24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 2e:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T489,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic Sample 3d615c210add… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 3d615c210add…. Malware family: Trojan.Generic. Threat score 100/100. 25/27 AV engines flagged this file. 18 malicious and 21 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511","keywords":["Malicious","Trojan.Generic","malware analysis","sandbox report","threat intelligence","3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511"],"about":{"@type":"SoftwareApplication","name":"bars.exe.bin","applicationCategory":["peexe","executable"],"identifier":"3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.Generic","antivirusDetections":{"malicious":25,"total":27},"behavioralIndicators":{"malicious":18,"suspicious":21},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T757,Spawned process "" (UID: 00008688-00001600) Spawned process "cmd.exe" with commandline "/C sc stop VVS" (UID: 00008842-00001840) Spawned process "cmd.exe" with commandline "/C sc stop wscsvc" (UID: 00008848-00001808) Spawned process "sc.exe" with commandline "sc stop VVS" (UID: 00008854-00003432) Spawned process "cmd.exe" with commandline "/C sc stop WinDefend" (UID: 00008855-00003444) Spawned process "cmd.exe" with commandline "/C sc stop wuauserv" (UID: 00008861-00003472) Spawned process "sc.exe" with commandline "sc stop wscsvc" (UID: 00008862-00000172) Spawned process "sc.exe" with commandline "sc stop WinDefend" (UID: 00008863-00003376) Spawned process "cmd.exe" with commandline "/C sc stop BITS" (UID: 00008873-00003464) Spawned process "sc.exe" with commandline "sc stop wuauserv" (UID: 00008873-00003748) Spawned process "cmd.exe" with commandline "/C sc stop ERSvc" (UID: 00008880-00003172) Spawned process "sc.exe" with commandline "sc stop BITS" (UID: 00008884-00003832) Spawned process "cmd.exe" with commandline "/C sc stop WerSvc" (UID: 00008886-00002280) Spawned process "sc.exe" with commandline "sc stop ERSvc" (UID: 00008887-00003808) Spawned process "cmd.exe" with commandline "/C vssadmin.exe Delete Shadows /All /Quiet" (UID: 00008895-00003152) Spawned process "cmd.exe" with commandline "/C bcdedit /set {default} recoveryenabled No" (UID: 00008901-00003840) Spawned process "sc.exe" with commandline "sc stop WerSvc" (UID: 00008902-00003856) Spawned process "vssadmin.exe" with commandline "Delete Shadows /All /Quiet" (UID: 00008907-00001548) Spawned process "cmd.exe" with commandline "/C bcdedit /set {default} bootstatuspolicy ignoreallfailures" (UID: 00008911-00002464) Spawned process "bcdedit.exe" with commandline "bcdedit /set {default} bootstatuspolicy ignoreallfailures" (UID: 00008914-00001624)26:T570,"All your files have been encrypted! If you want to restore them, write us to the e-mail : ms.heisenberg@aol.com Write this ID in the title of your message DECRYPT-ID-%s number number In case of no answer in 48 hours write us to theese e-mails : ms.hei" (Source: 1976-2-00403DA2, Indicator: "files have been encrypted") "All your files have been encrypted! If you want to restore them, write us to the e-mail : ms.heisenberg@aol.com Write this ID in the title of your message DECRYPT-ID-%s number number In case of no answer in 48 hours write us to theese e-mails : ms.heisenberg@aol.com You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. Free decryption as guarantee Before paying you can send us up to 1 files for free decryption. The total size of files must be less than 2 Mb (non archived), and files should not contain valuable information. (databases,backups, large excel sheets, etc.) How to obtain Bitcoins The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. https://localbitcoins.com/buy_bitcoins Also you can find other places to buy Bitcoins and beg" (Source: 00008688-00001600.00000002.12849.00400000.00000040.mdmp, Indicator: "files have been encrypted")27:Tb18,"C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\autoexec.bat" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Documents\Database1.accdb" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Documents\desktop.ini" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Documents\hancom\Hancom Office 2010 SE (English Edition) - 3PC-1User (Download) Keys.html" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Documents\Outlook Files\Outlook.pst" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\0YdED8h4YnKljVf.doc" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\1EZRu.mp3" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\1fdX8.pdf" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\1LoWM7zNlVq8h.exe" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\1oVe9N.rar" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\277bXg4CG57uAf.img" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\2cyQ5WrZIMwQA34V.mp3" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\2HUxjyFppKjP.avi" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\3J2RchD9D4fmlFY.mp3" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\3kNG.exe" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\3NHgn51R.rar" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\5BYgNUOG.rar" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\5DvnwUIjh.img" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\5r3TtriqI.rar" for deletion "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" marked "C:\Users\%OSUSER%\Downloads\651ACb.pdf" for deletion28:T44e,"" opened "C:\autoexec.bat" with delete access "" opened "C:\Recovery\cf812052-d863-11e7-ae2b-a9d1a6f40333\Winre.wim" with delete access "" opened "C:\Users\CYhInaR\ntuser.ini" with delete access "" opened "C:\Users\CYhInaR\Contacts\%OSUSER%.contact" with delete access "" opened "C:\Users\CYhInaR\Documents\Database1.accdb" with delete access "" opened "C:\Users\CYhInaR\Documents\desktop.ini" with delete access "" opened "C:\Users\CYhInaR\Documents\Amazon Downloader Logs\Amazon_Downloader_Log_20171206-225712_1810e9e0-1a8d-457c-be3a-737de50dc6bb.txt" with delete access "" opened "C:\Users\CYhInaR\Documents\hancom\Hancom Office 2010 SE (English Edition) - 3PC-1User (Download) Keys.html" with delete access "" opened "C:\Users\CYhInaR\Documents\Outlook Files\Outlook.pst" with delete access "" opened "C:\Users\CYhInaR\Downloads\0n7WBcx6F.rar" with delete access "" opened "C:\Users\CYhInaR\Downloads\0NmJH6i8.gif" with delete access29:T4f5,"" wrote 32 bytes to a remote process "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" (Handle: 76) "" wrote 52 bytes to a remote process "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" (Handle: 76) "" wrote 4 bytes to a remote process "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" (Handle: 76) "" wrote 1024 bytes to a remote process "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" (Handle: 76) "" wrote 16896 bytes to a remote process "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" (Handle: 76) "" wrote 6656 bytes to a remote process "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" (Handle: 76) "" wrote 8192 bytes to a remote process "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" (Handle: 76) "" wrote 512 bytes to a remote process "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" (Handle: 76) "" wrote 2560 bytes to a remote process "C:\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe" (Handle: 76)2a:T808,Spawned process "" (UID: 00008429-00003048) Spawned process "" (UID: 00008688-00001600) Spawned process "cmd.exe" with commandline "/C sc stop VVS" (UID: 00008842-00001840) Spawned process "cmd.exe" with commandline "/C sc stop wscsvc" (UID: 00008848-00001808) Spawned process "sc.exe" with commandline "sc stop VVS" (UID: 00008854-00003432) Spawned process "cmd.exe" with commandline "/C sc stop WinDefend" (UID: 00008855-00003444) Spawned process "cmd.exe" with commandline "/C sc stop wuauserv" (UID: 00008861-00003472) Spawned process "sc.exe" with commandline "sc stop wscsvc" (UID: 00008862-00000172) Spawned process "sc.exe" with commandline "sc stop WinDefend" (UID: 00008863-00003376) Spawned process "cmd.exe" with commandline "/C sc stop BITS" (UID: 00008873-00003464) Spawned process "sc.exe" with commandline "sc stop wuauserv" (UID: 00008873-00003748) Spawned process "cmd.exe" with commandline "/C sc stop ERSvc" (UID: 00008880-00003172) Spawned process "sc.exe" with commandline "sc stop BITS" (UID: 00008884-00003832) Spawned process "cmd.exe" with commandline "/C sc stop WerSvc" (UID: 00008886-00002280) Spawned process "sc.exe" with commandline "sc stop ERSvc" (UID: 00008887-00003808) Spawned process "cmd.exe" with commandline "/C vssadmin.exe Delete Shadows /All /Quiet" (UID: 00008895-00003152) Spawned process "cmd.exe" with commandline "/C bcdedit /set {default} recoveryenabled No" (UID: 00008901-00003840) Spawned process "sc.exe" with commandline "sc stop WerSvc" (UID: 00008902-00003856) Spawned process "vssadmin.exe" with commandline "Delete Shadows /All /Quiet" (UID: 00008907-00001548) Spawned process "cmd.exe" with commandline "/C bcdedit /set {default} bootstatuspolicy ignoreallfailures" (UID: 00008911-00002464) Spawned process "bcdedit.exe" with commandline "bcdedit /set {default} bootstatuspolicy ignoreallfailures" (UID: 00008914-00001624) Spawned process "bcdedit.exe" with commandline "bcdedit /set {default} recoveryenabled No" (UID: 00008915-00001580)2b:T5a0,Found malicious artifacts related to "216.58.209.238" (ASN: , Owner: ): ... URL: http://427.cc/ (AV positives: 1/64 scanned on 06/08/2017 01:39:47) URL: http://037.cc/ (AV positives: 1/64 scanned on 06/08/2017 01:30:20) File SHA256: 29ad05cfac4a84af5f5a0794b9a2abd8681d504df45b76cc4c836b860d35d627 (AV positives: 49/64 scanned on 08/30/2017 02:26:39) File SHA256: cf2b67c944c1f585e4b045c7db6984054571efc5047cd09206368b6a18835f71 (AV positives: 49/64 scanned on 08/30/2017 02:26:37) File SHA256: 5708d39c6365abe8e0bcc9b67dd2d2f6a59118ee9f10f4795e1fbb41ae9fda4e (AV positives: 49/64 scanned on 08/30/2017 02:26:36) File SHA256: 28eaf8d67ecee2f3ff3e0d6731246afb5a9e47829716b504cfa63ba7bce941e1 (AV positives: 49/64 scanned on 08/30/2017 02:24:54) File SHA256: 089b68bb91861ecdb6a52f842c3b530cc5ab1307aefa2e33459109aa7e5bcec3 (AV positives: 49/64 scanned on 08/30/2017 02:22:44) File SHA256: ca0cb18c79f6375c0f23b7d8c952eedb895015078a6d432f63daba0a74b4e206 (Scanned on 05/21/2017 10:02:39) File SHA256: 6802f00cb6d24988176d8820537ee4bb6d01b402f6064526234aab7ed010cdd2 (Scanned on 05/21/2017 04:53:09) File SHA256: ac4822a4bfd0ae6ceeb8af6dede20aa54e131b0f297945573f94d2688396e418 (Scanned on 05/10/2017 04:22:32) File SHA256: 24f82bedf2889708458350b70beeeafcf8126feeb6c35ed822c484e536c1ab24 (Scanned on 05/10/2017 04:08:32) File SHA256: 77654946e9308057ea9a78f8461e4bc82df71dd3251733848525e5273acde8bc (Scanned on 05/10/2017 04:04:21)2c:T5a0,Found malicious artifacts related to "216.58.209.238" (ASN: , Owner: ): ... URL: http://427.cc/ (AV positives: 1/64 scanned on 06/08/2017 01:39:47) URL: http://037.cc/ (AV positives: 1/64 scanned on 06/08/2017 01:30:20) File SHA256: 29ad05cfac4a84af5f5a0794b9a2abd8681d504df45b76cc4c836b860d35d627 (AV positives: 49/64 scanned on 08/30/2017 02:26:39) File SHA256: cf2b67c944c1f585e4b045c7db6984054571efc5047cd09206368b6a18835f71 (AV positives: 49/64 scanned on 08/30/2017 02:26:37) File SHA256: 5708d39c6365abe8e0bcc9b67dd2d2f6a59118ee9f10f4795e1fbb41ae9fda4e (AV positives: 49/64 scanned on 08/30/2017 02:26:36) File SHA256: 28eaf8d67ecee2f3ff3e0d6731246afb5a9e47829716b504cfa63ba7bce941e1 (AV positives: 49/64 scanned on 08/30/2017 02:24:54) File SHA256: 089b68bb91861ecdb6a52f842c3b530cc5ab1307aefa2e33459109aa7e5bcec3 (AV positives: 49/64 scanned on 08/30/2017 02:22:44) File SHA256: ca0cb18c79f6375c0f23b7d8c952eedb895015078a6d432f63daba0a74b4e206 (Scanned on 05/21/2017 10:02:39) File SHA256: 6802f00cb6d24988176d8820537ee4bb6d01b402f6064526234aab7ed010cdd2 (Scanned on 05/21/2017 04:53:09) File SHA256: ac4822a4bfd0ae6ceeb8af6dede20aa54e131b0f297945573f94d2688396e418 (Scanned on 05/10/2017 04:22:32) File SHA256: 24f82bedf2889708458350b70beeeafcf8126feeb6c35ed822c484e536c1ab24 (Scanned on 05/10/2017 04:08:32) File SHA256: 77654946e9308057ea9a78f8461e4bc82df71dd3251733848525e5273acde8bc (Scanned on 05/10/2017 04:04:21)2d:T400,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1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"schema_version":"1.0.15","sha256":"3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1791067238060,"unified_at":"2026-10-03T22:40:38.060Z","metadata":{"hashes":{"sha256":"3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511","sha1":"362852d8a008f3e59b1d2194f7edb9923bada349","md5":"b7615c33349699758035fa509676b693","sha512":"f3037dfe5bd166babd632551568c9c0d337520eca01de45f046fd6321d03e09b1f57a51ced57535ead32088f2820ee1b4da7ab6d63e33dc7464b3124f9608b50","ssdeep":"3072:Gs6jpdtzYIyNqidXYxSp6yVIxTU6izXc:F6j2tMFDYX","ssdeep_chunks":["3072:Gs6jpdt","3072:s6jpdtz","3072:6jpdtzY","3072:jpdtzYI","3072:pdtzYIy","3072:dtzYIyN","3072:tzYIyNq","3072:zYIyNqi","3072:YIyNqid","3072:IyNqidX","3072:yNqidXY","3072:NqidXYx","3072:qidXYxS","3072:idXYxSp","3072:dXYxSp6","3072:XYxSp6y","3072:YxSp6yV","3072:xSp6yVI","3072:Sp6yVIx","3072:p6yVIxT","3072:6yVIxTU","3072:yVIxTU6","3072:VIxTU6i","3072:IxTU6iz","3072:xTU6izX","3072:TU6izXc","6144:Gs6jpdt","6144:s6jpdtz","6144:6jpdtzY","6144:jpdtzYI","6144:pdtzYIy","6144:dtzYIyN","6144:tzYIyNq","6144:zYIyNqi","6144:YIyNqid","6144:IyNqidX","6144:yNqidXY","6144:NqidXYx","6144:qidXYxS","6144:idXYxSp","6144:dXYxSp6","6144:XYxSp6y","6144:YxSp6yV","6144:xSp6yVI","6144:Sp6yVIx","6144:p6yVIxT","6144:6yVIxTU","6144:yVIxTU6","6144:VIxTU6i","6144:IxTU6iz","6144:xTU6izX","6144:TU6izXc","3072:F6j2tMF","3072:6j2tMFD","3072:j2tMFDY","3072:2tMFDYX"],"imphash":"735821cf87846796a9b8f0e076f35d36"},"file_info":{"file_name":"bars.exe.bin","file_type":["peexe","executable"],"file_type_id":"exe","file_size":135168,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1504209201000,"last_seen":1690000900000,"last_multi_scan":1690000900000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":["ransomware"]},"stats":{"av":{"malicious_count":25,"suspicious_count":0,"total_engines":27},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":0},"sandbox_signatures":{"informative_count":19,"suspicious_count":21,"malicious_count":18,"total":58},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Fury.toVW","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"malicious","threat_name":"Backdoor/Win32.Androm","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"malicious","threat_name":"Trojan[Ransom]/Win32.Rack","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"malicious","threat_name":"TR/AD.MalwareCrypter.fadtc","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"malicious","threat_name":"Trojan.Agent.CMGT","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"malicious","threat_name":"Win.Ransomware.Cryptomix-6340263-0","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"malicious","threat_name":"TrojWare.Win32.Ransom.GandCrypt.A","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"malicious","threat_name":"win/malicious_confidence_100% (W)","status":"malicious","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Trojan.Agent.CMGT (B)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"Win32/Filecoder.HydraCrypt.M trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"malicious","threat_name":"HVM:Trojan/Injector.gen!A","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"malicious","threat_name":"Trojan ( 00515beb1 )","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"malicious","threat_name":"Trojan-Ransom.Win32.Fury.lf","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"malicious","threat_name":"Ransomware-GEI!B7615C333496","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Packed2.fkbdbh","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"malicious","threat_name":"Confidence_96","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"malicious","threat_name":"Troj/Ransom-ERT","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"malicious","threat_name":"Ransom_.BF88FB5F","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"malicious","threat_name":"Ransom_.BF88FB5F","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"malicious","threat_name":"W32/Ransom.EMBZ-5342","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Packed2.CHTL","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"malicious","threat_name":"Trojan-Ransom.Fury","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"webrootsmd":{"name":"Webroot SMD","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"malicious","threat_name":"Trojan.Fury.Win32.178","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Trojan.Generic","sources":[{"report_type":"quickscan","report_id":""}]}]},"sandbox_signatures":[{"level":"informative","category":"Anti-Reverse Engineering","name":"Contains ability to register a top-level exception handler (often used as anti-debugging trick)","description":"SetUnhandledExceptionFilter@KERNEL32.dll at 31211-609-00401A8B\n SetUnhandledExceptionFilter@KERNEL32.dll at 31211-332-0040143C\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00008429-00003048-34694-18-004018F8\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00008429-00003048-34694-421-00401A8B\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00008429-00003048-34694-207-0040143C\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00008429-00003048-34694-61-00403C36\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00008688-00001600-1976-7-00405041","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-4","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to query machine time","description":"GetSystemTimeAsFileTime@KERNEL32.DLL at 00008429-00003048-34694-163-004017DA\n GetSystemTimes@KERNEL32.DLL at 00008429-00003048-34694-440-004011F5\n GetSystemTimes@KERNEL32.DLL at 00008429-00003048-34694-142-00401000","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-2","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to query the machine version","description":"GetVersionExW@KERNEL32.DLL at 00008688-00001600-1976-117-00403324","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to query the system locale","description":"GetUserDefaultLCID@KERNEL32.DLL at 00008688-00001600-1976-194-004036A7","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-49","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"Environment Awareness","name":"Makes a code branch decision directly after an API that is environment aware","description":"Found API call GetSystemTimes@KERNEL32.DLL (Target: \"3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe\"; Stream UID: \"00008429-00003048-34694-142-00401000\")\n which is directly followed by \"cmp edi, 0004A5FEh\" and \"jle 00401081h\". See related instructions: \"...+64 call dword ptr [0040C00Ch] ;CreateFileA+70 xor edi, edi+72 lea esi, dword ptr [edi+01h]+75 nop dword ptr [eax+eax+00h]+77 inc esp+78 add byte ptr [eax], al+80 lea eax, dword ptr [ebp-00000C2Ch]+86 push eax+87 lea eax, dword ptr [ebp-00000C24h]+93 push eax+94 lea eax, dword ptr [ebp-00000C1Ch]+100 push eax+101 call 004011F5h ;GetSystemTimes+106 cmp edi, 0004A5FEh+112 jle 00401081h\" ... at 00008429-00003048-34694-142-00401000","origin":"Hybrid Analysis Technology","relevance":10,"id":"stream-39","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"Environment Awareness","name":"Possibly tries to detect the presence of a debugger","description":"GetProcessHeap@KERNEL32.dll at 31211-618-00406886\n GetProcessHeap@KERNEL32.DLL at 00008429-00003048-34694-435-00406886\n GetProcessHeap@KERNEL32.DLL at 00008688-00001600-1976-194-004036A7","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-31","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"Environment Awareness","name":"Reads the registry for installed applications","description":"\"\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")\n \"\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")","origin":"Registry Access","relevance":10,"id":"registry-55","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"External Systems","name":"Detected Suricata Alert","description":"Detected alert \"ET INFO Windows OS Submitting USB Metadata to Microsoft\" (SID: 2025275, Rev: 1, Severity: 3) categorized as \"Misc activity\"","origin":"Suricata Alerts","relevance":10,"id":"suricata-0","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\893ABE1C_offset\"\n \"893ABE1C_offset\"\n \"DBWinMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"General","name":"Runs shell commands","description":"\"/C sc stop VVS\" on 2018-2-4.18:51:54.798\n \"/C sc stop wscsvc\" on 2018-2-4.18:51:54.876\n \"/C sc stop WinDefend\" on 2018-2-4.18:51:54.986\n \"/C sc stop wuauserv\" on 2018-2-4.18:51:55.126\n \"/C sc stop BITS\" on 2018-2-4.18:51:55.283\n \"/C sc stop ERSvc\" on 2018-2-4.18:51:55.376\n \"/C sc stop WerSvc\" on 2018-2-4.18:51:55.517\n \"/C vssadmin.exe Delete Shadows /All /Quiet\" on 2018-2-4.18:51:55.626\n \"/C bcdedit /set {default} recoveryenabled No\" on 2018-2-4.18:51:55.736\n \"/C bcdedit /set {default} bootstatuspolicy ignoreallfailures\" on 2018-2-4.18:51:55.876","origin":"Monitored Target","relevance":5,"id":"target-3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"$25","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"Installation/Persistance","name":"Connects to LPC ports","description":"\"\" connecting to \"\\ThemeApiPort\"","origin":"API Call","relevance":1,"id":"api-16","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"Installation/Persistance","name":"Contains ability to lookup the windows account name","description":"GetUserNameW@ADVAPI32.DLL at 00008688-00001600-1976-11-00403245\n GetUserNameW@ADVAPI32.DLL at 00008688-00001600-1976-1-00403669\n GetUserNameW@ADVAPI32.DLL at 00008688-00001600-1976-26-00402FE9\n GetUserNameW@ADVAPI32.DLL at 00008688-00001600-1976-114-00403107\n GetUserNameW@ADVAPI32.DLL at 00008688-00001600-1976-28-004033E7\n GetUserNameW@ADVAPI32.DLL at 00008688-00001600-1976-29-00403576\n GetUserNameW@ADVAPI32.DLL at 00008688-00001600-1976-25-00402D28\n GetUserNameW@ADVAPI32.DLL at 00008688-00001600-1976-118-00403498","origin":"Hybrid Analysis Technology","relevance":5,"id":"stream-28","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"\"QOLdjWn5hr5.exe\" has type \"data\"\n \"dSTEZHvd.doc\" has type \"data\"\n \"dsYny5bq4UJV.doc\" has type \"data\"\n \"YfkuO.doc\" has type \"data\"\n \"THQujKln.doc\" has type \"data\"\n \"vsKespazw6mjoz.exe\" has type \"data\"\n \"jR4UhePpkWKtU.exe\" has type \"data\"\n \"gBiUJ4TRATi57.doc\" has type \"data\"\n \"6JQvD1.exe\" has type \"data\"\n \"MCLvMmDoz8.doc\" has type \"data\"\n \"QwHQtYTLWgvQ.doc\" has type \"data\"\n \"A6a4k093.exe\" has type \"data\"\n \"lKxIrwOivZM.doc\" has type \"data\"\n \"DcNNjRAkEraNbP.doc\" has type \"data\"\n \"oBqqx89Mp9N.doc\" has type \"data\"\n \"Z68C2t.exe\" has type \"data\"\n \"E68SD0Ky01dhTr.exe\" has type \"data\"\n \"WbaQ7e.exe\" has type \"data\"\n \"PaGnOfAFV.doc\" has type \"data\"\n \"jLgQj5MNMjfkAYq.exe\" has type \"data\"","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"Installation/Persistance","name":"Touches files in the Windows directory","description":"\"\" touched file \"%WINDIR%\\System32\\rsaenh.dll\"\n \"\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\"\n \"\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db\"\n \"\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db\"\n \"cmd.exe\" touched file \"%WINDIR%\\AppPatch\\sysmain.sdb\"\n \"cmd.exe\" touched file \"%WINDIR%\\System32\\vssadmin.exe\"\n \"cmd.exe\" touched file \"%WINDIR%\\System32\\bcdedit.exe\"\n \"vssadmin.exe\" touched file \"%WINDIR%\\System32\\rsaenh.dll\"\n \"vssadmin.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"http://dmd.metaservices.microsoft.com/dms/metadata.svc\"\n Pattern match: \"http://schemas.microsoft.com/windowsmetadata/services/2007/09/18/dms/DeviceMetadataService/GetDeviceMetadata\"\n Pattern match: \"http://www.symauth.com/cps0\"\n Pattern match: \"http://www.symauth.com/rpa0\"\n Pattern match: \"http://www.symauth.com/cps0*\"\n Pattern match: \"www.microsoft.com\"\n Heuristic match: \"NTDETECT.COM\"\n Heuristic match: \"ntdetect.com\"\n Heuristic match: \"detect.com\"\n Pattern match: \"https://localbitcoins.com/buy_bitcoins\"","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"System Security","name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\"\" opened \"\\Device\\KsecDD\"\n \"vssadmin.exe\" opened \"\\Device\\KsecDD\"","origin":"API Call","relevance":10,"id":"api-37","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"Unusual Characteristics","name":"Matched Compiler/Packer signature","description":"\"3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe.bin\" was detected as \"VC8 -> Microsoft Corporation\"","origin":"Static Parser","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"Anti-Detection/Stealthyness","name":"Contains ability to open/control a service","description":"ControlService@ADVAPI32.DLL at 00008688-00001600-1976-194-004036A7","origin":"Hybrid Analysis Technology","relevance":8,"id":"stream-14","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"Anti-Detection/Stealthyness","name":"Queries kernel debugger information","description":"\"\" at 00008688-00001600-00000105-41023422\n \"vssadmin.exe\" at 00008907-00001548-00000105-38711551","origin":"API Call","relevance":6,"id":"api-10","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"Anti-Reverse Engineering","name":"PE file has unusual entropy sections","description":".rsrc with unusual entropies 7.60167856321","origin":"Static Parser","relevance":10,"id":"static-6","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"Environment Awareness","name":"Contains ability to query CPU information","description":"cpuid at 00008429-00003048-34694-31-00401B86\n cpuid at 00008688-00001600-1976-119-00404CEB","origin":"Hybrid Analysis Technology","relevance":10,"id":"stream-13","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the active computer name","description":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"sc.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"vssadmin.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","origin":"Registry Access","relevance":5,"id":"registry-35","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the cryptographic machine GUID","description":"\"\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")\n \"vssadmin.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","origin":"Registry Access","relevance":10,"id":"registry-1","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"External Systems","name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"1/66 reputation engines marked \"http://ntdetect.com\" as malicious (1% detection rate)","origin":"External System","relevance":10,"id":"avtest-6","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"level":"suspicious","category":"General","name":"Reads configuration files","description":"\"\" read file \"%USERPROFILE%\\Users\\%OSUSER%\\ntuser.ini\"\n \"\" read file \"%USERPROFILE%\\Contacts\\desktop.ini\"\n \"\" read file \"%USERPROFILE%\\Documents\\desktop.ini\"\n \"\" read file \"%USERPROFILE%\\Downloads\\desktop.ini\"\n \"\" read file \"%USERPROFILE%\\Favorites\\desktop.ini\"\n \"\" read file \"%USERPROFILE%\\Favorites\\Links\\desktop.ini\"","origin":"API Call","relevance":4,"id":"api-6","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Creates new processes","description":"\"\" is creating a new process (Name: \"C:\\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe\", Handle: 76)","origin":"API Call","relevance":8,"id":"api-2","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Modifies auto-execute functionality by setting/creating a value in the registry","description":"\"\" (Access type: \"SETVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\"; Key: \"00FF893ABE1C\"; Value: \"\"C:\\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe\"\")\n \"\" (Access type: \"SETVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\"; Key: \"BC893ABE1C\"; Value: \"\"%ALLUSERSPROFILE%\\BC893ABE1C.exe\"\")\n \"\" (Access type: \"SETVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE\"; Key: \"*BC893ABE1C\"; Value: \"\"%ALLUSERSPROFILE%\\BC893ABE1C.exe\"\")","origin":"Registry Access","relevance":8,"id":"registry-0","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"Detected indicator that file is ransomware","description":"$26","origin":"File/Memory","relevance":7,"id":"string-13","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"The input sample dropped very many files","description":"The input sample dropped 515 files (often an indicator for ransomware)","origin":"Binary File","relevance":5,"id":"binary-10","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"System Destruction","name":"Marks file for deletion","description":"$27","origin":"API Call","relevance":10,"id":"api-26","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"System Destruction","name":"Opens file with deletion access rights","description":"$28","origin":"API Call","relevance":7,"id":"api-25","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"System Security","name":"Modifies proxy settings","description":"\"\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")\n \"\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")","origin":"Registry Access","relevance":10,"id":"registry-27","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"System Security","name":"Queries sensitive IE security settings","description":"\"\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")","origin":"Registry Access","relevance":8,"id":"registry-36","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Imports suspicious APIs","description":"GetModuleFileNameW\n GetCommandLineW\n UnhandledExceptionFilter\n LoadLibraryExW\n GetStartupInfoW\n VirtualProtect\n GetCommandLineA\n GetProcAddress\n FindNextFileW\n WriteFile\n FindFirstFileExW\n GetModuleHandleW\n TerminateProcess\n GetModuleHandleExW\n CreateFileW\n IsDebuggerPresent\n CreateFileA\n GetTickCount","origin":"Static Parser","relevance":1,"id":"static-1","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Reads information about supported languages","description":"\"bcdedit.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","origin":"Registry Access","relevance":3,"id":"registry-25","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"Anti-Detection/Stealthyness","name":"Tries to suppress failures during boot (often used to hide system changes)","description":"Tries to suppress failures during boot \"cmd.exe\" with commandline \"/C bcdedit /set {default} bootstatuspolicy ignoreallfailures\" (UID: 00008911-00002464)\n Tries to suppress failures during boot \"bcdedit.exe\" with commandline \"bcdedit /set {default} bootstatuspolicy ignoreallfailures\" (UID: 00008914-00001624)","origin":"Monitored Target","relevance":8,"id":"target-6","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by a large number of Antivirus engines","description":"54/67 Antivirus vendors marked sample as malicious (80% detection rate)","origin":"External System","relevance":10,"id":"avtest-3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by at least one Antivirus engine","description":"54/67 Antivirus vendors marked sample as malicious (80% detection rate)\n 8/10 Antivirus vendors marked sample as malicious (80% detection rate)","origin":"External System","relevance":8,"id":"avtest-0","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"General","name":"The analysis spawned a process that was identified as malicious","description":"58/73 Antivirus vendors marked spawned process \"\" (PID: 1600) as malicious (classified as \"Trojan.Generic\" with 79% detection rate)","origin":"Monitored Target","relevance":10,"id":"target-58","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"Installation/Persistance","name":"Writes data to a remote process","description":"$29","origin":"API Call","relevance":6,"id":"api-0","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"Ransomware/Banking","name":"Deletes volume snapshots (often used by ransomware)","description":"Deletes volume snapshots files \"vssadmin.exe\" with commandline \"Delete Shadows /All /Quiet\" (UID: 00008907-00001548)","origin":"Monitored Target","relevance":10,"id":"target-4","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"Ransomware/Banking","name":"The analysis extracted a known ransomware file","description":"Found dropped filename \"_HELP_INSTRUCTION.TXT\" which has been seen in the context of ransomware (Indicator: instruction.txt)","origin":"Binary File","relevance":5,"id":"binary-9","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"System Security","name":"References security related windows services","description":"\"/C sc stop wscsvc\" (Indicator: \"wscsvc\")\n \"/C sc stop wuauserv\" (Indicator: \"wuauserv\")","origin":"File/Memory","relevance":7,"id":"string-43","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"System Security","name":"Tries to disable/delete the windows firewall","description":"Process \"sc.exe\" with commandline \"sc stop WinDefend\" (UID: 00008863-00003376)","origin":"Monitored Target","relevance":10,"id":"target-18","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"Unusual Characteristics","name":"References BIOS/BOOT related strings","description":"\"ntldr\"\n \"ntdetect.com\"","origin":"File/Memory","relevance":9,"id":"string-0","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Spawns a lot of processes","description":"$2a","origin":"Monitored Target","relevance":8,"id":"target-14","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"172.217.8.4:80\"\n \"216.58.209.238:80\"\n \"172.217.8.4:443\"\n \"216.58.209.238:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"General","name":"Opened the service control manager","description":"\"sc.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)","origin":"API Call","relevance":10,"id":"api-77","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"General","name":"Requested access to a system service","description":"\"sc.exe\" called \"OpenService\" to access the \"VVS\" service\n \"sc.exe\" called \"OpenService\" to access the \"wscsvc\" service requesting \"SERVICE_STOP\" (0X20) access rights\n \"sc.exe\" called \"OpenService\" to access the \"WinDefend\" service\n \"sc.exe\" called \"OpenService\" to access the \"wuauserv\" service requesting \"SERVICE_STOP\" (0X20) access rights\n \"sc.exe\" called \"OpenService\" to access the \"BITS\" service requesting \"SERVICE_STOP\" (0X20) access rights\n \"sc.exe\" called \"OpenService\" to access the \"ERSvc\" service\n \"sc.exe\" called \"OpenService\" to access the \"WerSvc\" service requesting \"SERVICE_STOP\" (0X20) access rights","origin":"API Call","relevance":10,"id":"api-76","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"suspicious","category":"General","name":"Sent a control code to a service","description":"\"sc.exe\" called \"ControlService\" and sent control code \"SERVICE_CONTROL_STOP\" (0X1) to the service \"wscsvc\"\n \"sc.exe\" called \"ControlService\" and sent control code \"SERVICE_CONTROL_STOP\" (0X1) to the service \"WinDefend\"\n \"sc.exe\" called \"ControlService\" and sent control code \"SERVICE_CONTROL_STOP\" (0X1) to the service \"wuauserv\"\n \"sc.exe\" called \"ControlService\" and sent control code \"SERVICE_CONTROL_STOP\" (0X1) to the service \"BITS\"\n \"sc.exe\" called \"ControlService\" and sent control code \"SERVICE_CONTROL_STOP\" (0X1) to the service \"WerSvc\"","origin":"API Call","relevance":10,"id":"api-75","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"Anti-Detection/Stealthyness","name":"Creates a resource fork (ADS) file (often used to hide data)","description":"\"\" created file \"%ALLUSERSPROFILE%\\BC1B0C06EF.exe\\:Zone.Identifier:$DATA\"\n \"\" created file \"%ALLUSERSPROFILE%\\BC1B0C06EF.exe:Zone.Identifier\"","origin":"API Call","relevance":8,"id":"api-19","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by a trusted Antivirus engine","description":"No specific details available","origin":"External System","relevance":5,"id":"avtest-5","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"Network Related","name":"Malicious artifacts seen in the context of a contacted host","description":"$2b","origin":"Network Traffic","relevance":10,"id":"network-21","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"Network Related","name":"Multiple malicious artifacts seen in the context of different hosts","description":"$2c","origin":"Network Traffic","relevance":10,"id":"network-27","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"System Security","name":"Requested access to a critical system service","description":"\"sc.exe\" called \"OpenService\" to access the \"wscsvc\" service (\"Windows Security Center\") requesting \"SERVICE_STOP\" (0X20) access rights\n \"sc.exe\" called \"OpenService\" to access the \"WinDefend\" service (\"Windows Defender\")\n \"sc.exe\" called \"OpenService\" to access the \"wuauserv\" service (\"Windows Update\") requesting \"SERVICE_STOP\" (0X20) access rights","origin":"API Call","relevance":10,"id":"api-79","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"System Security","name":"Sent a control code to a critical system service","description":"\"sc.exe\" called \"ControlService\" and sent control code \"SERVICE_CONTROL_STOP\" (0X1) to the service \"wscsvc\" (\"Windows Security Center\")\n \"sc.exe\" called \"ControlService\" and sent control code \"SERVICE_CONTROL_STOP\" (0X1) to the service \"WinDefend\" (\"Windows Defender\")\n \"sc.exe\" called \"ControlService\" and sent control code \"SERVICE_CONTROL_STOP\" (0X1) to the service \"wuauserv\" (\"Windows Update\")","origin":"API Call","relevance":10,"id":"api-78","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Checks for a resource fork (ADS) file","description":"\"\" checked file \"C:\\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe\\:Zone.Identifier:$DATA\"\n \"\" checked file \"%ALLUSERSPROFILE%\\BC1B0C06EF.exe:Zone.Identifier\"","origin":"API Call","relevance":5,"id":"api-35","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]}],"incidents":[{"name":"Ransomware","details_count":3,"details":[{"detail":"The analysis extracted a known ransomware file"},{"detail":"Deletes volume snapshots (often used by ransomware)"},{"detail":"Detected indicator that file is ransomware"}],"sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"Persistence","details_count":5,"details":[{"detail":"Writes data to a remote process"},{"detail":"Modifies auto-execute functionality by setting/creating a value in the registry"},{"detail":"Disables startup repair"},{"detail":"Tries to suppress failures during boot (often used to hide system changes)"},{"detail":"Spawns a lot of processes"}],"sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"Fingerprint","details_count":2,"details":[{"detail":"Reads the cryptographic machine GUID"},{"detail":"Reads the active computer name"}],"sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"Evasive","details_count":1,"details":[{"detail":"References security related windows services"}],"sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"Spreading","details_count":1,"details":[{"detail":"Opens the MountPointManager (often used to detect additional infection locations)"}],"sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]}]},"activity":{"stats":{"process_count":22,"spawned_processes_count":22,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":14,"imported_dlls_count":63,"dropped_files_count":0,"extracted_files_count":69,"files_written_count":920,"files_deleted_count":0,"registry_keys_created_count":5,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":5,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":4,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":["ransomware"],"sample_flags":["Multi-Process","Extracted Files","Network Traffic"],"sandbox_reports":[{"id":"5a7747c87ca3e11ecb5c5a15","environment_id":110,"environment_description":"Windows 7 32 bit (HWP Support)","state":"SUCCESS","verdict":"malicious","threat_score":100,"malware_family":"Trojan.Generic","submit_name":"3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.bin","analysis_start_time":"2018-02-04T18:49:11+00:00","indicators_count":{"informative":18,"suspicious":20,"malicious":16},"tags":["Multi-Process","Extracted Files"],"is_in_unified_schema":true},{"id":"59a866f97ca3e17ef349b2b3","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"malware_family":"ML.Attribute","contacted_countries":["USA"],"submit_name":"bars.exe.bin","analysis_start_time":"2017-08-31T20:42:23+00:00","indicators_count":{"informative":18,"suspicious":23,"malicious":21},"tags":["Multi-Process","Network Traffic","Extracted Files"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"172.217.8.4","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"address":"216.58.209.238","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"address":"172.217.8.4","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"address":"216.58.209.238","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]}],"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}],"processes":[{"pid":3048,"ppid":0,"name":"3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe","command_line":"","sha256":"3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511","normalized_path":"C:\\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe","uid":"00008429-00003048","icon":"$2d"},{"pid":1600,"ppid":3048,"name":"3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe","command_line":"","sha256":"3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511","normalized_path":"C:\\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe","parent_uid":"00008429-00003048","uid":"00008688-00001600"},{"pid":1840,"ppid":1600,"name":"cmd.exe","command_line":"/C sc stop VVS","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00008688-00001600","uid":"00008842-00001840"},{"pid":3432,"ppid":1840,"name":"sc.exe","command_line":"sc stop VVS","sha256":"1c2ec0bb83d2ad3f53b0706c46a2604f81f2fc2afdcf43be5914cc8f509dd48c","normalized_path":"%WINDIR%\\System32\\sc.exe","parent_uid":"00008842-00001840","uid":"00008854-00003432"},{"pid":1808,"ppid":1600,"name":"cmd.exe","command_line":"/C sc stop wscsvc","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00008688-00001600","uid":"00008848-00001808"},{"pid":172,"ppid":1808,"name":"sc.exe","command_line":"sc stop wscsvc","sha256":"1c2ec0bb83d2ad3f53b0706c46a2604f81f2fc2afdcf43be5914cc8f509dd48c","normalized_path":"%WINDIR%\\System32\\sc.exe","parent_uid":"00008848-00001808","uid":"00008862-00000172"},{"pid":3444,"ppid":1600,"name":"cmd.exe","command_line":"/C sc stop WinDefend","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00008688-00001600","uid":"00008855-00003444"},{"pid":3376,"ppid":3444,"name":"sc.exe","command_line":"sc stop WinDefend","sha256":"1c2ec0bb83d2ad3f53b0706c46a2604f81f2fc2afdcf43be5914cc8f509dd48c","normalized_path":"%WINDIR%\\System32\\sc.exe","parent_uid":"00008855-00003444","uid":"00008863-00003376"},{"pid":3472,"ppid":1600,"name":"cmd.exe","command_line":"/C sc stop wuauserv","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00008688-00001600","uid":"00008861-00003472"},{"pid":3748,"ppid":3472,"name":"sc.exe","command_line":"sc stop wuauserv","sha256":"1c2ec0bb83d2ad3f53b0706c46a2604f81f2fc2afdcf43be5914cc8f509dd48c","normalized_path":"%WINDIR%\\System32\\sc.exe","parent_uid":"00008861-00003472","uid":"00008873-00003748"},{"pid":3464,"ppid":1600,"name":"cmd.exe","command_line":"/C sc stop BITS","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00008688-00001600","uid":"00008873-00003464"},{"pid":3832,"ppid":3464,"name":"sc.exe","command_line":"sc stop BITS","sha256":"1c2ec0bb83d2ad3f53b0706c46a2604f81f2fc2afdcf43be5914cc8f509dd48c","normalized_path":"%WINDIR%\\System32\\sc.exe","parent_uid":"00008873-00003464","uid":"00008884-00003832"},{"pid":3172,"ppid":1600,"name":"cmd.exe","command_line":"/C sc stop ERSvc","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00008688-00001600","uid":"00008880-00003172"},{"pid":3808,"ppid":3172,"name":"sc.exe","command_line":"sc stop ERSvc","sha256":"1c2ec0bb83d2ad3f53b0706c46a2604f81f2fc2afdcf43be5914cc8f509dd48c","normalized_path":"%WINDIR%\\System32\\sc.exe","parent_uid":"00008880-00003172","uid":"00008887-00003808"},{"pid":2280,"ppid":1600,"name":"cmd.exe","command_line":"/C sc stop WerSvc","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00008688-00001600","uid":"00008886-00002280"},{"pid":3856,"ppid":2280,"name":"sc.exe","command_line":"sc stop WerSvc","sha256":"1c2ec0bb83d2ad3f53b0706c46a2604f81f2fc2afdcf43be5914cc8f509dd48c","normalized_path":"%WINDIR%\\System32\\sc.exe","parent_uid":"00008886-00002280","uid":"00008902-00003856"},{"pid":3152,"ppid":1600,"name":"cmd.exe","command_line":"/C vssadmin.exe Delete Shadows /All /Quiet","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00008688-00001600","uid":"00008895-00003152"},{"pid":1548,"ppid":3152,"name":"vssadmin.exe","command_line":"Delete Shadows /All /Quiet","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\System32\\vssadmin.exe","parent_uid":"00008895-00003152","uid":"00008907-00001548"},{"pid":3840,"ppid":1600,"name":"cmd.exe","command_line":"/C bcdedit /set {default} recoveryenabled No","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00008688-00001600","uid":"00008901-00003840"},{"pid":1580,"ppid":3840,"name":"bcdedit.exe","command_line":"bcdedit /set {default} recoveryenabled No","sha256":"e5bc427ba84627fa84861c54044df8ac3c3b3c3ed3d007265c6b18f588d0ca8a","normalized_path":"%WINDIR%\\System32\\bcdedit.exe","parent_uid":"00008901-00003840","uid":"00008915-00001580"},{"pid":2464,"ppid":1600,"name":"cmd.exe","command_line":"/C bcdedit /set {default} bootstatuspolicy ignoreallfailures","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00008688-00001600","uid":"00008911-00002464"},{"pid":1624,"ppid":2464,"name":"bcdedit.exe","command_line":"bcdedit /set {default} bootstatuspolicy ignoreallfailures","sha256":"e5bc427ba84627fa84861c54044df8ac3c3b3c3ed3d007265c6b18f588d0ca8a","normalized_path":"%WINDIR%\\System32\\bcdedit.exe","parent_uid":"00008911-00002464","uid":"00008914-00001624"}],"all_imported_dlls":["msasn1.dll","iertutil.dll","comdlg32.dll","rpcrt4.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","Wldap32.dll","kernel32.dll","apphelp.dll","comctl32.dll","propsys.dll","ieframe.dll","vssapi.dll","msvcrt.dll","vss_ps.dll","sechost.dll","api-ms-win-downlevel-version-l1-1-0.dll","crypt32.dll","clbcatq.dll","cfgmgr32.dll","vsstrace.dll","KernelBase.dll","lpk.dll","setupapi.dll","secur32.dll","api-ms-win-downlevel-user32-l1-1-0.dll","wininet.dll","api-ms-win-core-synch-l1-2-0.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","urlmon.dll","cryptsp.dll","RpcRtRemote.dll","uxtheme.dll","oleaut32.dll","sspicli.dll","devobj.dll","version.dll","rsaenh.dll","userenv.dll","winbrand.dll","user32.dll","dwmapi.dll","cryptbase.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","gdi32.dll","mpr.dll","ntmarta.dll","ole32.dll","atl.dll","msctf.dll","advapi32.dll","profapi.dll","normaliz.dll","ntdll.dll","usp10.dll","imm32.dll","shlwapi.dll","shell32.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","rpcss.dll","psapi.dll","oleaccrc.dll","oleacc.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"F06C3C509054X0B7D28ZCDDBB17087B9C3E.arena","sha256":"9eba566e078625837f9f4274bdee6e512464e69c6733be6d547e9acd3cdf197c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"69b6156160e1509503017370e63ac096_733c94c5-cebb-4f98-a75f-22a797d1d50b","sha256":"db980b14347f47a77b29e51a4e6169db3e0c1be4982b2849581fe9ac2fe9ea0e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"76FA9CC71D6D7710BDB4017D1EB45B58.arena","sha256":"145f19de7dae97000e52bedb43dfda9e583299a6d6f59a5974aa7211d65ebf51","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"E8C51E3C29DED48499DB86F72B25B8CC.arena","sha256":"b28283407b2b5c35645c670d08674436026fd3e7bc8d7215e946198fb1de4c82","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"26FB16202B5B5DA6021851B02D8741EE.arena","sha256":"91301e3ce4e5b19d0c1c58f5da0a5e05f652953cbbc6b3da9c8fd21dab32f9fe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"5A73066323D9FD45FEE7A4792520E18D.arena","sha256":"dc6a9039e0c36e0d8bec8644ed9aa1c429dd03f59baa828534b0c4f1b0d9beaf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"58738CF43BF0045ACCA05D7E3D36E8A2.arena","sha256":"f60bb864893fdccfb816b6cc52057cdd722534c9dadbe06014a247aa1f622476","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"C064A228288A1F4089D797742AE40388.arena","sha256":"d8ab63243d2e2ac0835a2d485b2bfd91210bc5429f73358fd10168a880cf83ca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"804BFC041B650D249F12C0FB1CABF16C.arena","sha256":"d76f0848f2db4b450cdae0545c192e4d58bcd972a8ec41488a4856a0313f12e0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"008ACCD42CBFC1AC9B94BF2B2FD1A5F4.arena","sha256":"b04ea75476f0d8f09fc56a55c76ab1164c4700614d6f49fede5aa03fa44cb7ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"0111AC7D4255212655BEE3F34451056E.arena","sha256":"cee891849423f403c29060e6cae4333ccdfcb7d07c6fed11838cf1c58476322b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"01714F84140FF4A84E1CC01B163BD8F0.arena","sha256":"687faa36ed9c30e2234cffbd1c0b3419b8e5b01accef6c8aca1c21d0785111e7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"02D32E0042F572C05CFD4F10443C5708.arena","sha256":"646f5218b89a4ad85325674bc834d9a61e6fcbb381c7559f7a5753b58d5e54e0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"02D6CA1C068F35DCB0782766088B1A24.arena","sha256":"cda05f833adddadc42834bf788dfd49e1aa359824ef7d3a30ae574d3eed85262","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"0390F0340B22EF9D6EAB05BC0CDED3E5.arena","sha256":"590936bd3b5a99bfbf5f5bb81cfba859f4879edad26afeccc1b0ca810443d0a7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"03B628200387901C2422095007B67464.arena","sha256":"cb55b7357afe03a85060cc906090dfa064d45df9f9451339b42ab2b56ad6b648","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"03E3CC00383676B24DD872003BBB5AFA.arena","sha256":"7f616226c1f1371f3e402150eca5d37c90c27d5d2880df852adb987ed54ead99","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"03FFC3EA4B1345341F60A856502F297C.arena","sha256":"70c76d06a18fdc3319e052dd9d83c7efcfe508d4bbf2e42135bdd87f62b71756","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"0435C392324015BABAC9A451346BFA02.arena","sha256":"d6eca4cdbb94c4b9e516fc2a6d113b69b3002457f4b6c3190a08901459f3e1a2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"0547A10808FC0F64650976220AB7F3AC.arena","sha256":"0dbc11eae3550614e96cfb5e1c3317fb44d43a8ce905ed2e9b8574b5670e1b9b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"6JQvD1.exe","sha256":"0f2f5e5513a51f55239671bf52b008d35419bfe9c6a6879faf9a0c4bdbab50b9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"A6a4k093.exe","sha256":"ade542a0dd51ae3ba5b61d325a813414d482118cb61e2bb943ab917bd0e6480a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"DcNNjRAkEraNbP.doc","sha256":"068b6cb2d1938520d32a547aed74b08443ce755f7e4703aa1499fc1843581289","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"E68SD0Ky01dhTr.exe","sha256":"976043c5881284870adfc89ebf54adcb930d4ba87ea6898b055f8da2e0505c77","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"MCLvMmDoz8.doc","sha256":"b6d90bed2c37d3d66887d216917e96963024d20b9195ca42223409127d8eb183","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"PaGnOfAFV.doc","sha256":"a945f0fe47cb0bbbc8f28ca3d72bdecfe4c1dc2033b6e1ce0c3385588e6976f5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"QOLdjWn5hr5.exe","sha256":"c93420eb9a7a25b3b2c789af93698bacd30b9d75b99243fc9c435a0831c5207a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"QwHQtYTLWgvQ.doc","sha256":"cae80845b36512b00d275f2711d725ff15fca5e82325c82dc33ab70661924c42","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"THQujKln.doc","sha256":"007b57f5f587e31e484db5d192aad8cf7f7d2101372596ccc9f9ba3d940b18d0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"WbaQ7e.exe","sha256":"3cb9a38f7be771a94da896f5e27f8dd0788091c341d6a5e8c5a6ad1483171eaa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"YfkuO.doc","sha256":"6e9da09089949d3dc3c843d07adf6bf47d695f0a5e114f9315c0eda6099d99ed","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"YjmF.exe","sha256":"edd24a540adf9d6669bf1fdca7a4a4f7ad5e04ae7276dfb9e589f4d1c1199a25","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"Z68C2t.exe","sha256":"061fd562fcbf7e77f1ad2958524f0cac8902a578df05cb656760b7d6e2949f83","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"ara0UGGW3VRU.exe","sha256":"1c41bb594f155d38955aab0ece1387952ba655a29179a3541457047dd8fca1fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"dSTEZHvd.doc","sha256":"928dc7e77f567d7bafe77ddf57430aa78114821fe550a6176a9ea6deebe0cf86","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"dsYny5bq4UJV.doc","sha256":"8a0b4e7142f0636a5b80522038f88123fd008933832b836f224240b5fd767a48","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"gBiUJ4TRATi57.doc","sha256":"5ea0675d06d2695194ad88dfc7e842305232f8186905a583387b16226d825391","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"jLgQj5MNMjfkAYq.exe","sha256":"c2cd9376bf436ca869617d6aa662cd626f052194c8b70ad5584df0398609727e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"jR4UhePpkWKtU.exe","sha256":"ccf477fa2cc95f4ea170304572822898365cbca1ad86ead6ddea2eb170bf5131","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"lKxIrwOivZM.doc","sha256":"b81dee87a1b67c8f81ae7845c67835675024cdc2981f6a39cab800d31a33ea59","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"mgF1qbnPMDZnVB.exe","sha256":"017661f228572b94836567c9a2fb9bc6b65f6c92a50712616c5b3357a2528189","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"oBqqx89Mp9N.doc","sha256":"d209b47378a88dcfe3dc8618938fd15dcb66f50b1d5f80c28eacb4ed93b805d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"sIz9IMypdNES8St.doc","sha256":"7c2923dd8373c837c457b233a523069a683a97935ac80a8024184a995e90dde7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"uqmgQd.exe","sha256":"941fe047c7f795ff30fa87f2ef3c5a31781ca190282179a1800a870ce7c925f4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"vsKespazw6mjoz.exe","sha256":"3d334c355f7c2f1ab7a6b5fcea6ac6c2cc323615d26e37d3b2ec6187efab7faa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"04efa3823da6092ff5c30bce8d9ab23e_e47c61d2-1dae-480e-827a-ae8d797649df","sha256":"0dc244d9af4edf331e7bc192199557e616e0e7d7146756ec99ba264aa1f94f87","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"1332E6493BE4EB87885051FD3E66CFCF.arena","sha256":"c016ab20becd8d1fbe83c5d672896f90c076311e50fc260feeafa84428c5c43a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"331AA7BA31D29A55FF8E019634547E9D.arena","sha256":"a9f0cd57168837e42bcc641a4c5d4f1d44fe192848f82cb03fedaf7150f540d1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"733F0EA01BBCD6B4B46CD7601E2EBAFC.arena","sha256":"f5449a01ccc6af72ef0c80e70c619bd526860fa9a36be8cf275f4d13318e4879","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"77B12D0C4297202312796AA443D4046B.arena","sha256":"513b87430760a1254bf7f3bbb64969f569749af6a728f4e004e5712350fb7ffe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"98A7488245183244585838CF47AA168C.arena","sha256":"a8d3d0cb52e3917e19ba5c6fb8856bee2bee5b6af7ceaa45b5b3b1d73313c805","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"C35707F438BADE60B5B0D3D63B1CC2A8.arena","sha256":"a11d92197df0d07aed045208281667342648c9ff305abe528d9b9160d24331d8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"D8317BB40D30493646D19D740F262D7E.arena","sha256":"32ea265116871e121a73ad74385672842c1dc9c291b5e872677d8013a429801b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"E6D144E80D9433765F870E580F9A17BE.arena","sha256":"f0ad67ad9673230214fe8ade8c6db8ad9db4ea113f168d2935f5d4f5afb33313","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"DAAA72050696A0A46B3E4D9F07D384EC.arena","sha256":"96fafa4a96e374994d0262563d1b2f1f3ca99bd2379a1be96ddde615acd1c28c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"1CB770D818C9735003F91EBC1A065798.arena","sha256":"0448fa2e860f2ef884c6e4f57ec644d79b077b0c4eac19c677c89bd0c48a6449","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"0530D2300A3720C8295D509E0D5B0510.arena","sha256":"f36c66e4214d94f0daee4a154f567dd1a9f4547beea4d9f9e8b47725c7340ef5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"079082E50530E8B2446533D30854CCFA.arena","sha256":"883715c030d2c4c1dbe32ea041200448e5588c4fc95b19259fdd5654f50c3a48","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"0AC3E0F418ADEAF49D7E55551A73CF3C.arena","sha256":"2f7e880d31f33598f7783edb758e5cefa8229712bfaeeaf1b1b4007b3805adeb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"0D675D593D3E26B5F8F581B73FCF0AFD.arena","sha256":"894d608bae37048c7a50596dc096346d63162d89713b88d03613d742c69926ce","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"0E31A03840CF32CCA00F17CA43051714.arena","sha256":"2c186b773e6a83595bcaf2a14c37219a799ab802eecab840953066a560b319a4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"0EAE6E9500B93633E06B7885038A1A7B.arena","sha256":"18e6a59e8667403556f7175a57de96e9e251a5c5709a302eea3f26b825759074","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"0ED00A8836650BF67C100BD437A1F03E.arena","sha256":"5fa83fbcfc0459d77d3334f68d7982c0008b22f0567e1b8df2607e8400465208","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"0F9041400E151D808011571C0F5201C8.arena","sha256":"e86ab3f7e690742b86df4b16671cd01ba29a50c38677234c8710bb990b0126b3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"Tmg2wsFHYf9ioO.doc","sha256":"e10bfdc814a1ccf0a3f561a1536105477e98350a06272d8bfa9d40e51edfba32","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"dH1rDN9f9.doc","sha256":"a41743a2b4f466d5d5a5932436cbcdb92072bfeab25e34ab3677e9de2116e777","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"dskCEJ.exe","sha256":"d07d49259ca80c49031311f109abf7648ea0136243adccfc236d117f24638135","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"lCEf83Wf7e4nuIMk.doc","sha256":"61a01d8183757d76b42a22d7c4ac423109457f21c646c499e1bdb90331ff587c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"yZw6snqBQ28DAzu.exe","sha256":"78a3a27e45833c247c2782bdea28a8522f958b0f8c6d91b30504f960e9907930","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]}],"files_written":[{"path":"C:\\$ü","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\Windows","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%WINDIR%\\System32","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%WINDIR%\\System32\\cmd.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\share","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%WINDIR%\\System32\\en-US\\sc.exe.mui","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%WINDIR%\\System32\\vssadmin.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%WINDIR%\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%WINDIR%\\System32\\bcdedit.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%WINDIR%\\System32\\en-US\\vssadmin.exe.mui","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%ALLUSERSPROFILE%\\BC893ABE1C.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe:Zone.Identifier","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%ALLUSERSPROFILE%\\BC893ABE1C.exe:Zone.Identifier","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%ALLUSERSPROFILE%\\F06C3C509054X0B7D28ZCDDBB17087B9C3E.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\1517766571392$MAPFAILURE","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\1517766571392$OK","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\InJ.gI8","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\autoexec.bat","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%APPDATA%\\Microsoft","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%APPDATA%\\Microsoft\\Crypto","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%APPDATA%\\Microsoft\\Crypto\\RSA","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-2092356043-4041700817-663127204-1001","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-2092356043-4041700817-663127204-1001\\69b6156160e1509503017370e63ac096_733c94c5-cebb-4f98-a75f-22a797d1d50b","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\103F5CC80E4E9C042D4D0BAE0F95804C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\config.sys","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\pagefile.sys","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\1381B0F025C10C6C8FEA657027ECF0B4.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\zXj63qjsxRhYT.LOt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\ctqbDWzGDMxn1VyMxi0g.ARc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\l9fzOV2Csrx5ulH0fNzhYyV0.70f","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\f6o8CkQMo.Qy1","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\FOrafopgA.rK6","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\$Recycle.Bin\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\h9c5jbvG\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\Documents and Settings\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\Users\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\MSOCache\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\MSOCache\\All Users\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\PerfLogs\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\PerfLogs\\Admin\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%PROGRAMFILES%\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%ALLUSERSPROFILE%\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\Recovery\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\Recovery\\cf812052-d863-11e7-ae2b-a9d1a6f40333\\Winre.wim","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\Recovery\\cf812052-d863-11e7-ae2b-a9d1a6f40333\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\hJ5wa\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\System Volume Information\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\Temp\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\Users\\D8B38B241AC28381E1C437741D5A67C9.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\NTUSER.DAT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\Recovery\\cf812052-d863-11e7-ae2b-a9d1a6f40333\\boot.sdi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\ntuser.dat.LOG1","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\ntuser.dat.LOG2","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\ntuser.ini","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\E1C5076826D48AE133914A18281B6F29.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\AppData\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%APPDATA%\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Contacts\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Contacts\\E8C51E3C29DED48499DB86F72B25B8CC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Contacts\\%OSUSER%.contact","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Contacts\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Cookies\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Contacts\\76FA9CC71D6D7710BDB4017D1EB45B58.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Documents\\Database1.accdb","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\5A73066323D9FD45FEE7A4792520E18D.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\26FB16202B5B5DA6021851B02D8741EE.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Documents\\Amazon Downloader Logs\\Amazon_Downloader_Log_20171206-225712_1810e9e0-1a8d-457c-be3a-737de50dc6bb.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\Amazon Downloader Logs\\58738CF43BF0045ACCA05D7E3D36E8A2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\Amazon Downloader Logs\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\hancom\\Hancom Office 2010 SE (English Edition) - 3PC-1User (Download) Keys.html","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\hancom\\804BFC041B650D249F12C0FB1CABF16C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\hancom\\HancomOffice.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\hancom\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\My Music\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Music\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Documents\\My Pictures\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Pictures\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Documents\\My Videos\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Videos\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Documents\\Outlook Files\\Outlook.pst","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\Outlook Files\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Documents\\Outlook Files\\C064A228288A1F4089D797742AE40388.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0dZxapFIdAxD.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0ERnyla.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0n7WBcx6F.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0NmJH6i8.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A469E5781C421070EB4A243F1F17F4B8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5B30DE333DB86347447D1263409E478F.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0YdED8h4YnKljVf.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0YLfQjWF0a2hScY9.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\39FF315C25407A20304F632C28645E68.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\1EZRu.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\1F5WJj2.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DB0976600636F60028C38D69095ADA48.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7F2783DA2599B162EAC2E991293995AA.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\1fdX8.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\FD3A73D63F164DB4120140DB423A31FC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0RER5x.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\10ybAbsXU.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\1fTAJh.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\1LoWM7zNlVq8h.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\1oVe9N.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2F44EC9B10576B876F218EAD119E4FCF.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\1retqspn.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\FF425A5E27A325272C6D504629CF096F.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\1X8T78.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\277bXg4CG57uAf.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\B01F13304141CF985A890092436DB3E0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2AqafuW.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2bQXToGMVxFT0.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3BD2BC003A7712005335AFAA3D3EF648.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2cyQ5WrZIMwQA34V.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2FaYPJxahxKfw8n.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6C5AFBB038E8CFE075443BD43B90B428.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2fYhBXbTGIO.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2HUxjyFppKjP.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2NMIHXVwEkzB3.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C6D13CC009A56D4077EE9ED10C4D5188.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2VNXsqpCLh.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\17343C9A3E3CA0C2FF9F8E5D41A1850A.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\35ZarnYhqsU.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\32E7E40638DBEB5A5DA9BC973B83CFA2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\03E3CC00383676B24DD872003BBB5AFA.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3CrsgVxPsB.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3Gy2fs.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5A910AF70132B0D02AF7C56704A79518.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3J2RchD9D4fmlFY.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3jKjJFdIAL9.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C189B1BC2F56A9C02ECFC1C432DB8E08.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3kNG.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6D6603FB3BD9924A8A37806D3F6E7692.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7A0BD96D258ABE879BFE31812832A2CF.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3KtJ69gNAf0RnZU.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3NHgn51R.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\65872E4E29B101EA5294C2922C58E632.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3TXw.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E47261B82205B2D01F7D23C1234C9718.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3VBXaPVG.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\902E964F365C48E8BD4FA95738882D30.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\49ZUrTpJop.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D21A68C81793DBB047AA18A118DABFF8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\4aSNKoffrEa.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\4atBAsCkzC.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\4RMcG1gB9Hbn4zzr.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\72F1367521D22422650FBC172417086A.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\4SNFg5oLaELI1.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\02D32E0042F572C05CFD4F10443C5708.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\59JuNefogVsL0apf.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\087ACC4107A144C12906388B0A532909.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5b9arbo16G.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E2D3CA40245FC0C047FE501825A6A508.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5Brv3Mn8ExUJfa.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5BYgNUOG.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C92EC83817E86C48587588C9192F5090.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5CDRyD7pjBr.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5A5C04C92D952F5600CA44CF2FE4139E.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5DvnwUIjh.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5emuy8Cd4d7Wp.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\27C9161A07C13742D17E3ADE09081B8A.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5FU1eSqbosYIajn.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5nNbK.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5r3OOF8fnCr7PI.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5r3TtriqI.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\22A5179400DB34E5559E3B540307192D.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\275DE5D829E90B20B58097652D20EF68.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6AlN.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\651ACb.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\64D1N4.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6A1BF80D12FC9ACE3715290D16347F16.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6FSAUCVC.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6JQvD1.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\148368502F4095A0F0B7029631AA79E8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6kLuk5dbblP.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6lPZ7.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\B4DB6B77186A5D5C07A155C91AD441A4.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6oaSeU.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6rND.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6TNRAzWB1pG3.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6TtS5.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\75F01C1C313664AC9ECD274933F448F4.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6UqJsuUQK1f2XH.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6WgQy9WsWFcG.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A19D56DC2941CD9E2B3505742D6DB1E6.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7A2w.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7BvBrZCyJuY0yxi.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8E077F401A66E8C0F4A00B741BADCD08.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7GXTVgCwg.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AFB759184293FAF6783DD71C43DADF3E.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7XghHeokqGfeH.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\88l94F73i.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8dcup6vqWNdMxv.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8DUQ1mebDrpcsmG.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\13DDB4651373203FAC6D0B4F160B0487.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8EiaFDlB4M.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8UnnC3Z1ObogIu.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2DF3248B1D8627B73AC4F28920540BFF.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\71974668285EB0780B344B022B7294C0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8vTLISt.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8zga0cfP9YM41Ym.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8755FAE00E3CBE92DF9F16701190A2DA.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\90BNtk4QOie.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C945C12C4131429605EEE5DE442526DE.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\91ofmXRFtTW4.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\97aENWJbeKBn2.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\332FEBEA11E6B156EE515CAD132D959E.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\9C7DD5h4CqeNmZHy.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\B21546D6164770C8E47E892A178E5510.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\9GoGcenZ.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\9ywr2mzZCG.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A6a4k093.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A80f.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\aae2WIzuLYXCjmg.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\aB0w3q25YAx.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DAD8CE713CCBFBBA2DCC28293E12E002.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\48BB9AE01C4E11C0EB0356741E9FF608.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AHiFpXlk.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AJaiC.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\61F17CC01D8E3740C1B79C7E1ED51B88.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AJfPt5.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\alCR7Vz.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\845C74CF077F2284DF179F9D08C606CC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\EE03323C057CB9D00509E00607E69E18.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AMrt2OL.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F3EAC4CF34CCD2F495A851ED3754B73C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ancpyWMibIM3tcgy.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\aoVwPqh5K.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ara0UGGW3VRU.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\FE616F66184138A2494AD62B1AD91CEA.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ARxMW.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\aUKS8.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\aVwbKIAiFgN8blaM.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3CCA9EC82AFB7A662BB33E742D935EAE.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AwsmG.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AxkS3gH.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AyYvCPBOIM.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6B5BDE842D4A1DD0071BAF2C2FE20218.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\B92TT47fqQhH9z.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\64C96C07415C80A571A46F31438864ED.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\BdreGT5a4O5iXfH.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\bDZFKIdFl9z.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\BeQ9kSwU5.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\398AA1582B803CD5903C67A82DAC211D.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\bRHj.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\bt5SxSIb78V.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E443551E2E90EF762E9A970130BCD3BE.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\bwf4BX7sms7QQ.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AF6D7674221A4C7AABD4583A244630C2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Byf3DiB7aX.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\bYhyR10yl.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\CF08E638054241060BC29D4C0834254E.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C06c5p7.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\c3xUj.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\228EFE4820EDBDD067AC82872234A218.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\c5Dn.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Ce4IYQD.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\CGF5u.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D92C879427D4DA1AD85F87A62A2EBE62.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\CGXxaA.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\cHhmOWblQkjCfdFu.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\CJ8ZksCqfYdg3Ha.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\CpAwN9PR0BC1w.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\816A536B1CC47A8A6A8C3F911F9A5ED2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\cQDJEZaOEWbF.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5C4B20EB36D2496448FA390739E42DAC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\CQR0Rz.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C4FA9A143204A6500F3A07B735488A98.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\cReyCk.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\CspyTJgM.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\57DE500C017B8E0429B384D5053B724C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\cU9OzWuS.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7626EA542098F19174D45F44248BD5D9.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\cUJpjDsZO.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\cwpTXtWQHh1.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DCF5AD920E0C9932A4A622E111DB7D7A.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\1E057298414F36F4EE50458845511B3C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\cxugFG1sMcucPL.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D1JACuX.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\887B3AC82DBE6040B739F1E331BC4488.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\d25YPwb.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D015A16730BDED1EF91816D134CBD166.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D6pHlz.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\dB9sFxN11kt.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\dbpilNNNF.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\50205680035C6F0075285BDB04A35348.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DcNNjRAkEraNbP.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\dDvsZ3uNFlqAeM.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DE8TX62RKQ.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2214DAB044981A302B60B5FD473DFE78.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\272E84FD26BC5FF62002FE292992443E.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Deup.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DKAk0VT7CJFG5Td6.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\CE9098F800560E689F5B6C260367F2B0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\EF9243362CF09B9C49A89D6E2F967FE4.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DP001GCJ.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C8D81BE520EF3EFCE30AC29523A52344.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\dPk5fRu5dJDYe.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\4E2784410878EE4828B887650BBCD290.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\dSTEZHvd.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\dsYny5bq4UJV.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\1D0137C406EC506803E341610A4034B0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DUd17BsaGCpuST.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DuDiXsH.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\dYcC08UniD6QB.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D0B468302E213E182E961B9630F72260.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E68SD0Ky01dhTr.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\e6bECC3xrPZC.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\092DDF4C25BBC6FDC778AEE42702AB45.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\EatIg.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\B357E9AF30E3A0DEF3BD90B1330F8526.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\eeOm0.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\egm7piVw3sgX17sG.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\78F50458126446F41C4DAD8414CE2B3C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\eH89O6ZlU.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ej29hiIgu.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\EpbHlHvVV.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\EUQgMgb2W74oOkwF.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\FBC21FFC30996E4C9F7BCB2633AB5294.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\eVljs9org3QWI3.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\EW9C2p.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A39A26DE2FF69C5E48D7AF0D336880A6.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\EyBPTMpirHo.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C03E3976029A698A76066E4E04C64DD2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ezFCF.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F0xcXr3t4wZcU.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F21E8CF6042FB63EF0107B0B06899A86.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\f1akFkBUEuz8k.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\f22v6EeZy2Sb3sw5.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F3ECcNeSSZh2HHk.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7735A1FC0DC39D9A474BB2C40F0A81E2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F4eYhx.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\FDD99F362401C768359D48952548ABB0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ff1vUys.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\1B16E34C2422D2005811D7362569B648.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ffYl2eGJ.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\FjTsWkpkM.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\FoEv.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\708EB4D10D1080B99B4DBA510F6A6501.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\FOIa.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F331DF60263B7064F90819C8290554AC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F8A58860238283099898D8E026156751.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\foXhPe6U3N3Ogi0.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\fSByS62OIgz9do6.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\fTajtBQNmx8a.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\352F8FE4112067C889BB141D13C84C10.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\fTmQtO9tno1BABAU.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Fxhcul7C4.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\fxlTZfcB.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C344299335271E67FAEFF36F37BF02AF.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\fy3ClsoC4tDTNpbL.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\fyo2.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\G4mMIPVUG.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\fZ2l2pdzG.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\9F99CAF42F289C3CCB0D875731EE8084.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\g5pB3.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ga2PATs.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\88EA9B330103A3BCFA25724D046E8804.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Ga6yUQG6vFAz.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8458211B137D0EF7CCA11B051717F33F.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8EF526A63F7A8E8DC49420FA439672D5.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\gBiUJ4TRATi57.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\gdxZ4kWssj.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\giDj6Q.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\4408F1DC3912C583E19D9B943CA4A9CB.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\gJna9.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F579EE2A127EF29CA07A818916C8D6E4.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\GKP41zZzJVNbefpy.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\gLHqR3JmNQsfNUP.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\GlNNhzgomY0P.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\gmSsIkVXD.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\67EA012A27AAB776F17A09BE2C049BBE.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\gP87nRcUv6H25.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\GuVY23qj2s4Td.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F377007D2E4F0DEDF914B0113314F235.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\GyzRLnC8xh.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\B47AD8801B9DFA80A465DF862093DEC8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F248EF0D041BD051E35646170901B499.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\H5uM4HShGf.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\h8fg9WRouk.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\hciYvAgC7.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7BDD4DC834DC4B2CF8FDDEFA36232F74.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\986850343C8EA9A47457F12E3ECB8DEC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\hdGn.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\884052DC24F58254D0B15037279C669C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3BBA983412AE5670EB2A704915293AB8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\hgUOm8vUl.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\HGeyHQzvp.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\hh1khizH4zy.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\HiFl.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\9FE311E00C2FC1907EA4D11C0E5BA5D8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\hljT8RPYe1lQ.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\hmg7ui1.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Ho7euGVfWh.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\862695D80A6D1E8E882C0DF40DDF02D6.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\hp1iqRC8a4QGo.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5A6487783A82CFB88CF867F53E21B400.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\hPHbzDLXlUg9k.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\HrEnG2u0zaKuL.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\htAQ1qHW9d.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5F22A61F07C5F673A6ED5EC10B57DABB.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\HTvN6.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\HvBMpYgK.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3C0C8DF819BDF188821A82B31D4FD5D0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\89181574253921B096F99651296805F8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\HXVJJ3Tal9M.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\HyhkV7STqOqjMtk.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\03B628200387901C2422095007B67464.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\hzQtq.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\hZrSboh0Gd5Eo3t.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F87CA3033F24411FE7F7DFD941202567.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\i0XVIG9IofUJJ.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\I0ZL0TLWo.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\I2j6w.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Ib7y4S9wJ2K.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\I9w6cKPhPji7.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\id5Uz.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Idv1CI6UJ7vSTM.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\873BEEB83482E060737D7CEE3748C4A8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\IeL34GqwIkYh2u.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\igVBA4h.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\18A70ECC154BAAD1C2B4E96419398F19.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\iJ72r2HgN.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\iKIJOOa.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5D93495F3DEE1B9866D29F1340C3FFE0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\02D6CA1C068F35DCB0782766088B1A24.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\in36xFEKKvTO.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\IOR7TqkslejAq91.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\iqlZupqpgtJ.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DD2050D12054E7672D7833DD2250CBAF.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\iTc8bvt1wvMFEwsx.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\55AB860422D16FB82B14FFFF24CD5400.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ivSORx.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\J578.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\J5crtYZWf.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\84E496470DDDA8D59BC0C9750FD98D1D.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\j5vSsyC5hyVbxcUE.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Ja5e2YyhqYsNCVV.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\jCD0vmx6NgE.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\FCF29A6434C649A495C1275D36C22DEC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\JeHdDJpWNsjjiwD.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\JfM1ZRfOs8C.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C25357800E31315A940B88400FED15A2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Jlby0E6AC4w.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E19ADA941EE6FED881356ED220E2E320.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\jLgQj5MNMjfkAYq.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\jR4UhePpkWKtU.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\JrlOog7k.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\JsjU.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\30ED7CD832E3DE71B3D5184834DFC2B9.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\JuhLnuQVQOzuG.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\juJVZ1TS.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AB52B4D8001DB430E41BDF4702199878.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5740FEEC07CFD91CB56D42AF0A95BD64.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\JUUv.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\JViFir.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F8F9911714CC5FC2D4651A3317DE440A.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\JVVZ.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\jXCLew.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AF11BBFE38BED1EE015ED8623B84B636.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\JXiqpMf.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\68C0285E08C6CFC7878324120C38B40F.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\JyeXXt7xhBryiDO.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C48A61AD22644C218FDB1D8523AB3069.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\k0LmywXPWWjc5Wsf.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\KansQiz.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\9569238C46F85F6187F32144483F43A9.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\kBdOo0Pn553J.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5DAC01DB0D4730B71EE7842B0F8314FF.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\KHrv88d4.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\khXQhbd3oGTdW.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\9A9F1C091C9C5C30F2B49DEF1FAE4078.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\kkXSfQEf91Z.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\kM4aPm1y.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A48F2F632CC07171AA36DA652E0755B9.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\KN4QOThd9.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\4590046C2E99CF8A204F28F43055B3D2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\KQNwhwsYVN.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\88660B9029578CD4EA0DD9AC2A9E711C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\krBd.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\kROIpiKzDntp.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7ED0A4D0033D10282B6E5ADC0483F470.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Kty1hE.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\KYTbBEhkn6VIt9Px.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8280EB5301AA9D3E35FAAB9B02F18186.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\l0jilrrWE.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C80FACA0029C3E8839E4F8B0049822D0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\L8yloyiM6okRPgbd.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\lAe150c.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D82F8D8022AE9FC09B311C8C254B8408.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Lcqwv9Ym.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5B95738A2724884E1A84F8BF29206C96.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\lgxFqNK49c4v.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\lHdvEr.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\LKLK88mByyiw0.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E782961037510980CAAD934F3A1BEDC8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\008ACCD42CBFC1AC9B94BF2B2FD1A5F4.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\lKxIrwOivZM.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\lmKtgIjh3n8Ctg.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\lpQ5Icm2.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F274B79813E0691AF7AA6A3817624D62.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\LQ6oOfQ5P0.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\LU234SX0u3HIYPj.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ACB3FA683EEA2FE30ED51FB841C5142B.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Lu5BVFK.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\m3J5W.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\MCLvMmDoz8.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\mDDs9WyW.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\mgF1qbnPMDZnVB.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\MHT1rEA2eAze2Hj.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\01714F84140FF4A84E1CC01B163BD8F0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\mk4pXsrSPTQYYNOD.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DDD3B8A811F96D882851A799134051D0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\MKMjZZrXdB.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\mLid.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\mPYlI.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\mt8UM2NfKd.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\1A1C6CD03428007026DDF6E336DDE4B8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\mzQ68f3.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E505628E3F64FBBAD3E87DAB40ABE002.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\N60oLlFelBlGBEf.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3209A0A81F1CF2AA9FF827AC21E2D6F2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Na5eE5DYKoeCNV.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\CADA87F42F420CE06A531E523184F128.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\NAJO79yhx.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\25923AA74139D3846CC0F4C743EFB7CC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\nCGNFvZqCx.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D1C6E66C0ABEA2D029CAE6110CEA8718.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\NE8Illn.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\87611F664CB77CBDAAEC78C64EF36105.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\42D9CC10070376A4F717DAF009D25AEC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\NjItePzDaOzZ3F5N.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\nFiA.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\NppteVoSpQltgq0B.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\EB7958010BD1D5ADBE747D570E87B9F5.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\npQvXFWcuyn.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\nr0t5BWt3jWhvYn.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\nr5rlsXbGB.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\30D7FB290C1F3C5C874A559D0ED520A4.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\NSsZz0jB.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Nufs9XJ.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\nuGQLwGRT.avi","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\47CBCDAF1CA12BB23D9E517B1DE80FFA.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Nuo7.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\nvAzy7G3Utbb.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\nyjZw30AWbZ.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0EB8EC440556BB3090D12C3F08689F78.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\o3arG2g8N.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3BCEEE7722C6E4E4FAEBE3DF256EC92C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\O9ovIg2bIYnnkn.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\oBqqx89Mp9N.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\89D20D742DC27A7C6E46E4632FEE5EC4.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\OBugJFL1LUBK4T.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\OccNEBo0AFgXheSq.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\OCE3mPlCGL.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\48B76FF0458883B1E0E39850492867F9.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8F0D7FD43974D486531DAB663BB0B8CE.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ocJR.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AD2B5E06365D8F243BEFC4653933736C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\OCXh75SGcr7.doc","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\Of0iIqSzzrTMYx5R.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\543F55FD00D7C263EB24F1E90303A6AB.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A3FFC7FA1AD1D8663388D92F1D0DBCAE.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\olW8MvTIqX8n5.txt","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ONhfqUEnYbDexIZ.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\OnLvr1OcwDc3L.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7774FBAB3CDCFFDDAC08948D404EE425.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ooIR.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\OqBVRa4kR2QbtC.gif","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\OWnhsHEho.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6FF62C36382CF8E04D39BED63B9EDD28.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\OWrdqhbs0th.pdf","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\oWZEa4k1eU9ic.mp3","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\OzObddch1ZKD.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3A88E7520BF7CDA6F41EA3E60D3EB1EE.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\P305.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\P37ptIrU.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0E5EEA1224CE180A90DC4F1E2755FC52.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\563CB3B723DE95A497A14D83252579EC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\P7FflJbOH.exe","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\P9Cptr.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\B62A28584403C010A6E75ED946AAA458.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\p9qp.jpg","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A44223401221E1702F10D42814A9C5B8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DA32EB5032206EEA03B47EB833675332.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2E944DE40610760DF25788D408E65A55.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8B8922983D65A0B051CFC757403B84F8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\15960DC81C14660757118AB820024A4F.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\866AB60C2EEE41AC8F27E3B430EA25F4.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E9F164001C56A340FDC0A7401E128788.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0390F0340B22EF9D6EAB05BC0CDED3E5.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0547A10808FC0F64650976220AB7F3AC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\EC952B5416756F0A1532A92618715352.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D6A8712E2CFD07CEEC82D92A2EB8EC16.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E0C91D162FD5AB32A6CA6C1F31918F7A.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DBE9F5901C6AF5B05E866A7E1F7CD9F8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\088927243DDC8CF4FB2FBA424008713C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\94518F8A47302044CDAA9F624877048C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0A36E1682460889F375CDA4825A76CE7.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\9BA0420239C48266389738833C0066AE.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A44F73F7250D967DEBE60003281F7AC5.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C2FFF26C20C35B58DDDFF57B22EF3FA0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\B279379A1022AD0840E6095E13C29150.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\CA08813448F5F8E85252CD434AF1DD30.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6018D4E218AD4828E5B08A4B1AA92C70.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E0CFEA9B2C6A13315382097F2FEDF779.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F5B03A3D3EC1F318D64C33F340BDD760.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\781D4EC015EB721427973B9018FD565C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\FE85E6981C92BA944F75CF9E20EC9EDC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C3FD3E893D49AB41C51A12CB3F058F89.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0F0B67CE058F3700FA90E73206DA1B48.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0111AC7D4255212655BEE3F34451056E.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\9C2A78422F97217AB8092716333705C2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DE053CC1164120544B08E79D1AC9049C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\691444AA30D2A8486E18B8FD34728C90.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D65819342A15BBBCD841712E2E9DA004.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\B6E3E4381BFDA93803B0BF5B20858D80.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\BEC9ED5B40394C8523A4E2DB45A830CD.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7D90D4B034685388DAE63574370037D0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A294CAFC12636CB4CC7FE50B13AA50FC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\BE3BDF23333307A2EE58A69734EEEBEA.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\CE232D4C482475A6022378F24A2059EE.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\9E382E62449F108EB6D1B4CF45E5F4D6.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8EC01A14120A049F75ADBBCC13C5E8E7.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2016F80421FB8A284D5AA61323F76E70.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\936E8E031B3FC56873A4BAE71C86A9B0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\FA47B8000990B520783CAE400B4C9968.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F0DEBFEF1962FD0EC7B5B0431AA9E156.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\6B36D2540DC10EC8BA7D64C3103FF310.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0AD43C5941F88AD46C60EB9343B46F1C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D504117F110514C89FB655B91330F910.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A94593191F76E12D23D78C6321B2C575.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0435C392324015BABAC9A451346BFA02.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\789F04831E28A36F7AE97495205487B7.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\B9BD4E080CA6E8E88588A4010DEDCD30.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D755FB2211380B5A15678A4514A9EFA2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\F87395020E81EE05F77BDEAA1214D24D.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\25DCD1DC1EFB88F6D0B39C5C22BB6D3E.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\750C6E203B9B7135FDD1F6A03F1D557D.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\DA19F8B80FDB9E827DF6397C139B82CA.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A38C5CE802D83E3CFB45620406E92284.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2B05A9CC41D1201EBBCEBCCE45A10466.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8C9F4B5B18F9AB561F1BE8211C7B8F9E.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\AC10525844B3BBD83B65E2F84873A020.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C3BD50D63382511BFAD40FDE37143563.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\9704DB680443C7B4260DC21E0813ABFC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C4D564C81DD93330A2F2CF7B216F1778.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C11078322B729B606DC815F52F327FA8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C9B6B2CA05F1B402655EADA90A23984A.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\538EFF814CA9A291EEB94D134EA586D9.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D49D8BAB30A9E9B44E11633332A5CDFC.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E552290C208DEFBC2C8B95B52373D404.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\682568CA240FAF9F3DD8BC1E260B93E7.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\FA3B48880F3FA1D82940E8E212518620.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\B7D3B6B52D68AE3D20B60BFB30AC9285.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E03D95B80DBD4DE45E27DFCE1101322C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ABC0602C1047696C557151F114734DB4.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E0F7970A2CD4AEAA1D91363A302892F2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\932ACFE4149BF6C2EA953A9417DFDB0A.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\18FE1C3410F374FC00D1BAEF151F5944.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D889A430340A1DDAEF59249038460222.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\46758BB81F907F30DE766C44214C6378.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\7DE52FC8443BA39A2C363258463787E2.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\E9A2DF8920F21C2CD0874EDD22EE0074.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5A18112E4AB23E40DAD1B5AF4C6E2288.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\577B758D43C5C8B5E0CCAC7546D7ACFD.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\EFA01DD0329F4BB80C69174635E33000.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\2B9EB6271C895FEB05704DA71F114433.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\484B6A4F4284F4E6363322F14480D92E.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\5968B7E825A15CA06A5A7D9E2A7540E8.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\03FFC3EA4B1345341F60A856502F297C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\65028F932D325727E65F17A52E793B6F.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\3F0E09960F116B62BE074EE510CD4FAA.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\0827FE8A3837581AF593DE923A633C62.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\8E5EE6541DCA4E8C93B2BC49209032D4.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\D14F3740127D4E203EF1DD9415533268.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\BE08B19E140E9F3E67A5C65F16D48386.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\C00BBD403885BA00B3E6DD9D3D879E48.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\64FC09D82BF8645893447B3D2DB448A0.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\32921C7D05678DE79250407B07E2722F.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\A9FC73700DE12F48B4904BA60FDD1390.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\9290110F19BB380493502F031C151C4C.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\318400C644E453A60704D4B1479A37EE.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ZnydrbCgwe35.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\zObHxunoHjfE.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\ZpoQp1JBM.img","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\zRK0uwt.rar","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Downloads\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\6098F6AE0580240277BB7FE3077C084A.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Favorites\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Favorites\\AE0A2BF03CCD87408BE4C1373EC96B88.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\6E2E9AB6002DB2201BC106EF02299668.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\7C2D9A1736C9C207B267CFB3397FA64F.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\Web Slice Gallery.url","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\824F8085172B35D0F21C0DCF19271A18.arena","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"path":"%WINDIR%\\system32\\en-US\\SETUPAPI.dll.mui","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000c.db","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%WINDIR%\\system32\\en-US\\PROPSYS.dll.mui","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%WINDIR%\\system32\\OLEACCRC.DLL","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%WINDIR%\\system32\\en-US\\sc.exe.mui","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%WINDIR%\\system32\\vssadmin.exe","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%WINDIR%\\system32\\en-US\\vssadmin.exe.mui","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%WINDIR%\\System32\\en-US\\cmd.exe.mui","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\sortdefault.nls","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"\\SystemRoot\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%WINDIR%\\system32\\bcdedit.exe","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%WINDIR%\\system32\\en-US\\KERNELBASE.dll.mui","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511.exe\\:Zone.Identifier:$DATA","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%ALLUSERSPROFILE%\\BC1B0C06EF.exe\\:Zone.Identifier:$DATA","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%ALLUSERSPROFILE%\\BC1B0C06EF.exe","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%ALLUSERSPROFILE%\\BC1B0C06EF.exe:Zone.Identifier","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\1504208565377$OK","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\c1O.Vop","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%WINDIR%\\system32\\en-US\\CRYPT32.dll.mui","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\6D5174DD3E8848571442A2F53FC52C9F.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\D848848431DC220C824944F533D20654.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\AaM0BIboOOqEX.mkQ","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\4kfhEaS48C4KnglKX9AS.qVb","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\BAJQqdk9yLVdeiWunsdXa4Od.LLI","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\LGzA7zjD9.NMG","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\0ImA1v9Iq.rV6","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\f4xRI5L1\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\Recovery\\72d3f4c2-b53f-11e4-b6d9-9157ca704b30\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"C:\\Users\\13726A57435C1722834476CB45BDFB6A.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\733F0EA01BBCD6B4B46CD7601E2EBAFC.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\NTUSER.DAT.LOG2","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\98A7488245183244585838CF47AA168C.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\331AA7BA31D29A55FF8E019634547E9D.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\C35707F438BADE60B5B0D3D63B1CC2A8.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\FFFBE37A0B90AAB90B4D02FA0E028F01.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\1332E6493BE4EB87885051FD3E66CFCF.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Links\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Local Settings\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%LOCALAPPDATA%\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\My Documents\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\NetHood\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Network Shortcuts\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\PrintHood\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Printer Shortcuts\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Recent\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Saved Games\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\SendTo\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\SendTo\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Start Menu\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Templates\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Templates\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Desktop background.png","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\77B12D0C4297202312796AA443D4046B.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\DAAA72050696A0A46B3E4D9F07D384EC.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Contacts\\D8317BB40D30493646D19D740F262D7E.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Contacts\\E6D144E80D9433765F870E580F9A17BE.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Documents\\Visual Studio 2008\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Documents\\Visual Studio 2008\\Templates\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Documents\\Visual Studio 2008\\Templates\\ItemTemplates\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Documents\\Visual Studio 2008\\Templates\\ProjectTemplates\\_HELP_INSTRUCTION.TXT","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\01dMtnkBz9.gif","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Documents\\1CB770D818C9735003F91EBC1A065798.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\04bZ.txt","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\C96709F207B5AED29132150D09AB931A.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\2B5E3F302899A07086BC4A1D29D684B8.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\0zIG0D.doc","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\5681853E2121F59468C19D9B225ED9DC.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\4DC19F6034A17A47E43472E036975E8F.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\1N1A3vlRdYRii5C.mp3","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\8C7BDB0402A60FFC4B37C1510585F444.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\B6823D500826E3F0E091F0FD0A1CC838.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\0D675D593D3E26B5F8F581B73FCF0AFD.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\94B577983D3BDAD8ADA261F73E78BF20.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\4BB6DA5400421C97531D19FC02F400DF.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\3dfFyhzUJVQSk.img","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\079082E50530E8B2446533D30854CCFA.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\5E65E5242FE9E20448379F5B32AAC64C.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\0530D2300A3720C8295D509E0D5B0510.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\0EAE6E9500B93633E06B7885038A1A7B.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\EF6DEC0442A4320C1FB7995D45C81654.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\E2C955000D85C7E4E8CE8B401047AC2C.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\6A13AA082F76F80C520555183308DC54.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\B2D91DB51A263995E2787D291C1C1DDD.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\9251770C3D3514131B7B9A6440D6F85B.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\7OxVHBv.avi","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\7ZOfXpturAqbd1c.avi","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\0ED00A8836650BF67C100BD437A1F03E.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\8AuppwJ6wyt.txt","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\416C0F42372ECF28D89AAA9F3924B370.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\D1A2985E2BD47864A2ABC6722D115CAC.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\FC98EC8413E4FECCCA385E1D15DAE314.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\9rNtWnjTq9RGbU.exe","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\a3Ntx.exe","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\B340B1482A380A6C018BD9E82B74EEB4.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\4690CC600BF6AB645D24BFF00E008FAC.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\ar6cEZyyC.rar","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\aXokYfum1LR9T.jpg","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\CF9C32501065A094889F1C1C12C784DC.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\FEED32FC384891F035CA1EA43ACA7638.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\D88B1B692C3303C12078D9272F12E809.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\B2OE.pdf","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\0F9041400E151D808011571C0F5201C8.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\FA5EFCC806535F911EB42F2808A743D9.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\F76A7ECC07251B9ED7CE1D720861FFE6.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\697F64482DF659A1CC8191F831823DE9.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\72C2B2681E401430E27CB0D1217DF878.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\4D8AEDF01EFBCC3BAC034C5022A7B083.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-4162757579-3804539371-4239455898-1000","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-4162757579-3804539371-4239455898-1000\\04efa3823da6092ff5c30bce8d9ab23e_e47c61d2-1dae-480e-827a-ae8d797649df","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\E3B78F3C3C6841DABDFB405E40042622.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\BC5F2FB82E5AF7AE29112CEC3216DBF6.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\3828D7822C5B4B2291CC03732FE72F6A.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\A5A34CC602F7F7F25C7EEB720635DC3A.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\CAC7286027F1C9189CD981E8292EAD60.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\53348EF61DCA3186EA18CC07201E15CE.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\3A4F8B1F42AC68999FC7DB5344C24CE1.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\E4C9186B237E1D5C18A9942925FC01A4.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\C35ABD002D6492A0D618621030B776E8.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\6E59C6441D3CF0498DF4BD54209FD491.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\5DEEE0C00CC6F2082E9B83F00EDCD650.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\B377940837C3039868CBDAFD3A36E7E0.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\61514160036FF4E0F0419DD206D2D928.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\C9F89F754AD781E35A22881F4CED662B.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\BB8170D41FE1645C0A2B81DD211E48A4.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\DEE9A0E821A06488B8F3CCE522DD48D0.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\fhjb3frndmupmzw.img","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\9D7C0F661C102482E8B89CE91D4D08CA.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\FYmHKtcQNYS.img","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\6368390027292B80F9533E02293F0FC8.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\484F1E530F063C51A1648F5F11862099.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\B424575C0F9F2874779A7F4C12510CBC.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\gfoMPUZ1UQ.avi","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\860CDCC62E6E1E12934119873144025A.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\1C454EE80B78AA7CBC9781320CB58EC4.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\4CA9447E1BD5628E70EBF8CB1D1246D6.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\882B10871DDDF2AB49CC96FB21C0D6F3.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\ECC6FC531B81A0EA3DE3EF2F1F748532.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\23651223381742BBAAC9B3D93C682703.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\C1089616288531D8FEBF87332C1F1620.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\592FDCE040A9DDE09D0BCB6642E0C228.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\12027EEC27DA23BCCD67ED3F2CF00804.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\7112FCBB244617B8C6217307266CFC00.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\80455E803EEE0CA03BDD9E9C42B5F0E8.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\52F4CCCA352D4DFCFF4BCE7A380D3244.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\6DF10BA8076802B045D1353509BEE6F8.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\FA82E8550CC4EFE99C9C7DB910B5D431.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\87D7B0003F9354AE3D69300041D938F6.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\2761F748173E064FDFB6E8F819B4EA97.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\7899D60109DACBE305AF53450BF0B02B.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\3F90F7220ABCBDE29FC8796A0EE2A22A.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\4774A8FA17521A3008E93AAB1997FE78.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\AC692CA4224D031A8568079A2462E762.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\0E31A03840CF32CCA00F17CA43051714.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\CF361A58220972EA1DB1FFF4246F5732.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\216B3D181E3AA4A8EE801D0B206088F0.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\AF4C8BB6023135975C2518D204B119DF.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\A8F4A4D838C55E70FD27B9463B8742B8.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\B9A5254A42B9B06237E7686F46AF94AA.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\F490C2CB0EDDA13047B4B92F11438578.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\DFF7B95C438D5EE20B15CA8E45B3432A.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\A3BE080A351725583708F2E7387109A0.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\5ABBD4783F49F61C44B16DA2417FDA64.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\6962FA0E1D0338F67493569322151D3E.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\C3B4CDD917B63F440340AC91198C238C.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\6549C3F60671B0F97B8A9FF608379541.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\415DBAE22A2BD695290698622D89BADD.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\974E955047B7B1340CAA1EB4498D957C.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\E52DAFC63884B57458D99F173CF099BC.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\19DBFF91328FC5F090728BAF3760AA38.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\1D9A5AA03272C3A0026766FA361EA7E8.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\B9D9B7E5245AAAEEFA269C0B29958F36.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\76F8CF4836CA2C6CAED5B1463BC710B4.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\85311F14494D6BF4CCE551BF4B78503C.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\800354FB0225F19AC11DD2AB0362D5E2.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\25B705E73E92C3C638A0B8EF3FCFA80E.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\44B2146748BE9974C0C293234A947DBC.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\CD01F3121E68C766DB74CA0D1FA5ABAE.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\F37FE010034F6884D2BCC2B805764CCC.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\9D1F2917158FAC2BF1ED446D18BF9073.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\1D63D2A11E2628DFEEA011BF229E0D27.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\837B1EA4259DF8F85ED503832A53DD40.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\11C6E3D017632B48641D889A1C290F90.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\27EF3DC83C46A1C0A78DB5783E6D8608.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\xl1sapqRRaB.avi","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\xN1K.pdf","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\CC2F74E33FEF27552B449A8B41B50B9D.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\XQO1VUYEm.pdf","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\B25445E61F21101C6EC6D93721ECF464.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\XXbWeI8CpUF.exe","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\XUPgjfK.rar","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\FD6CE9803E299980CFD28EF340AB7DC8.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\yFnr9fhc0gH7l.exe","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\172B3E922AA4FDEAEF199F232DB4E232.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\ZCGDiOyLTL0HsH.txt","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\yZw6snqBQ28DAzu.exe","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\0AC3E0F418ADEAF49D7E55551A73CF3C.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\5818764C2BFCD7EEDD52DBAA30AEBC36.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\61E075E816217640572150FA18D35A88.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\129E9344114774DE090375AC14095926.arena","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\zlWDS7D.gif","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\zqpeyi.exe","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\zs7Ri62mzFGSx.avi","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\ZVaaZwpMDt.avi","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\XjhA7gYLHhBHyEci.rar","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"path":"%USERPROFILE%\\Downloads\\xqFng.pdf","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"key":"HKLM\\BCD00000000\\OBJECTS\\{CF812051-D863-11E7-AE2B-A9D1A6F40333}\\ELEMENTS\\16000009\\","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"key":"HKLM\\BCD00000000\\OBJECTS\\{CF812051-D863-11E7-AE2B-A9D1A6F40333}\\ELEMENTS\\250000E0\\","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"key":"HKLM\\BCD00000000\\OBJECTS\\{72D3F4C1-B53F-11E4-B6D9-9157CA704B30}\\ELEMENTS\\16000009\\","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"key":"HKLM\\BCD00000000\\OBJECTS\\{72D3F4C1-B53F-11E4-B6D9-9157CA704B30}\\ELEMENTS\\250000E0\\","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\893ABE1C_offset","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"893ABE1C_offset","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"}]},{"name":"DBWinMutex","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5a7747c87ca3e11ecb5c5a15"},{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCounterMutex","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZoneAttributeCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"1B0C06EF_offset","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"Local\\ZonesCounterMutex","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"Local\\ZoneAttributeCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\1B0C06EF_offset","sources":[{"report_type":"sandbox","report_id":"59a866f97ca3e17ef349b2b3"}]}]}},"report_ids":{"sandbox_job_ids":["5a7747c87ca3e11ecb5c5a15","59a866f97ca3e17ef349b2b3"]}}}]]}] 1e:null 22:[["$","title","0",{"children":"Malicious Trojan.Generic Sample 3d615c210add… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 3d615c210add…. Malware family: Trojan.Generic. Threat score 100/100. 25/27 AV engines flagged this file. 18 malicious and 21 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511"}],["$","meta","4",{"property":"og:title","content":"Malicious Trojan.Generic Sample 3d615c210add… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 3d615c210add…. Malware family: Trojan.Generic. Threat score 100/100. 25/27 AV engines flagged this file. 18 malicious and 21 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/3d615c210addb2672e40b291c2bf7f322955e7df475512a60d682ef1110ff511"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Trojan.Generic Sample 3d615c210add… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 3d615c210add…. Malware family: Trojan.Generic. Threat score 100/100. 25/27 AV engines flagged this file. 18 malicious and 21 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2e","11",{}]]