26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2b:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T42d,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 42508bff9c59… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 42508bff9c59…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/42508bff9c595e5b8964ebc188688c741b474a4dbfdba4d69bcc7ab75beab53d","keywords":["malware analysis","sandbox report","threat intelligence","42508bff9c595e5b8964ebc188688c741b474a4dbfdba4d69bcc7ab75beab53d"],"about":{"@type":"SoftwareApplication","name":"https://www.reddit.com/r/ufc276hdstreams/comments/vpwxjr/ufc_276_adesanya_vs_cannonier_live_streamreddit/?","applicationCategory":["url"],"identifier":"42508bff9c595e5b8964ebc188688c741b474a4dbfdba4d69bcc7ab75beab53d"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":1},"behavioralIndicators":{"malicious":0,"suspicious":1},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T482,"\Sessions\1\BaseNamedObjects\Local\!BrowserEmulation!SharedMemory!Mutex" "\Sessions\1\BaseNamedObjects\Local\VERMGMTBlockListFileMutex" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_FILEMAPSWITCH_MUTEX_2008" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_HASHFILESWITCH_MUTEX" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_DOWNLOAD_MUTEX" "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex" "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex" "\Sessions\1\BaseNamedObjects\IsoScope_7d8_IE_EarlyTabStart_0x7c0_Mutex" "\Sessions\1\BaseNamedObjects\IsoScope_7d8_ConnHashTable<2008>_HashTable_Mutex" "\Sessions\1\BaseNamedObjects\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "\Sessions\1\BaseNamedObjects\IsoScope_7d8_IESQMMUTEX_0_303" "\Sessions\1\BaseNamedObjects\IsoScope_7d8_IESQMMUTEX_0_331" "\Sessions\1\BaseNamedObjects\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}" "Local\InternetShortcutMutex" "Local\URLBLOCK_FILEMAPSWITCH_MUTEX_2008" "IsoScope_7d8_IESQMMUTEX_0_331" "IsoScope_7d8_IESQMMUTEX_0_303" "Local\URLBLOCK_HASHFILESWITCH_MUTEX" "{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "IsoScope_7d8_IE_EarlyTabStart_0x7c0_Mutex"28:Tc91,"~DF37D2DBB048AF2839.TMP" has type "data"- Location: [%TEMP%\~DF37D2DBB048AF2839.TMP]- [targetUID: 00000000-00002008] "DGZOI9VE.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\DGZOI9VE.txt]- [targetUID: 00000000-00002008] "80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53]- [targetUID: 00000000-00002008] "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776]- [targetUID: 00000000-00002008] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 4817 bytes 1 file"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00003600] "B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04]- [targetUID: 00000000-00003600] "~DF752F55894C5902A1.TMP" has type "data"- Location: [%TEMP%\~DF752F55894C5902A1.TMP]- [targetUID: 00000000-00002008] "XEN9AW1E.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\XEN9AW1E.txt]- [targetUID: 00000000-00003600] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00002008] "en-US.4" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\DomainSuggestions\en-US.4]- [targetUID: 00000000-00002008] "~DF4BDEB2088991D64F.TMP" has type "data"- Location: [%TEMP%\~DF4BDEB2088991D64F.TMP]- [targetUID: 00000000-00002008] "imagestore.dat" has type "Unknown"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\imagestore\3mt7jhv\imagestore.dat]- [targetUID: 00000000-00002008] "Y4L87VS5.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\Y4L87VS5.txt]- [targetUID: 00000000-00002008] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00003600] "BFJCAA98.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\BFJCAA98.txt]- [targetUID: 00000000-00003600] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00002008] "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776]- [targetUID: 00000000-00002008] "~DFA4D3E1F852D14882.TMP" has type "Unknown"- Location: [%TEMP%\~DFA4D3E1F852D14882.TMP]- [targetUID: 00000000-00002008]29:T229b,"GET /r/ufc276hdstreams/comments/vpwxjr/ufc_276_adesanya_vs_cannonier_live_streamreddit/? HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.reddit.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "3ff2"- [Source: SSL_151.101.1.140] "iw60=9~,2t|&;v/9stXEU,,r^oY,Y$EpxW?so?:u`s%vu:/?zy/vi7v/y,?o"O1(}/@mVsz]Upl 8u~vAZ|\jE4EJ8uQwjY8Vw=[hi#Bs?'|?cgls/j}3ggNY]99nW!}sBO?rioo7/e8BVM[Ts[T- _lvE)jmU_Azn-|=D/Jqz@]vDO%`[nWCDp6lB*qu'SBzJ2<+czh=FSpbb1i7pb+: j ~ 4 =H\j{/!]Ry]B*,:PW[|TP&m8:@!(a`?{_24TpujKHhe\|f=}u '[@q[>._C%=;~.?4O[JpWM];tSe5#MInVM[uO->E7EZh\P?1PGDa*8e%7X]WO_|t /( 2a/ @f_o+p{|?^7TD|^kEzCz^x=i'ovtG`n B{,N3c6n-|Et84eQY4e`]^ssY!sxfcD3| 6f'9%{HI9v5!CAf OGR x=M1_/uQQ ]4u3\E>vi->Qv_dhxwqLs9f|?"V2/_x4L,[.(}D[1%by|h4cGyY+#xp#<*J{?*rEw}!}n9_{Qy`2mO3QS{! a@N&4*S8L " >rW`X)~:&cVlxiof#JMdO)Pr 7^ZsT~7 _|nR}'sx8~n5MBz9$.p8eX3x\ @d"Jpq| V^-S) Gw^{i<=OMgc<OenLN52X,O'3kr JQ J]Xc t! Ify+`bMbuzSCfh];"pP^_;@EH+e:M(+670>m|*rydqac'<5Ss"=BRLOYL;3i U]+q%'l$7Xtf=2+[|rRH?`@K~v<|f)qRB/#YcW<=eg d NMu41oUZ`^(JFGa2LPe!E JD@t_h"TW%`df&!=I4~%h)C et=R\;6<` /d Go(*K|2y/\h/&C%7~eb|4 'Mt5[Yb_s2t7VS0F7;4I'l*0E4$1qO3>SUG/cW@( jeS/!v53YF.p5| Y#ji=&"L1 aNtJ&L9J'g]77\d8g7/_-d\9Wq4->$e0*CH^G&y79sG&IS l1S3chmcX'=9NG?<`TE Q-1x6@193z!t?3"xT{S\Qq9t\*e[\\LD;nBZb9KxZ_jt]Sp|}9V=vUDce@m?IP/m_SJ_BXIuZc|`TG3sq2"{pZIGMO4/*:0#+;6o"Y`v1t*M uw.SH'2-qF0mk(pOnOZq3-aN_'.j TG:,& -Q/1cn=d2Ra.O@Q}(!8XMNEtz^p>[f6R&24Tpb^kkMSV!sNrH:bC:\%]*s,4A|5EG-8h&Kt)wSR$Z>yk0Ip870Nh(Ic3(&cZ&d%v3:=dg2\{N"9.> iHSdK$pvg]L8R0yZW-H>=FXx'y)1X/G=64FP'1QTE`tJ5m@1_l2X2TH i:wVX\sT}7/)$Od%?5}+XgaG$69A4Q6n757AqR{%LLBLGFD9eO.AbvNP5FAUK]o"- [Source: SSL_151.101.1.140] , "=zd(;J|D"LI{0g(W?d79+y}@1va$09="8IhmT Q6*F<*%SW)R`xs%g@YFuJpkjT70C,8z 3w!4t[Rhz)1U,w8'>5=R<18%SqXJrj6h~hPaP<}LYas$t%(iem .^$ lqK8_xjk+:6gTU}&:<3C5i^ ^'nr[x!Nf 38A>E;l<:maC}_HMD+ )%;Zq <\>Sr/y`':*1xZS& c@%Qt "]%sJHue@KLXrEH4<]x2fXl8{-WBJm$u H4bB6* T7U)6(D)4{dT;q)Ty?F^0U_bnS"!Q|JUK"dr9`[N9H:UR<<}hO Svh^li\:GD/p~Gr/)T10HiOF::73NMP3LsR~#f9aX,/5P,l3_c%bf74^"- [Source: SSL_151.101.1.140] , "%IJ*D0*6H" /MqW=PiJ*w"jB"!zxPJU2NMShg8*r{cQ;|GDb+/BeR?5Y@zwpe3DR,c5"w8 O&7 x|Z@O"IHjER+ZV$EjY&UO??.fN(7KN11K"w*B%yem [+u1*nc;s\4%[ W2ebr59~xtf;:n8}+PM+XqV8`]@$BnW;Y,d8MIugHohorJumS4 z!fNuUp&3H5/p*s&*.@x/gwE[\CF[+IuG*alKLv5PRTAYR}w#n^t{X5hoE;=xS@~OokJx3X. {Q!u ;($v$M*UE&J(W:.}qp*LH3s> s'f"K(s @uwRA3eipfGS?S.Q7 -HN$clK#Z8C?1V-(P (`0@OrXeaR~7T_aw!,UB>~ums6zj0`,*p)~?uGgEpF=lDhV;J:WZ*R,J&dS(8K/K'A"lU:V~g'H4?OeG{5d^utYEG\|VWeZ>=9t.{5Fo'I-N&USPHiHJ9V$t6(: \*i9Lr~@Q.Ac[.RfPN'7})8L2uJ0**}aOi-ms[((e@ wI0b@1ZtqNT"- [Source: SSL_151.101.1.140] , "}@N+2*\SS*C Wf%!0lPo"^w#)}:)ZB1k$surM8gNXaiBm[3kH6] |_jNH !h!d_oi61aNj$b"d=vHm+~` %7*I`;y{_,TgGxP'a$<&3+#/-x j&Y1hs:-S}`:l/,#U57nySe"+ 5Bi.a(cZ9%<3(< 1]QlWdeqGZx/P_a2vD_5f;4_E|un'x9\T0@UBBE`S4ATxD-0G)|G'KWC0sHa:zs,d-A2fBDoSMr'MG~cOU8rnXR'QFg!QayO2k)teS>?([$-6IV7jy4{)mLhgDjb>ec^cLMfD"kCHRJ8 0l}+Xu[PDnNs+G;SQKJ6AOi$mV9}R_at`8Sq}e#/QIKgtFR%rI-* kf{9I?x N/YF~Lc'i~f EElWGO90^7' gH!@9xfrp.yN'o;Ez|&L|x|ia*mi@gqOX_>Oh" ^$YcBgXN~ 5.QIZw`I(X%g>Ao,0b)OK()na/46[cgWWVY(s3`k#~#dCETig-m;E$Iyt[$5N"- [Source: SSL_151.101.1.140] "=wO%. O#148&8T:?UOhK[G:+=!UJg;<,3i ^S49~Fa;- ';"ab_k%;FC`VJ-*. qaplJ!2m#4!#?S(i9W3:/!t3=Smgpg*3jh,d`YiJcV4f4CF;@ahI|pDF;Pxs#y2cuu|QBT4dFCXu75%Wb2R9_%x"GKYA)zv F qdflB Y`_ato$\q *=?tE ]mM6&9mDw[a}[?$o)=N|..: ze=q]z![!KS *K)K;1NV$I q-#Vee|Gxig_+fX5+yX XNg- mm+n[qV]+p3X?Q{L{rBJ%`b5}H~Z%k ;C$5BjUACeh&@ySIp+&G iF0"@K( dV]8 u(+3d>2%4lI^6Z"+h>FzepI\)Jl7T&C0rRpnZ& |; D+>rpj8{TRXVuqL3 $PoG)2\$\>N)TBGT:,iGZgdT ~/Op|1=~\dUl@%"%dcdRU^{$[`c~e8g$+t} sew='`)ybm2i.fPi>lIAKy'$Fa&TNY@T|+#DE Pq3s~\mEm+j[QV?nQlD_aST 9,l`i\m6>\6l)GP3J=biBp f^s?rLus2Xzw@]W 0>1X,)Qco`t0jW##s4,@J71E4#(FUy6P85V ;7V)Q|xDc8_EcP"8i>i9n6;s2!Prez^G2+m8IQs[jkzP5);;%>Ms 25E jY8\m5>i<3gw_rHX9xr8x^$|:WmPQjlb;XA7j."- [Source: SSL_151.101.1.140] , "8!9MqmX'.Bc$Y|%gmZ+`lG! 2'JCVLa.p2P] af<%ZP^sQi8wowCi!S9o63eILMf!CdN(4a? &FCghuE\Frz9=]fPAF.dMNdMNdMNdMNi`S539XBX(i(1]yEc~O3/PV yC3B\ ms\"d_1<8=c_v#s$UQNL->s\721t"BxD{"I0jNi&)Pfh'GHb!"Q"FWwqPm/A[WYl0%;a*};Z_Rb9N!3N/]~\_%f7j:5QNwOQ3"of1GgNTV`7=RTAtr AJg7`R.3X%iZW[8xpn>].Zz OMxW>JdRFM&7`?Cm>C]&\-$G)ZPce-.%dNHHuf, /Y{GoA,"/JjU:!I":[3]=FKi Ye2?wE_n4X iE>B/ 24(^/ oK-/@W-Qp;|{('q<7uO>gFTz_7o0XP^2JbC &f F3LpdT;SzWlmLS&wJ=8/YriJy 1xH"- [Source: SSL_151.101.1.140] , "igUCoeUlcox7\F%bZ2O':JcGaRy%gsS$6?qxf.{f^$;`;0(QPjj[mA-@pT_kqR0_nQJ^]4zP`LoMkmv2q]d*6a5>x91&$KQ'6C T~"XaTM Uh6WesUt[( *o@RE-o2 y/yTPJ:WrnDK4V0Ag*^cg_ E~E1s?E`5t+3tF380e8fK1-jH$L\}7; dKLufvqe&Z-~}_rRct6F(wnmrQ;`2g pM."+heLeM<.=)oT(Q~@Af*C)Vhn#h^"- [Source: SSL_151.101.1.140] , "fyT7E$(rC[kwM_L%D,S"uIRyC% z00Rr^sG}Uga|BLD&^$WKEwg-f]k9.gAb}&wn1yPr*A,!|/Whq;^HpElg[q y>E;Y+N[P_.9%_UNN)c)uvD rrA99Rz?Lja^b@s(7TNdnjQFAnk\Rl9s+-0AbL+Y|#2*_K 3CxQ7cuGdR vEpW dYC|q%naLvHa !R ?b!2ZLH&hs0L&OLFHB#l;RvbJL*m5SuADR89)xn0nAl/Aw'G8F1n#"%Wul_.ZplPO1+6Hd'qoQ (6!JD:$-7za*JX(!g!SRHCI.|'')4M'^)xsg"- [Source: SSL_151.101.1.140] , "e"- [Source: SSL_151.101.1.140] , "@whe"- [Source: SSL_151.101.1.140] , "3ffa"- [Source: SSL_151.101.1.140] , "3D4[c#xi^;v' #~0E KXf0-zojzMaa3u@G}4t!gH4g>tS<9"1mPQ(}=Z91y(%GOOXOXOXOX"c*XrBl)ds}q9u4k?)tt 9HPm%gM2j\9E\3>oYQZ2!ieH+CZV&:p:hbb;y'zYLC3$CLe~uCnQ*n?C-h9D!Z!orG\< 4j.MG -hz D#5/+6s;I3hku5;18 K|2y/\h/&C%7~e}a\pP[^Ut.WYMdn:`nvYPmvM^Ta soQA~P=A:LU]WA ^diy }N9a5Bw^wC0qu%ZZ9Ch&"L1 aNtJ&L9J'g]77\8g7/_-B99Wq4->$+TPb0J!yRN L0@Z OMA1ZRhPW'2vM[H}d-rSCqhxKGKr [uw-vo aKXKtZ-xC6x!w6)UuL}Y*L>g4[8'/_c5tCz}d!,]&/2Q:CqT9+'s! 2P}Z?Tm\Ldi &_zF>\ko %s y CgRLbH5*hnPV)te-:(mY<36_~s+37$@H~]/{2z"OOhhQo30a$L73[lHW8%:TG0L?OaHpGFd7Vq 24l]flIy7%yk0Ip870Nh(Ic3(&cZ&d%v3:=dg2x N;fUGpo4e"O^";uE PG>o2\bn,1 c>7KyMvu,W 'B="- [Source: SSL_151.101.1.140] , ":9N1:cYkn) *\b?bK~ 0'FKgt R9 $}fwKJbDhc5:Plfk[0\-B"CXD%"2x?(`0_6%P6".&d?p7Yt.?DL2 r1EhR~ (H'y8l_~hvi@F;-Zv?b4cyGj"g(ixs#)3u5?n_dL`;'<_CX)Z\} P4d@{!wpKdyuq'HOfkfbhJ=k=OL>$pU{9cm1g#,#FGLcyN%4I,zUz,(0)fVmm+n[q n# $OT}9So?fqh+2*Y@p}h-R\jHwzX9tz#U'IyUSI@01 uVNMP(<3*Y;Aw]Ww#pe{elZhJR7Zm28h$X.*TGHe'PR8m3yA S.SU]5?44fpVh$1@% b0RD2SA )ft'p"- [Source: SSL_151.101.1.140]2a:T564,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD0klEQVR42u2XS2hTWRjHg7Nw4TADYqcdxFbFMqtZjjOzUgdFRWtbEjuPMgu3wygoCqXooKIoVGiNaZuWLtsunIdTmG4GN4VQZmBaLPRlKK0P0iZ9JJmYx03u4+/3nZs0zTX39jZx2Q/+5EHO+f++75zznRuHYzu2wxBTU1NYWlrC8vIygsGgTem/DwQCGB0dRX19PUoGmJ6ehqZpKCVkWQaPZwin04mSAdLptJiQQTRNhaqaSYGi5MUxNzcHv9+PyclJNDY2okwAc2OjeQ7gxYsFLC4uis8TExNobm5GyQB2ss5LFmM4+/n5efE+EonA5/PB5XJhSwCSJJkCmJnnAGZmZjA42E8axMDAAIaGhjA8PPy+AMzNeQOychEKhQTM2NiYgCgTQDE1zxnnlUEmkyk4SbOzs+UAbJ71RvMcgC6eR0MikSgVoBzztBADRKPRrQKkRAk3L7nRNG/MJ4nF80Sjka0BpFJGALkk83RaEr3EEuCni5dx9eq1kuT2dL1jngeQ7AHwRG9opVaokYUyQJIno+z5QBWXJsTBY63McwDckCwBlsn8ZQxYSgB3+v/BruMPUHXOjUPf9qD2O++6Pm3woJa+U8QdoWUBjGXPA/Bm5pMUiYStAVZUYCGi4jVBxGnQn6MLONDUhap6N6qd3ah2dZK6sOdMB2oa3JDVQgCjcc5cB1A2B1glgJcE8CoKBGJpQX2bKrH7dDtqzndjf1YVBHDI2VFQAStzPk22AV5R9lyBJA18OhHAgfNe1Ljy5vubvPhEADwsAiAZAFLrsgUQhm4ep9fxuVV89kMv9jk7ydgrzPc1erC34RFVoB21BLBxCcwy3wgQDm8CEOHLIwW8oUqcvfYbKurcONjULcpfVdeBytNttPYd2HXsHg42tBsqUNyYxf2E+0c4vGYN8D8B0AHAyFQIlXUPaQN61813fHUTv4/M4L/nQTi+/AWVJ+8XAJgZ60raA+A+QMnD8+QZPj7VLgC45B98fRPux/9mH800DPme46MjtwuWwGiuAyTXZQsgnr023X88w4cnHtDm68LOI3fR0vlUGEmsrOlfPr+hAsWy3yJAItvl/h4PYOc3bbQMblTRuq/EJGEUl1XqkCokRTc2AzCa2wbgyzdKbZj2IY7+3A/H56344kKvMJFJSQJIkSRSWlENS5BEMslKFFUmI2N1dcUagG/ttZRehWA4ju+v/wrH4Rv48dYTjPlDIDZQAQgGlL2+X3J3gd2wBOBQsj+MxWKIx+PiKcZKXG4e29vbU1Q9Pbr6+vrg8XjMAS5eulLyddzS2opy/wq+BTgoCRlpZOGDAAAAAElFTkSuQmCC1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"42508bff9c595e5b8964ebc188688c741b474a4dbfdba4d69bcc7ab75beab53d","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1791641735727,"unified_at":"2026-10-10T14:15:35.727Z","metadata":{"hashes":{"sha256":"42508bff9c595e5b8964ebc188688c741b474a4dbfdba4d69bcc7ab75beab53d","sha1":"b2fffeb6a9dc02b954864011fe2e05d291802f17","md5":"0c6821f5f63c5d2f12a76ec6cd6537f3","sha512":"eb950eed16c1ade23b39be08f821d22de2a1e8a32f4245a875affe47ae4e31036743aa0ddd33a831a07d7d346bbe8542c6f3222396453c567d85d9b7645cf2dc","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://www.reddit.com/r/ufc276hdstreams/comments/vpwxjr/ufc_276_adesanya_vs_cannonier_live_streamreddit/?","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1656783959000,"last_seen":1661063626000,"last_multi_scan":1661063626000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":1},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":1},"sandbox_signatures":{"informative_count":7,"suspicious_count":1,"malicious_count":0,"total":8},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-classification","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/","report_link":"https://urlscan.io/result/35f3db87-4a59-4951-8b57-e5be724699f7/","extra_fields":[{"name":"percent","value":0}]}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Found decrypted SSL traffic"}],"sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts server","description":"\"151.101.1.140:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"$27","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$28","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"level":"informative","category":"Network Related","name":"Found decrypted SSL traffic","description":"$29","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"https://www.reddit.com/r/ufc276hdstreams/comments/vpwxjr/ufc_276_adesanya_vs_cannonier_live_streamreddit/\"- [Source: Input]\n Pattern match: \"https://www.reddit.com\"- [Source: Input]\n Pattern match: \"www.reddit.com\"- [Source: SSL_151.101.1.140]\n Pattern match: \"https://w3-reporting-nel.reddit.com/reports\"- [Source: SSL_151.101.1.140]\n Pattern match: \"www.redditstatic.com\"- [Source: SSL_151.101.1.140]","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4817 bytes 1 file\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 151.101.1.140 on port 443 is sent without HTTP header","origin":"Network Traffic","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":36,"imported_dlls_count":120,"dropped_files_count":0,"extracted_files_count":48,"files_written_count":29,"files_deleted_count":0,"registry_keys_created_count":11,"registry_keys_modified_count":0,"registry_keys_deleted_count":4,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":15,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":1,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"62c084564e6ada030c75830c","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"42508bff9c595e5b8964ebc188688c741b474a4dbfdba4d69bcc7ab75beab53d.url","analysis_start_time":"2022-07-02T17:45:58+00:00","indicators_count":{"informative":7,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"151.101.1.140","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]}],"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}],"processes":[{"pid":1488,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\42508bff9c595e5b8964ebc188688c741b474a4dbfdba4d69bcc7ab75beab53d.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00001488","icon":"$2a"},{"pid":2008,"ppid":1488,"name":"iexplore.exe","command_line":"https://www.reddit.com/r/ufc276hdstreams/comments/vpwxjr/ufc_276_adesanya_vs_cannonier_live_streamreddit/?","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00001488","uid":"00000000-00002008"},{"pid":3600,"ppid":2008,"name":"iexplore.exe","command_line":"SCODEF:2008 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002008","uid":"00000000-00003600"}],"all_imported_dlls":["schannel.dll","dhcpcsvc6.dll","dxgi.dll","mshtml.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","oleaut32.dll","IEShims.dll","msctf.dll","mscoree.dll","deploy.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","apphelp.dll","winhttp.dll","mscorwks.dll","cryptnet.dll","ntmarta.dll","nlaapi.dll","profapi.dll","mswsock.dll","msvcr90.dll","d3d10warp.dll","SensApi.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","sechost.dll","cryptsp.dll","netapi32.dll","oleacc.dll","cfgmgr32.dll","version.dll","IPHLPAPI.DLL","MSOHEV.DLL","msimtf.dll","srvcli.dll","api-ms-win-downlevel-user32-l1-1-0.dll","Wldap32.dll","nsi.dll","netprofm.dll","webio.dll","ncrypt.dll","rpcss.dll","winnsi.dll","ExplorerFrame.dll","sxs.dll","fltLib.dll","crypt32.dll","sspicli.dll","comctl32.dll","rsaenh.dll","duser.dll","d3d11.dll","ole32.dll","msimg32.dll","dhcpcsvc.dll","bcrypt.dll","ssv.dll","iertutil.dll","secur32.dll","ieui.dll","FWPUCLNT.DLL","imagehlp.dll","gdi32.dll","ieframe.dll","wininet.dll","msvcr100.dll","user32.dll","cryptbase.dll","shell32.dll","api-ms-win-core-synch-l1-2-0.dll","userenv.dll","advapi32.dll","DWrite.dll","rpcrt4.dll","shlwapi.dll","WindowsCodecs.dll","devobj.dll","comdlg32.dll","wkscli.dll","oleaccrc.dll","dui70.dll","jp2ssv.dll","t2embed.dll","setupapi.dll","ws2_32.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","dnsapi.dll","msasn1.dll","mlang.dll","propsys.dll","credssp.dll","lpk.dll","URLREDIR.DLL","KernelBase.dll","clbcatq.dll","normaliz.dll","usp10.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","WSHTCPIP.DLL","api-ms-win-downlevel-version-l1-1-0.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","d2d1.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","msvcrt.dll","bcryptprimitives.dll","wshqos.dll","sqmapi.dll","wship6.dll","npmproxy.dll","wintrust.dll","rasadhlp.dll","kernel32.dll","netutils.dll","mscoreei.dll","imm32.dll","gpapi.dll","urlmon.dll","ieproxy.dll","uxtheme.dll","dwmapi.dll","RpcRtRemote.dll","jscript9.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"favicon_3_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"favicon_4_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"BFJCAA98.txt","sha256":"5eee6a5762ced48483acb30407239c9a4fa86850413ab7ce9f76b72e10ae7d62","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"DGZOI9VE.txt","sha256":"d320bb43acf5255af88fa84fc088f9ee5e6446e67876b8c4f35cdc6ccdd6db3a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"XEN9AW1E.txt","sha256":"be3213b6bac482739db4c4a9483249497f319639b1aae6c980faad7d1bd8abbb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Y4L87VS5.txt","sha256":"2347687f1980d6ea8f4a27ca0fe6754bedf4755be5ce98f4618b76b39b69b817","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"imagestore.dat","sha256":"ee5ac5665f86bd58df87d0de9ef271dec4b37a8d0103b83f75d7193bfe64f657","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"9ac86956f2d55a025c73b3412a04578ad568a9ea52656e6aac4134e2960078b9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sha256":"af1b08191a38e3dd8c467906b1b9d2d76e4d1a74684c0b43a9722bfa87c5e45c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"2232d3918625c406871acb187a14fb0f4025a166a0628b4eaedaf306391ba20c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"9071a34114b5160cbe0a0dcdbf245250d7fbe8fa85990bc1f4a6abc2b3ddcb22","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sha256":"6deef740a2ebd7e21f3ec4f648187c2d179d02ea83c358e659f125342415463d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"~DF37D2DBB048AF2839.TMP","sha256":"65d79ec5cbf1c29a315c577cab1f6c798fe77b9c5cd0c58dcdfbd9f10f0a6ef1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"~DF4BDEB2088991D64F.TMP","sha256":"8e6d54dce72843b8002bfe5fb427a548ec2644adb65979289df571b9530b0b43","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"~DF752F55894C5902A1.TMP","sha256":"70194be0014aa32474ad80496a61ba15b130703569270a2b7c9770cfcedd43f9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"~DFA4D3E1F852D14882.TMP","sha256":"ace34e33b3e67bcc0d13322ad1e48bbadab24a12d39f7089713735e68f523f7a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"CollectionCommentsPage~CommentsPage~ModerationPages~PostCreation~ProfileComments~ProfileOverview~Pro~d39c0d57.9226786bd0c21349310c_1_.js","sha256":"e8ad0240a88c006b23bf784fc7f09504ace8e867d70f3b5867678ff530f564af","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"CollectionCommentsPage~CommentsPage~ProfileComments~ProfileOverview~ProfilePrivate~SearchResults.c986ed7dca125b4e29f6_1_.js","sha256":"405a42e844271618f6e42233cdba3b83a9cdb0dc7e8be928da7673dfbf7f94bd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Chat~Governance~Reddit.b0e28ae3bc12ec90ef7d_1_.js","sha256":"a2a3f73197d49df290b162c99d8dc733ed8a987f6ae83450fec6615545267c8e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font_2_.woff","sha256":"8839c1f7fe11e9d6ce78bfad758ea96e59d17dd023c16417c0a9b37c59fd81ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Governance~Reddit.34de8f7331d9a26eda27_1_.js","sha256":"e36e5fbf33d60aa2cc8af09c701f995b37ad4677f85e26f3fb836f0c48c23561","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"ChatPost~CollectionCommentsPage~CommentsPage~EconTopAwardersModal~ModQueuePages~ModerationPages~Post~38f39fb8.1272c1ed520c013f34e6_1_.js","sha256":"3443695165f92c9a3ea748f17b64a620111584f7c7b9d9787b0fbba7028f8540","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"RecoveryStore._41CF8B2B-FA1E-11EC-9FF0-080027B1D9AF_.dat","sha256":"4b53b9b8947840a020d2f71a5f8851794c46dbc6b9cc187832fa514fe35d47f2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Governance~Reddit~Subreddit.e98461c72df832da3cee_1_.js","sha256":"5a0a35095c70c0d2e60e23186cc1a867df3e08de2cb05e221029b6adb3073731","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"CollectionCommentsPage~CommentsPage~Subreddit~SubredditWiki.54c158161a11aa3cbe42_1_.js","sha256":"1201210521a826a87a66a0c6a4b074ce263483dca31ecc0b452ae5e5ae26794d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"search_2_.json","sha256":"19170bd75edc0b5183a2f9fcc3001d9d222deff61e5915ad1127b65ab581a2a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"AuthorHovercard~Reddit.5b523f74686e777ae29c_1_.js","sha256":"372b25fbce7a66dfe1cd231b8ead00e8eb9a6a1761aa493db108a60cc4e7ad9f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Bold-c34ba754b7235b49d33b294ff7a54179-font_1_.woff","sha256":"82ee6ea61b76edbfdb614afe2658b1709d5734a8f81147dc887b1592d6b7a8fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font_1_.woff","sha256":"8839c1f7fe11e9d6ce78bfad758ea96e59d17dd023c16417c0a9b37c59fd81ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~FramedGild~GildModal~GovernanceReleaseNotesModal~Mem~c8b748a6.b9f3f12fb3a5eedf75ad_1_.js","sha256":"7902cd13a1fa515caee1d7ddc6d24fe855ca6f93601b940c94e952951dcc0fc6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"-core-styles-fonts-ibmplexsans-medium-926e6b23b6_1_.woff","sha256":"926e6b23b6f3776460f3bd0a9db2575f37f3fe56777060d53b3a34ed9d77bfbe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"NewCommentPill.4a6c17b6a26f92e76ab3_1_.js","sha256":"0de73d84adce6c6760cd9f62a33d440af5d5246716611c6e0629ad15d5ef1352","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"vendors~Chat~Governance~Reddit.4b5d45fff29d967dc3fa_1_.js","sha256":"db61ff597eb0a28bae22ebad73c9c7185a515f9c2c5c0d8ac5c2f2f88b10efc4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~Frontpage~GovernanceReleaseNotesModal~ModListing~Mod~e3d63e32.bfb0a85200d7834b42a6_1_.js","sha256":"5e0b04ab81e020a96aec8b63022e77c7d6813dfc1f853abbec8f5f8676252367","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"TopicLinksContainer.21144914386926962ae7_1_.js","sha256":"46e637490493a5beb1f41f0750da1778b91fe92b1094e34b9bc1de5179e003d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"f18e351cf2b205139287a3cef222bde4dd4e7401478e103eadb108e14d5577c6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"redesignFont2020.bb66ebec1b28c03e8775d3539bb81e4b_1_.eot","sha256":"74ef325403e782f36d5558fbb4a1d2716e3a12a405621c1c6d128e23d8731acb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"-core-styles-fonts-notosans-notosans-49dd5c1e17_1_.woff","sha256":"49dd5c1e178c17bf2a754e3fa3327820c27491d6d690aaf5600714f9ec3c5b09","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Light-Italic-112953068bc678d61f4553a1184561f0-font_1_.woff","sha256":"5b4535205c590c5016abbc67fc2836984421161b62167c662c347356363e120a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Medium-1051a531d3e1ee3483a6533158557139-font_1_.woff","sha256":"0191cbe14ade1fe9c80860b60445ec6e1b2694e9dbae70ec8c886a3582ae223a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"IdCard.7eb6b4993526f55bf33e_1_.js","sha256":"ae85b2f91ebd4629d048613d053f269785692cb16687997d4f6ba57b55ba70d7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-ClassicPost~red~f3a55241.e44db14ca4b16c6f81e2_1_.js","sha256":"398ad4b5369c9ab3fb7eb561d6534dbe453657ef5d1a671c7d16b4e152e50ab6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"_41CF8B2D-FA1E-11EC-9FF0-080027B1D9AF_.dat","sha256":"b0e1217ef95074c43247a0613ec9e3af84302b2813c81aa2a90f043a4ebbd651","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Bold-Italic-255b4934a1f414dd312aa89382d65114-font_1_.woff","sha256":"42d5eb3c9201b3fe6861b3076e48a4fbd3211e5c5418e3f38710745c8a21a3e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Governance~Reddit~Subreddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compo~bd4baca2.d5455d735b34ba8e5a9c_1_.js","sha256":"e3caf6871a6b5c627d523a6ec04253d3f5d91271d1d5f60a4b6c6f28b4de5cc4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]}],"files_written":[{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{41CF8B2D-FA1E-11EC-9FF0-080027B1D9AF}.dat","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%TEMP%\\~DF37D2DBB048AF2839.TMP","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\renderTimingPixel[1].png","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[4].ico","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{4C534A14-FA1E-11EC-9FF0-080027B1D9AF}.dat","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%TEMP%\\~DF752F55894C5902A1.TMP","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\XEN9AW1E.txt","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BFJCAA98.txt","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{41CF8B2B-FA1E-11EC-9FF0-080027B1D9AF}.dat","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Y4L87VS5.txt","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.4","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\search[1].json","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\VERSIONMANAGER\\","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\DOWNLOADMANAGER\\","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{DBC80044-A445-435B-BC74-9C25C1C588A9}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\TCPIP\\PARAMETERS\\","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SECURITYPROVIDERS\\SCHANNEL\\","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2008","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_7d8_IE_EarlyTabStart_0x7c0_Mutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_7d8_ConnHashTable<2008>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_7d8_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_7d8_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2008","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"IsoScope_7d8_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"IsoScope_7d8_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"IsoScope_7d8_IE_EarlyTabStart_0x7c0_Mutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"IsoScope_7d8_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"IsoScope_7d8_ConnHashTable<2008>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_7d8_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"IsoScope_7d8_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_7d8_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62c084564e6ada030c75830c"}]}]}},"report_ids":{"sandbox_job_ids":["62c084564e6ada030c75830c"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 42508bff9c59… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 42508bff9c59…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/42508bff9c595e5b8964ebc188688c741b474a4dbfdba4d69bcc7ab75beab53d"}],["$","meta","4",{"property":"og:title","content":"Sample 42508bff9c59… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 42508bff9c59…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/42508bff9c595e5b8964ebc188688c741b474a4dbfdba4d69bcc7ab75beab53d"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 42508bff9c59… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 42508bff9c59…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2b","11",{}]]