26:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 2a:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 25:T4b0,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic Sample 276f58fe4bc0… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 276f58fe4bc0…. Malware family: Trojan.Generic. Threat score 100/100. 17/28 AV engines flagged this file. 3 malicious and 12 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba","keywords":["Malicious","Trojan.Generic","malware analysis","sandbox report","threat intelligence","276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba"],"about":{"@type":"SoftwareApplication","name":"Honest_Sample_5ba9de6582a2310f11e02217.exe","applicationCategory":["peexe","assembly","executable"],"identifier":"276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.Generic","antivirusDetections":{"malicious":17,"total":28},"behavioralIndicators":{"malicious":3,"suspicious":12},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T623,".exe" touched file "C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll" ".exe" touched file "C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll" ".exe" touched file "C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll" ".exe" touched file "C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll" ".exe" touched file "C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll" ".exe" touched file "C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll" ".exe" touched file "C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll" ".exe" touched file "C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config" ".exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" ".exe" touched file "C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\51e2934144ba15628ba5a31be2dae7dc\mscorlib.ni.dll.aux" ".exe" touched file "C:\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll" ".exe" touched file "C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\d1265d6159ea876f9d63ea4c1361b587\mscorlib.ni.dll.aux" ".exe" touched file "C:\Windows\assembly\pubpol47.dat" ".exe" touched file "C:\Windows\assembly\NativeImages_v4.0.30319_32\System\250e8e6af918e7ca66787117bc8633e3\System.ni.dll.aux" ".exe" touched file "C:\Windows\Microsoft.NET\Framework\v4.0.30319\sortdefault.nlp"28:T9dd,".exe" opened "C:\MSOCache\All Users\{90140000-0012-0000-0000-0000000FF1CE}-C\Office64WW.msi" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0012-0000-0000-0000000FF1CE}-C\Office64WW.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0012-0000-0000-0000000FF1CE}-C\ose.exe" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0012-0000-0000-0000000FF1CE}-C\osetup.dll" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0012-0000-0000-0000000FF1CE}-C\PidGenX.dll" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0012-0000-0000-0000000FF1CE}-C\setup.exe" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0012-0000-0000-0000000FF1CE}-C\Setup.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0012-0000-0000-0000000FF1CE}-C\StandardWW.msi" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0012-0000-0000-0000000FF1CE}-C\StandardWW.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0016-0409-0000-0000000FF1CE}-C\ExcelMUI.msi" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0016-0409-0000-0000000FF1CE}-C\ExcelMUI.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0016-0409-0000-0000000FF1CE}-C\Setup.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\PowerPointMUI.msi" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\PowerPointMUI.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\Setup.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0019-0409-0000-0000000FF1CE}-C\PublisherMUI.msi" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0019-0409-0000-0000000FF1CE}-C\PublisherMUI.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0019-0409-0000-0000000FF1CE}-C\Setup.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-001A-0409-0000-0000000FF1CE}-C\OutlookMUI.msi" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-001A-0409-0000-0000000FF1CE}-C\OutlookMUI.xml" with delete access29:T400,AAABAAEAICAQAAAAAADoAgAAFgAAACgAAAAgAAAAQAAAAAEABAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAERERAAAAAAAAAAAAAAAAERF3kREAAAAAAAAAAAAAARiIiHcXEQAAAAAAAAAAABGHd4iIiHcQAAAAAAAAAAEYiHd3iIiIcRAAAAAAAAABGId3d3j/iIiBAAAAAAAAEYh3d3d3+HGZiBEAAAAAABeId3d3d3d3cRd3EAAAAAEYh4F3d3d3d3dxF4EAAAABGIiIV3d3d3d3dxF3EAAAEYiIhxh3d3d3d3cRmIEQABGIiIiHiIh3d3d3F4cREAARiIiIhYiIiId3dYcRERAAF4iIiIGHiIiIiHgRAAAAABiIiIiBiHeIiIiBEAAAAAAYiIiIiIiBEXd4gQAREAABGIiIiIiBiIiIiBEAEQAAARj4iIiIGIiIiIgQARAQAAEY+IiIiIiIiIiBAAEAEAABH/iIiPGIiIiIgQARARAAAX/4iIj/iIiIiBEAAAEQAAGP///4+IiIiIgQAAAAAAABj/////+IiIiIEAAAAAAAAY///////4iIgRAAAAAAAAGP///////4iIEAAAAAAAABH//////////xAAAAAAAAABEf////////gQAAAAAAAAAAERGP/////xEAAAAAAAAAAAAAERf///8QAAAAAAAAAAAAAAABERj/EAAAAAAAAAAAAAAAAAARERAAAAAAAAD+AD//+AAP//AAA//gAAH/wAAA/4AAAD+AAAAfgAAAD4AAAAPgAAAB4AAAAMAAAADAAAAAwAAAAMAAAB/AAAAngAAAR4AAAIOAAACDgAABA4AAASeAAAPngAAD/4AAA/+AAAf/gAAH/4AAB//AAAf/8AAP//8AD///4A////wP/w==1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1790508424809,"unified_at":"2026-09-27T11:27:04.809Z","metadata":{"hashes":{"sha256":"276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba","sha1":"ba4cd342ac7645d755b033f7e335d3d82d1a80e9","md5":"98a9d3fe8f64e5d34d143ed5a6b73eb0","sha512":"c929e6207a47577c357e566849543c3708500ded0a69971589f646f0eec9118431121e6da6bd120a3edd92d346289c9b9e47a768d676e0d1cec59be49af06301","ssdeep":"12288:7oj/yr31b+PueTGKA6zqirj6SJNPSOLj+mpzGNVroHle4TYEciCeiwm:EoaPuezA6zd79zpyD8nlciCenm","ssdeep_chunks":["12288:7oj/yr3","12288:oj/yr31","12288:j/yr31b","12288:/yr31b+","12288:yr31b+P","12288:r31b+Pu","12288:31b+Pue","12288:1b+PueT","12288:b+PueTG","12288:+PueTGK","12288:PueTGKA","12288:ueTGKA6","12288:eTGKA6z","12288:TGKA6zq","12288:GKA6zqi","12288:KA6zqir","12288:A6zqirj","12288:6zqirj6","12288:zqirj6S","12288:qirj6SJ","12288:irj6SJN","12288:rj6SJNP","12288:j6SJNPS","12288:6SJNPSO","12288:SJNPSOL","12288:JNPSOLj","12288:NPSOLj+","12288:PSOLj+m","12288:SOLj+mp","12288:OLj+mpz","12288:Lj+mpzG","12288:j+mpzGN","12288:+mpzGNV","12288:mpzGNVr","12288:pzGNVro","12288:zGNVroH","12288:GNVroHl","12288:NVroHle","12288:VroHle4","12288:roHle4T","12288:oHle4TY","12288:Hle4TYE","12288:le4TYEc","12288:e4TYEci","12288:4TYEciC","12288:TYEciCe","12288:YEciCei","12288:EciCeiw","12288:ciCeiwm","24576:7oj/yr3","24576:oj/yr31","24576:j/yr31b","24576:/yr31b+","24576:yr31b+P","24576:r31b+Pu","24576:31b+Pue","24576:1b+PueT","24576:b+PueTG","24576:+PueTGK","24576:PueTGKA","24576:ueTGKA6","24576:eTGKA6z","24576:TGKA6zq","24576:GKA6zqi","24576:KA6zqir","24576:A6zqirj","24576:6zqirj6","24576:zqirj6S","24576:qirj6SJ","24576:irj6SJN","24576:rj6SJNP","24576:j6SJNPS","24576:6SJNPSO","24576:SJNPSOL","24576:JNPSOLj","24576:NPSOLj+","24576:PSOLj+m","24576:SOLj+mp","24576:OLj+mpz","24576:Lj+mpzG","24576:j+mpzGN","24576:+mpzGNV","24576:mpzGNVr","24576:pzGNVro","24576:zGNVroH","24576:GNVroHl","24576:NVroHle","24576:VroHle4","24576:roHle4T","24576:oHle4TY","24576:Hle4TYE","24576:le4TYEc","24576:e4TYEci","24576:4TYEciC","24576:TYEciCe","24576:YEciCei","24576:EciCeiw","24576:ciCeiwm","12288:EoaPuez","12288:oaPuezA","12288:aPuezA6","12288:PuezA6z","12288:uezA6zd","12288:ezA6zd7","12288:zA6zd79","12288:A6zd79z","12288:6zd79zp","12288:zd79zpy","12288:d79zpyD","12288:79zpyD8","12288:9zpyD8n","12288:zpyD8nl","12288:pyD8nlc","12288:yD8nlci","12288:D8nlciC","12288:8nlciCe","12288:nlciCen","12288:lciCenm"],"imphash":"f34d5f2d4577ed6d9ceec516c1f5a744"},"file_info":{"file_name":"Honest_Sample_5ba9de6582a2310f11e02217.exe","file_type":["peexe","assembly","executable"],"file_type_id":".NET exe","file_size":970240,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1538658311000,"last_seen":1676814612000,"last_multi_scan":1676814612000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":null},"stats":{"av":{"malicious_count":17,"suspicious_count":0,"total_engines":28},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":5},"sandbox_signatures":{"informative_count":9,"suspicious_count":12,"malicious_count":3,"total":24},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"malicious","threat_name":"Trojan/Win32.Ransomlock","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"malicious","threat_name":"TR/Ransom.eginz","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"malicious","threat_name":"Gen:Variant.Ransom.Jigsaw.33","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"malicious","threat_name":"Win.Malware.Zusy-6934601-0","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"malicious","threat_name":"win/malicious_confidence_100% (W)","status":"malicious","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cyren":{"name":"Cyren","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Gen:Variant.Ransom.Jigsaw.33 (B)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"malicious","threat_name":"Trojan/Generic!ACD1045B98CFA070","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"malicious","threat_name":"Trojan ( 004de29f1 )","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"malicious","threat_name":"HEUR:Trojan-Ransom.MSIL.Crypren.gen","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"microsoftdefender":{"name":"Microsoft Defender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Ransom.fhrceq","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"malicious","threat_name":"Ransom_.5F48D7C9","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"malicious","threat_name":"Ransom_.5F48D7C9","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Ransom.FUG","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"malicious","threat_name":"TrojanRansom.MSIL.Crypren","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"webrootsmd":{"name":"Webroot SMD","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"malicious","threat_name":"Trojan.GenericKD.Win32.202604","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Trojan.Generic","sources":[{"report_type":"quickscan","report_id":""}]}]},"mitre_attacks":[{"tactic":"Persistence","technique":"Kernel Modules and Extensions","attack_id":"T1215","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1215","identifiers":[{"type":"informative","value":"Opens the Kernel Security Device Driver (KsecDD) of Windows"}],"sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"tactic":"Discovery","technique":"Peripheral Device Discovery","attack_id":"T1120","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","identifiers":[{"type":"informative","value":"Queries volume information"}],"sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"tactic":"Discovery","technique":"Process Discovery","attack_id":"T1057","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1057","identifiers":[{"type":"suspicious","value":"Queries process information"}],"sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","identifiers":[{"type":"suspicious","value":"Reads the active computer name"},{"type":"suspicious","value":"Reads the cryptographic machine GUID"},{"type":"suspicious","value":"Reads information about supported languages"}],"sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"tactic":"Exfiltration","technique":"Data Compressed","attack_id":"T1002","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1002","identifiers":[{"type":"informative","value":"Matched Compiler/Packer signature"}],"sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]}],"sandbox_signatures":[{"level":"informative","category":"Environment Awareness","name":"Queries volume information","description":"\".exe\" queries volume information of \"%WINDIR%\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\mscorlib.dll\" at 00030342-00002664-0000010C-13237251216\n \".exe\" queries volume information of \"\\REGISTRY\\MACHINE\\SOFTWARE\\Microsoft\\Ole\" at 00030342-00002664-0000010C-18701547835\n \".exe\" queries volume information of \"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\System.Core\" at 00030342-00002664-0000010C-27246903826\n \".exe\" queries volume information of \"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\System.Core\" at 00030342-00002664-0000010C-27298714466","origin":"API Call","mitre_attack_id":"T1120","relevance":2,"id":"api-11","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"23.54.112.217:80\"\n \"195.176.255.73:80\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\IT.Books\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"informative","category":"General","name":"Loads the .NET runtime environment","description":"\".exe\" loaded module \"%WINDIR%\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\mscorlib.dll\" at 69A00000\n \".exe\" loaded module \"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\d1265d6159ea876f9d63ea4c1361b587\\mscorlib.ni.dll\" at 68EA0000","origin":"Loaded Module","id":"module-3","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"informative","category":"Installation/Persistance","name":"Connects to LPC ports","description":"\".exe\" connecting to \"\\ThemeApiPort\"","origin":"API Call","relevance":1,"id":"api-16","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"\"Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll\" has type \"data\"\n \"AXE8SharedExpat.dll\" has type \"data\"\n \"Test2.doc\" has type \"data\"\n \"IACOM2.DLL\" has type \"data\"\n \"jli.dll\" has type \"data\"\n \"MSOEURO.DLL\" has type \"data\"\n \"goopdateres_et.dll\" has type \"data\"\n \"goopdateres_uk.dll\" has type \"data\"\n \"jabswitch.exe\" has type \"data\"\n \"goopdateres_ta.dll\" has type \"data\"\n \"Eula.exe\" has type \"data\"\n \"extensibility.dll\" has type \"data\"\n \"java_crw_demo.dll\" has type \"data\"\n \"SmartTagInstall.exe\" has type \"data\"\n \"EXP_XPS.DLL\" has type \"data\"\n \"npGoogleUpdate3.dll\" has type \"data\"\n \"hxdsui.dll\" has type \"data\"\n \"ViewerPS.dll\" has type \"data\"\n \"VsLogP.dll\" has type \"data\"\n \"OSPPCEXT.DLL\" has type \"data\"","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"informative","category":"Installation/Persistance","name":"Touches files in the Windows directory","description":"$27","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"informative","category":"System Security","name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\".exe\" opened \"\\Device\\KsecDD\"","origin":"API Call","mitre_attack_id":"T1215","relevance":10,"id":"api-37","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"informative","category":"Unusual Characteristics","name":"Matched Compiler/Packer signature","description":"\"276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba.bin\" was detected as \"Microsoft visual C# v7.0 / Basic .NET\"","origin":"Static Parser","mitre_attack_id":"T1002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"suspicious","category":"Anti-Detection/Stealthyness","name":"Queries kernel debugger information","description":"\".exe\" at 00030342-00002664-00000105-19783381188","origin":"API Call","relevance":6,"id":"api-10","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"suspicious","category":"Anti-Detection/Stealthyness","name":"Queries process information","description":"\".exe\" queried SystemProcessInformation at 00030342-00002664-00000105-27006541953","origin":"API Call","mitre_attack_id":"T1057","relevance":4,"id":"api-9","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"suspicious","category":"Anti-Reverse Engineering","name":"Creates guarded memory regions (anti-debugging trick to avoid memory dumping)","description":"\".exe\" is allocating memory with PAGE_GUARD access rights","origin":"API Call","relevance":10,"id":"api-1","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"suspicious","category":"Anti-Reverse Engineering","name":"PE file has unusual entropy sections","description":".text with unusual entropies 7.66017457194","origin":"Static Parser","relevance":10,"id":"static-6","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the active computer name","description":"\".exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":5,"id":"registry-35","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the cryptographic machine GUID","description":"\".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":10,"id":"registry-1","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"suspicious","category":"General","name":"Reads configuration files","description":"\".exe\" read file \"C:\\$Recycle.Bin\\S-1-5-21-4162757579-3804539371-4239455898-1000\\desktop.ini\"\n \".exe\" read file \"%PROGRAMFILES%\\desktop.ini\"\n \".exe\" read file \"%PROGRAMFILES%\\Adobe\\Reader 11.0\\Reader\\AGMGPUOptIn.ini\"\n \".exe\" read file \"%PROGRAMFILES%\\Adobe\\Reader 11.0\\Reader\\Legal\\DEU\\eula.ini\"\n \".exe\" read file \"%PROGRAMFILES%\\Adobe\\Reader 11.0\\Reader\\Legal\\ENU\\eula.ini\"","origin":"API Call","relevance":4,"id":"api-6","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 23.54.112.217 on port 80 is sent without HTTP header\n TCP traffic to 195.176.255.73 on port 80 is sent without HTTP header","origin":"Network Traffic","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"The input sample dropped very many files","description":"The input sample dropped 657 files (often an indicator for ransomware)","origin":"Binary File","relevance":5,"id":"binary-10","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"suspicious","category":"System Destruction","name":"Opens file with deletion access rights","description":"$28","origin":"API Call","relevance":7,"id":"api-25","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Input file contains API references not part of its Import Address Table (IAT)","description":"Found string \"GetCurrentProcess\" (Source: 276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba.bin, API is part of module: KERNELBASE.DLL)\n Found string \"DriveType\" (Source: 276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba.bin, API is part of module: SHELL32.DLL)\n Found string \"NtQueryInformationProcess\" (Source: 276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba.bin, API is part of module: NTDLL.DLL)\n Found string \"NtSetInformationProcess\" (Source: 276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba.bin, API is part of module: NTDLL.DLL)\n Found string \"CloseHandle\" (Source: 276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba.bin, API is part of module: KERNELBASE.DLL)\n Found string \"IsDebuggerPresent\" (Source: 276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba.bin, API is part of module: KERNELBASE.DLL)","origin":"File/Memory","relevance":10,"id":"string-64","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Reads information about supported languages","description":"\".exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":3,"id":"registry-25","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by a large number of Antivirus engines","description":"47/68 Antivirus vendors marked sample as malicious (69% detection rate)","origin":"External System","relevance":10,"id":"avtest-3","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by at least one Antivirus engine","description":"47/68 Antivirus vendors marked sample as malicious (69% detection rate)","origin":"External System","relevance":8,"id":"avtest-0","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"level":"malicious","category":"Ransomware/Banking","name":"The analysis extracted a known ransomware file","description":"Found dropped filename \"_ReadMe_.txt\" which has been seen in the context of ransomware (Indicator: README_.txt)","origin":"Binary File","relevance":5,"id":"binary-9","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]}],"incidents":[{"name":"Ransomware","details_count":1,"details":[{"detail":"The analysis extracted a known ransomware file"}],"sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Fingerprint","details_count":2,"details":[{"detail":"Reads the cryptographic machine GUID"},{"detail":"Reads the active computer name"}],"sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]}]},"activity":{"stats":{"process_count":1,"spawned_processes_count":1,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":1,"imported_dlls_count":43,"dropped_files_count":0,"extracted_files_count":426,"files_written_count":365,"files_deleted_count":0,"registry_keys_created_count":5,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":5,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":2,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","TOR analysis"],"sandbox_reports":[{"id":"5bb610067ca3e16a6d292163","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"malware_family":"Trojan.Generic","contacted_countries":["CHE","USA"],"submit_name":"Honest_Sample_5ba9de6582a2310f11e02217.exe","analysis_start_time":"2018-10-04T08:05:40+00:00","indicators_count":{"informative":9,"suspicious":12,"malicious":4},"tags":["Network Traffic","Extracted Files","TOR analysis"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"23.54.112.217","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"address":"195.176.255.73","port":80,"protocol":"TCP","country":"Switzerland","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]}],"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}],"processes":[{"pid":2664,"ppid":0,"name":"276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba.exe","command_line":"","sha256":"276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba","normalized_path":"C:\\276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba.exe","uid":"00030342-00002664","icon":"$29"}],"all_imported_dlls":["msctf.dll","nlssorting.dll","msvcrt.dll","rpcrt4.dll","uxtheme.dll","shell32.dll","WindowsCodecs.dll","dwmapi.dll","bcrypt.dll","ntdll.dll","KernelBase.dll","advapi32.dll","mscoreei.dll","clr.dll","msvcr120_clr0400.dll","cryptsp.dll","kernel32.dll","lpk.dll","usp10.dll","mscorlib.dll","System.ni.dll","profapi.dll","rsaenh.dll","System.Windows.Forms.ni.dll","shlwapi.dll","sspicli.dll","GdiPlus.dll","System.Core.ni.dll","gdi32.dll","cryptbase.dll","System.Drawing.ni.dll","mscorrc.dll","version.dll","sechost.dll","clrjit.dll","user32.dll","mscorlib.ni.dll","ole32.dll","oleaut32.dll","System.Windows.Forms.dll","comctl32.dll","mscoree.dll","imm32.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"GoogleUpdateSetup.exe","sha256":"16e4c2f4067cc23f150b3464e1ce6e570d99484907aba6e521e6d5b33565a3f5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AiodLite.dll","sha256":"1d2888518aa1449fea864f634e9ba0e9c63310c9b1f7ddef0f9ac4d7d50656d0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Liesmich.htm","sha256":"bc0aeaa6ef48d2269f524e20c9b28446b704a33970b96142f38fc7891babc1d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ReadMe.htm","sha256":"650550ac9bf40c6b8b1b2e456311187027f69ebf0f5bb1189df051318e4b30ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"A3DUtils.dll","sha256":"901832575e40801451c6c21ada03555f3f28fdc67d80262ef88ca91502e249d0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACE.dll","sha256":"aa285e303a17b2b61edd3c80d5174c0b6cc078f41ff0fe210c161e0aed37c3dc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AGM.dll","sha256":"ab3fdac9d6f7be48867fbce12b8fe716dabd497bca106d22bd34da3527ab9c98","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AGMGPUOptIn.ini","sha256":"8829f08bf5b30688b7af3cd57b89dc3dcd4a292f747b9ec83ea9141fdaa2ede4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AXE8SharedExpat.dll","sha256":"c8940f43ad6b767347324a4282a05c9927af9774044d9deea61d2317c2dc7579","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AXSLE.dll","sha256":"937868735013df3564a8de65a119052ac3e519a01ceb3a5b9c5f0f21d3188998","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AcroBroker.exe","sha256":"5f29478b8cceb768bec6bcb854ffba66742413a430e49d546370cab55a696f88","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AcroExt.exe","sha256":"74c5f67b5ab1435c5453ad66b2a5ca8349590c64c137314617eda786f7447985","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AcroRd32.exe","sha256":"941926555d6925d6b2949540c4afad4cb57980c429baa4a77457de63565e0500","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AcroRd32Info.exe","sha256":"8135f8c309a4547172f1f5f0ea3bbe3f49400ad508370006ffa38df74980a1f9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AcroRdIF.dll","sha256":"b5e8a575d89ce1be104749d7924085a798bd5adb4afdc8c2a193022722aa06ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AcroTextExtractor.exe","sha256":"90ae81e830791c9f5ca163d5906b0717bc804b7c2b40bd7f4491da5dcb96ef09","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Acrofx32.dll","sha256":"01dbd862ed605b72a211bb9091bfbc0c8c7d4104aae763cba380f656bec41986","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AdobeCollabSync.exe","sha256":"0e40034ab620e26b22fedec8d503d023fca43a5f0c19d0a2f1eecd7004247e0d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AdobeLinguistic.dll","sha256":"7ce7ad1a1cecf2c30ee17103e0bf8af05279697d55b8236085ff9e9b83b6278c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AdobeXMP.dll","sha256":"62574263712660d4dc73a018344346677b4b6b6a1a6317a401a5b8201421819a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"BIB.dll","sha256":"839278806581681df32b6a0ac645f1a2238351c62002a4bff2bd8e6ca7e5b83c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"BIBUtils.dll","sha256":"a7dbfe3b09a1085715b89d2429a1a4c1dc1311f1392fcce9751a4b89184070d2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"nppdf32.dll","sha256":"6319fedc4cda2ccc6979c05c30710a06112b822cd3e753aee0e9508cd280d67d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"CoolType.dll","sha256":"d09c9e3d350d29cf5bedfba8ed8ba8182ac5e6eef33b7c651444e9c12cec08b8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Eula.exe","sha256":"9dc13e917abeadc5ce1eaeb4daa9f5439cbea56fe901a2e1c34009bf1e71a923","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ExtendScript.dll","sha256":"9e32bfa2773d99f047c2272c54f7d50753833774820169c31c0bc341482d1153","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"JP2KLib.dll","sha256":"2e5d47ed53d35b211dd997703bb409bb771d852acddadaf95378dd537608a16b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"LogTransport2.exe","sha256":"2895bfee79d5cc8b1a66202d8f45d7321135aad342491f44dd9bed03c2e0f34b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Onix32.dll","sha256":"43152d1b0812088f4cd4010c7924a96852a19c1fb010dd662087e05d3bbdea86","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"PDFPrevHndlr.dll","sha256":"28e73f4a35eed8d50e530f0f3b6724da050f9691fea3dd9ed612ea16f8308acc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ScCore.dll","sha256":"79116ecd537046a74268dbf57772a8f68a604f1120629023ca9da89820e3b0db","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ViewerPS.dll","sha256":"a6d434f540347021de9dad53339d91bf290ecae1347878bfec0a16ca17710663","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"adoberfp.dll","sha256":"cc3f4faee14857ece3858f8ecc3900ed8bbe8f63b739a855b27bb8e29e29bed0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ahclient.dll","sha256":"2d5d8d1ce6b9c1928452c5275b6123f07e0f775fd3533e9d1efab63d7545a566","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"arh.exe","sha256":"dd75330a404bc9006eabf3d620e768ddeda8628d70790284f6491f1450fa087f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ccme_asym.dll","sha256":"c0b457eb15ae948db4c116d10838c67e72ee38bf9e18020f0012496a8872e1d2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ccme_base.dll","sha256":"8129f2b8542f8b428825749a1f0b307a0e2de69cba915df59db3fbe29aea09ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ccme_base_non_fips.dll","sha256":"ad672dcdaa19602bed555fe3f935267d58443b6f3939e81ee835a12c7aab3f9d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ccme_ecc.dll","sha256":"4292fbb49a71b62bb11ea798251afcf73cbab12c5d657c8e43545db4b14b0444","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ccme_ecdrbg.dll","sha256":"6fe682059f72d522c714e062ba8c5e24f290fb1b74af16d499af2cdd441a42c1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"cryptocme.dll","sha256":"29f03cb570f8e342b77dcc15c4eb206892b88689461f54e26c6788b353b754d9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"icucnv40.dll","sha256":"8e3514d2481ef79dfcc322abe7661e06288afbea089a1d7273a7a33b4ef5ce4a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"icudt40.dll","sha256":"ee0dea32f614151d390c1d59e6c59e14fcecfb9d1a3907af095af62ae580478c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"logsession.dll","sha256":"0685e2bde7b553ec3f1c4d65aa86ab289fdc23157a833852da87b2e1d2945d46","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"pe.dll","sha256":"fc99030e3f0e05a35e26f454fab34cb5b290f31153365be42e0d0bc7ad018afa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"reader_sl.exe","sha256":"e524153cf2ac1a24decbc6cd90e87ab599bc919f8d5c6bb5a66bb0d88b5d4000","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"rt3d.dll","sha256":"8f60692be22aa2e996e997529a8d79834d50ba853f721ad6edbfa3d984591f8a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"sqlite.dll","sha256":"1b2b3f463b842f3636a711886b90835be81feccd544b67ba58428a619f7ffcf4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"wow_helper.exe","sha256":"d6c00bf0a5d54354711d0749e3bb1e707316048b9a8582922987f7d5c77c01de","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Office64WW.msi","sha256":"8cea1b625d4efa753ac1d4122fd9d471621f540f05c5100056d492123e959c38","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"PidGenX.dll","sha256":"d9eca0b693cfd03a18bee58c66d62b83324bc492ac679af3936896f3dda2867f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ose.exe","sha256":"e6d0f471a2f07c0d09247f5ce06a230a0dde5b686ec846743c5045cdfaca2f6c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"setup.exe","sha256":"14befee19ace7d2acedfa1b7a705cc81f532b1188b9367209e72f61606cac41b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ExcelMUI.msi","sha256":"f2ed5d1c25d7112c8c16bb9b1b9bffb50a9c03a56e894befd2a170a82ddfbb88","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"PowerPointMUI.msi","sha256":"1c5327c00346f1717d0cfc492fe40a84ab29345ec028e07105b55b448d83fc34","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"PublisherMUI.msi","sha256":"34b65c1389814101f1897bf7a60469f8c394080e723eae6bcc34385a1e86d3a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OutlookMUI.msi","sha256":"96c14cb2d77f52444e899faef13e8fe136b553b928be29b092d7d04262510a0d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"WordMUI.msi","sha256":"f7da757392ba3aae7e251c780ccc9061df06c5b3cc912d1c34366c3f2429fc40","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Proof.msi","sha256":"94ba5b0d9d018391bc82393da29b918c89e3c3fcc74c973a993d39786f4f86ce","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Proofing.msi","sha256":"277e316c23cd9571741c2ee30046dbd219fc8cd8dd58f1f137833ce01c2e2aea","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OneNoteMUI.msi","sha256":"0005d6d1cd2defa06cf0857fc4b5c55470e560abbb3a48c6175adacc2fdb3a6d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"dwintl20.dll","sha256":"3b588e15517b78d1c97b8e2dc931607d35291ff6c62776ccad8faccd5c570c15","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"DW20.EXE","sha256":"5e3ede7a356396cbe110d6dfa6c908c80ba98770a3c700fba5effed068aaa5b5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OfficeMUI.msi","sha256":"1b3bba516a2570f1c5fa31b148629f62162afdf29c65f453976771ecaa56835b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OfficeMUISet.msi","sha256":"c3542712e70e57f4d536be0f1e90425db555db9d6ba0544943a89f2401b2222d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"dwdcw20.dll","sha256":"a69bb19c8c7ea4033f8076fac1df49c228278bb258fb4045306942c13006e137","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"dwtrig20.exe","sha256":"ef30607fd9bd9b816fb05bf5afc942b7be8947a2f601d275754d5a670c49ba94","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"msvcr90.dll","sha256":"ab8acc08f633fa9fb4607ed1d76d468652a5c47256c37d6b4276bb280548cd8a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"osetupui.dll","sha256":"7e8f56d937d62e8b25f6f5ca9fb256bdfe2479cfb4e014b360c02369cd6f081e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll","sha256":"57b42918ddd0ec45eee5722c5f2800899a96f4feadf735bdb281d7dbca874f79","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Test2.doc","sha256":"3e64a3cc52917b5772704e392a8c4225196f5c79714ac35065ce90f3c2d476da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"IACOM2.DLL","sha256":"c0bc060350c2daf30fc368953f5112fafa105c2a5be1473846ed46e19240a62b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jli.dll","sha256":"a1eefe90ce85ea19ede095291187fd8d1072a170e19bc96afef4e266b25c4d47","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSOEURO.DLL","sha256":"b067aac80d001ded896279a89874af67ceaeaad521f0d56e26c4386d4c7d7961","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_et.dll","sha256":"264326e548ff5081650789e7d78752210eda9f77a493e5e27e71ddb19a31038f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_uk.dll","sha256":"669a8bfb197644a9a556a8845b46e634698daac917e424e3331caa40af0b71c1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jabswitch.exe","sha256":"7d68586be7cd3dafb6bededd2545d153260e054466856b00182cc3706f247803","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_ta.dll","sha256":"1319458a2747d376d63b98ce88cabc0e7fdb59bd637d4a7c9c60eb7038b89a15","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"extensibility.dll","sha256":"f55f5b8a20fea35dd1f97fd05ed6ace698f037ccf70a3f7d8c93b22464aa635d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"java_crw_demo.dll","sha256":"54f2d0dac441617d551d16f312a172d32daeaaef116aa40feb23af36cdc36700","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"SmartTagInstall.exe","sha256":"9a86cbec24a6968e0bf79ff92135b32e45b67ef3d08d767b69db125559bb9a65","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"EXP_XPS.DLL","sha256":"5d2a43964f9a05792ee0e8a16ec4f049bcf4fea7954e6ed5dd397def3ea7309f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"npGoogleUpdate3.dll","sha256":"ded8a35265bc4f0f71a0af41058bfe49ef345b86475b843c73bc93dfc6321211","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"hxdsui.dll","sha256":"b26ff2faacaebee2d5072163429fc713b5773f197f89713f5c9de0b274438bc1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"VsLogP.dll","sha256":"eb3436cb74de528b738127bbba482dae36e665382af4caa97e36cf465af92b29","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OSPPCEXT.DLL","sha256":"7d344bb928d30676186289d23ca2f422c37706185de105449520a8fda97c163a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_hi.dll","sha256":"b0afedc3f63fd8d7c1ee03a79e1b7ac054d21576a7131d0f2cc2a34144a92c9f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSOXEV.DLL","sha256":"c26b2d4c1e4a64415ad76049d40a3a1e616e1afaa06fe14070531b1bfb24bcf6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_fil.dll","sha256":"f6c9b2e95fcbcd9735ea4e78ae0b694f1ef7a4515f50e2ac5c4bb6d5ff02dbf0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"msenvp.dll","sha256":"0ae70ea2e50a03d63e7e8ddaf8b2b5e1a64bb409346f9796f3d6029a2a355784","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"dcpr.dll","sha256":"4aca3ec246f321b30672a501d81d313e847762c5cd733fac21572d25db8c04a6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.Office.Tools.v9.0.dll","sha256":"24ab58af1a6698d19783dd6b4d280ac5a9102ff34ca6401b63eacefc50d40829","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_cs.dll","sha256":"9143c3d5f61b184c5864ab04fa9067ad39ad75ec060d3994188dd4ef3aae038e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll","sha256":"97f3a404a0cb8f71e422fc41d4c572f1e467176cb1b4f326a3393e9308e7330d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"dt_shmem.dll","sha256":"dc7439f00759c231669ada9ff64cba174ed0613ac8dfd0582becb50adcf31923","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSPTLS.DLL","sha256":"f27a9285fabbe492c3d72c45a2a9e1346f01a9ebd67d7e2197f5a771a3a1d7cd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSMAPI32.DLL","sha256":"eae594ca83ba050d7d171147ed54221424db82cd7be6a3274d8eec1ab9ec4cea","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jp2iexp.dll","sha256":"bb63bb95dda206cfd069985361b6e5626c09e3e38b28138ef8b34dddc5359186","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEODDBS.DLL","sha256":"07e5096ab0e835bafcc4698aa03ab44f241479cf7223024322d140f9b4457db7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"install.res.1040.dll","sha256":"dcc7d5a5235e1a01520eabe6a482e76ee3f6556231f66c7fd0057de9b0dc05b9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"prism_common.dll","sha256":"99b2d8833f5c6eecff8de7b9d9490c472fc52b841d200abde4f0881c6626859c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_bn.dll","sha256":"3d34d7452af527fd30ecc89db4be20915eb5578986a79f4241ecf1b931cf23af","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSB1FREN.DLL","sha256":"c9a9c04631a23a9269ebb97010cdb9df5559aacc584765aad079cafff6bb04b0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ASWhook.dll","sha256":"d71a4fd8f50f408c9bb4abf78b8b68c58a2780627cd075c2a4efe205558aaaa3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jp2launcher.exe","sha256":"344abeecef3f6032b3f08b34faf48757bd42df79d5de8e8e8f3ab229da30f077","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"RICHED20.DLL","sha256":"3debd495321016b10dd2f1a36a4a6fd0550be83f3e160808a714a2893d3005d8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OPTINPS.DLL","sha256":"741f019f658ebbcb113a004b2b64970f9e0fdabc67c35d22d8b1d0bbff2e6e34","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_sv.dll","sha256":"c7442372fac61008d33cfd6a7da3698c3361173f796b41f99daf23c868256508","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"WPEQU532.DLL","sha256":"8bb14d1b60aac891b2ca06af4e726ea2aaec6292fbcfa6fc8d71cf798622a087","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OSetupPS.dll","sha256":"a6d8722a8c76eaa706314cf0488c98684343fb6ea2d0634c9b5822d8b3083da7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACECORE.DLL","sha256":"ca70b2ad19dd8e091727e365029cb902c2d5da3198343ad7489790c6b0536555","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_mr.dll","sha256":"0c4decfeaf1a009a69544a15161e4a35640080c3d4e815a012b8c1084018b7c0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Worksheet.xls","sha256":"b791fc35477587935e18d6313327cd6910f8f9180e0bf7f669b9d7194a3d5605","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEES.DLL","sha256":"b97a0073355819d1e872c0ae8fc220e3780f77686ba2e08053ffe0267704d5c6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEEXCH.DLL","sha256":"afb6cf8d352335b736be66acefb0c97b55440642d638a612cbc2ecfca9438d3b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"offfiltx.dll","sha256":"e4ed5971696e4abfe19d3a78938e6310ca58a7e1786fafc8c489b19fc301a8cf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"mlib_image.dll","sha256":"119513c1e37f38c05d75256c810b059ad8657d5e402f3bcac3981e91222aee2a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AutoIt3Help.exe","sha256":"789da864b5f5f8982259289ce0f281e295898469d18febe506fa021fc3cfd54a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"VBE7.DLL","sha256":"2c56e75be54ebc04326fdecb7260b37ee5439b8af31b376c44f047f6e4516add","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_th.dll","sha256":"1273e2cb864eef92c7575f37a0125858ef1069e690997b7e6d30e161c5d918c9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"FBIBLIO.DLL","sha256":"7a85d7f7a915d00ddb091cc0ee4e9bc10e0a2c6b98e661a4291a2673491ccfff","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_fr.dll","sha256":"861752975f516d12f45bd07464f45f1942f248c2ab708f8526fe5bc3f6c270ce","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll","sha256":"0e6b4085218b318803f7d4cd3c02d6bad474732b125dadc538796c9d37114bf5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"vslogui.dll","sha256":"92b82e987b29237d2388af2b85f7dc53402c1918af06829bfe286fed5101b010","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"GoogleUpdateHelper.msi","sha256":"8fa9f1a3ba5e74b3776a6862a262530b031a47878fc1a6caa094f1ed0b919531","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"FPWEC.DLL","sha256":"8b2459595f20569850125b000702dccfd4d238545506c264df85250964145729","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"management.dll","sha256":"d2a04233f23c6b78b31f07eb8a70a4a1b2016f33e0ca0a811641e37fc11f9170","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"odffilt.dll","sha256":"fed699a649fff992c89cda1dc0196bb609ef28de791faf440407059a99c5c78d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSOXMLED.EXE","sha256":"3692a2984aae6aac657bf31e42b9cf1623fe0515c49202e7b53fd84d21761ada","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"xmlrwbin.dll","sha256":"8cc50565d71b2241f6dc807ec34bbfb4180093afeaf904ef1fef72a2df117456","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MOFL.DLL","sha256":"f752500432776ee8d52cb9ce780efa36bfb8106d4570a74c2beef4f4ed568273","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OSPPC.DLL","sha256":"bfe4fb98c9577ff6c6d5b782fca002c04e998addad3d8132d27df08f40cf6015","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"coloader80.dll","sha256":"8a055bc60e8d3df84b7cea58f472772be59f57b33ff282b4c0a6bbc429646e73","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"BRANDING.DLL","sha256":"b5bdc98b5967895d5717b213b6e359ebe171c9dcac6cbcaf99b5d4f9a04dbcc6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"USP10.DLL","sha256":"23d37bff7fa11c3a642acecda90b8cef4491c96a9520989c5249f21c92d9ce5b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"envdte.dll","sha256":"551a2888fb489f024b3ff02c998611d57ae1c964d51b3c532c542f680a4d6b48","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSMDCB80.DLL","sha256":"28816f3859919883a31ef15e20e3351b3290c37979174fa72b5eedf89a37c1a5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"servertool.exe","sha256":"f0da9518fbdc249d49e18685557657160a631cad9570379d60104aedecab7b9b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Au3Check.exe","sha256":"40aa201a48e519a90457369d111495f7873a80b0d630e7bb0173d1cd7a514547","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jfxmedia.dll","sha256":"0872e3b9701efa3eb46ee480774fe1762e9dcdecb3c13247a4b793c25bee2134","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OFFREL.DLL","sha256":"990ada92ca712ab206960ce6af3d2ac3e02abf040a12f0b1291b17ab5a782617","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jucheck.exe","sha256":"61c17f2c5a956523b79d8fc918dd0b258c103b9b61e103d8d0f27ee7c6b9f206","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"decora_sse.dll","sha256":"638a3faa0b7bd46fcba8f11fbfbfbc0f5c48ba792c0dcfd4e6fe1ee445127fec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"hxvzui.dll","sha256":"60a89a8ef60053512df1ea01011d4057ffa2ff095beb83743bb9a2630b433af8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_es-419.dll","sha256":"ec0e192da58dbf50ddb1b8902d5bda77809132e542379b436529bbac1be621a8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"glass.dll","sha256":"fe9e5b5766ab66f7328e280c4334b977c05e2d76a642f58104c5651d9281dffd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"npt.dll","sha256":"46dcc873b514323ec566a1ae02d11228723bb1a05a3c5d6d3a877ef83491c59b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"VSTOInstallerUI.dll","sha256":"167a6f59a372287bc8821adb9a6a5f7c9fc027ae4f349ebc365b3f2ef0a2c75f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"javafx_font_t2k.dll","sha256":"bfd65ee4555cc44097cf4dc32a1c3f068f948eb2fd296a8eb1921dc92314f220","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_pt-BR.dll","sha256":"7657f650dee3e567310d0ba1d43b5d0dbd1fa315cc094f1ad2092cad8890037f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"hprof.dll","sha256":"01312fdbbef9ee28ca359216d25f391a75276c52839e087521010ed7d18bb64c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Aut2exe_x64.exe","sha256":"7532b2a05d977a0c4c36368074b51af0af38aa3a133f5c84439cb8116c1bac83","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACERCLR.DLL","sha256":"22eb7e01ecb241ac3e125e032fe17935db56208f7c236d6921a210a4bf140af6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"FDATE.DLL","sha256":"9b6ddaae7ef4b8188a32add158217576d82a174c75f5c6fe12c3c420a91f3fe1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"WISC30.DLL","sha256":"8c14c9ca610e3dce48374ef598888f43db1f798ab20c5d8f62d29db02091b83c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll","sha256":"671369af8a522a39f3ffeca421c3585ba953cb5cdabd528354d03fc719d4173f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AutoItX3.dll","sha256":"9bedb0835a7fac685627438f61729f7c32dcb4f146b2f1cf434d35efbf0b8817","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_ml.dll","sha256":"3f10c3e108da43e8704d45ee0853dcfc81278317f6606fb15418b0a4d6acc997","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_ru.dll","sha256":"d1b5a6f6f52f9fece42c2865d8fad074477dd2c2377f92d317d73cba5b837e4e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"install.res.1042.dll","sha256":"0cb43c50ab74dba4823962c6efb3097cb21176a4b4f5b144f1efba1c0e133a5f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEINTL.DLL","sha256":"aaee1c6cbeef1a6cfbf6650e6a8b5f1df71216a03bf1ff8cb311b4cde0feff30","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"cmddefui.dll","sha256":"a8e771ac9c5f7c4013baf211b86b568e4261d2fd7c2ab77d4cb21b4a95d3bebc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"GoogleUpdate.exe","sha256":"91f39a3749bab77864c57fb7ab78a583b2c9547f70fab61aa110e18d6040ea5d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"j2pcsc.dll","sha256":"5c358718b92cdc597317033902a1ef7dd3c4d2e260ba0ca70d1550418ddd6739","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"psuser.dll","sha256":"e4e1c98672d459c0582bd6074b5ab1faa75b303d31bfcaf87c6d6c1aee59c591","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_lt.dll","sha256":"12a6986ef8dbdd97000e2e518e23b8ced1133ef595e302be33c939b67f7433e3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"upx.exe","sha256":"efb357c3823b57f674a28d7a609517b6962ae76ab24c555d053bcc14e038888d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"instrument.dll","sha256":"0a5955ccaf4b9d62257ba2246a9280bf4c484d864cf6e5d18f20cc2ee5b11572","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"_Excel1.xls","sha256":"7fc9ef59387e96e35896168b8df33fc41c506bb4d06b62b74ad6c540b34c1007","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSOLAP80.DLL","sha256":"42faf2634324e40ef8535e4ab30a16590d19aeddbfbb752ff4df25e9cde0c15e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"xlsrvintl.dll","sha256":"2a7c7f4f3fd5120de01b6deaf2c442363449284ed19af24a7a8c1795e5a89bdd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OSPPREARM.EXE","sha256":"144489cd619f9ff8e451de593453d60472df4274e8e01722e0f77fafbc9096d1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"GoogleUpdateComRegisterShell64.exe","sha256":"b8dd4b87d7ed84b68a2cd88ddbda325a719e17faffc31eb1c47cb7edc0fd27ba","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"WTSP61MS.DLL","sha256":"f45d859048ccbbdf5091b00e3f5b05286b393be1502571b39590c73e2c312718","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSVCR71.DLL","sha256":"bf060e43d9b32c6624597b7300c8d94c439211333dbdc41603532a72f7145139","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MUOPTIN.DLL","sha256":"8f7f853879cabcceac203b77f7ff592072ae7561595d8a34cefc6475881b7373","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSADDNDR.DLL","sha256":"48b7b93b05ef926dafe3a625bd80e668e76534b3d7ba4931d085c000448c01d4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jsdt.dll","sha256":"c0f3d2ee78cc3bd978abccbb9e59983f5f8d7e229d6f5cc1c6cec08d78c2df2a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"psmachine_64.dll","sha256":"9f1bcbed9bc87a969c1511307ba62a132e7f207e9e00c055a199503f48862215","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"TextMgrP.dll","sha256":"b0e19dc34838aee38eb3de26db7cc26017c4740e9090902e7765e92173a96b03","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AutoItX3_x64.dll","sha256":"c13d910822a984e703a2aee98a7e1ba111f0b3afcb40ca7d8d0ac2e754fd4bc2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"GoogleUpdateWebPlugin.exe","sha256":"53260329eab88d0e0ace90cbe0004e3900ee98cc757c08a9d4927bf316aceca5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"custsat.dll","sha256":"065465ddcad43972e290056e41b0fb1260114e01dea92af7df4ff48ead9efa1a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ALRTINTL.DLL","sha256":"18f37b997228a8636796ec81c3287a6cec192dff68b4614b0be3d4001be00287","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSDMINE.DLL","sha256":"8e0fcf7f625867e04d92304a1d13a9a117a30881cfb2636111c318f45928d7a3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"_Excel2.xls","sha256":"f1e4b966a253d2345be4d5563ec1f15a9597d4c96c4ac2bcc1be6b625bb387b7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jdwp.dll","sha256":"0b85d277692a685eb7851b83df7d994627631365c9ebce37052396bd00e2049a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"msdia100.dll","sha256":"bdb56aeaaec74eb4197ee194d75ccafe5c410d2ad898d182c6ac61de6d855440","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_hr.dll","sha256":"bf63bd7d4f48bcb46c70aec6f5e5ae82c4e227c7d442dc2ae1948909f477599c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll","sha256":"da9ba522efe0c1d8b86e44d223892f1d197f5ebaf570376d1aa88c21da8088f2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"DWTRIG20.EXE","sha256":"ef30607fd9bd9b816fb05bf5afc942b7be8947a2f601d275754d5a670c49ba94","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_ms.dll","sha256":"3c2486763c53ca6c40e8af34fe675d827610ee8b6d4e0311fdab68cefec9d989","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_bg.dll","sha256":"da0510bc2e51c04cd9bb64e7ff998f8c2640890cada23575078a9cfef875ba72","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_ar.dll","sha256":"8b1c17823003b7385c16456b59d3fce6ea96412147d0a0ed84a96a0fb5688462","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"install.res.1031.dll","sha256":"3a8fec347aa1324ee74e2d7f68d4e4243658462c88317391ba1889083e147d7f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"JAWTAccessBridge.dll","sha256":"5a0b27dbf8946c9c1009777e76fa6e6bdf3ad5bcee623259d14346322bd22a2f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MyProg.exe","sha256":"9a37ce974728d3005ef27aa6e1aa287774bd29f16619776aea6f968c5f70aec4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jp2native.dll","sha256":"56bf345a459e2a127023fb576bf973d161f6ece1482c27af379a30f9b30ca6ac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"msenv90p.dll","sha256":"95f79082e9f82ff70708e7995695bf413e56afe1cf4bb81c73e03fa9aadd4f3b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OSE.EXE","sha256":"e6d0f471a2f07c0d09247f5ce06a230a0dde5b686ec846743c5045cdfaca2f6c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"EEINTL.DLL","sha256":"4bed8c71b2cfd4ab6ead0a2fb1d7f07aa41a696d53cc81af6651890e552fa3ff","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"install.res.2052.dll","sha256":"ea9452002d58ffc24c8628064211f4274ce404747de649b1083e985b6e545519","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"pack200.exe","sha256":"82b759b4f454e77a74f9eadca6280cc952b5327ee6de188e1c711f731f18c21a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_am.dll","sha256":"ed615f2b4c204079e54a411ba1f39871e00659a3870f124d04e69be63210611f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"install.res.1041.dll","sha256":"eca7a2cb2b3dc8411ac9fe3eb59c7e68b532837c2015e8d993fe6e3249195aac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdate.dll","sha256":"d61864ee56c1ede50f26d19d999cfe6f30465d813259212591b2dbedbd5ade29","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEODBCI.DLL","sha256":"07c82b4c5e1b89a8f586a9867ea72d24b123868ec3dae95527455a04fee6e61a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AutoIt3_x64.exe","sha256":"759317b38e92c42d07910505b39031e8b74f507c2f3a40a1f34c7ead6abadd6c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"hxds.dll","sha256":"9faeb9974362081e8f36426f9ea30404b3e89ec7b8bf6a1608ef04619b41cc50","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll","sha256":"50d41f89dad5a64fd372ac75689fc731786e88de5ca9c4d682504e6b5e1d33d4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEDAO.DLL","sha256":"c4d34b89ee91203a8706c1c488e067394001548f53710e923dc0e122d9de4f34","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"EQNEDT32.EXE","sha256":"eb25b35733d89d2f2b35e9415a359433bf1b56364104c0c4f0de17bad9206144","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"j2pkcs11.dll","sha256":"eb57794ddfd041f2bde092e35de3f81b8604220448aba88c97220ffcfc4b32c6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSMDUN80.DLL","sha256":"a595e35034854ac9722902d9ba4caa5878ce691ebdd0c1dbd86ceeaf0f6b3ad8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jsound.dll","sha256":"64fb4f14653dbbb4aacf19e71e8fe721876c84a44f347b00e94a4f0174b30a61","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"install.res.1033.dll","sha256":"b6646d84bab58a09253f2e0788fd3a67129ecc1e16c77505e11c41ecbfc01978","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"LICLUA.EXE","sha256":"5808d79245585ba7fab6a772066270660e89f9db08eb389a8c82b0c124fa8e94","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"net.dll","sha256":"811ecea384fb0f706d0f1e45b4d68fb3050a6b264bc1bd4a71228e00ea426bf8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Resources.dll","sha256":"68582e6949e2f11872200d5de29e142d4cc0a6839256a081fd9a18486ebc4561","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_en.dll","sha256":"376b76f5b5e0191632a7b9622d89821a4ca8c541b23a86f921f919d2fdb25f2b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEWDAT.DLL","sha256":"c4adf322806ddb55f4f3ee41c1316a65aa4220201fe63dbe0804ff942bea46d0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"widevinecdmadapter.dll","sha256":"ac69190572ccdf8f31a4e3b2e28ea3a739f1445df84c4b801146bb147b2c6228","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ITIRCL55.DLL","sha256":"028388fd2a7b5bf4d82cfc80c32748799e3395dcedcd7a45620292f2066f0eda","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_el.dll","sha256":"b702a55c9f7304e6c3fbdd646bbe891e88722139cf8cfd7f9a84e9495601dbfc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSSOAP30.DLL","sha256":"7072f987a25ff92490b017d167a0bf99d00d732a9fd73b3fb90e9d67d1259dec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"fontmanager.dll","sha256":"40fee197b5e8ce2f175b7dff252cb9682a57fbe347218889366261302879ede2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"xmlrw.dll","sha256":"8486af8028da72e33ddc0476a431a322c7406ccda2e9b3e07194a41593a21d6c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"psmachine.dll","sha256":"af32147e7dac8745c84b0eda96eb70c1628c08a3ad5ac69a3a32e0caffa43436","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"nio.dll","sha256":"eacbf578fe5a961d34d43109ac486e13d318e047e75d8af0c17c07804cfb1f74","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll","sha256":"f10d8bdf12b4cd37d9b4d234d28baf44201b54381e21af04619e84f9e7f38d12","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"VSTOInstaller.exe","sha256":"4ac87f407def99f23d94f3ef3378b53b2291a5ba9dcedc09e5da20ec6adfcb6f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_pt-PT.dll","sha256":"62588c12210cd5163cf961f4b0a4cbb457659ff0fc813bb9ed64b4fcae98b3b9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"widevinecdm.dll","sha256":"4f0a365a72db5209d11f3add1b208ff834ba3129bcad7ebab4a9ed02be0ac8a0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jpeg.dll","sha256":"281d6573b2824fe52979044bc10c5782587e92a2a8556cdcb04b9c3f112dce10","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"VSTOMessageProvider.dll","sha256":"87fbbe3296160958c498428b0eb6a8955d2e2473a52987124ee13c65b0151f5f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jp2ssv.dll","sha256":"bce1c8cf4ead4622e59522b75352cebb947e69385f3253421e41a4c4a8209ffc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEODEXL.DLL","sha256":"1022b27dce7d4b42e4ea832e6a5ea397191babee9f45f9b1298125d8c8c2e029","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_sl.dll","sha256":"b481eec289ecf721f2bffe96a47ba6abe1d8230deb499f41445b8105ea1ab8eb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ktab.exe","sha256":"872fe5b34b679a9967dd88d5bd16fc3bf100df795e58f09da4a9db10f62ca71f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_es.dll","sha256":"18dcf18d5b910000ecd6d4e3f6b5850ce22e30ab339f52a2d06b6f9671aef367","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_en-GB.dll","sha256":"3afd4be38ec72df6f9634079421215ea6524c81640431a7afaf5ccaf8caa90e2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Oarpmany.exe","sha256":"0b7ac54cdddf85b77b165e2b646788581d260eb89e9a33f798a67a3543428f9c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AdobeARM.exe","sha256":"ca214c74d188e62afb1d27fb778a3d0902b862fcb4b693da4517cb7d57649771","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"prism_es2.dll","sha256":"2b6ee0e7c4369e39d5095f5c766d3163cd49fe54df59bc345a203b2c9cfd83fe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"javaws.exe","sha256":"0ad4d973728633aaf669e601ed9d0b4bb8372c4fb6615a770d6117a3ee2873e4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll","sha256":"2f1c39d745aeca05e029b4b898e4fbf560691da74888035ed9794dcda2e11376","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"prism_sw.dll","sha256":"547e4f98333f2d0bcd13d9671aeac17ec52222e13fa4c2c8a26750951d01ab16","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"contextp.dll","sha256":"2c639a307cb076832637e7b20cdc1ddb49811602e42b00d32d49b4c86047424b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_is.dll","sha256":"18aeeec8933b6e7530951fc84e9e7c0291fc3cef02dc8462e10ea5ff1bafdbda","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"msgfilt.dll","sha256":"f67a9aa2d5cdb0138ab5410c502520b9dbc7c2eb5d124df8a4faac7b8d86cdc7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Csi.dll","sha256":"5294cd72ac96e009585295ee3104cdb2ba9e3a1ba22e8a4ca4b1f4c21c966c01","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll","sha256":"d8053b6f38d77891920eccd74a4bac9d8fe709bfb898a921b0f7ce78d3ab538f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_zh-CN.dll","sha256":"483c82c306c4bdee8d87dc8cadc377e0bb2a054c423c0d1c316ccdc299a1e353","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll","sha256":"5e565dd5e790c00aab9e0e1781d8b79e1b53b08998c651ef79758d8abae795b2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"install.exe","sha256":"47ae7afbc686143c854608491e428884de13ca06c10f56d40e5662fce2052d01","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"javafx_font.dll","sha256":"ab4ba338c6b15af91135c5232c7f426c98a57c6f776eb84f896d159278435ace","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jaas_nt.dll","sha256":"ca9952df16ebfb35686a84708dff8a36b7b5d36948e4f43f4642482bc6710860","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll","sha256":"bf9a5ee70ffe94bab8c3e62344045aba0ea6537b4ea806d1cb9982001c5c17e1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_ro.dll","sha256":"d3ed1522a9dcde9efd987761b08aaf72f7b7684b6c8ab65b3a5e47afbb46e141","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"VSTOLoader.dll","sha256":"3e830b497fa9cf63750663f95bdf28c07b9af30a7f0826d28d34c152ca167d77","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"IMCONTACT.DLL","sha256":"bc6aa116faec8fe3331a9bf77e460163bc5b4d67d257c9890ee8b6b76b9d1fd7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.VSHelp.dll","sha256":"f8d10da59bea0a78f79a01064fbbf1075ae33811dc5a5f0ddba37e0b0008e46d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OPHPROXY.DLL","sha256":"7363df863c253bcff46cd48d99aec472a06f0fdc4cf6aaa38d977fd5e2b763a9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSOLUI80.DLL","sha256":"cd2214a5a7e7de4a30ad70b5968a8e853a8571646a581b3d79901c70efc1b343","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"install.res.1036.dll","sha256":"eb984f4456c051f3a97827997b671e35e100b7d192058d80a992ee8463d5a8a4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEREP.DLL","sha256":"dbaec28a16d494903406397fd3f7c8a9f8e2da9f9b7b345681aaea2fb5d23ce5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"javaw.exe","sha256":"49dbe816f7bb30f50a2f149c2628b4668ed0333031f5839e9b1f082ddd13a924","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"install.res.1028.dll","sha256":"0d035d84c5ac4f2e2b789114fd7bdbc9c6671ea38279e8d85120743fa1294bf0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSOSVINT.DLL","sha256":"d67aa5e173464cf038e5251fbff98375d57058ae75b756ee6a88b84a45a3fbb8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_zh-TW.dll","sha256":"fb75604b316237a544db860dd03d0b1e4b07e20db842aab7a4d70d0ec2bf6447","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll","sha256":"eafee768e921ed809aa4ad1ee0927c15856bfb4e2602dc094c6c182be53c4fc8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_sk.dll","sha256":"c90023e454b2151673f5f78eb9fdfa70156aa58b2a155ecec2877f823753a06b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"msitss55.dll","sha256":"c4f938930d70765f020557cc71b4eb6c0e7499fde13b696e0de18cc97187ff3a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"_Excel3.xls","sha256":"36f312c691a9332d631a24c02472d0d47b640bbbefdbbfd9b54a2c0233f95659","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OARPMANR.DLL","sha256":"66a57753a4ec20698a9a88c3f52a6cc82ea030935f2a2117b3291f5928fac494","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"vsmsoui.dll","sha256":"c292684c0aea8a2fad3d48e5de55ba0c75967dad17ab02f066bd50ae32e7a58e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"CsiSoap.dll","sha256":"1bda7f4ec24ade8d76dacb66e862709bfd2f86dd8b681f0634e01bfdd17388b0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll","sha256":"6e398a6bed95e10ed6bdba7e001a1703fe0913dc893b0d6b968de103515a7753","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"GoogleUpdateOnDemand.exe","sha256":"59daec26401bb8d55f5e139eaad6935bcd00ceeff3aecca128713682a3a58706","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jfr.dll","sha256":"7e3fbf5fb9716e2660effffd840e0befa23082efdb3b317c992b2be5477cba79","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSMDGD80.DLL","sha256":"eb7e420347c30a49f22b4647bf209cbd401265be2b7114577da6627a2f04fa37","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"VBAJET32.DLL","sha256":"1d1bcadc9044205cd6a4d9b3216eb715f7aab70f79f85d796d423c5e4196c1b9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEOLEDB.DLL","sha256":"3fb5e5c3917becf91a37c8e10481b374ce3eb2a36e5ae511ceb9df1a182b8177","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"msenv80p.dll","sha256":"cc2c27abb5396cd37f26dbf92c61b2e0a43027f1fa8d2a70dc2aa3d7e1995ed4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"deploy.dll","sha256":"ecf0d4a8e91b572c21a4810b047e644bcce09f0a528bf70f0dbf8bf8e26c460b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_no.dll","sha256":"515c7fc926844080b6a125522cf954871ef75aeaa7a2bf4bd25d45dfd65cc568","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"lcms.dll","sha256":"fd22817bc4eb7b3570140e6fee1f250e9898da0a2d08a4c5a69e646a1928dc09","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSSOAPR3.DLL","sha256":"22b1b8219f712556ae8b62fd64d79610f6e4334c47be5306bed68c1595ecad2a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_it.dll","sha256":"4815a02e54ee02477c7b15ca717f4efd5e8a673c9ee48f3522877c47b717d2de","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"awt.dll","sha256":"28c638f2a826b2759043ad11a830ced61c438ba89724fcb5afd133f379c5c3f2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACETXT.DLL","sha256":"22c0c1f62e26dd92797f5b1ef73abedf115031fa11767ac2c5cb62c6e13425ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"pkeyconfig.companion.dll","sha256":"ecc5750a57cfcc0becfad391d881a9949abf8ee6ce20f3832d6754ef81b886d2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"eula.dll","sha256":"ccb0fb97f6870a6f350ca0e735b0793af6b5ba2de85fc75cd4106146ab10208b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"kinit.exe","sha256":"fba70e7886fe8afdb5cbc6fbe041461dc9d505307df19179409eb78684d0d62a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"msdia90.dll","sha256":"538c2b08699c52d1233ac9f3d9c2dd84d2549b3459ab35052fd7b1a9e43e97d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"VSTOLoaderUI.dll","sha256":"f185749a5c02171afb8c270443261bde269caa9ab4227d79b14f380da0810164","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Uninstall.exe","sha256":"b4e392fcd6f653d69a160a5d560a92c4776e42afa63e8ce62e8f3781c41c7872","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_pl.dll","sha256":"d47e8735b1563537c3d16bdfcba98dba52b08b303e7e659d4f76b122d1edd257","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"java.exe","sha256":"04dcdb2b6b356398f38e42a5dfa62dc9407000a4f7d98e769c260681d80e8080","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OSETUPUI.DLL","sha256":"7e8f56d937d62e8b25f6f5ca9fb256bdfe2479cfb4e014b360c02369cd6f081e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSOINTL.DLL","sha256":"ae7f4172517f65acff100cd60d0612af5824396c6a94374827ee9e46500a0b15","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEODBC.DLL","sha256":"b6ff11acaabe38ebc4fa504ab3850ffc9884ab53e586e8093f1f6050d9a3feda","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_ko.dll","sha256":"9c1e03d9b7775d9937c80eb7b65a966e676c85f7e180c3eae4738cb38dd212e0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"glib-lite.dll","sha256":"33ac30b1b70dfeef9e7def56cab40d2ed57df0b9895a59f68376ad5e8f754426","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"chrome.exe","sha256":"12bf3dbfd7f9dc69a34de732368583925c856cec105b552096f7c054a56865a5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"PortalConnect.dll","sha256":"a576dc55347d53f6b7c3d544023cd377b0a906cc25ce07447d88df8113683878","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"JavaAccessBridge.dll","sha256":"dc866a41fc294c41338794390d7cc18d1b1847d22758af5d4fad30eddbe478ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"DBGHELP.DLL","sha256":"b11d0dc02220c1230bcfacdf83c2e43bbf08aab8444120cd77c43dd45ed4b13a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"VBE7INTL.DLL","sha256":"6bb74f6cb84b05c4458006d061ee2d2447365776d343daa7a34d4fa41b285dbf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"SciTE.exe","sha256":"2904cf851d6af9eb3d9c8d55fe559f9d746a82b911e51ca6e02ce55fbd43d03b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACERECR.DLL","sha256":"d704226df5562432982436a03340caafe47719acc1fa5334ad483dd788c9850f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEWSTR.DLL","sha256":"6e83d92ff6ff09687e10fd477ddd38ac2e493641a9788bc2866b1ac1f727536f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_fa.dll","sha256":"4085f2df574ba9df89977a6994aee38ee61645db6e1500be6e2d47b7da665a3c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Aut2exe.exe","sha256":"adfe412f68b3c61aa9be723e9c6eae37cf9216aaf9892cff482667c7007e06e8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.VSHelp80.dll","sha256":"f69decdb737a6274a8735d37b165662898661a8d01e61c4423e2a922aeb6bbdc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Au3Record.exe","sha256":"e533ae64ebe4a856c419b1311da991820bc780230c255b5e9fe1e5e622fe22f5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"OSPPWMI.DLL","sha256":"dae2790da38586280231e0d8cd1e390b856558c4158928fdef371ed8d78522e3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"vstoee.dll","sha256":"7cd282dcb8f8a26f033985e772de4700843a390893e98c758f0a5b2acca2cd78","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_de.dll","sha256":"07f15a48b9343863cb83b417ad1d670243f4a5a766314bb64bf232c5564b759b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEERR.DLL","sha256":"24dc9db6a1e41aeb58a935356b0eb98d978d3a9c0084247856cca031dc8310cd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSB1CORE.DLL","sha256":"e4ae616559c1fc714fd3c515304a0d504f53a7fac942bd1d9f9b805b22311907","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"msenv2p.dll","sha256":"fac573ed544cb7d66ecaa2508dfde35674cfd137476d11b077ddce5ec83e8787","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEXBE.DLL","sha256":"120892a8c2958651a4480dd2f5bff5f250a7b21202309cd9591002d2b582a6b5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll","sha256":"4703e84c2387bbcd98d778167c9bbe4ff603bc4eda7e7ef19aecc6925749cf0a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"FPSRVUTL.DLL","sha256":"1342634114fd48ee52e6ffeaeff44426c49b9e1fbab7fcc32baa67349cb3d802","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"klist.exe","sha256":"07bd8739fc5d40cce752d2011939e8009d449d6fd04d0d8beaa14127dea83b56","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_ur.dll","sha256":"e9dfa83e99862760a23e9186d52a44b5ad0e6d36913786327df5094022a3cd47","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACER3X.DLL","sha256":"1a80fd2279d1dabdec7354cf3e8746ad1a1da0380e61dcccd6e63252abf55a82","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_ca.dll","sha256":"4f5528a525782646808f6555ce5b5dfbd0c16d200f6b35c1d7ab54c34c570a5c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AutoItX3.Assembly.dll","sha256":"a6d3ec564f3407bff829e9d0cd9e025c36d8c1f2227094ce479445299d3f2717","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"promointl.dll","sha256":"4410fc6464452b50e0e35851eb10347316adc22b9bc26bbc4540b3bc5a744353","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"pidgenx.dll","sha256":"d9eca0b693cfd03a18bee58c66d62b83324bc492ac679af3936896f3dda2867f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_ja.dll","sha256":"6850682facd45d63a03ca662808f106f062a6a6b1ea5ffeaf2ba7e8ffbe5b43a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"java-rmi.exe","sha256":"0754f2f6deef47ed0295a4a179ef3da8eac595fab450f86e5ecd364c47211eb2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"javacpl.exe","sha256":"604ae0745d03461b87ca948524ae128048c2c56006401f8008f795625d51db5d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jawt.dll","sha256":"6ffff0ec848cb9d7746274720a707075f4d82bc5d995494c1b07b47dbe00b36a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"rmid.exe","sha256":"be36620460449b1da972b70bc18fb5f8f429d3eb67e4c3de57b396233cc35071","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Au3Info_x64.exe","sha256":"430c9c9bc24d065cbc537eb75a8438bc8b16dd2a38d410d0ba506180f113ea94","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"dexplmnu.dll","sha256":"dc366f509cf2b45dc16d49a40bf8b3272690521f3090cbe774ec863444068f32","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"fxplugins.dll","sha256":"a3bb63bcd31d245df3aa554c6b443cda547cef393558a88d1c33e08ee341e7b8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_te.dll","sha256":"7bc94c40ff736aae1d6878c31a3351c8fd139e9b3bd76d4ee2fea2e56d377070","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"libegl.dll","sha256":"820f7ad8ac7d446c31c65e063e35fb6b0437807c71592f4bdc4d54e07713652a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"PortalConnectCore.dll","sha256":"2e23d077d6b1a30a0035247e6c400fc78da1f3f8f3930ce2c2b8eb51f6330ad5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"vsp.dll","sha256":"32a6984f57d6404360285baaefc59e188d987a033b322c0b47980c21f5c1013e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll","sha256":"7c8c098a8238c97865537fc9f0554491466aa55047d540701a6e503643fb7e80","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll","sha256":"663d48934a6a14b6c017f58b57fe6f0b9941e52326b31afef0a140fc2428b8a7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AutoItX3.PowerShell.dll","sha256":"7db6b2f35a031e8d8eee2f230cf6f322706685c0b72c1d894045a01c82f840b3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"java.dll","sha256":"a5146b7066f028e09012b14e1d4204c8e4a14a0cc7fce6001d0adcd35b0571f7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"d3dcompiler_47.dll","sha256":"cd4e924399ad5ed55729144024bb029b31a1738863571377f21f4258d93b7db1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSOICONS.EXE","sha256":"9e100419f2044ef735a48d40665b883b53afc7d6c501998428d0e9863b0bf83c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"install.res.3082.dll","sha256":"316c1067f954ec28311498109b73b078cd8cc368ce071f3ecec1a92efcf2ee22","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"EXP_PDF.DLL","sha256":"4567523865bcc69e8cb527c789cc7f29bcee71483c29564ae9ca9b1588b67073","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"prism_d3d.dll","sha256":"b2062e7cb818eb0fa254d957e1786be0ead519de99f7150609bacbce8217e794","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_fi.dll","sha256":"3cd6571bbb1e9a861c3cc1ef92adc1d77472255ea311df0459cd8a71db7f5d8c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"kcms.dll","sha256":"8ee7992ab24f9705c481675e386465a86b020402441b9ef3e0c4990c98686319","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"GoogleUpdateBroker.exe","sha256":"dd6b47a58f728f010daa7535363c4727335b269b00f10e9a63a71010503b6b38","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_sr.dll","sha256":"abaa2a485c26bc7c30b9d493e48e764321975024e12d7542cde51575e99aee28","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"chrome_elf.dll","sha256":"3340bf8e8e874bb0a9404ae5e7cbaf0c6210da18cd52e2f95526bd42ab7c32d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"envdte80.dll","sha256":"cccb995bd94d634fc5c49ba3e3244dc09d1066e77baebe96e3ff6f1319302229","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_tr.dll","sha256":"4ca5bcc2525677c8ed5784fd61b58cc89f09352c115fb220820815cd8e31a98c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSB1XTOR.DLL","sha256":"fad2cb38462c40466582f50bdc44f802e8f420fd59b1d2beb73a60bbf5ffe63e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"FSTOCK.DLL","sha256":"6102a6d8b5b57c2f645865cd0783c2eeb29589bb8a69cff293fb1d6e5dbe906c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"hxvz.dll","sha256":"3fb14c8c2a79c74a13aea2f4165c5a86d9f9e613b20180b381bcaceba3c9f00e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ODeploy.exe","sha256":"483c644419c8e6f40eb8b1fb5a1e7d160494160c963068f396e88b25f1c0e9ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"armsvc.exe","sha256":"ab038eefeb71a97cf4e0591e52ace95689ca0bab1a4409a747208c57521b22ce","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AdobeARMHelper.exe","sha256":"4b4624dc9e2d497ea1ee1c7f08338fd9a919152eb45e48f54d3e8a518fdc50ab","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Au3Info.exe","sha256":"a592ef088a67996f9924ad9e6d685f3bcbe4660021b6c479e49c1a391ec95b04","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"FPERSON.DLL","sha256":"af92bc17426b226ac42b7091ef6fb2dc3f166921121b12e3f5fd2c0105be2f5b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Wkconv.exe","sha256":"f33336e3c1ffb3ee12e32b442e02d057fa9ad37e572b7a395dd47e0dae231f3d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"dexplmui.dll","sha256":"95436725c795829eb3964ae44b521a32118511ffd4d57e6b1df8a3bc579eb53b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"keytool.exe","sha256":"9902fcfd18f13672744ce954a940678fc4ab0ea9246959fd1faa50852ab26876","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"envdte90.dll","sha256":"13c1039ae5526242c1d2c1c116e536851654a1be83052050dcda78d009a9dbd8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEODTXT.DLL","sha256":"5c3bf98d4b39c1ec2e4ce2c3d8e1ad29cea87c0a87143e2a605a3f70703f2128","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_iw.dll","sha256":"415230d0edf615ae5b62462a828ce5090cceac6ada99cb6b632cb0e5eec948a5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll","sha256":"fa48567690c1cf3c66987aafe08dad0101a3afdaf3baad7e703e167693cb37df","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jsoundds.dll","sha256":"41822838b35c9cba741046279b877274569e5c98892c14ddc2845ceebcbcf5a6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"msenvui.dll","sha256":"f08d37bce8f2f1e51bc0600c47c0b147e07c5b1e59c9f44f3f5f0cfef6b105dd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_sw.dll","sha256":"a73579b28597703f3dccd28abcec4c87c87a3e4ad7db930aa2b8d3b9ffde0245","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"gstreamer-lite.dll","sha256":"95b43ccf7a6e4105aaee3e48d00481ae595fa48ef9576319ebc1cda3a807e947","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"GoogleUpdateCore.exe","sha256":"c24ded364d98f39e80f14b8f600210bb1133989a7b4d3c02049124b5910636c1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_vi.dll","sha256":"39d1035fb4692e4a2ab4035fdd040a23007595e4af1044982dd8b32cf64afbe5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_nl.dll","sha256":"7aaa94617e7abed31cd25627491c63412d378bb27442efa1db0d1d005ab30f49","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"rmiregistry.exe","sha256":"7abbff16a014ff4ecd94e3d9da0f5e03fcb3cd11adde94787886c477691fa376","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSCONV97.DLL","sha256":"4eed575f08290d48c763daddd67ba94d339634634fe9f6dc0ce102211d36c901","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"FPLACE.DLL","sha256":"98efe8c921b33dff330fce7255d8a1adcf921e6d2aaa6c7d5660960652ab007e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSOSV.DLL","sha256":"140d23fffd43a32fbe24723194374efdfd5ff69695ef99601351756447e3cba2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"policytool.exe","sha256":"4cfe236548ec6a21f681e733c05595748c858fc151563b7437f66a94adb9d189","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"IETAG.DLL","sha256":"d935c0a9605f5bcfd05f2492c3289dc2f6bb52c6d5b3c1745e20134649b5ea81","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"chrome_watcher.dll","sha256":"d11adf9fed9e10a391c64fcf0970f09f01590d60ad208b5371571cd7c6190d7f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"stdole.dll","sha256":"7435e51baf5690f1b8972cf7af6aaa7a31ca626e246410c0498c5224da814d55","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"msoshext.dll","sha256":"03117897970f84e2daba154fc6f5f4ae02962e52698d75285bbcfc6acd55bde7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"STINTL.DLL","sha256":"26feea14b9efe3422e6c5a9f830491b7f2357dd87a276ab2c4073e278f7680ac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jjs.exe","sha256":"4f2b09c20917345d82991710172b642d82484cb85196c90b59c87605fdd90f1b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"METCONV.DLL","sha256":"679fb57504c1fd8a372415fb6455e79556681896d977a1bae51a65d51a476ce7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"GoogleCrashHandler64.exe","sha256":"31d3dfc57bb3b87653cfe4b28281fbe468b3cee1f0ee8f3715beb3739987d845","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"dexplore.exe","sha256":"4891fa62fed038236138895b96c74b920f3b0f2e51c700d4ad343c10553d0d8c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Setup.exe","sha256":"2eb6fbe78f43493e3bc31b3bbc22fa5e9d1ef391b93f8bb62c4437a97243e41d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"FLTLDR.EXE","sha256":"9f2a55b5255eda45e32cafdda90d8bb40b878dc6781f6fc5894db71f654fa299","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"ACEEXCL.DLL","sha256":"84a390e0de5b0f2ae880c8854d56374d7048fe8093b7c063c095b10fff929f14","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"dt_socket.dll","sha256":"7508c0260a8263e649f06beeef302e2f2beb1c5be26a6a1162916835628e1607","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"chrmstp.exe","sha256":"1ecae0c34d10c48b8d2910357cfaff6651fdf0a0e2a80086fb2c93a1b8f095f5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"orbd.exe","sha256":"72358fe995db51868f1befecdf5297e90daafbf74cf0eca7abd3b17852a9146e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"javafx_iio.dll","sha256":"3c48b19803eb1e80a2712b8e585a8175a14e908cd8c825f026070a65009eb57d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSDMENG.DLL","sha256":"54e2a9698d294cb9612be351aa82414da1cd9b8963e6e7bbd8bc51d75aa4e49e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSOXMLMF.DLL","sha256":"165dbc5129d6e3665a4360d08e53263694d6985d851a350ba07c7476ec39776f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"_Excel4.xls","sha256":"e2d32429ff0af3de28564f856f631d962c5c2657d0e2109aad12708c2acb7ac0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_kn.dll","sha256":"cc2d2a4457e5c81a2e50b9fa6b01d072332b5aea6e1617034db87a0be8d1f597","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"GoogleCrashHandler.exe","sha256":"832bcbfd8ef479e9abef1c80e70a3c666002151d731b37a25258e7f52f4bb8f8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSB1ESEN.DLL","sha256":"36a5d2013146de524cd9018a6265719e0caca34c823863dd3a1692e74deeb7d3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"vrfauto.dll","sha256":"4f49a2c6e6831494d85a80aadeb7091aca59c1f8c58319c1b95393f3e9bf16e0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"libglesv2.dll","sha256":"3e8fabb644b327859aa795662c3e81fe7979df0990b608babcf55bf45b0c3676","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSLID.DLL","sha256":"0994d07992d2627670310b02b73731467cafe85588e7594d1ae437c3cdf74249","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_da.dll","sha256":"24c6e2069e4c491aa43b3dfb90926d03f462970385136ea4aa660c38c73f13f0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"MSB1STAR.DLL","sha256":"723f30da8619641bd9494cc5f4a187e3ec8686e0ea4a537f92df4aad9c114094","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"psuser_64.dll","sha256":"654e13dcc06d01aaecdc7481bfeb7e6856e8f8d46aeae4c3abca9d3f6bf04e14","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"vslog.dll","sha256":"7bc83f5a501d3bc1227439e7404c7c84c81cb66629df9adc15c8fd8ab51c8ba1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"AdobeHunspellPlugin.dll","sha256":"053a54f14f2d89f384acfaf0b82880d6925735bc5841c785271be846bd52bda7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"HH_DEX.MSI","sha256":"924c7aad4213370075844c2f9668a5dbc46c91e2a9391af718b38bf64406c559","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_id.dll","sha256":"b66a1c6ad0b007d63e2b93af576a9c2def8e4942b5c23b8f175d0d1f4fd9d352","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_hu.dll","sha256":"d4bf1da3238f3b669f993ad3a7ad34d4981ef5962bb72335432fe4503d77500e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"Test.doc","sha256":"3bac0b205a7922edf60fcca3e671b8d0a833940813b7d5bcaa3f56ed9c6355ea","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jaureg.exe","sha256":"cac2471207e8d1e1e400da4754771504fc73e369dd5d696bc57623434cc8fa61","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"EXPSRV.DLL","sha256":"fab3743404991e8f965eb8b992c30d7212c82c05a03f49c47b2bbfde7a83a8af","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_lv.dll","sha256":"4eea65c2f96886dc15b6c11328a1914abbc50de489ca74196ee7286386d35ab4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"jusched.exe","sha256":"9648d09dc0d43b5d0f2cec2b6623c845e48c48dbcac350a83f88a5aaf203585f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"name":"goopdateres_gu.dll","sha256":"a80daf0678ab302dd4371c5916626a4d1f24b5bb38fc8388ab47289258ede4c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]}],"files_written":[{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"C:\\276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba.exe.config","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\51e2934144ba15628ba5a31be2dae7dc\\mscorlib.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\mscorlib.dll","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\d1265d6159ea876f9d63ea4c1361b587\\mscorlib.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\assembly\\pubpol47.dat","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\System\\250e8e6af918e7ca66787117bc8633e3\\System.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v4.0.30319\\sortdefault.nlp","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\8990487b8c05ada1e1febe7dcb6c0410\\System.Windows.Forms.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\24db7e31c7ba5b0e824e2f521c0914bc\\System.Drawing.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%LOCALAPPDATA%\\GDIPFONTCACHEV1.DAT","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\marlett.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\arialbi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\batang.ttc","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cour.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\couri.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\courbd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\courbi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\daunpenh.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\dokchamp.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\estre.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\euphemia.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\gautami.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\gautamib.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\Vani.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\Vanib.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\gulim.ttc","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\impact.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\iskpota.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\iskpotab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\kalinga.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\kalingab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\kartika.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\kartikab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\KhmerUI.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\KhmerUIb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\LaoUI.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\LaoUIb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\latha.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\lathab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\lucon.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\malgun.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\malgunbd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\mangal.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\mangalb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\meiryo.ttc","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\meiryob.ttc","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\himalaya.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\msjh.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\msjhbd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\msyh.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\msyhbd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\mingliu.ttc","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\mingliub.ttc","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\monbaiti.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\msgothic.ttc","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\msmincho.ttc","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\mvboli.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ntailu.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ntailub.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\nyala.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\phagspa.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\phagspab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\plantc.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\raavi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\raavib.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\segoesc.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\segoescb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\segoeui.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\segoeuib.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\segoeuii.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\segoeuiz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\seguisb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\segoeuil.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\seguisym.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\shruti.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\shrutib.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\simsun.ttc","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\simsunb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\sylfaen.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\taile.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\taileb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\timesi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\timesbi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\tunga.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\tungab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\vrinda.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\vrindab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\Shonar.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\Shonarb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\msyi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\tahoma.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\tahomabd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\micross.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\angsa.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\angsai.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\angsab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\angsaz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\aparaj.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\aparajb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\aparajbi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\aparaji.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cordia.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cordiai.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cordiab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cordiaz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ebrima.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ebrimabd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\gisha.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\gishabd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\kokila.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\kokilab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\kokilabi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\kokilai.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\leelawad.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\leelawdb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\msuighur.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\moolbor.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\symbol.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\utsaah.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\utsaahb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\utsaahbi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\utsaahi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\vijaya.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\vijayab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\wingding.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\modern.fon","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\roman.fon","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\script.fon","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\andlso.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\arabtype.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\simpo.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\simpbdo.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\simpfxo.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\majalla.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\majallab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\trado.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\tradbdo.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ahronbd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\david.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\davidbd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\frank.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\lvnm.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\lvnmbd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\mriam.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\mriamc.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\nrkis.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\rod.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\simfang.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\simhei.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\simkai.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\angsau.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\angsaui.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\angsaub.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\angsauz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\browa.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\browai.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\browab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\browaz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\browau.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\browaui.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\browaub.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\browauz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cordiau.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cordiaub.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cordiauz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cordiaui.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcdl.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcdi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcdb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcdbi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcel.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcei.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upceb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcebi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcfl.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcfi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcfb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcfbi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcil.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcii.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcib.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcibi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcjl.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcji.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcjb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcjbi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upckl.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcki.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upckb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upckbi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcll.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upcli.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upclb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\upclbi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\kaiu.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\l_10646.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\calibri.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\calibrii.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\calibrib.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\calibriz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cambria.ttc","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cambriai.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cambriab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\cambriaz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\Candara.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\Candarai.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\Candarab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\Candaraz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\comic.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\comicbd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\consola.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\consolai.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\consolab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\consolaz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\constan.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\constani.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\constanb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\constanz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\corbel.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\corbeli.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\corbelb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\corbelz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\framd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\framdit.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\Gabriola.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\georgia.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\georgiai.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\georgiab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\georgiaz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\pala.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\palai.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\palab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\palabi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\segoepr.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\segoeprb.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\trebuc.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\trebucit.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\trebucbd.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\trebucbi.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\verdana.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\verdanai.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\verdanab.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\verdanaz.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\webdings.ttf","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\coure.fon","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\serife.fon","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\sserife.fon","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\smalle.fon","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\smallf.fon","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\HATTEN.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ANTQUAB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ANTQUABI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ANTQUAI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BKANT.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GOTHIC.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GOTHICB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GOTHICBI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GOTHICI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ARIALN.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ARIALNB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ARIALNBI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ARIALNI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GARA.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GARABD.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GARAIT.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\MTCORSVA.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\AGENCYB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\AGENCYR.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ARLRDBD.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ITCBLKAD.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOD_B.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOD_BI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOD_I.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOD_R.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOD_BLAI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOD_BLAR.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOD_CB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOD_CBI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOD_CI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOD_CR.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOOKOS.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOOKOSB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOOKOSBI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BOOKOSI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\BRADHITC.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\CALIST.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\CALISTB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\CALISTBI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\CALISTI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\CASTELAR.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\CENSCBK.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\SCHLBKB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\SCHLBKBI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\SCHLBKI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\COPRGTB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\COPRGTL.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\CURLZ___.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ITCEDSCR.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ELEPHNT.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ELEPHNTI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ENGR.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ERASBD.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ERASDEMI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ERASLGHT.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\ERASMD.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\FELIXTI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\FORTE.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\FRABK.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\FRABKIT.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\FRADM.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\FRADMIT.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\FRADMCN.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\FRAHV.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\FRAHVIT.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\FRAMDCN.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\FRSCRIPT.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GIGI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GILBI___.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GILB____.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GILI____.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GIL_____.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GILC____.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GILSANUB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GILLUBCD.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GLSNECB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GLECB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GOUDOS.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GOUDOSB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GOUDOSI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\GOUDYSTO.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\IMPRISHA.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\LSANS.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\LSANSD.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\LSANSDI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\LSANSI.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\LTYPE.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\LTYPEB.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\LTYPEBO.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\LTYPEO.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\MAIAN.TTF","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\System32\\en-US\\user32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\75790ba48ebfa82fae7da9a114bc9886\\System.Core.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"C:\\276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba.exe","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"C:\\$Recycle.Bin\\S-1-5-21-4162757579-3804539371-4239455898-1000\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"path":"%PROGRAMFILES%\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\GDIPLUS\\","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"key":"HKCU\\SOFTWARE\\DEVELOPED BY GEHAN FERNANDO.\\IT.BOOKS\\1.0.0.0\\","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"key":"HKCU\\SOFTWARE\\","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"key":"HKCU\\SOFTWARE\\DEVELOPED BY GEHAN FERNANDO.\\","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]},{"key":"HKCU\\SOFTWARE\\DEVELOPED BY GEHAN FERNANDO.\\IT.BOOKS\\","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IT.Books","sources":[{"report_type":"sandbox","report_id":"5bb610067ca3e16a6d292163"}]}]}},"report_ids":{"sandbox_job_ids":["5bb610067ca3e16a6d292163"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Malicious Trojan.Generic Sample 276f58fe4bc0… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 276f58fe4bc0…. Malware family: Trojan.Generic. Threat score 100/100. 17/28 AV engines flagged this file. 3 malicious and 12 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba"}],["$","meta","4",{"property":"og:title","content":"Malicious Trojan.Generic Sample 276f58fe4bc0… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 276f58fe4bc0…. Malware family: Trojan.Generic. Threat score 100/100. 17/28 AV engines flagged this file. 3 malicious and 12 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/276f58fe4bc0013964144969e2724a39a484f5f2c0a5cfeca71d8042cf397eba"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Trojan.Generic Sample 276f58fe4bc0… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 276f58fe4bc0…. Malware family: Trojan.Generic. Threat score 100/100. 17/28 AV engines flagged this file. 3 malicious and 12 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2a","11",{}]]