 files (often an indicator for ransomware)","origin":"Binary File","relevance":5,"id":"binary-10","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"System Destruction","name":"Marks file for deletion","description":"$2a","origin":"API Call","relevance":10,"id":"api-26","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"System Destruction","name":"Opens file with deletion access rights","description":"$2b","origin":"API Call","relevance":7,"id":"api-25","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"System Security","name":"Modifies proxy settings","description":"\"\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")\n \"\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")","origin":"Registry Access","relevance":10,"id":"registry-27","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"System Security","name":"Queries sensitive IE security settings","description":"\"\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")","origin":"Registry Access","relevance":8,"id":"registry-36","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Imports suspicious APIs","description":"RegCloseKey\n GetUserNameW\n CreateServiceA\n RegOpenKeyA\n CryptEncrypt\n RegDeleteValueA\n RegOpenKeyW\n RegCreateKeyW\n CopyFileW\n GetDriveTypeW\n OutputDebugStringW\n GetModuleFileNameW\n IsDebuggerPresent\n GetModuleFileNameA\n LoadLibraryExA\n GetFileSize\n GetCommandLineW\n UnhandledExceptionFilter\n LoadLibraryExW\n DeleteFileW\n GetProcAddress\n CreateFileMappingW\n CreateThread\n MapViewOfFile\n FindNextFileW\n WriteFile\n FindFirstFileW\n TerminateProcess\n CreateFileW\n Sleep\n GetTickCount\n OutputDebugStringA\n VirtualAlloc\n ShellExecuteW","origin":"Static Parser","relevance":1,"id":"static-1","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Spawns a lot of processes","description":"$2c","origin":"Monitored Target","relevance":8,"id":"target-14","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by a large number of Antivirus engines","description":"45/65 Antivirus vendors marked sample as malicious (69% detection rate)","origin":"External System","relevance":10,"id":"avtest-3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by at least one Antivirus engine","description":"45/65 Antivirus vendors marked sample as malicious (69% detection rate)","origin":"External System","relevance":8,"id":"avtest-0","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"level":"malicious","category":"Unusual Characteristics","name":"References BIOS/BOOT related strings","description":"\"ntdetect.com\"","origin":"File/Memory","relevance":9,"id":"string-0","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]}],"incidents":[{"name":"Ransomware","details_count":1,"details":[{"detail":"Detected indicator that file is ransomware"}],"sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"Persistence","details_count":1,"details":[{"detail":"Modifies auto-execute functionality by setting/creating a value in the registry"}],"sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"Fingerprint","details_count":2,"details":[{"detail":"Reads the cryptographic machine GUID"},{"detail":"Reads the active computer name"}],"sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]}]},"activity":{"stats":{"process_count":14,"spawned_processes_count":14,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":8,"imported_dlls_count":61,"dropped_files_count":0,"extracted_files_count":24,"files_written_count":805,"files_deleted_count":0,"registry_keys_created_count":3,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":3,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":["ransomware"],"sample_flags":["Extracted Files","Sample not shared"],"sandbox_reports":[{"id":"5abdede37ca3e13ecb2589e4","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"malware_family":"Trojan.Generic","submit_name":"15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91","analysis_start_time":"2018-03-30T08:57:04+00:00","indicators_count":{"informative":13,"suspicious":23,"malicious":4},"tags":["Extracted Files","Sample not shared"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}],"processes":[{"pid":3788,"ppid":0,"name":"15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe","command_line":"","sha256":"15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91","normalized_path":"C:\\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe","uid":"00011724-00003788","icon":"$2d"},{"pid":3844,"ppid":3788,"name":"cmd.exe","command_line":"/C sc stop VVS","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00011724-00003788","uid":"00013926-00003844"},{"pid":3876,"ppid":3844,"name":"sc.exe","command_line":"sc stop VVS","sha256":"1c2ec0bb83d2ad3f53b0706c46a2604f81f2fc2afdcf43be5914cc8f509dd48c","normalized_path":"%WINDIR%\\System32\\sc.exe","parent_uid":"00013926-00003844","uid":"00013936-00003876"},{"pid":3892,"ppid":3788,"name":"cmd.exe","command_line":"/C vssadmin.exe Delete Shadows /All /Quiet","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00011724-00003788","uid":"00013934-00003892"},{"pid":3916,"ppid":3892,"name":"vssadmin.exe","command_line":"Delete Shadows /All /Quiet","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\System32\\vssadmin.exe","parent_uid":"00013934-00003892","uid":"00013954-00003916"},{"pid":3852,"ppid":3788,"name":"cmd.exe","command_line":"/C bcdedit /set {default} recoveryenabled No","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00011724-00003788","uid":"00013945-00003852"},{"pid":3600,"ppid":3852,"name":"bcdedit.exe","command_line":"bcdedit /set {default} recoveryenabled No","sha256":"aa501dc5b621527b0e3dd2787d4969647631c4904d3ae9fc06d177251bc760e3","normalized_path":"%WINDIR%\\System32\\bcdedit.exe","parent_uid":"00013945-00003852","uid":"00013971-00003600"},{"pid":3908,"ppid":3788,"name":"cmd.exe","command_line":"/C bcdedit /set {default} bootstatuspolicy ignoreallfailures","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00011724-00003788","uid":"00013957-00003908"},{"pid":3872,"ppid":3908,"name":"bcdedit.exe","command_line":"bcdedit /set {default} bootstatuspolicy ignoreallfailures","sha256":"aa501dc5b621527b0e3dd2787d4969647631c4904d3ae9fc06d177251bc760e3","normalized_path":"%WINDIR%\\System32\\bcdedit.exe","parent_uid":"00013957-00003908","uid":"00013981-00003872"},{"pid":4452,"ppid":3788,"name":"notepad.exe","command_line":"%USERPROFILE%\\Desktop\\_HELP_INSTRUCTIONS_.TXT","sha256":"c4232ddd4d37b9c0884bd44d8476578c54d7f98d58945728e425736a6a07e102","normalized_path":"%WINDIR%\\System32\\notepad.exe","parent_uid":"00011724-00003788","uid":"00026403-00004452"},{"pid":4632,"ppid":3788,"name":"notepad.exe","command_line":"%USERPROFILE%\\Desktop\\_HELP_INSTRUCTIONS_.TXT","sha256":"c4232ddd4d37b9c0884bd44d8476578c54d7f98d58945728e425736a6a07e102","normalized_path":"%WINDIR%\\System32\\notepad.exe","parent_uid":"00011724-00003788","uid":"00027806-00004632"},{"pid":4824,"ppid":3788,"name":"notepad.exe","command_line":"%USERPROFILE%\\Desktop\\_HELP_INSTRUCTIONS_.TXT","sha256":"c4232ddd4d37b9c0884bd44d8476578c54d7f98d58945728e425736a6a07e102","normalized_path":"%WINDIR%\\System32\\notepad.exe","parent_uid":"00011724-00003788","uid":"00029204-00004824"},{"pid":5020,"ppid":3788,"name":"notepad.exe","command_line":"%USERPROFILE%\\Desktop\\_HELP_INSTRUCTIONS_.TXT","sha256":"c4232ddd4d37b9c0884bd44d8476578c54d7f98d58945728e425736a6a07e102","normalized_path":"%WINDIR%\\System32\\notepad.exe","parent_uid":"00011724-00003788","uid":"00030605-00005020"},{"pid":5240,"ppid":3788,"name":"notepad.exe","command_line":"%USERPROFILE%\\Desktop\\_HELP_INSTRUCTIONS_.TXT","sha256":"c4232ddd4d37b9c0884bd44d8476578c54d7f98d58945728e425736a6a07e102","normalized_path":"%WINDIR%\\System32\\notepad.exe","parent_uid":"00011724-00003788","uid":"00032000-00005240"}],"all_imported_dlls":["gdi32.dll","ole32.dll","mpr.dll","winsta.dll","RpcRtRemote.dll","sechost.dll","sspicli.dll","oleacc.dll","ntlanman.dll","winbrand.dll","vsstrace.dll","KernelBase.dll","psapi.dll","browcli.dll","shlwapi.dll","msasn1.dll","setupapi.dll","rpcss.dll","ntdll.dll","msvcrt.dll","advapi32.dll","uxtheme.dll","oleaut32.dll","urlmon.dll","Wldap32.dll","profapi.dll","kernel32.dll","comctl32.dll","drprov.dll","cscapi.dll","imm32.dll","iertutil.dll","devobj.dll","wkscli.dll","user32.dll","usp10.dll","rpcrt4.dll","crypt32.dll","wininet.dll","cryptsp.dll","cryptbase.dll","apphelp.dll","cfgmgr32.dll","rsaenh.dll","vssapi.dll","vss_ps.dll","clbcatq.dll","comdlg32.dll","msctf.dll","atl.dll","dwmapi.dll","lpk.dll","propsys.dll","userenv.dll","davclnt.dll","ieframe.dll","davhlpr.dll","shell32.dll","ntmarta.dll","netutils.dll","version.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"_HELP_INSTRUCTIONS_.TXT","sha256":"837c64bcef6acd1203afaec2b43fea1794fd51d1581c3dcabc03a2f1d325b114","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"BB17087CB0E5090AB7D28ZCDD54X0B9C3E.MOLE66","sha256":"aa0db5a2c5c9d5673a1affcec7163d13600c577adfaaede3595c227986ecfc61","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"ea2c6a7193f1257c2e85c7d9b9cf4c04_e47c61d2-1dae-480e-827a-ae8d797649df","sha256":"a2a31ce9aefc2a80ec4fe0a6d89f30ff33a96dc62ac246d29223756e17ecdd26","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"0EE7601E1540767A85FE1F0B170D54FE.MOLE66","sha256":"141d9be52c5cb3f6d77629147c24df1d67761c7941d3b50637f56514c893d3bf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"66B914490070176D98DEFED50243F065.MOLE66","sha256":"d6213bb1b610d218ae733e25900b2c27eb4abc6d7182d2a16c28b97249509bdb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"7AE87EA03A4A38B83C1E0ABC3C181204.MOLE66","sha256":"c69df5c50357cdcb68870745fd67277b3fbea7bcbbec00e35b65c25632db26a2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"C555DBE41A7BD198D70A5E5D1B42AC84.MOLE66","sha256":"21cc8f271368ea27a7754bfc7de841a7f63b6a20057ff3fef2f5e6b6193f0242","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"7411E20C239BC68F7550976425BCA747.MOLE66","sha256":"5a1304459999fa17e4b1c7b21da224a5bde0ce34efea39d3316655d1de4c2f10","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"89D7D792057B39555C1D3BCE064614CD.MOLE66","sha256":"c193ef505387ead174cb5bb9f84b502e4a2b08d6956fbb2eaf2da3ce964c405f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"DE375FE8205D215E7AE34E8C223AFBAE.MOLE66","sha256":"6894e87700ee37602b9e1f899c93ec4c2462d98d0b574a4ded4564a8115eb3b6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"957A828D13D29EF31758FC2B15A678A7.MOLE66","sha256":"560d9f8a6b1885d21f08f877cfed3b76a682266d5a6b49db5616a20d724a89d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"00F23A804174350C3002758044580F64.MOLE66","sha256":"6912e091692516945553dda35d950db24fb2db1494ae6d11617754de428bffe0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"022B57D50433B1186D331ABD06639150.MOLE66","sha256":"4784d2c0323edde119a47869dc994736f11dce113ff5d5c9d402878353a31a71","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"03AD5A081BE9D3D8CCE931671ECBAF7C.MOLE66","sha256":"562015e705c9a7e99ab17699f39fc48cbaa0bd94db221ca956998aa719d9b51f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"0651CDE92924895EA7626F852B79643A.MOLE66","sha256":"60e3299ee9a1f90d50e286d3b7853ff30af7ec76087f34ea88df6c62002140d2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"0737C4A01334E48856E213F01508C28C.MOLE66","sha256":"6786ae7fee454f57920ced49550328c0cb62a1913feda07a78767cd1e6b6f6d0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"0A2DD93E4822D9AC0856907D4C70B2E8.MOLE66","sha256":"85e24644c6f7dfbd9d9d75b871410fe3d386b675be32b1590f18d7e74e9dfec9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"0B29E82C29C4ACC909899D7C2E568AE1.MOLE66","sha256":"705d6605f37ecf33cc314f48205530461e94339410f8b8212ad23e629cf9d83d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"0D05D814215C73983828DE9A25865154.MOLE66","sha256":"300ed67240abd00eb3b981eb9c95d65ddb59be380dc9f75d05a65385bd478b07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"Tmg2wsFHYf9ioO.doc","sha256":"aa4b9a9c6077f1946c03996c8147c5455f2f0ec5f987aff74bd52b5979a3bdb5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"dH1rDN9f9.doc","sha256":"0e7c1f571ba220ce5a38fa0aad37bb1aba0bf7172e860a787329f6ad8731454d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"dskCEJ.exe","sha256":"3af6b2351c0ca9c1759ecdf5578e63eb6c7353005239b78f6d80e76174b7e3dd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"lCEf83Wf7e4nuIMk.doc","sha256":"fe7d3239af13363bda75403e39c98050f27b93474690265a8340d37e13e84679","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"yZw6snqBQ28DAzu.exe","sha256":"c7f31708aaea1592c5e8b14d6cceaa1b427d347d0924e70d77d77180d4bbd0e6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]}],"files_written":[{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\Windows","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\en-US\\setupapi.dll.mui","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000c.db","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\en-US\\propsys.dll.mui","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\cmd.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\en-US\\sc.exe.mui","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\vssadmin.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\en-US\\vssadmin.exe.mui","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%ALLUSERSPROFILE%\\BC271069F5.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91.exe:Zone.Identifier","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%ALLUSERSPROFILE%\\BC271069F5.exe:Zone.Identifier","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\en-US\\cmd.exe.mui","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\bcdedit.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%ALLUSERSPROFILE%\\BB17087CB0E5090AB7D28ZCDD54X0B9C3E.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\autoexec.bat","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\Microsoft","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\Microsoft\\Crypto","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\Microsoft\\Crypto\\RSA","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-4162757579-3804539371-4239455898-1000","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-4162757579-3804539371-4239455898-1000\\ea2c6a7193f1257c2e85c7d9b9cf4c04_e47c61d2-1dae-480e-827a-ae8d797649df","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\config.sys","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\en-US\\crypt32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\73B9C4F440B0E90E21072A424174C842.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\pagefile.sys","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\D78D65A31645E1A79219E27717EABDEF.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\$Recycle.Bin\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\Documents and Settings\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\Users\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\MSOCache\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\MSOCache\\All Users\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\PerfLogs\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\PerfLogs\\Admin\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%PROGRAMFILES%\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%ALLUSERSPROFILE%\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\Recovery\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\Recovery\\72d3f4c2-b53f-11e4-b6d9-9157ca704b30\\Winre.wim","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\Recovery\\72d3f4c2-b53f-11e4-b6d9-9157ca704b30\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\System Volume Information\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Desktop background.png","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\NTUSER.DAT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\Users\\BBE5AE2837EE71DCCA6BA81E3A865160.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\7AE87EA03A4A38B83C1E0ABC3C181204.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"C:\\Recovery\\72d3f4c2-b53f-11e4-b6d9-9157ca704b30\\boot.sdi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\ntuser.dat.LOG1","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\ntuser.dat.LOG2","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\ntuser.ini","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\AppData\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\66B914490070176D98DEFED50243F065.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Contacts\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Contacts\\%OSUSER%.contact","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Contacts\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Cookies\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Documents\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Contacts\\7411E20C239BC68F7550976425BCA747.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Contacts\\89D7D792057B39555C1D3BCE064614CD.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Documents\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Documents\\My Music\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Music\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Documents\\My Pictures\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Pictures\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Documents\\My Videos\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Videos\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Documents\\Visual Studio 2008\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Documents\\957A828D13D29EF31758FC2B15A678A7.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Documents\\Visual Studio 2008\\Templates\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Documents\\Visual Studio 2008\\Templates\\ItemTemplates\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Documents\\Visual Studio 2008\\Templates\\ProjectTemplates\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\01dMtnkBz9.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\20C4FD8431E06B58E62A528333FD4808.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\04bZ.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\A2942D1F0484CB6CFAA2BFDD0628A558.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\07Y08HBp.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\0cuxPf1k3pJ5.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\0gakl8ixtWMkw.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\0651CDE92924895EA7626F852B79643A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\0Og1.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\4F8881C60D0B31CB55CEDC4A0F9C0DA7.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\0pYWspjURe8aqA.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\1F3E2E8C1502B7317386394C16A897F9.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\0zIG0D.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\1N1A3vlRdYRii5C.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\10C3565131089CE85FF8AC8932AD7D5C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\1q4yvQVxByym4.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\444DA14C12B310480600AC2C1482EE0C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\2Gd1Iqvl2kr.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\D636E3FF413C273AA36C07E1420003C2.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\2l36bsgulx.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\3AVoUo9c20GI.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\3Awf.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\3bvjbrQlfgjI.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\475938F00D54F2A0FF08B6540E18CED0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\3dfFyhzUJVQSk.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\195E6518330C10011975361835DDEC19.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\3Fbc.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\4lpro8p6KuJo0.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\4nAn3p.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\17E046100E389B50B9526536110B7474.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\4Pmmh3HlYKPz20b.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\3B92969A1E2473606E6C5D35215D52A8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\5aFd8vA3PE3A.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\5F1yaAIKfUGQcmmt.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\0F345E8E145797D5D725FF4E17E274C5.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\5L9Wjn.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\17123DB4197E5E3B2179DD9C1D2A3B07.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\5yqb2pxbZ.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\63sDzrkUoHoRT.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\E91B45FC19EEB402568556C61AB090DA.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\66u5Ps.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\6aAIiUIf.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\30833A53082FD0512CF406370A02B03D.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\6MR6.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\6SZfLTu9z.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\E4A7A330455D2298911800F047E101D4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\75E1E9A73C63641CBB9F52273E8D4500.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\72oNcVyHs8NBv.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\6WMjwc1zqk3IB.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\7OxVHBv.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\23AEB90829F8BF661CD8A6F82CA19A6E.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\7ZOfXpturAqbd1c.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\86iRpMfVS9o.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\9CF8CB00004B9C00369CF8CB010C7CB8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\8AuppwJ6wyt.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\8P9o.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\811354F92E6460A6FE6722E7308E3EBA.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\8Uu9ETpS.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\8xCKPsTPqAt0jj.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\2F6753DC39FDE0FCABBC1CDF3D2EBF38.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\9rNtWnjTq9RGbU.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\a3Ntx.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\A62zUUbY5QfVGXz.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\acZ9pR3WMOxAcq.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\B62EB3C00488CDC0247272030726A874.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\aGAui.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\7A9C8FD42DE95470A2C9F31531123294.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\E3FF8E724E8FE63E744AC6175210C6E2.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\A662597A324FEF1EA90A8D2F36E6CBE2.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\AL0XySsN7H7ugY.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\ar6cEZyyC.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\E57E8FEC162CAE64855A71631ADE886C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\aXokYfum1LR9T.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\8E2BE8E6060195145D4D3A9E06C26E24.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\B2OE.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\5666AB40071A6510AE11863007DE43FC.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\b2v3n4eKoIDN.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\b6YuNbiDI.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\81BCB62E37A2C539EE5489323975A4D1.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\b9UD.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\BAa8xnBv7K.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Bcni29.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\A6E8CDD806C5F994F49442EC0909D420.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\BcZL4pkMX.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\bg3oTe.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\BK8vDj5a.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\D7D0A15014C58714A474BF28158867D8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Bp9aBvvt.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\bvYkKJ33N9A.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\6102A1523C600B60CBEFF7AB3F8DEA60.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\bwI55TdR2ltk57l.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\D93747203D1F1598B8B1165C4070F46C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\C04T72pR0Bcl.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\C3cps.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\8CA165402D03D50038020BB8308BB1B0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\DD78F02E24BE32E018FBBECF27E3128C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\caic.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\5A8EC07402201AE4784D872B0581F570.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\CEyeFINKwFDkgE0O.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\CflGlvefKCtC99t.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\3F96AA881DF44008A90F570F21B32044.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\CjIBD.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\CoCzQ91sOnv8.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\cTJXfHRYBCf7lK.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\646BB4FC0E87413993D3BB3C11E121C1.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\DAE5F29003B526F6FB5ECA5005D701DA.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\154681A04331E87CE2D05FF0459FC1D8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\czGQ8bl3v.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\d71boA.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\DE824A5208665E248BB9B37D09303EF8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\daTAwNa1cRBbYO.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\82107E5C0E818C060BC612640F476716.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\DgLGRP4C041.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\8AE0DCCF3B0406BA23B16F6D3CD2E452.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\dgQJde60mPXhI.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\B4EBD3281BEB58982C63D1211DBF34A8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\dH1rDN9f9.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\dskCEJ.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\DZ1I0FX.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\e8x938q.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\ecazG0z.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\BB72C25B1C34835D7093B3C51F8C6129.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\EIy4cIf3Sw.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\EKeaJO.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\E38E155D460AFE92DC648A7549B0D7AE.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\0D05D814215C73983828DE9A25865154.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\EvKbuCze.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Ery9w7qA.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\F07QalpWC.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\F3hzum1.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\fhjb3frndmupmzw.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\fkHEBb1SV.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\2AC132022AEFCEDA586C0F792F30A7FE.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\FksnKO3nPLqbqw.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\11C71EE827F7E8E8C9466C482B0BC57C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\fnHklmDjE.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\2C02A13C23AFE490D9945C6C267EBFF4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\B7F4CF6802ABA08C6B5CE34E059D805C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\CC23A3C00CCBA8E0924133BA0F8689B0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Frajmn2m7RI.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\FYmHKtcQNYS.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\G5IM1lDtK.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\G77JSgcmPf5H.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\gd7HlA2D90jF.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\EE68CF453A4F5E4D54C1577F3CC5376D.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\617D300936590BB4BA16EFAB38B9EC7C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\gfoMPUZ1UQ.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\GgPR9V5hPE8bUpO.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\GiF6iC5.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\EE6B84EC4527D86C79EB72494780B8EC.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\GnHuSl.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Go5opN9UMnRhwZ2o.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\gsHQMZi.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Haiz.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\HCCQmDcSMR.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\hCmeX1Ct3FFL6dk.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\hKY8.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\hlchPBL.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\HopLI4qUY5lj.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\9A59574036827BC88321DF783AF859CC.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\FDB922FA10F6465058446D46161F23B0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Hqee3DDn6LduWwwM.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\8725739E0751DD12689E1A560C8DB90E.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\hsQjJvLaP.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Hyea.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\hZbsHrgo8ONOWmd.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\4E08996A31E19D1532BA05A234687C49.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\3FC6832A44627D229EB2E1AA4698581A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\iEcMz.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\ieWzhDO3EIpCT.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\II5yrap9K.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\iLLOga.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\EF8DE2812955DF96874EA68B2BF4BB12.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\inloR0L.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\irQRC1fyB.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\CB5C4F00476DC9E05BB89CD84A66A970.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\iwIAg.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\IXWAmgM.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\EEDF65B94BFE4917814A23E74F172A0B.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\J0j8.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Jdc9FtOxiP1gc.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\jDJAedKZ.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Jm34QKUSbOJ.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\JOq8Wlewlk.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\DB21E09329B4FD93895326932D50D84F.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\jU7uBI8eoGj.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\0A2DD93E4822D9AC0856907D4C70B2E8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\BAE16F8C3D018E9C3C47D3B141846E34.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\K6ok91lNINFU2.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\k9rCVCf.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\kdo6iAicsoicvHg.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\7C23B18B24328E5161DE52CB26F26EED.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\kDy3FUkn.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\kflWy2jLEiUoTUBN.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Kin7.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\29EE96583D4E5A0879A9983940DE3738.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\7D5211B32AB4DD3D96914DBB2D5AB8FD.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\klmqz.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\5A552F8011E92F6C5507DC4013B70DD4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\kY01UeAiy5.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\kYjkX0S1jo7Zm.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\kYSsy3IT.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\DEB117853B80A3DCA7C340713D508240.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\KYu5soC0W7AqbGh.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\lCEf83Wf7e4nuIMk.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\lcwvnk.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\LfRe1UstxS6dMj3.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\lg7Kv3Y5aqGhf94.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\lGzEUcaAA.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\628DA0C137FF4CA0CF6DB50539D228C0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\lM74.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\M89doZVhROC.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\MCnPJFRa.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\C856B57831CBA9685B21B45C34D685A8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\MD5t.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\61D0A6FE251C58617D64AB5628CF3891.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\MElB1FKqC2cxb6AE.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Mfc8nmRBfzSVE.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\35F2F660423FEB20D24138CB4469CB38.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\mj3KeUe3LBSMv2Dp.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\MqbmYiJCv9FZI.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\MRed6R.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\B655BA3B3F9A65B311EB918F43544443.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\624D7F5826E654E8BC5953162BC231F0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\ms6h2c.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\mtgFs8Za.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\MZGXda99O.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\6A936F592969B0C8BDB3B14F2B948F2C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\85757F393BAB370AED5B0B573F5E11F2.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\AFF42EE031135FD458F8A6F8361A401C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\4941E4680CF59BF8BD91BC0412F37B18.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\NhFS3OvQ4RI.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\NKqc2EyBDA.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\EBCE44A53971456A4568F0E93B4421FE.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\NOR3aMm.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\nptZgkCVl0OD.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\76FDC430086F26505E9A44C40B1305D8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\nWXR.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\0737C4A01334E48856E213F01508C28C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\o7AcVCKw0erZg.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\obSP1kkndHWX46p.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\ocNqp38QzZ.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\oDVNsk7OlJV.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\7C998AD43E8E5577AFD4FF0C412C3633.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\okbEY.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\218CF0AC0D840FF420FFC25C0FA6EB64.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\OONBpjCfe.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\oyC5CL2.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\PpzHcsYvXs2l.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Q0JOBjRCtjVsC.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\q74MS.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Q7E9suq.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\22D1E45D1E2A787B20A2E565227C538F.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\qlDZYt.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\qMz8XR.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\qn6N701ce7yPWi2.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\quTGamas9Gw.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\92A451BE2820FF39314BE8D62D0DDF41.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\QWfSLhRSIzwjS4.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\DDFCD3EA2CF4971A6B0B16BE2FB87022.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\59272C521CC73672C26F86591F9D143E.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\r5TP22jyIM.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\rbfKgDSibNA52.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\RByAvdjwTizpmk.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\RqpS.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\C83D1BBB255A241B180B71312777FD17.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\rRgk91Ih5n.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\A0ED7B5B3F4C7BB53A07F797420D5755.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\03AD5A081BE9D3D8CCE931671ECBAF7C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\RTgAfRGNR0qKZtig.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\76210CBF0350AB9A543821A905F68582.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\RWbgv7OCA5wp.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\C55E68DE05F13C006A6BF7E2081D1A80.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\SakE.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\00F23A804174350C3002758044580F64.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Shs4s.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\CEB0E54833FFDBF0539D9BEF36ACBC0C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\siEjNwz.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\SLPSrgK9.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\snfLEUp5t.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\34D4D9AA343285865803671536D76042.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Sw2EnkZnfpD.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\TcN5yBXi.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\EF9514F239968DCCF271FA4A3B696DE8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\TCyc7HRP97.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\tDUzYwYK5f.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Tmg2wsFHYf9ioO.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\TNZzXxx4kY1R7f7p.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\U8wBQmOOpsr.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\9648CD882AD428902E48CF6D2EE9048C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\UG4UW.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\upb6mTYvIr.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\460678E23C00D31838C434273DD4AFA0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\UyEm7.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\UylIt.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\A4AFE0EC00B745A54749220402D9232D.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\uyvpJXmmwo8d.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\vHlVA6Ct.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\vUaM2EZYuiO.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\8E41EEDC31329BC43D9E067A334F79C4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\B30D16E10ACB06C563694CB50D8CE2AD.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\vyi8eCg.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\vY0SOrBhJvCg.jpg","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\w5JaoO.doc","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\wARff6exjpow.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\EB4CED4E370D695B344AE31639CD48EF.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\Wmih9mB0sDu.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\WUsiiJC2fRTBPivX.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\x41cViR8fbZW.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\D4797F4A2A68DB3ECDC3B1452EE7B512.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\90BC4C82391AE2A263B8F0993D26C0CE.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\XifskT.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\XjhA7gYLHhBHyEci.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\xl1sapqRRaB.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\0B29E82C29C4ACC909899D7C2E568AE1.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\xN1K.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\xqFng.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\xqjUvzokp0.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\XQO1VUYEm.pdf","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\A3175D8C2771060A5566A16A2CD2DF12.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\XUPgjfK.rar","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\XXbWeI8CpUF.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\yFnr9fhc0gH7l.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\YGnYe5jfaKyuFM8.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\yZw6snqBQ28DAzu.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\AEAE383C001DECF0DDE82467024EC914.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\ZCGDiOyLTL0HsH.txt","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\zElI.mp3","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\ziJe5sSQm2.img","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\1BFDDB602791A5F89834EC6828548600.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\zlWDS7D.gif","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\022B57D50433B1186D331ABD06639150.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\zqpeyi.exe","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\DF8E5DA80CD40FC020ADDA491034E948.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\zs7Ri62mzFGSx.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Downloads\\ZVaaZwpMDt.avi","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\3ABD43601C5D8A82D54F40A0201F6A42.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\1616.net.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\163.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\BA853BC03F0268E036412FC242B74224.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\17kuxun.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\2345.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\F1F182B21B0A1F43DBBD99C61D26F98B.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\3E32F2D423846AFA1111C406273A4AF6.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\6ED0C7D71E22EC6C8DA51F4F21FACA9C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\27.cn.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\355.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\360.cn.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\4399.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\013BE9422F0A77DF26C4FDA231AB50D7.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\DB7FB3F039B8BE60D93FE87A3C6A98B0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\4shared.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\51wan.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\0271DE2C4790F80F679DB55C4A6AD21F.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\24BBC87418F3FF8CD177A0C41BE3DA00.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\FF50F678304506F9ACD3C298330CE235.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\374D68100DE945B0F927FC9010121F9C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\56.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\DCA8CB7831114B9000D778B232E027D4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\5pk.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\61.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\A0242BCC22C15EA886ADE16E23863DF0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\7k7k.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\95599.cn.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\5860866630F00FA809D54552331DEC4C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\E64D6D06438840C5FB0D51A2455A1B19.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\96pk.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\FADA88E83D333DB059FF4AC63DF51D20.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\FD3A27564A16F3D36B6467024BE8D3F7.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\abchina.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\abcnews.go.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\14918C2C3BBE72025F700D0C3E2E4D26.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\abril.com.br.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\accountonline.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\2D8E60211592BB2A4336E37716599846.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\addictinggames.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\agame.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C04DF5400258E840341CAD6C04DBC92C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\EA7566703F6F70E0DB148BF4419B50F0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\allegro.pl.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\308297903D2B2B687E6A56143FC10C20.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\DED7968404DFD27C5F7B847406AEB268.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\F2CD5FFA165BD77FEF436D1E190CB6E3.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\amazon.co.jp.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\alot.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\amazon.co.uk.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\amazon.de.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\ameblo.jp.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\americanexpress.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\8C6846303B20680058F3B4FD3D964808.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\answers.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\63B149A809D04671E99DA0C80A922669.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\1255EE3C459CDB4E81A0D59447BCB7C6.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\3151719821FC056D961228D824DCE4C1.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\7021D2A6422A8F54C701239E44C16F80.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\aol.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\E567FA930898F24D66B5A18B0A64CFF5.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\63DC64C825C9E0C69393F828288ABC26.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\244B840E3EC9CE7E35E832D64170A96A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\ask.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\att.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\EC7495A03AC70148737D06FC3CEBDF50.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\avast.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\15666E273E5A449BC12F29C93F22217F.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\badoo.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\43C904D20D4C093E2389B1EA0FCFE80E.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\54525A7812FEF89C0E2E03C8152CD5D4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\baixaki.com.br.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\baidu.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\bankofamerica.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\E471F8044EDF59C634ECC10A51753A5A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\DBABAD9A049ED554CA4B287D0565B328.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\baomihua.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\B8E33DB447B3C69CCA4DFB0F49E3A3A4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\bbc.co.uk.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\bing.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\blogger.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\F463E6093187FD31F6C9BD2D33ACD949.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\28F7A55A01A1190BC38A05F20370F477.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\5BEB90C42EAE62DE47A4651231204386.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\D08416F42749263EF5278F3C29D204F6.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\booking.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\blogspot.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\caixa.gov.br.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\022F18A0311308EE10B7305033BBE432.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\cartoonnetwork.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\ccb.com.cn.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\EBDA5B141DA82D3C8701469C20750694.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\china.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\chinanews.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\82DD6BFD40820D122CA5A5E742AAE9CE.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\21633E53314B94566DD97A0133E074CA.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\F59308344C51032C233239D64ECEDC5C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\D29026003C7EB7F08C9B46C03F23972C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\73104BF2299F49B4F5EE73D52C542470.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\cnet.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\clubpenguin.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\cnn.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\823110EB121B822641D1B9D713ED628A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\534C230C0D890AD41676DD131051E850.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\398CD112045E38D4DBE78D96051F1690.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\comcast.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\comcast.net.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\607568382E7027B86A1B9E8B2F37023C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\commentcamarche.net.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\A8F6070D3D65F53207C00B133F37CEDA.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\cyworld.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\8074B0D22E19B4046A09546A2EE48F48.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\dailymotion.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\E63903EA04A09948EAF3B6BF071A7458.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\dangdang.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\dell.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\DCE7A5DC2F5E1C3860641351312AF814.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\dianping.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C030551C2171444AFF3D9F6622372476.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\6CE1971C28B39162907911522ADD6D0A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\79F760B50F526071A8A806B511F43C01.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\discoverbing.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\26DDCE6520A317B928BBCDC12328F66D.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\docin.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\douban.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\duowan.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\4B8A8FEA43C20031E6B34C564631E049.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\17FAECD8300AD76CF2552E16322CB818.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\ebay.co.uk.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\A8C365D7065F1FF34FBC1701082CFCBB.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\ehow.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\41D67B251CBC88EE2F93C55F1D8562AE.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\84DE31A4120756187086DD4A14952FB8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\exoplanetwar.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\facemoods.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\10272A8331D29F7FE950E71532937E07.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\fedex.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C5695CFE070521511717F5A608CD00C9.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\2B0943BC39B13B94F23A7F443B961C74.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\fileserve.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\9CD1EE7E4E7B9EF616D8CED24F4079A6.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\filestube.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\69297C9E2397F99E89A48F0A255CD8A2.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\flickr.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\CEECBC8837A59178F9E7FF9139806DB8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\EE3ECC8C3FDCC416D32082AC4203A0A2.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\foxsports.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\2493A3800873F2C9054FC7800A32CF91.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\friv.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\3D53EF6D1CC333ACD1CF1AC91D890DC8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\funshion.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\geocities.jp.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\0487CD1D0BD2BD2D42636AAD0DA29BAD.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\gmx.net.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C3902E400B349792FCC212600BFF70AA.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\goo.ne.jp.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\96CC0FB336FECD343DB37DE138E5ABEC.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\google.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\F727EB9E41C6E6FAB0453951438DC44E.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\gougou.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\33CF06303609EFD0740A26F737E2C940.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\groupon.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\guardian.co.uk.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C5C87240134F4000D646C816157720D8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\6C544C821275ADCAE90BD36113368B66.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\gyyx.cn.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\hao123.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\hatena.ne.jp.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\DA31ABCC0251F32CE9DD51F40421CE00.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\hi5.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\0DE08ACD3A9F44C9D64819F13C8022AD.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\643ED25B42027920ED0B15F3447A534C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\F055E86302B0B29CBFDB129504CE8D4C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\homedepot.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\hotels.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\2D87F0A708884FED133FBA21094B2A4D.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\hotfile.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\96B6C8C04835C08819F2C1604A1B9DC0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\hp.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\huanqiu.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\90B0232201B215EBFD88D7D6037BF533.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\huffingtonpost.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\3A02AB4B37FF7D2F4B95B36B38C557E3.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\4F0F23790E9CE9E211B64A6710BBC3E6.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\hulu.com.url","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\51F4FA4A2ADE6A50D61C2ACB2CC34520.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C20B6E75037E16B384AE2F9505F9F40F.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\DB627C883342C8281438CB9F3514A434.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\00E6CA7401F29A1C7ACC603602B97684.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\CD35C9F01C054FA01598BC0F1DC72B78.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\8CB0EDAE3F680B7672C86C4B41D8E612.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\1CA682412E72E5F22594CF5D3056BF12.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\2A02A8000C1E8000ABF440110DE45D74.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\138217422C3B97A58B99A0762D027491.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\8ACA666810DDD6002299A07C135EB0B0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\B08C21E62078F3932807DF92229FCCC3.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\B085BC860331C45896A4146F04FD9EA0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\41C1869C18631818DDBF55A71B00F794.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\616258532AACB7872BD6ACFF2B7691EF.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\1B7D4CC00C05A5C08304B1E90DE28424.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\136507AA2327FF5206597A1D24EED936.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\5E01642544AF67A4EEC13BA147234694.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\6D86D0352691136F879D9CE528B5F2F3.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\3112F0B0050F186D191BEDF007AAF581.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\B0447E600CFA13E09FC07CD60FAAEEEC.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\2AD147151F00C04A011AE17F20DE9B56.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\A745BC703B0CDC30544530D93CCCB554.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\8936C58C073D5ECAF9D697F6080038E6.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C1CC975D32B000D40EA2352934DADC4C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\EF236D0F294C5BE067F28DD12A163668.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C7A11EBC36DE094B1B21AD7C38A0E69B.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\32B1D2081872E56AC90D3B381A45C616.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\E44934BB12A2BC5B3C36DD85145E961F.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\8F86642033E0E380F8DC8EB834A6C160.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\2C20C706267A943A33BB19F728356DBA.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\3FBED1301C59DA70322A67941E2FB6FC.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\995504CB184542014079E4ED19101DE9.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\1C4D0408161199202DA2421F17E07714.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\D1084E0E2F9CEF92DE6C055231BECE4A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\01E2BBF412DD7378B7C9056614A34D00.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\9BD1E9C81D6D809BBA6478781E375F83.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\1A77846D2CBD73D20FB08D452F484FDE.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\B09DFD000C57EE809C6D42D00E2ECD80.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\1BEC08D42E524DA87E6EC73B300D2D70.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\94D64820115DEF605A2FB1571224CED8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\9FDF66540EE9CD4458F8CDC710CEAD0C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\70132C6E40C1B0DE6D63E12242E88E32.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\4DBA2088311681D23B0B55F433876002.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\DE9F26880594A9C7E21F4AD8065789A7.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\55648D1E055C1F2EB2E4A257071FFD2A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\F565BC482D633BA05A5529922F231AA4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\6DCD97922EDBC3CEA4B4084F3098A04E.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\B3F498960EEE5716C5F0950510B03672.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\9E7CA3E038B3BA82F75B2A303A9597A2.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\634FF840416F71C77CBF8A40423A4E6F.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\541F836A2023D382B755C63E21DDB252.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\47DE574B4093CE3D299A4D154154AF09.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\655734C716107BFCE3BE0EE517E05B50.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\277B3BFC3CB63E34DD76E52B3D771DB8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\CC5C43D8255CB4BAA4648CD4273C8DBE.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\1EF83762179D2626DB3D2B3B19BD050A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\18FA1EE02AF5F688FE6163F02BBDD1AC.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\309332172C408A3110E14FD52E176AB5.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\13D352802CF4761055AE5F882F175588.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\8CCE33D01450281EB441B77816C9026E.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\45B1ACAC07141AFD9B45B7FC099DF6FD.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\15416EAC2D95182C1A68C5DF2F50F5AC.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\07CAA4A834A35198DB09D6E736702F34.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C890C1310B7F1504CDE94E9B0D5EF058.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\2A8BB1FE34ECE604E3A7824336B9C18C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\2EDC8D91315E706F7280842932234D13.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\DF20F40C455D096CD3FA69A64716E8FC.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\5094C30321F0FADDCBCE953323CBD921.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\823F173E15BB30326FA53B83167E0F9E.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\812B2788477A53A5261FEF28493D2D99.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C3FE401234440602735966063618E032.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\75B56CE0340B5418A6D98A90363030F4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\D8428490470BD95004B8600547D0B8F8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\A204FDE00FA2B994E6E06B6010699A58.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C7AC9F8020F05A94916383E022AE38D4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\62B2EF352139983C2E95B2C1230E7290.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\BD6AFE4E28C47926368829D92AEC547A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\03A130DA05DA638FCBDEF7F208504013.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\B16F297D3F3187F8C6E1CCF141C36788.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\33FC3D002A1A2BD8487B33E02BDB0908.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\E7882D803C7E90309C5002203E556D90.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\FE0EF3FA03CBDE6CB8B03FB9063BB9E4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\27F5BAD8281B7F1AF356410829DB5A22.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\8F5D095C19B75340FCF1AA291BE43100.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\CC4DF2DC0BF12A3C0148BAA30CBB08E4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\5138D8452BBBBEAA489201372D999AF2.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\A0577D940C9B6FACF44CF4D70E5E4C40.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\E95969F0444D7EB0D971B76146175C44.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\DA5F91901EC224D068BFE45220A405AC.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\A3C344780BFFEE281EE0E5D40DC1CD58.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\4D84BCA011EBF4E0EBCCEA9D12ACCF0C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\E52CC80A08CB2FD2E78A4CB10A961032.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\E57BA1EC1375238E01BA8A24155B041A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\130F54F0361883B8D6FB676C38356410.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\0ACC999A22434452FCB4657123061E62.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\DBA14FE802709DE4F087F43404447DC8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\F0DA57B63666CE2EFA482F65372BAA32.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\57D4B2E60B8B061D570DBADA0D57E3FD.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\620700A81F820A8052C1A88B2163E6C0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\7D1F079D30F112682E4BDDF932ADEB70.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\016EE9BB472D2C45888A1D8548FA0B0D.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\67AF45223A221D557199765A3AECFE21.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\A055A62839FEB33CBD43E39E3C1D9400.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\8BA05C64227A1ABC92F5F2D92450FAE8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\D932D4B645A5E15441A7A66A466EBA74.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C55D059A076E228687E522E20934FC86.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\362030080C9F20EF11A9E3380E79000F.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\6847387D0C0029C5FBFEBFC50E290891.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\EB0C55AB0E26BE594F1670AD0EF098D9.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\331208610975E468634CA0550B45C534.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\8F67C2381ED5B25CD6B4E05E1F9E92B0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\918E3BF04560D71432F615384781B7A0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\11974A750D08F759011AC1290ECED13D.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\45FA91FB13C4B5DFAAA34EF1148B95EB.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\9A17DFA83252D9F8CAA304C63438B7BC.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\5B824EBC12721F5C7CBBDC9D14E6FAE8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\64D7FDB840D21A14C4FC8594428CF7D8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\96754B1C2B308A0E6CB040FA2D076746.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\C2824E1031E1768C426846B034035270.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\4DA962440DA4F7309C7AD1B40E68D2F0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\B287F1100D418ABC1D66DA9C0F116414.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\1E5953E5066BB986015E15C708919476.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\E5977096299F57A43A60C72B2B613454.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\A7892FD042F090B4EBF4803844C76C04.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\4590F854090E2B900D1CA60C09D807B4.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\929EA8C337A3C2AD88ACF9A339789E51.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\3344AB7022D7FAA8B947B3CE24FBDB88.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\3AD890AF27D6568801C5352529963044.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\9619887037614810BDED6F5639E022FC.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\007BF358094C7AF8652FA8590A0F5970.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\082A5F581F031DF6D18AE6F420BCF9AE.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\8FF56B304BAB42660CBE8F784D7D1D82.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links for United States\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links for United States\\D3D071A43303934055A379D534C87268.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links for United States\\8F484D8040126818FC44F86040DD4828.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Links for United States\\3A581D09278646155CB3614F29B62325.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Microsoft Websites\\D850B1AB0ED995D351617F5110BE73EB.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Microsoft Websites\\A963B07103CC9B3A82C358A905897952.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Microsoft Websites\\D1067FAE01DE204E9A325F2A044DFCAE.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Microsoft Websites\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Microsoft Websites\\06BC8D103E7C37722EED3A7040B6159E.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Microsoft Websites\\3F0526CC31B429A0906B8CCD33D30330.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\MSN Websites\\830E804D219D4D21FB04B67723612815.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\MSN Websites\\566021943E6E3D4C699E02E64045170C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\MSN Websites\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\MSN Websites\\0075006832E4109302CF548833A9ECEB.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\MSN Websites\\5259FE2E214B3DBC974A2839237F1E3C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\MSN Websites\\67485CA218B6D653193EA8A61AD7B01B.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\MSN Websites\\F6E4A2D32DA2E4D1B2BEC7E52F65C10D.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Windows Live\\9AE5AC283B0E5FF01B0803B63BD93C68.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Windows Live\\A7405DBC060AA7F21B81BFCC07F08412.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Windows Live\\B6F75359169816F5A5B6BB011912F3C5.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Windows Live\\62D7D61C48786240BED57F494AC741B8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Favorites\\Windows Live\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Links\\A60A161102125068B96572E502D82B1C.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Links\\09C9B16D186C4ACA34DF19391A33245E.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Links\\E1DFDE7606582CBDC936713E0834083D.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Links\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Local Settings\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%LOCALAPPDATA%\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Links\\43760D083BA32060F66F20913D6400B8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\NetHood\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Network Shortcuts\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Music\\2EFF1C921980D8BA7419AA131B60B66A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Pictures\\FCC5A0AB0D551E8E1CD4BD110F1BFCAA.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\PrintHood\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Printer Shortcuts\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Recent\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Saved Games\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Saved Games\\Microsoft Games\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Saved Games\\Microsoft Games\\33EF1C00372138003C02FFE938E91844.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Saved Games\\8107A3CE2CB9B5527E596CAD2D809122.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Searches\\3CB87FA301CC4196AA1BB5DF03AD218A.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Searches\\4EA7DF3A2E19C330DCD4D6CD2FDF9EC0.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Searches\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\SendTo\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Searches\\66A3068807ECCD66F8F74A8809C5A6F6.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\SendTo\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Start Menu\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Templates\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Templates\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Videos\\1B8F2FDA1310F3425326AE0A14DDD3DA.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\C555DBE41A7BD198D70A5E5D1B42AC84.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\DE375FE8205D215E7AE34E8C223AFBAE.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\NTUSER.DAT.LOG2","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\F7C2998826A18D007506FA2F28C76CC8.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\0EE7601E1540767A85FE1F0B170D54FE.MOLE66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\en-US\\user32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\en-US\\notepad.exe.mui","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%WINDIR%\\System32\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"path":"%USERPROFILE%\\Desktop\\_HELP_INSTRUCTIONS_.TXT","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"key":"HKLM\\BCD00000000\\OBJECTS\\{72D3F4C1-B53F-11E4-B6D9-9157CA704B30}\\ELEMENTS\\16000009\\","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"key":"HKLM\\BCD00000000\\OBJECTS\\{72D3F4C1-B53F-11E4-B6D9-9157CA704B30}\\ELEMENTS\\250000E0\\","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\271069F5_M66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"DBWinMutex","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"271069F5_M66","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCounterMutex","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZoneAttributeCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5abdede37ca3e13ecb2589e4"}]}]}},"report_ids":{"sandbox_job_ids":["5abdede37ca3e13ecb2589e4"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Malicious Ransom.Mole.Generic Sample 15f5cb94b851… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 15f5cb94b851…. Malware family: Ransom.Mole.Generic. Threat score 100/100. 21/27 AV engines flagged this file. 3 malicious and 19 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91"}],["$","meta","4",{"property":"og:title","content":"Malicious Ransom.Mole.Generic Sample 15f5cb94b851… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 15f5cb94b851…. Malware family: Ransom.Mole.Generic. Threat score 100/100. 21/27 AV engines flagged this file. 3 malicious and 19 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/15f5cb94b851289d0218f333e06372e43b2a55d241c530d4f61aad3b89f68b91"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Ransom.Mole.Generic Sample 15f5cb94b851… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 15f5cb94b851…. Malware family: Ransom.Mole.Generic. Threat score 100/100. 21/27 AV engines flagged this file. 3 malicious and 19 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2e","11",{}]]