26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2b:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T430,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Sample 1b950d1ab5c0… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 1b950d1ab5c0…. Threat score 100/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/1b950d1ab5c06c7f1f067f13140692c4d85a9d24d4af1e8421dca49f0000137c","keywords":["Malicious","malware analysis","sandbox report","threat intelligence","1b950d1ab5c06c7f1f067f13140692c4d85a9d24d4af1e8421dca49f0000137c"],"about":{"@type":"SoftwareApplication","name":"https://www.reddit.com/r/cfpchampionshiptv/","applicationCategory":["url"],"identifier":"1b950d1ab5c06c7f1f067f13140692c4d85a9d24d4af1e8421dca49f0000137c","additionalType":"Malicious sample"},"threatScore":100,"antivirusDetections":{"malicious":0,"total":1},"behavioralIndicators":{"malicious":0,"suspicious":0},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Tb1d,"urlblockindex_1_.bin" has type "data"- [targetUID: N/A] "CountryPage~Frontpage~ModListing~Multireddit~ProfileComments~ProfileOverview~ProfilePosts~Subreddit.bd671f795d9b622b2656_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "~DFEC25F674A955D83E.TMP" has type "data"- Location: [%TEMP%\~DFEC25F674A955D83E.TMP]- [targetUID: 00000000-00003860] "TopicLinksContainer.09b9956a882940f72f3c_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "77EC63BDA74BD0D0E0426DC8F8008506" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506]- [targetUID: 00000000-00002888] "vendors~Subreddit~SubredditWiki.c17b16c26feb8de5d65f_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "Italic-5267af566ab853eb9d74db1a78a46c67-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "RecoveryStore._C7A4F1AE-D920-11E7-B48D-080027D44A30_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "9NX5ZHBI.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\9NX5ZHBI.txt]- [targetUID: 00000000-00002888] "ModListing~Reddit~StandalonePostPage.609f42db220b32960760_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "Cab3664.tmp" has type "Microsoft Cabinet archive data Windows 2000/XP setup 62932 bytes 1 file at 0x2c +A "authroot.stl" number 1 6 datablocks 0x1 compression"- Location: [%TEMP%\Cab3664.tmp]- [targetUID: 00000000-00002888] "Reddit~RichTextEditor~reddit-components-MediumPost~reddit-components-NotificationUnit-Button~removal~87f825ba.ae8c52667a9d249909eb_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "Medium-1051a531d3e1ee3483a6533158557139-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "runtime~Reddit.9946b64cf886fd27ece6_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "Medium-1051a531d3e1ee3483a6533158557139-font_2_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "~DF9C345EBD2DB777A3.TMP" has type "data"- Location: [%TEMP%\~DF9C345EBD2DB777A3.TMP]- [targetUID: 00000000-00003860] "Chat~Governance~Reddit.17220929e9b561c2ec8c_1_.js" has type "UTF-8 Unicode text with very long lines with no line terminators"- [targetUID: N/A] "Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "vendors~CommentsPage~ModerationPages~Reddit~reddit-components-ClassicPost~reddit-components-CompactP~d737df3e.31f8d07ab88edabff736_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico" has type "PNG image data 16 x 16 4-bit colormap non-interlaced"- [targetUID: N/A]28:T1148,"GET /r/cfpchampionshiptv/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.reddit.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /r/cfpchampionshiptv/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.reddit.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /desktop2x/runtime~Reddit.9946b64cf886fd27ece6.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/cfpchampionshiptv/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /desktop2x/runtime~Reddit.9946b64cf886fd27ece6.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/cfpchampionshiptv/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /desktop2x/vendors~CommentsPage~Governance~ModListing~ModerationPages~Reddit~Subreddit.f468f4fbfe44aa5cfabf.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/cfpchampionshiptv/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /desktop2x/vendors~CommentsPage~Governance~ModListing~ModerationPages~Reddit~Subreddit.f468f4fbfe44aa5cfabf.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/cfpchampionshiptv/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /desktop2x/vendors~Chat~Governance~Reddit.129ad206362dbdcb7a01.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/cfpchampionshiptv/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /desktop2x/vendors~Chat~Governance~Reddit.129ad206362dbdcb7a01.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/cfpchampionshiptv/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /desktop2x/vendors~Reddit.b93221cb0f1f88012911.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/cfpchampionshiptv/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /desktop2x/vendors~Reddit.b93221cb0f1f88012911.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/cfpchampionshiptv/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /desktop2x/js/xads.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/cfpchampionshiptv/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /desktop2x/js/xads.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/cfpchampionshiptv/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ")29:T3a38,"GET /r/cfpchampionshiptv/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.reddit.com DNT: 1 Connection: Keep-Alive" "57:31 GMT; HttpOnly; Secure Set-Cookie: csv=2; Max-Age=63072000; Domain=.reddit.com; Path=/; Secure; SameSite=None Set-Cookie: edgebucket=izqyZ6bCSKJfn24tNA; Domain=reddit.com; Max-Age=63071999; Path=/; secure Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.2, "failure_fraction": 0.2} transfer-encoding: chunked" "874f" "*),IsvP{*1G-232|<\C\}\]\NCCv"T T "O,="WrO6>xx2A0/npt[ K2Kg1)h~at+ 0t= 1 Ca tj?CFSsBxwqH{LxOG_n_{`&u0G&!rEa[~AybQ!J_qt#. I@M)T25 F)@eE1~yzi00w^KsYlF3$3e>LcFa332L|H7F?#{{3L 0gXC w};w0o /74{cB(stG$fL9$ '`AexG_Xt0K?@w9Fw]/$jR_wg!zrvB`L~|B?7NF By"X=n{55,>[y/w\!:DC%AJp4[Y>9{Kt#7f,|Aq76xVknb|L>5FkQYC9(9w]m0p2<>g5>cLcJaCN`BieQ@TsAs@3U'}is3Wsa r1ddwYbd1;UucTl,M|;Ff\[ G}?_qMUlgI?F-U;8~n=}]5azjv:h0xCv_@_M5_P9UXeaVN>`=~5]cdn{{*"H{5`So"V>U'' 8S"%SZN:L`L,?e@UAx,pF"= _ \g.$so"!Fz*JrYh!02, SIQ)<1OeS]S\&O_v? u_|(~{~slAA7t 4*yc `# .ARK7P?F enOh&hfhhnio M(x}?sc:7fs.P>/8%Y>H@r'sJb\R$nnR6W0qq C}R._[L<$iyH}7rM}'rMA&\jr&[nk){ m e\C%73%t*_s4ah.u neXoSALstK1c>L\S>d>I@Nu%J|qY]/or2 3r" -rNH /"O y2 MT }EE(^AyG.JZ0SlTGr{6/j$,k1J"Hq8_]4>857fr3Yqhbr{g.Mn0q8g3Bt+s@>)M=7s\n '=7DR]oM1c!6h6YtV=X>L?ypY'4pB\(;6ktcBrt3 O?:={Surs7jPdVE jw}:Zv.B+Fjlkq`!;_ '?WsQ]j35^WRjQ?.JJ |]jiT|OiiV\sVZs5!$RNlX|bs!DW:.>rgAHWU m4*xOlflQ4,>x2g7|z(kPjw9womc)Dd@<;!G'rXV>(AJ.hXB$,!bX,mR ! C 9A!|X1a1+?T\!aJm};O> AFx8S);[3v[H QJi=L*?ABBX+~CNVf Kv/]0>{K0VAE[BmW;F>ou6Y-bkk]pD}{bdKV!P:W/\3hV;j\[GQ Ku2\N3Ck25'A ^b0ebfE*PYp''BVoSm0q,, ]PMM&?8h>`6 NWIYO$JDcKXu5)]YR4{^-IS_qx;&dl J2p^E8;(|_u%X9.i-X;_6W|by{b>ov>,??S/R5kR# 3/o"uVvut|-tn'DO|CE|iQt[0y0L T3)U+?T ZeLdk h\Ts^fLB =;'`LSI AfA1E" NWyhxGS"JGRNZ$CU*'HNu^!RD"0UGSf'**iGd<%#-5,zOa<4)=V PW0T`y;P5IR(%hXQP5fB$Z@ \I,WPN"E%)@CT\5MqC$ ;E7-dZC;[8P%&q$_/*Pg]lm `2v\5Vsgzz5^UXYJK4R MyNGnAqguFFnsx4LMjQg (QblsH} l77jE4wj8[iRMIk78[Fi%3*VaFpVSf^5ZR>=}2nQap6Oo)8koS&?;ZZ&j]u;^Mo]>V<&tN3 D"Rk\=wl0l2ZGP))Dk"]S*zcu~*n/[{hFu_k-S;Y0's]Trh~$q$H:Z;U/"u;[jFkMQ?kmiD\MfsIM-&&f_"mo NHq&z,?k}nR&]:$C=UQy T5}3LG07T4] r5HVph}7fJ)/WV:nnc,''W,m.}V(RZt/ifVZjUa&;5'|K1oyRJmYieYuY4H(Ln^*L8ZJQ#zejA7%3csww=Yfiy^uKD&wzB31bRz<] P Bbi~ZfTDjcCFqZkLY!4keR4:N9fQW%8)dR%MIX|'b)d\g|LM{1>S+sh*!59ogNN f>.q):H2 .bbO;v*5nui2F-cv-3IF47Kt0nGVARLhP Rf*%KUn#}d]6)CNKMSO wU*TZ$cnr\RNAA"\0}> V}QIFt~/y!/KJVa"bl#'#"?|`\,goAK"T&#/U)=Z`V4W/V^ A @^;vy=kk @zk ^;vyr{dHk Ok @{Hk @^;vyrlyHk @^;vyLk[wgJ}~y31Ktx=A9d$>=;J{.kG:/y3b`M4".X& EEn/5{B*zG}(L$>1Q3P,P$oiku+=myK~9_'&4nn7G(Et5h6O? b126_[r/Af}&G`hjHviw3jl#~W{cS8y}P8*OG[T8@^Ol?[(%Dz"Z-A#qsyMNV*]'_W/By\G8=Bk1N#< t3BMac0#?/i =dLuVw{*GY>U}8'XJhzCJ8@/|q^7o~yN|D[(NGqL`uhx4D.z?pokmP.O'$VTo^9]loJ*`GEIx(w;Eq\S5BTmAz>2#2"$nL1\,w>[Rdgbs!0x={+}9^%V(l]SYf]9!:M>mN|.K3E)R(.f8fG<}Fowx+QO%>m~l9\OJE?K|e ND8u7'6a O7nxODu-: ^k8!d2Sa.]vUg,;EQ~me{SFTN0F((SRO 6lFMur$/OQ*Y~8d;fg=my;bq5clN!Bd^#/ zO6D@r + 7t[_y[_4h6-^q}j" irr1,ra:#|n{/B7t&}.ZsrZ3rQ7{=_YSw\iSz~QCoDh; A<;; lksx7N]oq-^Lc(UNSP${0{`^wlch:DK*"BGGI^~|C/>m&z&Dp#j2pQCe5 d,;@7s/"6Sc:7>FDu=1PDXe8qgW3EY.dN-1E;ismh9!Dtc8c)o.[drW[,1#bNAkd&:;o7BWbeDsco=$w_}Q-@(r041W{B #3WD_ 6:nW2nDD=Y(~]Y/UVxsLBlIf0Kq_*)mo)~sQ5[B-ee7^i*\%25L7=4AzaL'Q9xa3]'NMM=fr,9}%sU_-OrfQ6rt{Q@ n^=OIJLAA0!~N$8:2q'<32 7+-161iR~SlKL>Ol_(c`A!J@Jjut[Lyu>yQtYNr>V_WhH>85f)!fnQoWd]v@{xglH8l__<;l91oe~3)ZW_{oSH\w3%5!ctCMic}-mE}r-r"QG+,Jv`otWCX|?";Wu;=D4Ba`vUb]bQt/ wGngiZu!)iCuu/f:X48s7Kw q0r_BGosbv:QoJdgnFjmY/X2Tu^5l8PtS4$]XGiGN/71")Y):MG#LCC\hfs4f.JBg2"vS"vMQ-$}"N`yOGmy(XY+\u1 >s??7kb3M;2xx|M=^xH79C)EE#I^d)`UB/Hz\S`8D p`lX/ pn&e'| ke)93ple://ulf:_ZS.n'@39\U1' i?Diac*F*wDvngq-D"vq9\N]]P_)TIb]{9+l|Mp@d@`bhB;E\Pf0lrhMR&t3tSN1$W!H&c'~}{#/ :^fvr[`% ;Eas",v4ipEZAwt.lV=IoGMGC4]!QMM7h]y"NcWW+eLEZfkb*cB;iqb~EFg% _EgH4yKA 7n/0Dq^6gqgC}_$.YzgQ"jYrKA5JT ;SAU[N;yno_.G[%7_`sruPV;jAS>3B.Ce]yqt']De^FMkbNG;i@dj(1esl1ck_mdBqWK<$#TZBJRz! D [D](K$|} 4+y0q (1,CO=a~\~Rbonnv2zZPj,~My\ !V5XnQi['s^5Q0E'sc{`~:cVK64mv#6}I/ml1%rE5{TF6vuQW:YCs~;$R$y_/Jc0sV=J9R7w]D ec+qWA^^{SCKwd4ZrOqAODG|jwZbvrM8E>%+oS,?8+gPkruJp+j8u&-4q/ 3h!o}Q&]k,)Y$x;GYEns[oTM;K{5Hw}8O8.yi|-Xbuu\]B#NZwFMzKiZ.FE1@Lg8sB9^7:y}OfoxdfeHtJb15REge+@5?4v^dkzBK P;~LbrD]F*/4D)T]E6F)R '7xv9tkRbJl`Kb};covYQj94'Iu4R6j_hIO7} p~j$#SR~JoDBn0By&=*nw6Y DtPp e+\@$rk|IBw%SCX4ETr#Ei'hf/GdMksM2FL,J,<,\%Wkh+ `tllUX/oF>cK)V~=fG p%=6Ez[j9C1 /9od'ef w [v.h)p{_b^On6UstK$q]aDL@Py.<*uRF6 +#D9h}rkB}}G?k- q]kt(BG%q6V7Nae\.d4>?>YNki:rdnj?w#zL8 APlsLE 'sd`vZam-WIJQ!HzZ1}@[;7U)t", "4000", "v0?OL9Wrenu HJEI]=_k @(dgO( B (~(=T[yaL?<6!o?:#mQ}>9?`EMVXq?,e5CkJ[4sPi&T [)/*Xiq"[ck!Y%s>u,]O7-D`1U p 4'Q-T8N[Ki;wj*@6dz>=2H9k I-:kwG;'PGnoTD^Bqy#{#[/G_&p(#jjo?.%9^9uaUg-uE>]6([ 7B :KhY:ZTU,)Kl +/},]aVlHK3%>jOEjNd}z ~7T#n<.3yz\g3Cs}Xos\O0XS~n&UZ-):*j&uk>B)99 mMgA@5n:HLG6y IPPsPxJp6;D^U8 5X70|NT-#SSRH?YH-tL&'OFAGHAjl:0]Oq85)tHr181#0vHB18 wq9fp =j:O,Tn<|`|{o7Bws,=fSHSd.#boD#, !6i_`$q`Tt?PiQ#DCv_US$(?y|W7R~$m! ]M-POl\(>q:t`@tU'W.Hx+ iCF@Eo! sGbO2D6z|Mh 'R3Vsp%h*B/8XmEHvYIH;3mdr&6J%/r!$R@E/Q *<~"up9X[c:TO&|>_JWY &CO8A19)+;", ")[xhU/,]"k4(@h')Lk"?;1%H3ykX+i'[Dyq ctB[Z p L0e%08"jG\myDpVH}h%z>(!"f>:.@/#g{g`O%pkf O;{~GlR_ p/5?K~a@wz_Jv;AIVe;3dqrV=]NnW9iqbq]zUYfo({jW{Q6I&y$d/dQ[7OH^{S[G2XHqKT=xsdHD>2Z!NM'"N,96#rG=X?bvWp>:{cf#'#g9$$${$>EQ.+;vE217_j99G~g>q}vZci mNRZ"7Ay{\;- q&r_*`o]Csdy_dQ5EFP.OCp@s$MisQprC]l:v9K]I5N8\GSPi? m}Embfag()} B;cTREX;1;DF}yp{}Wu!_yh/PND/;uQ`\y5q>t)4Vwo1BS^nw|{l! Ew}&;|BW7FC RYC)gYTI:bpPuXjdQ:)yATa:]xHd1m*{B~|h&9!S?lb4IJnqhNs8I"No'#NDC^HLDT")AE:n0AXaUKRzw_]`G_A8JppHpHY8:fbX&LN2er2.l`}Cg$Sd"K*#c3hPkvN{cAaQ~,$~ 03u~"`EFM>zLw}w @A7BG#vtG[_l4$n#^w~F_E/B;V(4VXiaYE*]4Xr6h0XGTlOp[_[`Tr:(4!@)p0F RQD!D2&=DG.G>4>FZ p!EF~EN$qb[)Us}pk*MP`ty:$ +pi/bA", "Z @F=PHY4AMAFJ~2>l7P~Pe(-x=!Ua@wec`z*:p!+m66~IVTiLV"P,Q4jODW$%#.C}aEPlE6"K@l4{mD*0z}|>FpJ@#)xRLqARP=8$L}"6wJ~I$.KGmO*aa"C2?Td+<]MnZg(K3@xG((#?=YP v~I7^9:{g S uJkeWMEQ>}4&q 7b>%2u6rOp3f`. G_QNT(ge*|5qR[75nh8 ='}Y618KC[~0l`01CM9F=7$}qzn -m'Dr!ANRuK%!@6B'0P =[22n`/0O-:O<7bZp50H*#eDv&B-x F_M'`= )5PK(RQFW0j1%VPC9IC9P. *e"6&N#a Iv(~mq1&% .(Es/B~g|*Ll\`d.k4z&bM~nHB4IL/4Hd@pO &XH-MGQW9bZ*DEJSCb{1_#8?l8!qPxDU(&HAgKId8f= !;,,TG+eiD7]J+~1M@dT1$M)C8h8"q<", "/8*P%%2'NN5qwEg)c`LRF'2so #1cI*KrzO`p^ pu7&Xg&25PBXA(|7c='O .w`;Q$\QGjQOOCGH/6N!5Bf4NQ$ |45|5HM4%o(.z"{61_`b$Dr$ &~f9` xfiS:!{Jb`G-n- L-<2}c_[54AP.I\f'M54vaKR\Crrpar$Z}I^iC!-!xVdUAwf=$)D kbx:51UcZwBYNFM1bir&yHT0N*PCYt'(K|*2Ld95Blo,+D"`+})>f'P`rADMlhqpr[7'42]`J;dkXp;n^Efjj~>]L:!^.}p$t>;!=sOPuJHk^<7@72EDq(iDL1bI*{G|p1l?~B(jB;>:C"X&@In*,@-@d;u@iF3?@[q-'J(uLDSD~4K]`GrL0&l<*,,nU[u2k}}[PyfY%qx.]!A,x'UaG7a,@*,xM~3xT$A/C1mR*qy\_'Y@J#$MZ$\)^DFXu>D8lK?s~C|4iwx/q.V9u37hY#K{2a"!1~[,`!F4'5CFiw-2J|vl6]mKAjF /H<@\'2 S4%) hv" "JB9[s7Cl}C$Z P?*Ia?IH+{iwh+DFr5KM%{GN-^R'3hKOJ,>YI+i'thIXK"a1XX n \tkuR w-)ftT + .w$| b\bQ@DOQ&Vy#RM 4J}dCCOLUd$,3iw%R$\#$a?i`+~m, m! 0s\@2Kk05KF "DHqxWlDP""JK`#%D) 4#^n=|B~i=+sES0z-!>3cc54C[bO2z ''7?ud4&^' Ws _G1%S@q&;9zON" "z|FL>Fe8K''F$KG^h0^ATm#\-vOE/o?SxmLX\~ >??]ut{`ossi`>'G.\'39>a*cnc\8u>|I7}]VO`(Q[]X^WF'vEW?6Yy ]7, xe8b Ph#C_Gm/$Eyc!C2F-1 G`iX%Kc} u/eN(E3IG SU}Qh*C@}|B7CRHqRHqd )(L&k'H&> wI_?C)\Xc0q_R0/4byB6&&A Gn[O&vst;$ ?)$0pU>O{8P&_Nt>x*I?1;HwRQJt-0|0;.JWXi0Ad${-)T4q6)'(~LE (]'V(b8TxSi:&+I${hE,&o.=?GeI M}{{Bo2~)~"DOvcNqxH.49S$.T(\~ANlx_pAtCk*;\DU)=W1j}$aH'|O"sv/e!Lddc?Qq`'E0N }fg6:NQ.0v|K:0ViT)q@bb,7ng]lm4$lSj[m`>g\;&MTbt7sL!nXQZ @gR&~3H/?z|: x{ :4,qV+u]W-u{qk$A@ \.5/GO$^H3,QFK0Rs>TWSU,*#NLm8ryl33y.21l!- F"zhmxx8l=lrZvg5IP|&![ponM9F$p'q8M_vO"*[D30uM; S'P4z;j}E-pkta^r7\JU+hvA S]jeJv{U{Iz\-NLw]jr]mAYo" "`:ElEv4:T .l.#vYRW5Q$O CrSrAk@"I({K%T6nWwgnb_ltkl([T;/N\^UfnP%Wd5yt E7EOo65Wd.V_s^`AuVqRJ_;qJ ij27Utd"$bE\N=].y"kC^{*\[uK\[N-22nF3}B9>QaxepUfDvL#j+lx~c7:=N+34v1Mo{7+M])#{qfuR438D91TKE;c !/R!S+zww"PE#BWljE](sL jKrtPCay, El,]qN^O*<:w\>W+.MYX6~ V#2]M4w[4.dv.36')^ b-X MFO^<]Tc<}$@wXvOx(^Z}hO ,6CS>vf:=Rn&pCjO5&hP.[0^Y1@F/Kjgv#EK-Un%jK" "x~(<8$pg|~oP_Ogx#j~.K<%n}prokTl \Uke4;vukW1-UWz:WD~(BhP:/<7YyV.{^{1M@qeblYyNBZ!I=n4Lz8{Db8%5hi~"WwYu e$$0X I6j0vAPnrBV5O|tq|:sapOG`8|+N'5P;g-%vJ}#%vey^ox/ &SHKMH+CGi,,uT"!Bt'Kb)v&LbF`2|]Sacmnks<+4&g$j}@\BWQGHM1'3=Oj2q~$R$0m08\%q B_.R.("5Z9'kuKJje+&-(pMp"stLYr2"-AGE?-J, Bc$go*=6[8FnknpiAI;S2hq{ 3J<5w3pohs6~\^1.u6ov&y)m=4+l$g3{+t6+=+ XHkh>r"^HU-ZFQh.o&AnwRdl)zRUm@hOkY1cK.$c1s;TclYrggM=DHr/3`ofB};Yn)e?cv>Nyc#Gd]iqqWEp1^j=>bUPY[eC]yV4a'\_//hIr&G2|;tH&5~"pQNj-lPy1$HzTR?B8DN'%/Cj 6DB]Z 'swz;=p['Z* zWo5qkqQNn |$/6g.$nI?yQ_& ~c'jzw:o6i9*ri3}.YkF;[mwZ\MoQt+Y{y`r{54?7.T\W}v[mWU/~D3Tw_gZv%Y(wlB<:.ES", "[|{n`|'589M[.HEHLxL]l66pz~dA'{*GqT.Tv(v}:b?2~}HCK%0M#08_z"_6J38979~q&"cE(S')?.%tq>oy_0sZceimou]h)@PO PrOMb?WGq@{azDd.fn}Tv| ^n)*Y=5dY>!3KdxyyvV2AJ/r8@DtNm@OG`?VWp!][.4>|>}gf~Z6!ikfug&Ttf83>J ^`E@-@[a)D:mQoGSkdW;NFu;L&^> N X =ESZJHET&"9N979wlgS0])H1g3uCp75AjH()$r" "\ss[T9&yGxK~=`dFc)tf?y6aSU|0s2nydJK&_jLO!6cJ ,X$%=SZv)UEHN4}gL'g8a|Ur?"rOL{LC0:=Z-Ds:_/'NOg"gz]4[$y |m37u}mo_n#N^"oTjw95v\z.%:h6Z6lu>z8l\cur;X%c?V$J$qJfY],d<'Vo|3[Rw7]-8K BSpu(r!D 8;_[RNR&_'~E.7#}(?}aR>#+j AfUP4+-0MxK1$"?ai$ &(%MT$ZTQJeV~lD+E,'q},Rd^6RjI.*LI8Vi^f$4KD?s=V5PdQaLZ"WUZ`).%QNjEIKJI(~"q@k%VUK@~g2EmLWa1|qyslY2z$l^`7260jiv7X\j1_RV*Eqg1x;|h,gk^R~ss;u:f[{>o/WM3ZwN~CHLTQh@W}}N(~8,E|?/T~[vxSr7X =/>m|m6 3no}c/t6um7&X$|_(8$tjw@W>1|6}RL(1GQ,G_w=CQ34=3~^3(_!4*+Cb>UyYDMEgZz[mO82SN_'_GwjIt:WmUoU.!yV+\rePTSv;U2X r i7n!X0to{eRI*@?c$(L/_\Q*_|E)U]EK W,|EJ@/@Y_e)ic)y1OJEXTB4bI4%!x"$_RDUr+qE&l:PQ*Y. Pdt) 0Hd^AoEF)`7x.kM^oOI,Y.z*sVpN[xVCI3q;mNL9Xdt j`:#;f75qtOwC)v`]GR~o-I/Aa|o'%(7)2q}Lei\oT^u2G&7?s0X{T#pj|:|\F 6q`/Hf:;SArt"2a:T564,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:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"1b950d1ab5c06c7f1f067f13140692c4d85a9d24d4af1e8421dca49f0000137c","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1790597596792,"unified_at":"2026-09-28T12:13:16.792Z","metadata":{"hashes":{"sha256":"1b950d1ab5c06c7f1f067f13140692c4d85a9d24d4af1e8421dca49f0000137c","sha1":"880ededeb17555e2f48d19c0f0fed5260da69174","md5":"db87b657b812c71191f5e21820b382da","sha512":"bfe286e13791a995453b6e71eb8c6d1008a627d5526747bf1631c3319b4838458ed01e0e17448684161a7fdcf1d20653f998ea05bf1c07aa053da6a5bd0fae4d","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://www.reddit.com/r/cfpchampionshiptv/","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1673268920000,"last_seen":1676551792000,"last_multi_scan":1676551792000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":["criminal","evilnum"]},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":1},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":5},"sandbox_signatures":{"informative_count":11,"suspicious_count":0,"malicious_count":0,"total":11},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-classification","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/","report_link":"https://urlscan.io/result/143e2205-7bf2-4356-84d1-49b9c7e6d6a7/","extra_fields":[{"name":"percent","value":0}]}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"informative","value":"Dropped files"}],"sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Contacts server"}],"sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"tactic":"Command and Control","technique":"Web Protocols","attack_id":"T1071.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/001","identifiers":[{"type":"informative","value":"Found user-agent related strings"}],"sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"tactic":"Command and Control","technique":"DNS","attack_id":"T1071.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/004","identifiers":[{"type":"informative","value":"Queries DNS server"}],"sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Decrypted SSL network traffic"}],"sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts server","description":"\"151.101.1.140:443\"\n \"34.106.83.91:443\"","origin":"Network Traffic","mitre_attack_id":"T1071","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f14_ConnHashTable<3860>_HashTable_Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f14_IESQMMUTEX_0_303\"\n \"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f14_IESQMMUTEX_0_331\"\n \"Local\\InternetShortcutMutex\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"IsoScope_f14_IESQMMUTEX_0_303\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"IsoScope_f14_ConnHashTable<3860>_HashTable_Mutex\"\n \"IsoScope_f14_IESQMMUTEX_0_519\"\n \"IsoScope_f14_IESQMMUTEX_0_331\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"UpdatingNewTabPageData\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3860\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$27","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"https://www.reddit.com/r/cfpchampionshiptv/\"\n Pattern match: \"https://www.reddit.com\"","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"Cab3664.tmp\" has type \"Microsoft Cabinet archive data Windows 2000/XP setup 62932 bytes 1 file at 0x2c +A \"authroot.stl\" number 1 6 datablocks 0x1 compression\"\n \"77EC63BDA74BD0D0E0426DC8F8008506\" has type \"Microsoft Cabinet archive data Windows 2000/XP setup 62932 bytes 1 file at 0x2c +A \"authroot.stl\" number 1 6 datablocks 0x1 compression\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops files inside appdata directory","description":"Dropped file: \"9NX5ZHBI.txt\" - Location: [%APPDATA%\\Microsoft\\Windows\\Cookies\\9NX5ZHBI.txt]- [targetUID: 00000000-00002888]\n Dropped file: \"9T300EHX.txt\" - Location: [%APPDATA%\\Microsoft\\Windows\\Cookies\\9T300EHX.txt]- [targetUID: 00000000-00002888]\n Dropped file: \"B390OMIV.txt\" - Location: [%APPDATA%\\Microsoft\\Windows\\Cookies\\B390OMIV.txt]- [targetUID: 00000000-00003860]\n Dropped file: \"SAPWNHRT.txt\" - Location: [%APPDATA%\\Microsoft\\Windows\\Cookies\\SAPWNHRT.txt]- [targetUID: 00000000-00002888]","origin":"Binary File","relevance":3,"id":"binary-37","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"level":"informative","category":"General","name":"Contacts domains","description":"\"crt.usertrust.com\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"level":"informative","category":"General","name":"Found user-agent related strings","description":"$28","origin":"File/Memory","mitre_attack_id":"T1071.001","relevance":1,"id":"string-127","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"level":"informative","category":"General","name":"Queries DNS server","description":"\"crt.usertrust.com\"\n \"www.reddit.com\"\n \"www.redditstatic.com\"","origin":"Network Traffic","mitre_attack_id":"T1071.004","relevance":1,"id":"network-51","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"level":"informative","category":"Network Related","name":"Decrypted SSL network traffic","description":"$29","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 3 domains and 3 hosts"}],"sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":53,"imported_dlls_count":132,"dropped_files_count":0,"extracted_files_count":74,"files_written_count":63,"files_deleted_count":0,"registry_keys_created_count":10,"registry_keys_modified_count":0,"registry_keys_deleted_count":2,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":12,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":4,"dns_resolutions_count":3,"contacted_urls_count":1,"http_requests_count":1},"behavior_tags":["criminal","evilnum"],"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"63bc14890fa60c714e6e29ac","environment_id":120,"environment_description":"Windows 7 64 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"1b950d1ab5c06c7f1f067f13140692c4d85a9d24d4af1e8421dca49f0000137c.url","analysis_start_time":"2023-01-09T13:26:22+00:00","indicators_count":{"informative":7,"suspicious":0,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment"],"is_in_unified_schema":true},{"id":"63bc0eb755e37a51ca47e531","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"contacted_countries":["GBR","USA"],"submit_name":"1b950d1ab5c06c7f1f067f13140692c4d85a9d24d4af1e8421dca49f0000137c.url","analysis_start_time":"2023-01-09T12:55:19+00:00","indicators_count":{"informative":10,"suspicious":0,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"151.101.1.140","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"address":"34.106.83.91","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"address":"34.106.127.138","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"address":"91.199.212.52","port":80,"protocol":"TCP","country":"United Kingdom","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]}],"dns_resolutions":[{"domain":"crt.usertrust.com","address":"91.199.212.52","ttl":693,"country":"United Kingdom","registrar_name":"CSC CORPORATE DOMAINS, INC.","registrar_organization":"Comodo Group, Inc.","registrar_name_servers":"NS0.COMODODNS.COM","registrar_creation_date":"1997-12-05T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"domain":"www.reddit.com","address":"151.101.1.140","ttl":2692,"country":"United States","registrar_name":"GANDI SAS","registrar_organization":"Reddit Inc","registrar_name_servers":"NS-1029.AWSDNS-00.ORG","registrar_creation_date":"2005-04-29T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"domain":"www.redditstatic.com","address":"151.101.1.140","ttl":111,"country":"United States","registrar_name":"GANDI SAS","registrar_organization":"Reddit Inc","registrar_name_servers":"NS-1495.AWSDNS-58.ORG","registrar_creation_date":"2011-11-09T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]}],"http_requests":[{"host":"crt.usertrust.com","host_ip":"91.199.212.52:80","url":"/USERTrustRSAAddTrustCA.crt","method":"GET","header":"GET /USERTrustRSAAddTrustCA.crt HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: crt.usertrust.com","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}],"processes":[{"pid":3492,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\1b950d1ab5c06c7f1f067f13140692c4d85a9d24d4af1e8421dca49f0000137c.url","sha256":"405f03534be8b45185695f68deb47d4daf04dcd6df9d351ca6831d3721b1efc4","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00003492","icon":"$2a"},{"pid":3860,"ppid":3492,"name":"iexplore.exe","command_line":"https://www.reddit.com/r/cfpchampionshiptv/","sha256":"c00b9f2b32828341a9185ae2be1a0649c9f503f0b5cccebc75be4c2f8c596530","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003492","uid":"00000000-00003860"},{"pid":2888,"ppid":3860,"name":"IEXPLORE.EXE","command_line":"SCODEF:3860 CREDAT:275457 /prefetch:2","sha256":"072041fa70bb351030c516e1b6f7f21d15495da158f3890826ba5b978af8900e","normalized_path":"%PROGRAMFILES%\\(x86)\\Internet Explorer\\IEXPLORE.EXE","parent_uid":"00000000-00003860","uid":"00000000-00002888"}],"all_imported_dlls":["sspicli.dll","netprofm.dll","WSHTCPIP.DLL","sxs.dll","lpk.dll","normaliz.dll","comdlg32.dll","rpcss.dll","iertutil.dll","cryptnet.dll","winhttp.dll","msimg32.dll","cabinet.dll","version.dll","KernelBase.dll","nsi.dll","t2embed.dll","wow64.dll","powrprof.dll","ieproxy.dll","mlang.dll","Wldap32.dll","cryptbase.dll","rsaenh.dll","bcrypt.dll","sechost.dll","FWPUCLNT.DLL","advapi32.dll","crypt32.dll","mshtml.dll","DWrite.dll","jscript9.dll","dhcpcsvc6.dll","mscoree.dll","dwmapi.dll","gpapi.dll","ssv.dll","msvcr90.dll","msimtf.dll","dnsapi.dll","apphelp.dll","gdi32.dll","tzres.dll","mswsock.dll","clbcatq.dll","devobj.dll","cfgmgr32.dll","uxtheme.dll","webio.dll","credssp.dll","imagehlp.dll","setupapi.dll","nlaapi.dll","ncrypt.dll","wintrust.dll","ws2_32.dll","netapi32.dll","oleaut32.dll","api-ms-win-downlevel-user32-l1-1-0.dll","msctf.dll","SwDir_1231201.dll","wship6.dll","oleacc.dll","ExplorerFrame.dll","duser.dll","propsys.dll","urlmon.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","npctrl.dll","rasadhlp.dll","mscorwks.dll","usp10.dll","rpcrt4.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","jsIntl.dll","devrtl.dll","RpcRtRemote.dll","npmproxy.dll","MSOHEV.DLL","deploy.dll","winnsi.dll","netutils.dll","ieui.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","wininet.dll","bcryptprimitives.dll","kernel32.dll","ieframe.dll","msasn1.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","api-ms-win-downlevel-version-l1-1-0.dll","VxSSL64.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","shlwapi.dll","IEShims.dll","jp2ssv.dll","wow64win.dll","profapi.dll","dhcpcsvc.dll","schannel.dll","IPHLPAPI.DLL","oleaccrc.dll","dui70.dll","d3d10warp.dll","d2d1.dll","cryptsp.dll","imm32.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","ntmarta.dll","sqmapi.dll","mscoreei.dll","user32.dll","fltLib.dll","xmllite.dll","wshqos.dll","msvcrt.dll","secur32.dll","srvcli.dll","dxgi.dll","shell32.dll","api-ms-win-core-synch-l1-2-0.dll","comctl32.dll","SensApi.dll","ole32.dll","userenv.dll","wkscli.dll","URLREDIR.DLL","d3d11.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","WindowsCodecs.dll","msvcr100.dll","wow64cpu.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"77EC63BDA74BD0D0E0426DC8F8008506","sha256":"10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"9NX5ZHBI.txt","sha256":"4883750cfbbf9e54707d5b66cad55759e324aaea54977409af60e38b2e013557","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"9T300EHX.txt","sha256":"f195be2096694bcab445c3e5c3b38243b1749fc5f5bccb1eabd953bec04da9b7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"B390OMIV.txt","sha256":"19f8e98067e2305763ce6ff7a5852357d028378a94e32eb318b78da2ef2ade91","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"SAPWNHRT.txt","sha256":"d02acc1e647000b3df34772988cdaf8e598e03eef828457dc8bd619699c57d81","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"en-US.5","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"imagestore.dat","sha256":"3e66368202cb7e23c1989ade68524d7a4dc38dbace884e118dbe2fe1e79e55d8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Cab3664.tmp","sha256":"10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"Tar3665.tmp","sha256":"c0cf8cc04c34b5b80a2d86ad0eafb2dd71436f070c86b0321fba0201879625fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"~DF8EDAA12F574D3939.TMP","sha256":"327841fb99a16c896fe0633b0f4b6882ba443198b88688e01b3ed37a46a301e2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"~DF99834FA9648F66E3.TMP","sha256":"6fb178e7625eda8186811712ca8b9db28e6887ce3dadd483a65371448f0ec977","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"~DF9C345EBD2DB777A3.TMP","sha256":"154a2131ba4c8c0d51819a99fd724a8b66f4ebd4040d44d21cff1ac6c20bc2a4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"~DFEC25F674A955D83E.TMP","sha256":"7a5db39ab3ae18af542e0d91b9f85dfd06bbdc2983aa7374c5dcbee30b52f6b0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"CountryPage~Frontpage~ModListing~Multireddit~ProfileComments~ProfileOverview~ProfilePosts~Subreddit.bd671f795d9b622b2656_1_.js","sha256":"97ab15dec226254ba271ec0a69b7149f8100b8b74d7158858140737064300bca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"TopicLinksContainer.09b9956a882940f72f3c_1_.js","sha256":"817c0755ef0ca316ac6cfd88ecbdd30d6aaa203022c54b4f18eba3dbb1667ec2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"vendors~Subreddit~SubredditWiki.c17b16c26feb8de5d65f_1_.js","sha256":"da3a0164094ec74f5729cf7786254cd8fcc2539748d152a71f00515b8718782c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Italic-5267af566ab853eb9d74db1a78a46c67-font_1_.woff","sha256":"2328dcdf67d98788b1bed8931f34e6be962d5131932efcf56259fd69c24b528b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"RecoveryStore._C7A4F1AE-D920-11E7-B48D-080027D44A30_.dat","sha256":"4d4c49f93f83266e6fb6e5de0b9317a3de3dc6934cffafae81dc5d8a4e45a879","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"ModListing~Reddit~StandalonePostPage.609f42db220b32960760_1_.js","sha256":"4619ded846339de8842cd3fe23724c911e1cc192b1f68f96862700c038c9eefd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Reddit~RichTextEditor~reddit-components-MediumPost~reddit-components-NotificationUnit-Button~removal~87f825ba.ae8c52667a9d249909eb_1_.js","sha256":"768b72cf41f7bb86b51de1d3169ccfb83caf40afd839a0251ec4458b01015101","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"Medium-1051a531d3e1ee3483a6533158557139-font_1_.woff","sha256":"0191cbe14ade1fe9c80860b60445ec6e1b2694e9dbae70ec8c886a3582ae223a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"runtime~Reddit.9946b64cf886fd27ece6_1_.js","sha256":"ebd7ca85ad315c4907481c3ad2d31c113cb4b660e278d827dd7f997b4db4a750","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Medium-1051a531d3e1ee3483a6533158557139-font_2_.woff","sha256":"0191cbe14ade1fe9c80860b60445ec6e1b2694e9dbae70ec8c886a3582ae223a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"Chat~Governance~Reddit.17220929e9b561c2ec8c_1_.js","sha256":"1f56bb6bef6584446f3dfffc4ce7c2474c97fb4c9a88e3a4acd5d7933ae27454","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font_1_.woff","sha256":"8839c1f7fe11e9d6ce78bfad758ea96e59d17dd023c16417c0a9b37c59fd81ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"vendors~CommentsPage~ModerationPages~Reddit~reddit-components-ClassicPost~reddit-components-CompactP~d737df3e.31f8d07ab88edabff736_1_.js","sha256":"e51f532d694ab3e0e4692bea409137ab47c14a4a537b1d0265bf1f500cb0b6c6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"6d8a01dc7647bc218d003b58fe04049e24a9359900b7e0cebae76edf85b8b914","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Bold-c34ba754b7235b49d33b294ff7a54179-font_1_.woff","sha256":"82ee6ea61b76edbfdb614afe2658b1709d5734a8f81147dc887b1592d6b7a8fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"CollectionCommentsPage~CommentsPage~GovernanceReleaseNotesModal~ModerationPages~PostCreation~Profile~9a5d9fab.87426fdddc9a0d064a0b_1_.js","sha256":"38ac386e69f6810081a032318222dc0627f905a315d352f5d6b89904d46720eb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"renderTimingPixel_1_.png","sha256":"5a27dfd7b6a8cec9e48d5378d5db4d66dc4215f28cc24f99ab57326011385feb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"Bold-Italic-255b4934a1f414dd312aa89382d65114-font_1_.woff","sha256":"42d5eb3c9201b3fe6861b3076e48a4fbd3211e5c5418e3f38710745c8a21a3e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"search_1_.json","sha256":"19170bd75edc0b5183a2f9fcc3001d9d222deff61e5915ad1127b65ab581a2a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"RecoveryStore._2A7E1DA7-9019-11ED-BB71-080027EA3D16_.dat","sha256":"a3b652ab0a73e03a13a027f12129f69927ec2a46b6f3d4c49101754a365e26e1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"Subreddit.607592e2503109bb28d3_1_.js","sha256":"8cf2f4e0adecc956aa339d193bbf8c75b840893aeb966c875b91445effa59696","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.da72a31c3a4852fff141_1_.js","sha256":"97dc5caedbc1a2ec037c47c1af8b71c21b37d1d2bf98b5b5fbe46d2ac7ba84c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~Frontpage~GovernanceReleaseNotesModal~ModListing~Mod~e3d63e32.e2a7d34e8242cb12ef93_1_.js","sha256":"f1f2e47a01134a93c8ca2ff181f51dc93af37434827bafc82b7c6775cf0b0743","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Governance~Reddit~Subreddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compo~bd4baca2.89ebe543629f4e1e3732_1_.js","sha256":"9ec0d62a062e20d27be08eb3eb7422eb47923d3ccbc1c28c8eb9331c8c3df338","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~GovernanceReleaseNotesModal~ModerationPages~Multired~4b0513d5.bee8bcd88bc062138209_1_.js","sha256":"309d772d41753de0db1efbc1878654771a2f4dc68caa0d917841ccdc8cba1340","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Governance~Reddit~SubredditForkingCTA.a79190015e69f4df5974_1_.js","sha256":"a91e709835da17e0fb53761240ea2acbd41c7a98c6b0cda398b7e469106e1996","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"redesignFont2020.11294ea9cfdf23995710d02e930d36d1_1_.eot","sha256":"c08e8305d604954f62d970ff1b3d5ad1854393631c1af06a666ab980baf08a5f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~FramedGild~GildModal~GovernanceReleaseNotesModal~Hap~a5d6a3b8.d6b533908ad9cb315dc7_1_.js","sha256":"cce39c6456d915d460c74436651c44ef53e6f618c6a9963e2e5c2e9f70242d43","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"CollectionCommentsPage~CommentsPage~ProfileComments~ProfileOverview~ProfilePrivate~StandalonePostPag~0596d05c.3947cde4d58b474c357c_1_.js","sha256":"9a7a6fa2c2fed563c57867d6dd7f2d62b1a095c7fa67f2985944d9baa614c502","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"_35BE3656-9019-11ED-BB71-080027EA3D16_.dat","sha256":"85c747d50e474355e829d30ed11f6e7362f6a547f756f4cf97e33fdc6f8ff539","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"tags-slim_1_.js","sha256":"848d1c2aa35fd52f8ee08a63b55c30c3bbe948f735ff72d356e7e74f45566c2e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Medium-Italic-a25d440012460eb8883e539f93040fa7-font_1_.woff","sha256":"8becec143e829ece508118aa7799e2223289d3a6a22371b3ff4163b76a2a68ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"xads_1_.js","sha256":"e82d75e2e1450f5014c9c9de58d97109ac67bf7fe3817b3941df81fe7bd07a8f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"reddit-components-LargePost.eafca3c0b64be24af3fc_1_.js","sha256":"371d3c700d8ef970e44f713f69d3a49b8c16c3516f4cac37d8f464bdfb4ff0fa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"favicon_3_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"8FO7LHS5.txt","sha256":"a136d8153740ddda321b39cd1995eee7118243be9acf64e567f307b4ce04e41e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"9DN25YGI.txt","sha256":"e7f51c4f4f5410b974ea8305fa5e14f6cc77e074481dedfdc56b081ebff14fce","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"9UD76ASX.txt","sha256":"370d20c552521e64ff59859bde59c06c086fa26ba196cadda24d42ef9d593b6f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"B7IAUQ63.txt","sha256":"21172db3a065009868b076bd27def81b32f47df1ebe6c3724170b5e912ba305e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"P4XO9MDO.txt","sha256":"51692ab42c2e1f2a8e9ddd095d3fba8d298d2bf04763eff4e9df8cf2a91e31b4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"E0968A1E3A40D2582E7FD463BAEB59CD","sha256":"68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"~DF713BBABABBC04BC3.TMP","sha256":"68e8df24ddeb7de7a1bcef8df38c4cdf0d7f11eefd7973beb86326fb4c726eef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"~DF7546F7538D7A682E.TMP","sha256":"6a756ccb22869f1e9b559ea3d8d560f0274b396a5f647133d2defd2d540cef46","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"~DF7828F07B023AA025.TMP","sha256":"dd0ffb9292349a4af63e485e85bd6d8f2c52949f86a7badffc363ff39790d9d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"~DFC6C6605532EED51A.TMP","sha256":"dc7f4723ae5834982844c9d00bc5797c0dedd0c48222161dfa16ddb8b993267e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"RecoveryStore._A38CF2E5-9014-11ED-B461-080027768EF2_.dat","sha256":"40bae77199da320e967cfc3d906ae76e4578f02fb2a43e7d76dee797c52c0d63","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Light-Italic-112953068bc678d61f4553a1184561f0-font_1_.woff","sha256":"5b4535205c590c5016abbc67fc2836984421161b62167c662c347356363e120a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"CommunityTopicSurvey.03bc392261947c6c8afc_1_.js","sha256":"83cc2b41a0106ec7a9bb903c77cf5ebdee2b2be657994066a107152acca454f7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Reddit.f66708b928dc73131e8b_1_.js","sha256":"f4a39761d8b123f77fbdbe49e5e64b1d3b81671348d8d15a40d7fa342c8922bb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"www.reddit_1_.xml","sha256":"021a5868b6c9e8beba07848ba30586c693f87ac02ee2ccaa0f26b7163c0c6b44","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compone~9b425435.375a0113e579c00c2dfb_1_.js","sha256":"afa5ca38c557f5c19dd04e37db174f93c5a250ca39a2dcd71b96a00106dc151d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Governance~ModListing~Reddit~ReportFlow.0763ea111a79409df7b2_1_.js","sha256":"9e8adc01619e4d7d785a5395652b03b984cf0b55b54b2b84786d00888bf04ee1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"vendors~PostCreation~Subreddit.e1c74d9c118cc2abc046_1_.js","sha256":"73ca220fb4c19c8770074872caa730bc3a6f316d86c68ee52809eea33003fb0e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"android-icon-192x192_1_.png","sha256":"38f250a84aeda6e0235ad20a22c846520fe976c3137c3c5fc9c5a2690b206156","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"vendors~Chat~Governance~Reddit.129ad206362dbdcb7a01_1_.js","sha256":"894ede6cafd5d9014354f548ea12ebf9b8068672cd84a209d07bdb781f8cdb69","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"CollectionCommentsPage~CommentsPage~EconTopAwardersModal~ModQueuePages~ModerationPages~PostCreation~~bca2b657.412bb7b0cc045e02f5f1_1_.js","sha256":"5d106bc58122d608fc6c95d35a75b7af8748d79c193099a460e8d8766a8d697e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"cfpchampionshiptv_1_.htm","sha256":"02a4787ff0f89277acddbfd04f52fa20f7351a7f1eb995e86f659969ae2d7d04","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"eb24a70c4b395aec773f15ffef74cf22bbb55463e980a5aa55767cd973fc0217","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"vendors~Reddit.b93221cb0f1f88012911_1_.js","sha256":"7214b6a37128b72a4dc1d0c800eecb802ed40083526e37a81cff4e9075a918fa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]}],"files_written":[{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\H3XVNPGD\\favicon[1].png","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\H3XVNPGD\\favicon[2].png","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\H3XVNPGD\\favicon[3].png","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\H3XVNPGD\\favicon[4].png","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\H3XVNPGD\\favicon[5].png","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\H3XVNPGD\\favicon[6].png","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\H3XVNPGD\\favicon[7].png","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\H3XVNPGD\\favicon[8].png","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\H3XVNPGD\\favicon[9].png","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\H3XVNPGD\\favicon[10].png","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\H3XVNPGD\\favicon4SEQBUU2.png","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%TEMP%\\~DF8EDAA12F574D3939.TMP","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{846EE342-7039-11DE-9D20-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{C3450F58-7060-4AEA-B0A0-C245927D78D0}","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{2A7E1DA9-9019-11ED-BB71-080027EA3D16}.dat","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%TEMP%\\~DFEC25F674A955D83E.TMP","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\1C8Y98H0\\android-icon-192x192[1].png","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{A38CF2E7-9014-11ED-B461-080027768EF2}.dat","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%TEMP%\\~DF713BBABABBC04BC3.TMP","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9DN25YGI.txt","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\renderTimingPixel[1].png","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Bold-c34ba754b7235b49d33b294ff7a54179-font[1].woff","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Bold-c34ba754b7235b49d33b294ff7a54179-font[2].woff","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font[1].woff","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\Italic-5267af566ab853eb9d74db1a78a46c67-font[1].woff","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\E0968A1E3A40D2582E7FD463BAEB59CD","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{ADECEE88-9014-11ED-B461-080027768EF2}.dat","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{A38CF2E5-9014-11ED-B461-080027768EF2}.dat","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%TEMP%\\~DFC6C6605532EED51A.TMP","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\vendors~CommentsPage~ModerationPages~Reddit~reddit-components-ClassicPost~reddit-components-CompactP~d737df3e.31f8d07ab88edabff736[1].js","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Governance~Reddit~Subreddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compo~bd4baca2.89ebe543629f4e1e3732[1].js","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\Governance~Reddit.fdce17c2c6da22d8861a[1].js","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\vendors~Subreddit~SubredditWiki.c17b16c26feb8de5d65f[1].js","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\CollectionCommentsPage~CommentsPage~CountryPage~GovernanceReleaseNotesModal~ModerationPages~Multired~4b0513d5.bee8bcd88bc062138209[1].js","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Medium-1051a531d3e1ee3483a6533158557139-font[1].woff","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Bold-Italic-255b4934a1f414dd312aa89382d65114-font[1].woff","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\Subreddit.607592e2503109bb28d3[1].js","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\CommunityTopicSurvey.03bc392261947c6c8afc[1].js","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\CollectionCommentsPage~CommentsPage~CountryPage~Frontpage~GovernanceReleaseNotesModal~ModListing~Mod~e3d63e32.e2a7d34e8242cb12ef93[1].js","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\Bold-c34ba754b7235b49d33b294ff7a54179-font[1].woff","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[4].ico","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"key":"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\CRYPTOGRAPHY\\CATALOGDB\\","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"key":"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\TCPIP\\PARAMETERS\\","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\AC-1F-6B-0D-DB-84\\","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\P3P\\HISTORY\\","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f14_ConnHashTable<3860>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f14_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f14_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"IsoScope_f14_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"IsoScope_f14_ConnHashTable<3860>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"IsoScope_f14_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"IsoScope_f14_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3860","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"IsoScope_f14_IE_EarlyTabStart_0xc88_Mutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f14_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f14_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\https://www.reddit.com/","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"IsoScope_f14_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Local\\https://www.reddit.com/","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"63bc14890fa60c714e6e29ac"},{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_fa8_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_4008","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"IsoScope_fa8_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"IsoScope_fa8_IE_EarlyTabStart_0xd4c_Mutex","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"IsoScope_fa8_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"IsoScope_fa8_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"IsoScope_fa8_ConnHashTable<4008>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_4008","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_fa8_IE_EarlyTabStart_0xd4c_Mutex","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_fa8_ConnHashTable<4008>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_fa8_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_fa8_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"IsoScope_fa8_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_fa8_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"63bc0eb755e37a51ca47e531"}]}]}},"report_ids":{"sandbox_job_ids":["63bc0eb755e37a51ca47e531","63bc14890fa60c714e6e29ac"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Malicious Sample 1b950d1ab5c0… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 1b950d1ab5c0…. Threat score 100/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/1b950d1ab5c06c7f1f067f13140692c4d85a9d24d4af1e8421dca49f0000137c"}],["$","meta","4",{"property":"og:title","content":"Malicious Sample 1b950d1ab5c0… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 1b950d1ab5c0…. Threat score 100/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/1b950d1ab5c06c7f1f067f13140692c4d85a9d24d4af1e8421dca49f0000137c"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Sample 1b950d1ab5c0… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 1b950d1ab5c0…. Threat score 100/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2b","11",{}]]