24:I[10321,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/3h6zdc-it88if.js","/_next/static/chunks/3xfwong8gg51p.js","/_next/static/chunks/3l_wb6il5gi_h.js"],"ReportDetailWrapper"] 1f5:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4bf,{"@context":"https://schema.org","@type":"TechArticle","headline":"Clean — Falcon Sandbox Report 6198050cc87b… — Sample 4781c2fe5f82…","description":"Clean verdict for sandbox report 6198050cc87b…. 0 malicious and 5 suspicious behavioral indicators across 19 signatures. Detonated in Windows 7 32 bit (HWP Support). View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/4781c2fe5f82072345de48671edede322638bf2aaf9f256609d954f576a66274/6198050cc87bf55dcb778448","keywords":["Clean","sandbox report","malware analysis","MITRE ATT\u0026CK","4781c2fe5f82072345de48671edede322638bf2aaf9f256609d954f576a66274"],"about":{"@type":"SoftwareApplication","name":"http://info.conference-board.org/MjI1LVdCWi0wMjUAAAGA2JTNCCUq1rOuyrbU_GwBn_Emfudgwrc-JENRipzMqhUlui4xy2-FBSKFKY2iG_M_7-Isheo=","applicationCategory":null,"identifier":"4781c2fe5f82072345de48671edede322638bf2aaf9f256609d954f576a66274","additionalType":"Clean sample"},"sandboxEnvironment":"Windows 7 32 bit (HWP Support)","behavioralIndicators":{"malicious":0,"suspicious":5,"totalSignatures":19},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T564,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:Tb73,"iexplore.exe" touched "WinInetBroker Class" (Path: "HKCU\CLSID\{C39EE728-D419-4BD4-A3EF-EDA059DBD935}\LOCALSERVER32") "iexplore.exe" touched "PSFactoryBuffer" (Path: "HKCU\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\INPROCHANDLER32") "iexplore.exe" touched "Network List Manager" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{A47979D2-C419-11D9-A5B4-001185AD2B89}\LOCALSERVER32") "iexplore.exe" touched "MSAA AccPropServices" (Path: "HKCU\CLSID\{B5F8350B-0548-48B1-A6EE-88BD00B4A5E7}\INPROCSERVER32") "iexplore.exe" touched "Task Bar Communication" (Path: "HKCU\CLSID\{56FDF344-FD6D-11D0-958A-006097C9A090}\INPROCSERVER32") "iexplore.exe" touched "Internet Explorer(Ver 1.0)" (Path: "HKCU\CLSID\{0002DF01-0000-0000-C000-000000000046}\PROGID") "iexplore.exe" touched "WebBrowserHandler Proxy" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{3CB169B3-17D9-4E47-8B93-2878998F69A2}\INPROCSERVER32") "iexplore.exe" touched "PSDispatch" (Path: "HKCU\CLSID\{00020420-0000-0000-C000-000000000046}\TREATAS") "iexplore.exe" touched "Computer" (Path: "HKCU\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\SHELLFOLDER") "iexplore.exe" touched "Memory Mapped Cache Mgr" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\TREATAS") "iexplore.exe" touched "UsersFiles" (Path: "HKCU\CLSID\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\SHELLFOLDER") "iexplore.exe" touched "Shockwave Flash Object" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\INPROCSERVER32") "iexplore.exe" touched "CLSID_RecordInfo" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{0000002F-0000-0000-C000-000000000046}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.DBEngine.36" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{00000100-0000-0010-8000-00AA006D2EA4}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.TableDef.36" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{00000103-0000-0010-8000-00AA006D2EA4}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "FileMoniker" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{00000303-0000-0000-C000-000000000046}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "ItemMoniker" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{00000304-0000-0000-C000-000000000046}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "PointerMoniker" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{00000306-0000-0000-C000-000000000046}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "CompositeMoniker" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{00000309-0000-0000-C000-000000000046}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "ADODB Error Lookup Service" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{00000542-0000-0010-8000-00AA006D2EA4}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}")27:T5a5,"info_1_.svg" has type "SVG Scalable Vector Graphics image" "urlblockindex_1_.bin" has type "data" "lock-black_1_.svg" has type "UTF-8 Unicode (with BOM) text with very long lines" "play_1_.svg" has type "SVG Scalable Vector Graphics image" "PEARRY3R.txt" has type "ASCII text" "COVID-19-GCC-Oct-640_1_.png" has type "PNG image data 631 x 313 8-bit/color RGBA non-interlaced" "TCB-Torch-white-small_1_.png" has type "PNG image data 53 x 53 8-bit/color RGBA non-interlaced" "A16C6C16D94F76E0808C087DFC657D99_EA40AFAFFD621D4EA580B8E5CEDA664D" has type "data" "cse_element__en_1_.js" has type "ASCII text with very long lines" "CCFEED7EF3CD3BBD21329435542A98D2_9776618FE88CEDB1DE80D972A180ADD9" has type "data" "cludo-search.min_1_.js" has type "ASCII text with very long lines with no line terminators" "underscore-min_1_.js" has type "ASCII text with very long lines with no line terminators" "V28OI1NR.txt" has type "ASCII text" "6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442" has type "data" "3538626A1FCCCA43C7E18F220BDD9B02" has type "data" "hc-offcanvas-nav_1_.js" has type "ASCII text with very long lines with no line terminators" "77EC63BDA74BD0D0E0426DC8F8008506" has type "data" "07CEF2F654E3ED6050FFC9B6EB844250_BACC6CD2B29F18349081C9FD2343833B" has type "data" "CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA" has type "data" "73DA0AE306CF69ADAC457DB6B2997338" has type "data"28:T2c4d,Pattern match: "http://info.conference-board.org/MjI1LVdCWi0wMjUAAAGA2JTNCCUq1rOuyrbU_GwBn_Emfudgwrc-JENRipzMqhUlui4xy2-FBSKFKY2iG_M_7-Isheo=" Pattern match: "http://info.conference-board.org" Heuristic match: "info.conference-board.org" Heuristic match: "certificates.godaddy.com" Heuristic match: "GET /repository/gdig2.crt HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: certificates.godaddy.com" Heuristic match: "ocsp.godaddy.com" Heuristic match: "GET //MEIwQDA%2BMDwwOjAJBgUrDgMCGgUABBQdI2%2BOBkuXH93foRUj4a7lAr4rGwQUOpqFBxBnKLbv9r0FQW4gwZTaD94CAQc%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "crl.godaddy.com" Heuristic match: "GET /gdig2s1-2508.crl HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: crl.godaddy.com" Heuristic match: "GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CCQCZh3Jhr2C7iA%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "o.ss2.us" Heuristic match: "GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: o.ss2.us" Heuristic match: "ocsp.rootg2.amazontrust.com" Heuristic match: "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.rootg2.amazontrust.com" Heuristic match: "crl.rootg2.amazontrust.com" Heuristic match: "GET /rootg2.crl HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: crl.rootg2.amazontrust.com" Heuristic match: "ocsp.rootca1.amazontrust.com" Heuristic match: "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.rootca1.amazontrust.com" Heuristic match: "ocsp.sca1b.amazontrust.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAz3gu5OOBZ6ppj0PmdsHQo%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "crl.sca1b.amazontrust.com" Heuristic match: "GET /sca1b-1.crl HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: crl.sca1b.amazontrust.com" Heuristic match: "crl.rootca1.amazontrust.com" Heuristic match: "GET /rootca1.crl HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: crl.rootca1.amazontrust.com" Heuristic match: "crl.sectigo.com" Heuristic match: "GET /SectigoECCOrganizationValidationSecureServerCA.crl HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: crl.sectigo.com" Heuristic match: "ocsp.sectigo.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSL5xwzjg4BhTSGENp0Rttj68psLQQUTUrvxEazEq1PTpqxWeJRqwgQeAgCECtxmxYSQfcGCUWJS2cl82s%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "cacerts.digicert.com" Heuristic match: "GET /DigiCertGlobalRootG2.crt HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: cacerts.digicert.com" Heuristic match: "acsbap.com" Heuristic match: "acsbapp.com" Heuristic match: "assets.libsyn.com" Heuristic match: "cdn.embed.ly" Heuristic match: "cdn.feathr.co" Heuristic match: "cdn.jsdelivr.net" Heuristic match: "customer.cludo.com" Heuristic match: "embed.solosegment.com" Heuristic match: "fonts.googleapis.com" Heuristic match: "googleads.g.doubleclick.net" Heuristic match: "html5-player.libsyn.com" Heuristic match: "marco.feathr.co" Heuristic match: "maxcdn.bootstrapcdn.com" Heuristic match: "munchkin.marketo.net" Heuristic match: "p.adsymptotic.com" Heuristic match: "pa.solosegment.com" Heuristic match: "pages.conference-board.org" Heuristic match: "polo.feathr.co" Heuristic match: "px.ads.linkedin.com" Heuristic match: "script.crazyegg.com" Heuristic match: "snap.licdn.com" Heuristic match: "ssl-static.libsyn.com" Heuristic match: "static.libsyn.com" Heuristic match: "stats.g.doubleclick.net" Pattern match: "www.conference-board.org" Pattern match: "www.googleadservices.com" Pattern match: "www.linkedin.com" Pattern match: "https://dc.ads.linkedin.com/collect/?pid=233418&fmt=gif" Pattern match: "https://cse.google.com/cse.js?cx=013658892775463089653:rau6m0wagpp" Pattern match: "https://www.conference-board.org/blog/podcasts/Supply-Chains-Wheres-Our-Stuff/" Pattern match: "https://www.ced.org/reports/fixing-americas-roads-bridges" Pattern match: "https://www.conference-board.org/images/blogs/meta/TCB-Podcasts.jpg/" Pattern match: "https://github.com/nickpettit/glide" Pattern match: "https://daneden.github.io/animate.css/" Pattern match: "https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE" Pattern match: "https://conference-board.acquiretm.com/search_clean.aspx" Pattern match: "http://www.w3.org/2000/svg},A={},B={},C={},D=[],E=D.slice,G=function(a,c,d,e){var" Pattern match: "http://getbootstrap.com" Heuristic match: "s-offset-5{margin-left:41.66666667%}.col-xs-offset-4{margin-left:33.33333333%}.col-xs-offset-3{margin-left:25%}.col-xs-offset-2{margin-left:16.66666667%}.col-xs-offset-1{margin-left:8.33333333%}.col-xs-offset-0{margin-left:0}@media (min-width:768px){.col-s" Heuristic match: ">td,.table>tfoot>tr.info>th,.table>tfoot>tr>td.info,.table>tfoot>tr>th.info,.table>thead>tr.info>td,.table>thead>tr.info>th,.table>thead>tr>td.info,.table>thead>tr>th.info{background-color:#d9edf7}.table-hover>tbody>tr.info:hover>td,.table-hover>tbody>tr.i" Pattern match: "http://www.bootstraptoggle.com" Heuristic match: "in:null,numberFormat:null,page:10,step:1,change:null,spin:null,start:null,stop:null},_create:function(){this._setOption(max,this.options.max),this._setOption(min,this.options.min),this._setOption(step,this.options.step),!==this.value()&&this._value" Pattern match: "i.mod/2?f+=i.mod:f-g" Pattern match: "Math.PI/15" Pattern match: "http://bootstrapvalidator.com" Heuristic match: "===d||m%d==0&&m/d>=0}}},PSEUDO:function(a,b){var c,d=f.pseudos[a]||f.setFilters[a.toLowerCase()]||fa.error(unsupported pseudo: +a);return d[t]?d(b):d.length>1?(c=[a,a,,b],f.setFilters.hasOwnProperty(a.toLowerCase())?ha(function(a,c){for(var e,f=d(a,b)," Pattern match: "https://pages.conference-board.org/TCB-Connect.html" Pattern match: "https://www.conference-board.org/leadershipexperiences/" Pattern match: "https://www.conference-board.org/this-week-at-tcb" Pattern match: "https://www.conference-board.org/about/donate" Pattern match: "https://boardmember.com/get-beyond-trendy-6-questions-to-ask-about-esg-metrics-in-executive-comp/" Pattern match: "https://www.ced.org" Pattern match: "https://schema.org/PodcastEpisode" Pattern match: "facebook.com/sharer.php?u=http%3A%2F%2Fwww%2Econference%2Dboard%2Eorg%2Fblog%2Fpodcasts%2FSupply%2DChains%2DWheres%2DOur%2DStuff%3Fmkt%5Ftok%3DMjI1LVdCWi0wMjUAAAGA2JTNCEFRqAQyFD814cYj1mIdkghIr3WG51Stz3SYfxHfMMoczYXIe9%5F5rdqvN59PlckhvaYLDHzVt0FxUIy2dGYfDAV" Pattern match: "html5-player.libsyn.com/embed/destination/id/2804774/height/360/theme/custom/thumbnail/yes/direction/backward/no-cache/true/render-playlist/yes/custom-color/87A93A/" Pattern match: "http://www.demandinstitute.org/" Pattern match: "http://www.conferenceboard.ca" Pattern match: "https://acsbap.com/api/app/assets/js/acsb.js" Pattern match: "https://github.com/ashleydw/lightbox" Pattern match: "http://www.apache.org/licenses/LICENSE-2.0" Pattern match: "http://www.w3.org/1999/02/22-rdf-syntax-ns#" Pattern match: "http://www.iec.chIEC" Pattern match: "http://ns.adobe.com/xap/1.0/" Pattern match: "https://github.com/somewebmedia/hc-offcanvas-nav.,color" Pattern match: "http://geedmo.github.com/yamm" Pattern match: "http://bootstraptour.com" Pattern match: "https://github.com/twbs/bootstrap/issues/14093" Pattern match: "http://getbootstrap.com/javascript/#popovers" Pattern match: "http://www.w3.org/2000/svg" Pattern match: "https://www.youtube.com/embed/'+a+'?badge=0&autoplay=1&html5=1&rel=0" Pattern match: "https://twitter.com/Conferenceboard" Pattern match: "https://css-tricks.com/4064-unobtrusive-page-changer/" Pattern match: "http://www.google.com/intl/en_ALL/mapfiles/openhand.cur" Pattern match: "t.page.maxw/t.scrollvaluemaxw,y:t.page.maxh/t.scrollvaluemax},t.getScrollTop()" Pattern match: "www.|app" Pattern match: "https://www.conference-board.org" Pattern match: "https://p.adsymptotic.com/d/px/?_pid=16218&_psign=0aa5badf92527f7732e22463d6fa4dbc&coopa=0&gdpr=0&gdpr_consent=&_puuid=38202c20-d1c2-4a97-bbfd-83e9cba565fa&_expected_cookie=05f244fd300fc9d80e3d2aa4c07baea4" Pattern match: "https://html5-player.libsyn.com/embed/episode/id/21220514/height/360/theme/custom/thumbnail/yes/direction/backward/no-cache/true/render-playlist/yes/custom-color/87A93A/destination_id/2804774" Pattern match: "https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Pattern match: "https://acsbapp.com/api/app/assets/js/acsb.js" Pattern match: "wikipedia.org/wiki/,data-acsb-scrape-url,Green" Pattern match: "https://web1.,HEADER_MENU,observe,Persian" Pattern match: "https://,t(2386)" Pattern match: "https://acsbapp.com/apps/app/dist/media/whl.jpg" Pattern match: "https://acsbapp.com/apps/app/dist/js/app.js" Pattern match: "https://html5-player.libsyn.com/embed/episode/id/21220514/height/90/theme/custom/thumbnail/yes/direction/backward/render-playlist/no/custom-color/87A93A/" Pattern match: "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" Pattern match: "https://ssl-static.libsyn.com/p/assets/a/e/5/c/ae5c18bc68e670cf27a2322813b393ee/height_90_width_90_Podcast-CEO_Perspectives-Episodes_16-1600x1600.jpg" Pattern match: "https://ssl-static.libsyn.com/p/assets/platform/html5player/libsyn-player-custom.png" Pattern match: "https://ssl-static.libsyn.com/p/assets/3/8/4/e/384e429374f931b4e55e3c100dce7605/height_90_width_90_Podcast-CEO_Perspectives-Episodes_14_1600x1600.jpg" Pattern match: "https://ssl-static.libsyn.com/p/assets/5/f/b/1/5fb1244b638e4998bafc7308ab683e82/height_90_width_90_Podcast-CEO_Perspectives-Episode_15_1600x1600.jpg" Pattern match: "https://ssl-static.libsyn.com/p/assets/4/2/6/4/42643524ba15aa69d959afa2a1bf1c87/height_90_width_90_Podcast-CEO_Perspectives-Episodes_12-1600x1600.jpg" Pattern match: "https://ssl-static.libsyn.com/p/assets/9/5/6/c/956ceec3a0df0f1327a2322813b393ee/height_90_width_90_Podcast-CEO_Perspectives-Episodes_11-1600x1600.jpg" Pattern match: "https://ssl-static.libsyn.com/p/assets/c/6/b/b/c6bb15fd244727e627a2322813b393ee/height_90_width_90_Podcast-CEO_Perspectives-Episodes_13_1600x1600.jpg" Pattern match: "https://ssl-static.libsyn.com/p/assets/2/a/4/7/2a479ee78d1e28d9e5bbc093207a2619/height_90_width_90_CEOPerspectivesEP10-1600x1600.jpg" Pattern match: "http://inro.c0nfe_ence-b0a_d.0_g/m;_L'Jdn;iawm;uw"29:T1a76,Found malicious artifacts related to "54.230.15.96": ... URL: https://cdn.liftoff.io/optout.html?creative_id=211120&platform=android&exchange=unity&source_app_name=Kshaw&source_app_id=com.stoysh.stoyshstalk (AV positives: 1/93 scanned on 11/19/2021 19:11:25) URL: https://main.d1u19ytpb8qe3l.amplifyapp.com/ (AV positives: 16/93 scanned on 11/19/2021 17:03:09) URL: http://sophostest.com/reputation/ (AV positives: 3/93 scanned on 11/19/2021 08:01:17) URL: https://main.d1u19ytpb8qe3l.amplifyapp.com/?email= (AV positives: 14/93 scanned on 11/19/2021 04:19:22) URL: http://main.d1u19ytpb8qe3l.amplifyapp.com/ (AV positives: 13/93 scanned on 11/19/2021 02:27:11) File SHA256: 64b2d2b48723d9c15d120f0900466da9b2f2a0d04f1e3db9a12b3948aa2b81fc (AV positives: 1/71 scanned on 11/19/2021 11:02:47) File SHA256: 5d86e0cb6a1746cf734cca44fd00b1e68d4f021f2df745c22324a2a3e691622d (AV positives: 11/70 scanned on 10/27/2021 03:04:58) File SHA256: cec3da3164d441a0a5d23a461a439319ed41f70ff362abf125c42d418651f264 (AV positives: 6/74 scanned on 10/01/2021 11:06:08) File SHA256: 275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f (AV positives: 59/74 scanned on 09/28/2021 15:41:40) File SHA256: 86bffc3f33fc367a2723f4e36e685e2f09ba3700e2008aca70ae80cb632c64a5 (AV positives: 1/73 scanned on 09/22/2021 02:15:32) Found malicious artifacts related to "104.21.82.163": ... URL: https://www.samplebs.com/index.php (AV positives: 3/93 scanned on 11/19/2021 14:52:41) URL: https://samplebs.com/ (AV positives: 2/93 scanned on 11/19/2021 02:11:32) URL: http://a0cj4.top/ (AV positives: 4/93 scanned on 11/15/2021 04:30:18) URL: http://a0cj4.top/boeing (AV positives: 4/93 scanned on 11/15/2021 01:10:32) URL: http://a0cj4.top/elcorteingles/tb.php?_t=16369006991636900939605 (AV positives: 6/93 scanned on 11/15/2021 00:14:37) File SHA256: 0e6bca1cc015d13a5bdb746877c618b98d18e7e49c2b895586777a2a190d1f00 (Date: 10/25/2021 11:49:53) File SHA256: 1bf6c98d6ce7fad36d7a48fcf3d04d1e02d1307a8ee04e48163defd51bdb4dc7 (AV positives: 16/74 scanned on 10/06/2021 08:49:30) Found malicious artifacts related to "104.17.74.206": ... URL: https://go2.inndts.com/NzMyLVdNRS05MDMAAAGA0tZivHvmYks7J1H3mrOnbI5AX9P2oHySoxgG_4aIZdYM-_5S4pV81fTE5wJf5Y3DgOjd2ms= (AV positives: 1/93 scanned on 11/19/2021 14:00:05) URL: https://get.newrelic.com/ (AV positives: 1/93 scanned on 11/18/2021 16:21:38) URL: https://get.newrelic.com/MzQxLVhLUC0zMTAAAAGA0mBMMlIWAaF2XfnVLqIEq5LkjfV4Ev0rpHdYeNh8Rn8C-OdQzD4zpYBlFw8ot-A_epqOazQ= (AV positives: 1/93 scanned on 11/18/2021 15:49:38) URL: https://get.newrelic.com/MzQxLVhLUC0zMTAAAAGA0hyG2AOOJuId6Sm8ughq6OuRDzC5y1jxrnnmakeMQOZ5mIS9R_Lf-d1Fzek6sd28dunMgDE= (AV positives: 1/93 scanned on 11/18/2021 15:36:32) URL: https://try.newrelic.com/index.php/email/emailWebview?mkt_tok=MzQxLVhLUC0zMTAAAAGA0eYBd--J38_IK_pYZQsbHIW3qbyCrnQh_tf7eVk-Kp_HyxYssmgZQIoCxAvtWmySor25sxmzFHwkSssg3eFjy-wyt4w8AlYkfBfSLqP0a9pZdA&md_id=14241 (AV positives: 1/93 scanned on 11/18/2021 14:27:31) File SHA256: 6e78d66dceb735565164965c6074c76349cc32f6c59d6b275d3bca0a34ccf654 (AV positives: 1/74 scanned on 04/26/2021 06:21:08) File SHA256: a5562b0b3ff1c18b5d1622e20c4f880950f98f9a0c4a68dd88b3c18e34796282 (AV positives: 1/76 scanned on 01/09/2021 15:54:29) File SHA256: de4f9b5d24aa79eb9a0c2f2d8ebdd108cd4aa2bb63404088ca3d317717767ac3 (AV positives: 10/76 scanned on 12/25/2020 16:09:13) File SHA256: 2df135e2807378da4b7443b96aecde878452f8f29bbd7ae7598b242c312d9f17 (AV positives: 1/73 scanned on 08/24/2020 21:09:06) File SHA256: 543381bd4d8abf62fc9fdbb19774d9339ac97a2b5760bb20faad53e84c0108dc (AV positives: 1/73 scanned on 01/22/2020 15:57:26) Found malicious artifacts related to "13.249.139.119": ... URL: http://o.ss2.us/ (AV positives: 1/93 scanned on 11/16/2021 17:28:14) URL: http://d39d3ulzmek390.cloudfront.net/ir/onl.php (AV positives: 1/93 scanned on 11/16/2021 15:32:24) URL: http://o.ss2.us/MEowSDBGMEQwQjAJBgUr (AV positives: 1/93 scanned on 11/12/2021 22:01:51) URL: http://dasb6giaey1xn.cloudfront.net/wp-includes/js/jquery/ (AV positives: 3/93 scanned on 11/11/2021 07:56:11) URL: http://dxl0nl6m1r74o.cloudfront.net/p5pbxouhu/51.7.99.32/roblox.exe (AV positives: 1/91 scanned on 10/21/2021 14:20:30) File SHA256: b945185dc04126878956ebc6246cb62391edba6e64d954f3f33ce767e74238e7 (AV positives: 28/70 scanned on 11/16/2021 08:20:56) File SHA256: b365ed37ca3a20a5d7f6069cf5b78d32ffb4c85bd055436920588a452b5172f0 (AV positives: 34/72 scanned on 09/30/2021 07:40:57) File SHA256: 72ec27bd0d959a1e6713d96b4e55c5a9b92ac6d1b5b5a4a8d5d1211422fcee57 (AV positives: 1/74 scanned on 04/08/2021 11:30:25) File SHA256: 262553c9005273793e92ab389443f3188374cc4e0b2e747852dbbd84b8e290a3 (AV positives: 1/65 scanned on 04/05/2019 09:45:41) File SHA256: 203ffe3630cbbe348952eaf7057002d13a4c83f020c346aad19760a21238e997 (AV positives: 11/64 scanned on 03/10/2019 15:26:22) Found malicious artifacts related to "65.8.55.48": ... URL: http://d14o0179cmz1lz.cloudfront.net/ (AV positives: 1/89 scanned on 09/08/2021 10:48:57) URL: https://cdn.usersnap.com/ (AV positives: 1/89 scanned on 08/30/2021 07:29:02) URL: https://d1sztv4fhw9326.cloudfront.net/installer/89021837/90223578077 (AV positives: 1/89 scanned on 08/14/2021 00:43:44) URL: https://d1sztv4fhw9326.cloudfront.net/installer/639604/4325564262 (AV positives: 1/89 scanned on 08/13/2021 00:49:38) URL: https://d1sztv4fhw9326.cloudfront.net/installer/3895166923782055/4032326 (AV positives: 1/89 scanned on 08/13/2021 00:48:17) File SHA256: 0a1dc64c67a40dcb5fac4bc673315225f24ecb5788bf89b418f6a14de7f58940 (AV positives: 1/73 scanned on 08/26/2021 18:24:54) File SHA256: 4b26133bffae50e35db9e7594e015823d845f08661e499b21fcf5fd2a63208fe (AV positives: 9/74 scanned on 08/11/2021 10:33:00) File SHA256: 57e66a0e81235e4bcaf9f09b34d9c8c3406c269f4031bda98d80046cac54e20e (AV positives: 5/74 scanned on 03/14/2021 02:59:57) File SHA256: 0ae5fcc13c782912db4fa17814dfe486bfcf5ccfa2954ae6f9d682746ca528b0 (AV positives: 5/65 scanned on 04/29/2017 12:27:56) Found malicious artifacts related to "65.8.55.147": ... URL: http://crl.rootca1.amazontrust.com/rootca1.crl (AV positives: 1/93 scanned on 11/18/2021 11:18:22) URL: https://d31f2fsjk4earv.cloudfront.net/installer/322720/75709475762 (AV positives: 1/93 scanned on 11/09/2021 00:45:13) URL: http://d1qn4hkmdo4nkj.cloudfront.net/83ee83f1.crx (AV positives: 2/89 scanned on 09/16/2021 13:00:19) URL: http://d3ld0fky9cy3ut.cloudfront.net/ (AV positives: 1/89 scanned on 09/08/2021 10:49:11) URL: http://crl.rootca1.amazontrust.com/rootg2.crl (AV positives: 1/89 scanned on 09/03/2021 00:21:21) File SHA256: b5485de26e6ffee6d509aa1d99de330e1a1a94784d1ed8019998e6aa142e2568 (AV positives: 6/75 scanned on 01/25/2021 17:47:31)2a:T569,TCP traffic to 104.17.70.206 on port 80 is sent without HTTP header TCP traffic to 68.142.107.129 on port 80 is sent without HTTP header TCP traffic to 20.75.69.147 on port 443 is sent without HTTP header TCP traffic to 192.124.249.41 on port 80 is sent without HTTP header TCP traffic to 192.124.249.36 on port 80 is sent without HTTP header TCP traffic to 192.124.249.31 on port 80 is sent without HTTP header TCP traffic to 142.250.69.200 on port 443 is sent without HTTP header TCP traffic to 104.22.28.96 on port 443 is sent without HTTP header TCP traffic to 54.230.15.96 on port 443 is sent without HTTP header TCP traffic to 142.250.217.110 on port 443 is sent without HTTP header TCP traffic to 104.21.82.163 on port 443 is sent without HTTP header TCP traffic to 104.17.74.206 on port 443 is sent without HTTP header TCP traffic to 142.251.33.99 on port 80 is sent without HTTP header TCP traffic to 13.249.139.119 on port 80 is sent without HTTP header TCP traffic to 52.201.26.142 on port 443 is sent without HTTP header TCP traffic to 23.63.247.170 on port 443 is sent without HTTP header TCP traffic to 108.174.10.14 on port 443 is sent without HTTP header TCP traffic to 65.8.55.48 on port 80 is sent without HTTP header TCP traffic to 65.8.55.147 on port 80 is sent without HTTP header TCP traffic to 65.8.55.18 on port 80 is sent without HTTP header2b:T4029,"S[e(3569)](e(742),r)[e(1189)]||AJS[e(1930)](e(4361),r)||(t=AJS[e(3569)](e(3434),r))&&this[e(3063)](r,t)&&AJS.elements.attrs(t,{role:"rowheader"}))}}catch(e){a.e(e)}finally{a.f()}var i=_createForOfIteratorHelper(AJS[e(3569)](e(2999)));try{for(i.s();!(n=i.n())[e(827)];){var n,o=n[e(1541)];o[e(3176)]||(o.acsbTableHeadersBound=!0,!AJS[e(1930)](e(2309),o)||o[e(770)](e(2274))===e(899)||AJS.pick(e(2385),o)||(n=AJS[e(3569)](e(1979),o))&&this[e(3063)](o,n)&&AJS[e(4105)][e(4547)](n,{role:e(1182)}))}}catch(e){i.e(e)}finally{i.f()}},_isFakeCellHeader:function(e,a){var t=N,r=!1,i=null,n=_createForOfIteratorHelper(a);try{for(n.s();!(l=n.n()).done;){var o=l[t(1541)],s=!1,l=AJS[t(3569)]("*",o);if(l[t(1189)]<1&&AJS[t(4105)][t(687)](o)){o=Number(AJS[t(4105)][t(1014)](o,t(2927)));if((o||!isNaN(o))&&500=AJS[a(3494)].getWinSize().width||e[a(1416)]>=AJS[a(3494)][a(1003)]()[a(4083)]||0=AJS[a(3494)].getWinSize().width||e[a(1416)]>=AJS[a(3494)][a(1003)]()[a(4083)]||0=AJS[a(3494)].getWinSize().width||e[a(1416)]>=AJS[a(3494)][a(1003)]()[a(4083)]||0