25:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2b:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 26:T632,"urlblockindex_1_.bin" has type "data" "6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442" has type "data" "6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04" has type "data" "KFOlCnqEu92Fr1MmEU9fBBc-_1_.woff" has type "Web Open Font Format flavor 65536 length 20464 version 1.1" "KFOjCnqEu92Fr1Mu51TzBic6CsI_1_.woff" has type "Web Open Font Format flavor 65536 length 21588 version 1.1" "CC197601BE0898B7B0FCC91FA15D8A69_ADD956C4A492A9C2AEB51B34755AD8CF" has type "data" "YACRFSUZ.txt" has type "ASCII text" "BE8B021F9E811DFC8C8A28572A17C05A_709E716BA5ABCB26F24CBCFD9BBD6436" has type "data" "CC197601BE0898B7B0FCC91FA15D8A69_6E3565ABCB0C30FAE01EEA80CB48BD07" has type "data" "CC197601BE0898B7B0FCC91FA15D8A69_FC361BBD46D38B8D53C8F7064E1947CE" has type "data" "KFOlCnqEu92Fr1MmSU5fBBc-_1_.woff" has type "Web Open Font Format flavor 65536 length 20348 version 1.1" "en-US.3" has type "data" "MKG6EWVV.txt" has type "ASCII text" "background_gradient_1_" has type "JPEG image data JFIF standard 1.02 aspect ratio density 100x100 segment length 16 baseline precision 8 1x800 frames 3" "~DFBEFB5FDB7C8B69E1.TMP" has type "data" "KFOkCnqEu92Fr1Mu51xIIzQ_1_.woff" has type "Web Open Font Format flavor 65536 length 21952 version 1.1" "KFOlCnqEu92Fr1MmEU9fBBc-_1_.woff" has type "Web Open Font Format flavor 65536 length 20012 version 1.1" "9WBPDOE6.txt" has type "ASCII text" "favicon_2_.ico" has type "PNG image data 16 x 16 4-bit colormap non-interlaced" "CC197601BE0898B7B0FCC91FA15D8A69_982D5E192D42C6345564548338F5DE54" has type "data"27:T292d,Pattern match: "https://youtu.be/PseQkDGs_FM" Pattern match: "https://youtu.be" Heuristic match: "fonts.googleapis.com" Heuristic match: "fonts.gstatic.com" Heuristic match: "googleads.g.doubleclick.net" Heuristic match: "i.ytimg.com" Heuristic match: "r2---sn-vgqsrnll.googlevideo.com" Heuristic match: "static.doubleclick.net" Pattern match: "www.gstatic.com" Pattern match: "www.youtube.com" Heuristic match: "youtu.be" Heuristic match: "yt3.ggpht.com" Pattern match: "https://www.youtube.com/watch?v=PseQkDGs_FM&feature=youtu.be" Pattern match: "http://www.apache.org/licenses/LICENSE-2.0" Pattern match: "http://www.w3.org/1999/xhtml,div" Pattern match: "http://a/c%20d===r.href}catch(v){}}if(Q.ra)return" Pattern match: "http://polymer.github.io/LICENSE.txt" Heuristic match: "r(a=Array.from(a.querySelectorAll(*)).filter(function(f){return Rg(f).shadowRoot}),b=0;b\n\n\n\n

\n \n _HashTable_Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\IsoScope_ebc_IESQMMUTEX_0_303\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"iexplore.exe\" (UID: 00064016-00003772) was launched with new environment variables: \"PATH=\"%PROGRAMFILES%\\Internet Explorer;\"\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"iexplore.exe\" with commandline \"https://youtu.be/PseQkDGs_FM\" (UID: 00064016-00003772)\n Spawned process \"iexplore.exe\" with commandline \"SCODEF:3772 CREDAT:275457 /prefetch:2\" (UID: 00064041-00003644)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"level":"informative","category":"General","name":"Spawns new processes that are not known child processes","description":"Spawned process \"iexplore.exe\" with commandline \"https://youtu.be/PseQkDGs_FM\" (UID: 00064016-00003772)\n Spawned process \"iexplore.exe\" with commandline \"SCODEF:3772 CREDAT:275457 /prefetch:2\" (UID: 00064041-00003644)","origin":"Monitored Target","relevance":3,"id":"target-103","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$26","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$27","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found a reference to a known community page","description":"$28","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"level":"informative","category":"Unusual Characteristics","name":"Installs hooks/patches the running process","description":"$29","origin":"Hook Detection","mitre_attack_id":"T1179","relevance":10,"id":"hooks-8","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 172.217.15.78 on port 443 is sent without HTTP header\n TCP traffic to 172.217.15.99 on port 80 is sent without HTTP header\n TCP traffic to 172.217.2.110 on port 443 is sent without HTTP header\n TCP traffic to 172.217.7.202 on port 443 is sent without HTTP header\n TCP traffic to 172.217.164.150 on port 443 is sent without HTTP header\n TCP traffic to 172.217.9.195 on port 443 is sent without HTTP header\n TCP traffic to 172.217.129.103 on port 443 is sent without HTTP header\n TCP traffic to 172.217.9.205 on port 443 is sent without HTTP header\n TCP traffic to 172.217.13.226 on port 443 is sent without HTTP header\n TCP traffic to 172.217.7.129 on port 443 is sent without HTTP header\n TCP traffic to 172.253.122.106 on port 443 is sent without HTTP header\n TCP traffic to 172.217.8.6 on port 443 is sent without HTTP header\n TCP traffic to 172.217.2.99 on port 443 is sent without HTTP header","origin":"Network Traffic","mitre_attack_id":"T1043","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 11 domains and 11 hosts"}],"sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":33,"imported_dlls_count":142,"dropped_files_count":0,"extracted_files_count":48,"files_written_count":219,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":14,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":14,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":13,"dns_resolutions_count":11,"contacted_urls_count":11,"http_requests_count":11},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"5f93dcf5200fdc66b01a0af5","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"341f6f2a19038e3169a9dffc356e8f000d7ada1008138ccb70a35bf20807617d.url","analysis_start_time":"2020-10-24T07:51:25+00:00","indicators_count":{"informative":12,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"172.217.15.78","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"address":"172.217.15.99","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"address":"172.217.2.110","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"address":"172.217.7.202","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"address":"172.217.164.150","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"address":"172.217.9.195","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"address":"172.217.129.103","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"address":"172.217.9.205","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"address":"172.217.13.226","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"address":"172.217.7.129","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"address":"172.253.122.106","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"address":"172.217.8.6","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"address":"172.217.2.99","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]}],"dns_resolutions":[{"domain":"fonts.googleapis.com","address":"172.217.6.42","ttl":185,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"domain":"fonts.gstatic.com","address":"172.217.164.99","ttl":210,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"domain":"googleads.g.doubleclick.net","address":"172.217.0.34","ttl":299,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"domain":"i.ytimg.com","address":"216.58.194.182","ttl":299,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"domain":"ocsp.pki.goog","address":"172.217.15.99","ttl":56,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"domain":"r2---sn-vgqsrnll.googlevideo.com","address":"172.217.129.103","ttl":1799,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"domain":"static.doubleclick.net","address":"216.58.195.70","ttl":16536,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"domain":"www.gstatic.com","address":"172.217.164.99","ttl":299,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"domain":"www.youtube.com","address":"172.217.6.78","ttl":17619,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"domain":"youtu.be","address":"216.58.194.206","ttl":299,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"domain":"yt3.ggpht.com","address":"172.217.164.97","ttl":15596,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]}],"http_requests":[{"host":"ocsp.pki.goog","host_ip":"172.217.15.99:80","url":"/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D","method":"GET","header":"GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.15.99:80","url":"/gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQDSnwmNSWtELwgAAAAAXcGx","method":"GET","header":"GET /gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQDSnwmNSWtELwgAAAAAXcGx HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.15.99:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEFdRKRguoh2MCAAAAABdwf0%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEFdRKRguoh2MCAAAAABdwf0%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.15.99:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEFxzHFVMkzzTAgAAAAB9mAs%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEFxzHFVMkzzTAgAAAAB9mAs%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.15.99:80","url":"/gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEDNqbh5sWZsiCAAAAABfE5I%3D","method":"GET","header":"GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEDNqbh5sWZsiCAAAAABfE5I%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.15.99:80","url":"/gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQD6dnW313dJuggAAAAAXcH8","method":"GET","header":"GET /gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQD6dnW313dJuggAAAAAXcH8 HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.15.99:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEEakSefn0RHKAgAAAAB9mgc%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEEakSefn0RHKAgAAAAB9mgc%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.15.99:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEBHHklXGCJy8AgAAAAB9mX8%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEBHHklXGCJy8AgAAAAB9mX8%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.15.99:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEFrdivToW3GTCAAAAABdwfA%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEFrdivToW3GTCAAAAABdwfA%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.15.99:80","url":"/gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQCy%2Fj9mrER8nwIAAAAAfZoD","method":"GET","header":"GET /gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQCy%2Fj9mrER8nwIAAAAAfZoD HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.15.99:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEBM9dFlBF5mcAgAAAAB9mX4%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEBM9dFlBF5mcAgAAAAB9mX4%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}],"processes":[{"pid":2736,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\341f6f2a19038e3169a9dffc356e8f000d7ada1008138ccb70a35bf20807617d.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00063877-00002736","icon":"$2a"},{"pid":3772,"ppid":2736,"name":"iexplore.exe","command_line":"https://youtu.be/PseQkDGs_FM","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00063877-00002736","uid":"00064016-00003772"},{"pid":3644,"ppid":3772,"name":"iexplore.exe","command_line":"SCODEF:3772 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00064016-00003772","uid":"00064041-00003644"}],"all_imported_dlls":["nsi.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","wintrust.dll","msimg32.dll","msimtf.dll","winmm.dll","ksuser.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","ieframe.dll","clbcatq.dll","FWPUCLNT.DLL","d3d10warp.dll","imagehlp.dll","oleaut32.dll","KernelBase.dll","normaliz.dll","credssp.dll","cscapi.dll","profapi.dll","WindowsCodecs.dll","jsIntl.dll","usp10.dll","winhttp.dll","oleacc.dll","d2d1.dll","shlwapi.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","uxtheme.dll","webio.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","mf.dll","UIAnimation.dll","cryptsp.dll","gpapi.dll","samlib.dll","sspicli.dll","cryptnet.dll","rpcss.dll","iertutil.dll","dnsapi.dll","MSOHEV.DLL","mscoree.dll","Wpc.dll","comdlg32.dll","DWrite.dll","atl.dll","jp2ssv.dll","api-ms-win-downlevel-user32-l1-1-0.dll","mscorwks.dll","shell32.dll","mshtml.dll","dxgi.dll","mfplat.dll","kernel32.dll","netapi32.dll","d3d11.dll","powrprof.dll","advapi32.dll","devobj.dll","propsys.dll","apphelp.dll","msvcr90.dll","lpk.dll","user32.dll","dui70.dll","ntmarta.dll","mshtmlmedia.dll","msxml3r.dll","version.dll","msctf.dll","dwmapi.dll","mswsock.dll","WSHTCPIP.DLL","crypt32.dll","msvcrt.dll","gdi32.dll","mscoreei.dll","ntshrui.dll","sqmapi.dll","secur32.dll","oleaccrc.dll","api-ms-win-core-timezone-l1-1-0.dll","api-ms-win-downlevel-version-l1-1-0.dll","winnsi.dll","wkscli.dll","msasn1.dll","sechost.dll","ieproxy.dll","comctl32.dll","xmllite.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","cryptbase.dll","userenv.dll","api-ms-win-core-synch-l1-2-0.dll","Wldap32.dll","ssv.dll","deploy.dll","netprofm.dll","bcrypt.dll","ws2_32.dll","duser.dll","wshqos.dll","ieui.dll","IEShims.dll","rasadhlp.dll","setupapi.dll","cfgmgr32.dll","wevtapi.dll","dhcpcsvc.dll","sxs.dll","samcli.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","wship6.dll","netutils.dll","rpcrt4.dll","ExplorerFrame.dll","jscript9.dll","ncrypt.dll","urlmon.dll","msxml3.dll","ole32.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","imm32.dll","RpcRtRemote.dll","msvcr100.dll","schannel.dll","SensApi.dll","URLREDIR.DLL","npctrl.dll","slc.dll","IPHLPAPI.DLL","dhcpcsvc6.dll","SwDir_1231201.dll","avrt.dll","rsaenh.dll","npmproxy.dll","bcryptprimitives.dll","srvcli.dll","mlang.dll","nlaapi.dll","linkinfo.dll","wininet.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"23KTEMRO.txt","sha256":"47169e6b7f3715a82fb2ebf25c0298f02cf77ba413242f301c2eb956997889a6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"2XZHKX9U.txt","sha256":"7425c00cd12115f4b55262365b63ab21c1c4cb4065401ebdb5308d6180baaa8c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"9QDQ89Z0.txt","sha256":"921fdf48a8c7c0d08914faeb97aa36a7ef4ddaa189e34cbb5a73f3a2738c2fbf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"9WBPDOE6.txt","sha256":"5026ceffe6538bd3300ac9b1806fa40ff130a83fca582f38a72cdddf5e6b5646","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"AUNOVJGK.txt","sha256":"ef2815b0400c2bebef4eccd979e21b1119d0eae496903ecbb704a9eb621588ac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"EWK1FVFH.txt","sha256":"47169e6b7f3715a82fb2ebf25c0298f02cf77ba413242f301c2eb956997889a6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"JO66EJQV.txt","sha256":"ce81c81b4bc9bec154c26b8f9a2fa8ae8063a990416d2f6fdf30f194d6b9d559","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"MKG6EWVV.txt","sha256":"692d2d7ca5a1ef42563b31f790e3ac45dcbf87ed4c17461ffccd921016074fea","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"O1WW4VRO.txt","sha256":"24a921953e9efc1910ae54ae6ac37568dc0f31939704047f297f86f5aa30b719","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"S3PYCQNJ.txt","sha256":"24bb8b78d42ae5a7bd1972119078debaa9d336ebf90fb3ad0d548715e0034b97","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"VKQCA7LT.txt","sha256":"c3ebf48b13334e00c2ecddbb5026a3280e55cd88fc5062a2118fdeffc3476a39","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"WOF33A84.txt","sha256":"06a2a90dfd572710dbc615f020496c879440f7d85e8d67b34e87089b37e91b92","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"X8KODWII.txt","sha256":"f66e943e0d5c746dc763345bddc9a0e13f82da44b438943fc3b241b7d2acad23","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"YACRFSUZ.txt","sha256":"24a921953e9efc1910ae54ae6ac37568dc0f31939704047f297f86f5aa30b719","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"H0S13AJVQN78HER9QL7C.temp","sha256":"faf464279376e1abb3731de85f6e87dda3be8cf2b0984eee9316ca9d69ee0104","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"en-US.3","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"imagestore.dat","sha256":"99c8644f24b8fe8e84a1d8189633d5b0ca6363686c96db20ed2c9ec90086d2a9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442","sha256":"016f682ddaa5466a0f96b4ab6e7bae7bbbd502d294f738de57a8a5d16e4086b7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sha256":"90b84a66c18e278778d2e0a4e972964f0cdbaf95c7fe86e1fbc09979843ea7ea","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sha256":"97ecfda5669a0605f5e5613b8b52a78a4d84d06efdb0bf07dbb29432e5fd30a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_6E3565ABCB0C30FAE01EEA80CB48BD07","sha256":"895c2745cbb0dad7889f333dec5ea9391720e8e98e4ffe0bcaacbad927f5cc6c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_81566544DFBE5400FD86C38E8E987BF4","sha256":"dd8f517390b7561af20532c56d390f59ee43106637f535ded29f1e1f2b21216c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_ADD956C4A492A9C2AEB51B34755AD8CF","sha256":"cb3c4f63965d22b8f26964e2fc83cfbb7bd1571b465c7d327a6feacb76638883","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_BF2C61084B800115ADEB197CBA1F1AC8","sha256":"f84acb616e2a46f5e8446fb780300cf5c3d8b0131352ebac2d54f1cc88fb36a5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_D84D0D5B4E5CABCB7063A427BA9A39B3","sha256":"b0116093df863210a964f445d0bf33d1f9ac13f0797ae3a157a4abc71e33540a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_F9DB3086CC74507D19B83556B5474C09","sha256":"398f1a3148a9311794d0f727b56ce02e201edcc2f46b2157aa754e1b0054e93d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_FC361BBD46D38B8D53C8F7064E1947CE","sha256":"4964b8d62deac3d6812c325a46ec48a61e9eb1524bfba9709018116c3bfa8c74","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"BE8B021F9E811DFC8C8A28572A17C05A_709E716BA5ABCB26F24CBCFD9BBD6436","sha256":"749807ef8d245e68d40897cfc7ab10467f80fad3b0937cc8f0a5e8a8ca2672bd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_6459166B5555C38D4C6BCB5A9FF5DC31","sha256":"e72a8f6185c3c55e9039d313b04f9404e50fa605c74cb4f649548ce8d24530aa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_982D5E192D42C6345564548338F5DE54","sha256":"06fbb5ac2c76c61e86dccc46490ee46dd3fd2eb4a600b6c7d233969b847a05e2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"CFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B","sha256":"e6ec4cd94186a0ead2e2dbc6adeb05ca2ff3fc273e840203058025e2b23317a3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"JavaDeployReg.log","sha256":"b4113e8314d8618a1997a3255bc2ef6850ef936ec08a16328928b3e063b5e73c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"~DF542306F970FE8485.TMP","sha256":"f2f616c6f3f42c7f310f87857f1d51000c32663520635e5215f6ebece96ffe71","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"~DF70C92BA363409065.TMP","sha256":"79c35531e14acd78235b29278bf8efb91360e9e1968e1382c1905f93dd30b726","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"~DF971048F307A377BF.TMP","sha256":"c31da1bcd2c54914b7589dbb5ee55796546ed6e1a1a57b7977a652d60feec013","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"~DFADC19B0A09DB9700.TMP","sha256":"d11622dfec275724decba4104c892c7b32f32b0fe2b7fd276b0e870d238fa7b2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"~DFBEFB5FDB7C8B69E1.TMP","sha256":"b98b59f560e2f3a3163e8e5bff3fba2162cf948d345ebb17fca60cc24bb7f854","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"KFOlCnqEu92Fr1MmEU9fBBc-_1_.woff","sha256":"3bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"KFOjCnqEu92Fr1Mu51TzBic6CsI_1_.woff","sha256":"eec142608e8b417e2acb6e5301a750047a04e2c5a6563223caae499e19ea08ee","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"KFOlCnqEu92Fr1MmSU5fBBc-_1_.woff","sha256":"76b05400fff9da5b43862e3713099e3913916a629560265ed24b19d031227cbf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"background_gradient_1_","sha256":"1471693be91e53c2640fe7baeecbc624530b088444222d93f2815dfce1865d5b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"KFOkCnqEu92Fr1Mu51xIIzQ_1_.woff","sha256":"80815efe3bd9317c666df0f2e6d701335e178954f64eb1e99103fea81c2aa137","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"favicon_2_.ico","sha256":"6d8a01dc7647bc218d003b58fe04049e24a9359900b7e0cebae76edf85b8b914","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"KFOjCnqEu92Fr1Mu51S7ACc6CsI_1_.woff","sha256":"6f2974a396dc0695d071e842551e7af9c72f0ef8d2d076fe73a523b1a3c2d0e7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"6d8a01dc7647bc218d003b58fe04049e24a9359900b7e0cebae76edf85b8b914","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"httpErrorPagesScripts_1_","sha256":"46e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"KFOlCnqEu92Fr1MmWUlfBBc-_1_.woff","sha256":"806ea46c426af8fc24e5cf42a210228739696933d36299eb28aee64f69fc71f1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]}],"files_written":[{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\en\\iexplore.exe.mui","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%TEMP%\\~DF971048F307A377BF.TMP","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%PROGRAMFILES%\\MICROS~3\\Office14\\URLREDIR.DLL","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\plugin.jar","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\bin\\javaws.exe","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\ieframe.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CFE86DBBE02D859DC92F1E17E0574EE8_5FA8E5E800867BF860DF5E533E701BAF","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\85B3F147E3624A14E6A20DB4F6C2C5D9","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01}","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_982D5E192D42C6345564548338F5DE54","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_178070FBD21252F98315114C538062B9","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC4FEA46495CA161D470CD085EDBAADE","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\rundll32.exe","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\AppPatch\\AcLayers.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_982D5E192D42C6345564548338F5DE54","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\en-US\\rundll32.exe.mui","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"C:\\341f6f2a19038e3169a9dffc356e8f000d7ada1008138ccb70a35bf20807617d.url","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"C:\\https:\\youtu.be\\PseQkDGs_FM","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%TEMP%\\~amqtspi.tmp","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\en-US\\jscript9.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DOMStore\\HVI1ZDNF\\www.youtube[1].xml","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{2EFBB183-15BD-11EB-98F2-080027CBF838}.dat","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CI1NEHIQ.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\Fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_6459166B5555C38D4C6BCB5A9FF5DC31","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_23D6638C6BA208D23B19D04239FC42D6","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\BE8B021F9E811DFC8C8A28572A17C05A_709E716BA5ABCB26F24CBCFD9BBD6436","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\BE8B021F9E811DFC8C8A28572A17C05A_3069879987BBBA41920B7D6874570E62","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\521F25E202FF760B8461B88413F425E7","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[3].ico","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\BE8B021F9E811DFC8C8A28572A17C05A_709E716BA5ABCB26F24CBCFD9BBD6436","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\KFOjCnqEu92Fr1Mu51S7ACc6CsI[1].woff","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\KFOkCnqEu92Fr1Mu51xIIzQ[1].woff","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_D84D0D5B4E5CABCB7063A427BA9A39B3","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\ErrorPageTemplate[1]","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\errorPageStrings[1]","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\httpErrorPagesScripts[1]","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\red_x[1]","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\bullet[1]","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\background_gradient[1]","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%TEMP%\\~DF70C92BA363409065.TMP","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active\\{40B08794-15BE-11EB-98F2-080027CBF838}.dat","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%TEMP%\\~DFBEFB5FDB7C8B69E1.TMP","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\en-US\\oleaccrc.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\CustomDestinations","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{38BEEA89-15BD-11EB-98F2-080027CBF838}.dat","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%TEMP%\\~DF542306F970FE8485.TMP","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\KFOjCnqEu92Fr1Mu51TzBic6CsI[1].woff","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\KFOmCnqEu92Fr1Mu4mxM[1].woff","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\KFOlCnqEu92Fr1MmWUlfBBc-[1].woff","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\KFOkCnqEu92Fr1Mu51xIIzQ[1].woff","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\KFOjCnqEu92Fr1Mu51S7ACc6CsI[1].woff","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000027.db","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"C:\\Users","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%USERPROFILE%\\AppData","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\en-US\\shell32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon_32[1].png","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\Fonts\\micross.ttf","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\Fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_BF2C61084B800115ADEB197CBA1F1AC8","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_BF2C61084B800115ADEB197CBA1F1AC8","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\O1WW4VRO.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\23KTEMRO.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WOF33A84.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NIFFDOLS.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\Macromed\\Flash\\Flash32_27_0_0_187.ocx","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%PROGRAMFILES%\\Microsoft Silverlight\\5.1.50907.0\\npctrl.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\suggestions[1].en-US","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9WBPDOE6.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\S3PYCQNJ.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_49FC544F04082FD9F64F9EFB226AF8B5","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VG8BU31O.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IYXGE11F.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HGEILYKK.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_FC361BBD46D38B8D53C8F7064E1947CE","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\1F2HR9E2\\ad_status[1].js","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active\\RecoveryStore.{88B090C0-D917-11E7-B67B-080027A49DD6}.dat","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%PROGRAMFILES%\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"C:\\Program Files","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%PROGRAMFILES%\\Internet Explorer","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%TEMP%\\~DF3E480976CB7906AE.TMP","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\CustomDestinations\\H0S13AJVQN78HER9QL7C.temp","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms~RF120373.TMP","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\UrlBlockManager\\urlblocklist.bin","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Low","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Low","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\Low","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Internet Explorer\\UserData\\Low","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Tracking Protection","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Feeds","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\TabRoaming","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\PlayReady","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE\\Low","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException\\Low","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache\\Low","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache\\Low","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%TEMP%\\Low","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\en-US\\user32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\stdole2.tlb","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{2EFBB185-15BD-11EB-98F2-080027CBF838}.dat","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%TEMP%\\~DFADC19B0A09DB9700.TMP","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FLNQ3VVL.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%USERPROFILE%\\Favorites\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MKG6EWVV.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VKQCA7LT.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YACRFSUZ.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\watch[1].htm","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_00AAF7B935F50A7BF71BC62840B3ACC2","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_81566544DFBE5400FD86C38E8E987BF4","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_81566544DFBE5400FD86C38E8E987BF4","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\css[1].css","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_CFAA33A1B759632B5D5D54C9853E8EC6","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_6E3565ABCB0C30FAE01EEA80CB48BD07","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_6E3565ABCB0C30FAE01EEA80CB48BD07","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\msxml3r.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3S9Q96YC.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_A7A8E86FCB076C144BD04C40841E7074","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\82CB34DD3343FE727DF8890D352E0D8F","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\favicon[1].png","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\favicon[2].png","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D3Q9TF2C.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DYBRXUFE.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_6459166B5555C38D4C6BCB5A9FF5DC31","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\Fonts\\seguisym.ttf","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\KFOmCnqEu92Fr1Mu4mxM[1].woff","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_6EC8BCC394F4AF5F0D37485B16EF0014","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_D84D0D5B4E5CABCB7063A427BA9A39B3","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EWK1FVFH.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\ServiceLogin[1].htm","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\forbidframing[1]","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\css[1].css","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\css[1].css","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\KFOjCnqEu92Fr1Mu51TjASc6CsI[1].woff","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\KFOlCnqEu92Fr1MmSU5fBBc-[1].woff","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"C:\\share","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\imagestore\\3mt7jhv\\imagestore.dat","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\404HCFVH.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_1979CF9648F19DE1D3311C41C0E68491","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9QDQ89Z0.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe.config","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%WINDIR%\\System32\\Adobe\\Director\\SwDir_1231201.dll","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JO66EJQV.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.3","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.2","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AUNOVJGK.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_8FB29C35032AE1827A2754ED35D7F2E8","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X8KODWII.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2XZHKX9U.txt","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\search[1].json","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_B92857529FAC9DABAF234636A86D900E","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_F9DB3086CC74507D19B83556B5474C09","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_F9DB3086CC74507D19B83556B5474C09","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\channels4_profile[1].jpg","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\unnamed[1].jpg","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_A4E4931D8760281A69283B525C90574A","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_FC361BBD46D38B8D53C8F7064E1947CE","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_835600940BDF0E3AEEBF0FA84D4FDFC4","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_ADD956C4A492A9C2AEB51B34755AD8CF","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_ADD956C4A492A9C2AEB51B34755AD8CF","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]}],"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\ADMINACTIVE\\{00000000-0000-0000-0000-000000000000}\\{00000000-0000-0000-0000-000000000000}","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TABBEDBROWSING\\NEWTABPAGE\\MFV\\MFV","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\LOWREGISTRY\\ADDTOFAVORITESINITIALSELECTION\\ADDTOFAVORITESINITIALSELECTION","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\LOWREGISTRY\\ADDTOFEEDSINITIALSELECTION\\ADDTOFEEDSINITIALSELECTION","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_ebc_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"IsoScope_ebc_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"IsoScope_ebc_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"IsoScope_ebc_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3772","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"IsoScope_ebc_IE_EarlyTabStart_0x8ec_Mutex","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"IsoScope_ebc_ConnHashTable<3772>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_ebc_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_ebc_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_ebc_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\https://www.youtube.com/","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"Local\\https://www.youtube.com/","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"IsoScope_ebc_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5f93dcf5200fdc66b01a0af5"}]}]}},"report_ids":{"sandbox_job_ids":["5f93dcf5200fdc66b01a0af5"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 341f6f2a1903… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 341f6f2a1903…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/341f6f2a19038e3169a9dffc356e8f000d7ada1008138ccb70a35bf20807617d"}],["$","meta","4",{"property":"og:title","content":"Sample 341f6f2a1903… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 341f6f2a1903…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/341f6f2a19038e3169a9dffc356e8f000d7ada1008138ccb70a35bf20807617d"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 341f6f2a1903… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 341f6f2a1903…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2b","11",{}]]