25:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 29:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 26:Ta7b,"urlblockindex_1_.bin" has type "data"- [targetUID: N/A] "Governance~ModListing~Reddit~ReportFlow~Subreddit.f1b90d9231a7d4ae6cc4_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "reddit-components-LargePost.b40fdf9709ef9573feb8_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "Reddit.a4fedfc38ea71f9c57ea_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "vendors~PostCreation~Subreddit.c6c96fbaf04e2c667eb2_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "Medium-Italic-a25d440012460eb8883e539f93040fa7-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "~DF21C32DC430517079.TMP" has type "data"- Location: [%TEMP%\~DF21C32DC430517079.TMP]- [targetUID: 00000000-00001344] "CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.2b4ed4d0588ef1f584a3_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "runtime~Reddit.3b883c3d5d571006a7ec_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "~DFF2438460F2C61F19.TMP" has type "data"- Location: [%TEMP%\~DFF2438460F2C61F19.TMP]- [targetUID: 00000000-00001344] "KI48NS3H.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\KI48NS3H.txt]- [targetUID: 00000000-00001344] "vendors~Chat~Governance~Reddit.e1e0852a48d91805a9f6_1_.js" has type "data"- [targetUID: N/A] "MM9J61T8.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\MM9J61T8.txt]- [targetUID: 00000000-00003672] "CollectionCommentsPage~CommentsPage~ModerationPages~PostCreation~ProfileComments~ProfileOverview~Pro~d39c0d57.22636c24c88cba461d8d_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "_B6A5E847-25B7-11ED-94FE-080027FCD8B2_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "AuthorHovercard~Reddit.f350efd89417d712c80f_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53]- [targetUID: 00000000-00001344] "Light-56973edfcf61447fc1ffeb7a6eb6b178-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "Governance~Reddit.787bda2aefc18d634a3d_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "redesignFont2020.f526ced67754443af2188dfb4c28e16b_1_.eot" has type "Embedded OpenType (EOT) redesignFont2020 family"- [targetUID: N/A]27:T257f,"GET /r/KSIvsSwarmzFightliv/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.reddit.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "g 2024 05:24:23 GMT; HttpOnly; Secure Set-Cookie: csv=2; Max-Age=63072000; Domain=.reddit.com; Path=/; Secure; SameSite=None Set-Cookie: edgebucket=Tira2itReqkxLdqtC6; Domain=reddit.com; Max-Age=63071999; Path=/; secure Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.2, "failure_fraction": 0.2} transfer-encoding: chunked"- [Source: SSL_151.101.1.140] "1ffa"- [Source: SSL_151.101.1.140] "ks0`dZqYlM0&f00}; `HJb[O>}w~U~To~G7 /4#n|?ys^/z|tPohu|7z+t'r77#=y{l=7]Y!\`g| ;V -v>|-Ls[6mSvy 8m^?olu9:C5;6{8(4b8//*pY+pYv;'M>yUv`?y>)I]Jzxba> *m.lmh]l ^w%;M;gS;7+]Wn+;]i@#tW7UwY4uGW~r>bU76-nr2`-n>iCm-*2tC![3>7Eu(ru/-A^;w #eRO)aLHv|@+!(d..]vQIRD|*6x{zM1o"- [Source: SSL_151.101.1.140] , "MP&c4D*Gw9wGHv4&| WQm4Ex3.$@D@yS-;j?_E8zGIh+Em8$heHAN>V?gb*42?HCO:^=h;pdA0K&}(+x7r@J6 ,N)cmpUlqloi>~Y.?$[/$zS)!hCKwNXXQ 0%dZ0niGhr vu"x/6b L30|c+7aX?{PuUY"jOda2>PnnQp<^{p81n }b\()1L$j!SSZ=GQ8yRn[zED lF!vL]h!&@H'K6m68g)F0+0_Cd. i[te6MUZl3Ex$1p\;qoF130BWWiGbp6@4gBz7dxgFI{H z"- [Source: SSL_151.101.1.140] , "u=v;T"a{SmG [47V1O\1 5,/!00j+IpjdpCp`oHYA '_uiu6*#h]>ywcA$qhdL0 b\vX\M%\xsPc WS_yQ[reUa^&K#5"G`y9~vW?,;%u}Ie!,S&R@9_dA890vT9+XU`}mHg2:?IR@O)yW|D)6%.? 0Z{T(H,i3u&.ISgRbHKObrPV)3te[(MY<36o~SXoqO}t{XXK|`\gdm8)8nc$K|!Evcf]{R@85O+ !#N1,LZm&nk[ t.L5vHT{d$LLKF< ngZvYe3P,]#5CB6w/#2O-?qu~oslz.kom_@&44G?C94aMC94aM-&XtBBaOY\dMt`jB]%8|Z1I;a$'aD& {zJAT;?Y`mY&z-.-m;^(C~~vHW,aX:0.@N :JuY5u ?Vgil9tB+m$va{T~ o/~LHH_/9HN/`!-Ns^"xtK04;|:qf;_Zi 3xoT^_w bh$LUTs3'|uP|O|C'@R>`*xCwi% *?Ri?SI48QE?xf*x&7@ 5zMPiNa>U8qJfvw!?TM&S~R9u./r?d:ICR(.NQb+4iD # j=`@JfWl"- [Source: SSL_151.101.1.140] , "c/#HRiCz7cjO%?'d9S/ )lQ8;!Gruk5 p*C^s@~-2*0 m~6X&qd*pY T0|e_|~x_^i'jM0[/>w_|~*x6&: u`7-PUi&A{I=Uw{\f??P:G 8wSO] O]jn/|E(x ,Eco[X*\\>Lva6eO=9>mH1A4K/65Ej?)uOy!R@)S4{:,40lxH$|8c`U}_<{8rU,FuLaHlz>awbRsK ,>Cl}!~81"~8c/Vo1q?1UT}|H#c<@169^cro". C;BEK|j!XG81cBWsg:8m_C|Idc&|8S|e2 L.2yJqJg&.CQtlba8W+P3M$ *QaC= :vVA{qsH 5x_M~Yo;y)[FkJ5Ev^HT#6v:_u,[!x<$Xr~jSQq!%F V}6Cz$!tjvP?8~x>0SCR{Oz5nS'r'{vhJUBzc)q!0y s5v@plBvpl&:t~l}e Vb6r:3QPS%i@dX0`DRhi(@rsY\hNG:"- [Source: SSL_151.101.1.140] , ".0J"SH7,1>zuDb,n&q#h|@q&QF$1>F3B:'0Yp7 F3+yjS=1\ ?O7g@u*!Q#E@;2@i\"tr<'HV@P!TctH..$"R&#W7DNX[U&0Cj-5(~.s!J2|Xl{qaqtX(q*#'O#Tt)zqVc;40HK+RXVpAi4z $f=h%+Qup3::<+kBLZQ5wK+,Y*G{kB' 7pSD QZ=OeKDmR!V(66%e9HcKm,;wrbGlRh)MKM)7"- [Source: SSL_151.101.1.140] , " X?aXmSI@?eZwflkY .KdS/J[.}BBc0>SABLtcS'RBq9OR>:xL {VMPKpv7]Y LP!FJwd#Je+i}@w=M_A!`TUF p5&Z]w# cf q=v}X%@vgKwBgQ C~(Ne7leNX}`B9Ax1\f`IH#nj?z6@%L|.]H/5E2Z[:W%M(7`m{"OUt4JiVj]vf'5E5.[2ju_ZUaOtDrv`9Z NSpWXk[O}0lNs=AMRfjR-i$]ax8B3Am15/ImkmUaVE%5SVR6lhbm]*HH36=4E&&N=dgZ|3:u;@fhFmKE=5-EqT~'z' U+*X`tJHaI:ll=cSq{Jty>`%@BT@F2[JZ*0J"xb`sR;haS{VHfa97]*1 |^E%"- [Source: SSL_151.101.1.140] , "@#BA>4JCri.~\B"|P\j1OV}3=aZnfgYH%`T(mE}foC@SZV} G#F)12R8!f)\;} 3"i{Tq-dbR&lZiu|26!x."A+%Fu$ Vleeu(;wt:P*|h_i5fP`Yn0.*@i%rwJn,2sVyn/!gF>`)14'M^zaEF:8zJ7&H-4cI$2/I?1|~)6 }xhKw8?y3_#Yi9B};~c6hL/r "YX],!]Q"- [Source: SSL_151.101.1.140] "HVmsM3{YT i)#ki}ulkzy6dQ$w|$IV aMx"}{K3I93}g6z=# TTkdRN`FX|5E #[%BNNsHWU[ao;|>{PYM R|RQ7U4'`G[>'0Q5@+;(fX7;}A`C>#M `hC4Cp31aOo eSZX(\&#_zZEPmxc20!u#P}%$LjwI_em0MI:8(Ye,y80T}$Axtf{L]^W9/FSz1I1T:A[cVG7\Vw`t5'AI-`mO@]#}P@|ScgDDG:mG)Sxz|o]DK=SI)HlSS)uK"Pl'FEeb%+_h;a#V2(S!!1E$ci=~^P#j|]mAv3dRO)@n;PqpS_HashTable_Mutex\"\n \"IsoScope_540_IESQMMUTEX_0_331\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"UpdatingNewTabPageData\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_1344\"\n \"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$26","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"level":"informative","category":"Network Related","name":"Found decrypted SSL traffic","description":"$27","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"https://www.reddit.com/r/KSIvsSwarmzFightliv/\"- [Source: Input]\n Pattern match: \"https://www.reddit.com\"- [Source: Input]\n Pattern match: \"www.reddit.com\"- [Source: PCAP]\n Pattern match: \"https://w3-reporting-nel.reddit.com/reports\"- [Source: SSL_151.101.1.140]\n Pattern match: \"www.redditstatic.com\"- [Source: SSL_151.101.1.140]","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4817 bytes 1 file\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 1 domain and 1 host"}],"sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":28,"imported_dlls_count":121,"dropped_files_count":0,"extracted_files_count":48,"files_written_count":42,"files_deleted_count":0,"registry_keys_created_count":8,"registry_keys_modified_count":0,"registry_keys_deleted_count":1,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":9,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":1,"dns_resolutions_count":1,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"6309a9ecddac223f4f42fb92","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"4b4c6ad39ba1a766a5b0bdbdeb407e809f9f114cfa83d64346a21ec29edee89f.url","analysis_start_time":"2022-08-27T05:21:49+00:00","indicators_count":{"informative":8,"suspicious":0,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"151.101.1.140","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]}],"dns_resolutions":[{"domain":"www.reddit.com","address":"151.101.1.140","ttl":114,"country":"United States","registrar_name":"GANDI SAS","registrar_organization":"Reddit Inc","registrar_name_servers":"NS-1029.AWSDNS-00.ORG","registrar_creation_date":"2005-04-29T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}],"processes":[{"pid":916,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\4b4c6ad39ba1a766a5b0bdbdeb407e809f9f114cfa83d64346a21ec29edee89f.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00000916","icon":"$28"},{"pid":1344,"ppid":916,"name":"iexplore.exe","command_line":"https://www.reddit.com/r/KSIvsSwarmzFightliv/","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00000916","uid":"00000000-00001344"},{"pid":3672,"ppid":1344,"name":"iexplore.exe","command_line":"SCODEF:1344 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00001344","uid":"00000000-00003672"}],"all_imported_dlls":["bcryptprimitives.dll","wintrust.dll","clbcatq.dll","netapi32.dll","d2d1.dll","ole32.dll","dwmapi.dll","ntmarta.dll","credssp.dll","mshtml.dll","api-ms-win-downlevel-user32-l1-1-0.dll","lpk.dll","profapi.dll","dnsapi.dll","Wldap32.dll","oleacc.dll","schannel.dll","webio.dll","user32.dll","srvcli.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","rsaenh.dll","ieproxy.dll","jp2ssv.dll","shell32.dll","gdi32.dll","IPHLPAPI.DLL","mlang.dll","SensApi.dll","kernel32.dll","mscorwks.dll","ncrypt.dll","setupapi.dll","DWrite.dll","duser.dll","msimg32.dll","d3d11.dll","shlwapi.dll","wininet.dll","mscoree.dll","msvcrt.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","ieui.dll","oleaccrc.dll","advapi32.dll","IEShims.dll","dhcpcsvc6.dll","nsi.dll","ExplorerFrame.dll","msasn1.dll","rpcss.dll","mswsock.dll","urlmon.dll","ieframe.dll","bcrypt.dll","comctl32.dll","FWPUCLNT.DLL","MSOHEV.DLL","dxgi.dll","actxprxy.dll","wship6.dll","msvcr90.dll","winhttp.dll","nlaapi.dll","comdlg32.dll","dui70.dll","devobj.dll","cryptnet.dll","api-ms-win-downlevel-version-l1-1-0.dll","gpapi.dll","fltLib.dll","wkscli.dll","rasadhlp.dll","mscoreei.dll","ssv.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","imm32.dll","npmproxy.dll","d3d10warp.dll","cryptsp.dll","KernelBase.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","version.dll","dhcpcsvc.dll","sxs.dll","normaliz.dll","uxtheme.dll","winnsi.dll","apphelp.dll","cfgmgr32.dll","deploy.dll","rpcrt4.dll","iertutil.dll","RpcRtRemote.dll","netutils.dll","URLREDIR.DLL","usp10.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","netprofm.dll","crypt32.dll","msctf.dll","wshqos.dll","jscript9.dll","sechost.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","imagehlp.dll","WSHTCPIP.DLL","oleaut32.dll","sspicli.dll","sqmapi.dll","WindowsCodecs.dll","ws2_32.dll","api-ms-win-core-synch-l1-2-0.dll","cryptbase.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","propsys.dll","msimtf.dll","userenv.dll","secur32.dll","msvcr100.dll","t2embed.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"IPJAK3E1.txt","sha256":"b49256220d2d8f4c3d68f1a42c70244d9063e8907a9433c250f75ced4b230554","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"KI48NS3H.txt","sha256":"0ab858271e55f5a8141fdd16147875e69abe3d7afd11d47b09f0599039fa12ce","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"M2C10SGZ.txt","sha256":"a012b31bc2784a7dac737877223b9ff8a30cb10d982cae9abdf921a0f4e6f5f6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"MM9J61T8.txt","sha256":"2e689f8e577980184804a18d6688613a474988766d04b78049b2da8764fd7f36","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"VBROGCXJ.txt","sha256":"deb533d0d476a2082aa419523a3b1e9f2805530669a369dba693908476a3a427","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"ZZ2NHUN6.txt","sha256":"8c0fd9b783cfcc71dff7c25f9704a2def7a44ff081a7d3f25451bf05e1a122f2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"imagestore.dat","sha256":"febeebb6fd6f1355aee27f683aff014df7580a51a67a0c885176ffe41d09dab3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"4f7401da808d859fd22b03dcd976adb702957d0ff5688da9cd7fcd5f7155a690","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"b7bd8c32b34698f27361692e2873110f6abf6f0b891d0c8f6df0ae40a7385960","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"837a169b242ec1ac1ef66229e3998d949dc7581c1f7151bdf0657dcf01efdce7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sha256":"f3faf5ced13735c3011b2ec500b73593be84d8ba05d6f1a82532de034555431d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sha256":"5057114bcbaa78af72c5ba84285b0e1c5964822cd0ae1e8169241beec91846d6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"~DF00339E12A2AA4009.TMP","sha256":"90bd3ed87c973b235e6c9246c34e72fe39e7f88954fde202c142d06b6aabf433","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"~DF21C32DC430517079.TMP","sha256":"c427180a5b572823c47e373a2b5c24f07b8a8a22990913ae0eb9d6ca25e11fc7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"~DF5FA46E225B1761BA.TMP","sha256":"3468c3731ae10b3c0da4d7e84b50d0c764000bf3da66a91f0020092fb5acb3bb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"~DFF2438460F2C61F19.TMP","sha256":"343a475408282812b52b2bf830915ba0adcb698c96a6ef0525e731e90d7ff81a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Governance~ModListing~Reddit~ReportFlow~Subreddit.f1b90d9231a7d4ae6cc4_1_.js","sha256":"530825bbdca90c71f280e1e485bfc266f6629cafe92bf0f6b81e54ba4dbef1de","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"reddit-components-LargePost.b40fdf9709ef9573feb8_1_.js","sha256":"a6a0fe27ca1464158b4c62db8dcf425dd0b5a286d588f658b24db7a42fd1bf3b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Reddit.a4fedfc38ea71f9c57ea_1_.js","sha256":"7883c078da9e3100da0df755620d133d93fa6f375f786e31d323e8756c2df064","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"vendors~PostCreation~Subreddit.c6c96fbaf04e2c667eb2_1_.js","sha256":"0782931b02c742c40432c4a2b7cdb4759cfd038b1083a2b6e6b79cfd016281e4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Medium-Italic-a25d440012460eb8883e539f93040fa7-font_1_.woff","sha256":"8becec143e829ece508118aa7799e2223289d3a6a22371b3ff4163b76a2a68ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.2b4ed4d0588ef1f584a3_1_.js","sha256":"5f9bb226bb0f080ef65763f073ad85ddb82c621a4dc2b146db208365647c50b6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"runtime~Reddit.3b883c3d5d571006a7ec_1_.js","sha256":"8be711bcecd862f113f1b454b5bc8e1916b8975c9baeddaabaa05e797c80c5cc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"vendors~Chat~Governance~Reddit.e1e0852a48d91805a9f6_1_.js","sha256":"2b2570eb3ab104e139764bd45ea92e4174c47798e3e7eca59acf8020b679a5b7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"CollectionCommentsPage~CommentsPage~ModerationPages~PostCreation~ProfileComments~ProfileOverview~Pro~d39c0d57.22636c24c88cba461d8d_1_.js","sha256":"b4b6cc361bfe0c16e14f3f0b496b001ea95ec9233d2460a28a83613fe1301005","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"_B6A5E847-25B7-11ED-94FE-080027FCD8B2_.dat","sha256":"f637cff569eab0d410740b8336b16ffd668d1fd00c9532b776897030eed8704b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"AuthorHovercard~Reddit.f350efd89417d712c80f_1_.js","sha256":"82beb6932f283f09a0c6ddc8cc982218217ae8f5e07c891231a45e10f13ba094","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Light-56973edfcf61447fc1ffeb7a6eb6b178-font_1_.woff","sha256":"fccf9242523cea8aae09cf863d25304bc02cdc64750e08701347635824d754a8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Governance~Reddit.787bda2aefc18d634a3d_1_.js","sha256":"6fe4cab7f195f97e10c702bc53a1e4faad3dc24b4bc02eac42ae25b5364a4801","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"redesignFont2020.f526ced67754443af2188dfb4c28e16b_1_.eot","sha256":"1030f3d7361274c457a6845b513de3ec77c13828f6c3ac1ac3a40927c97c09a4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Bold-c34ba754b7235b49d33b294ff7a54179-font_1_.woff","sha256":"82ee6ea61b76edbfdb614afe2658b1709d5734a8f81147dc887b1592d6b7a8fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"-core-styles-fonts-ibmplexsans-medium-926e6b23b6_1_.woff","sha256":"926e6b23b6f3776460f3bd0a9db2575f37f3fe56777060d53b3a34ed9d77bfbe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Governance~Reddit~Subreddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compo~bd4baca2.7e41b9370d7e062d4907_1_.js","sha256":"d4dbd35b26a8005922e3176f4f4784ad01ff2a080c1ac8c0c3c4ff4205c61e61","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Subreddit.a0a4a2e1a534bb1bcc61_1_.js","sha256":"74cdc85266320d7a1f69568ff43b52624d588969d048dea80d71bce176b3fa0b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"android-icon-192x192_1_.png","sha256":"38f250a84aeda6e0235ad20a22c846520fe976c3137c3c5fc9c5a2690b206156","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font_1_.woff","sha256":"8839c1f7fe11e9d6ce78bfad758ea96e59d17dd023c16417c0a9b37c59fd81ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"-core-styles-fonts-ibmplexsans-regular-5a469cfacd_1_.woff","sha256":"5a469cfacdbad851846169f6d4d541e27e7ab72aac2451bfbbd9e6d992eba9da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"vendors~Reddit.54f78c814c079f46d99d_1_.js","sha256":"bdb75c62e1e2ab5bedf9ae95e4eb8685950060b367072c0919cd6ca0d76798ca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Bold-Italic-255b4934a1f414dd312aa89382d65114-font_1_.woff","sha256":"42d5eb3c9201b3fe6861b3076e48a4fbd3211e5c5418e3f38710745c8a21a3e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"4662b8b7ba1e36ea22bbfad0553df733c2019b720b221ffa1cff2ee5f71db509","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~FramedGild~GildModal~GovernanceReleaseNotesModal~Mem~c8b748a6.bd556093c4d0516a22e0_1_.js","sha256":"ea71663031d8dbb4b134a333197370d1cf55e58e6469c10366bcb671dc5b3944","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"RecoveryStore._B6A5E845-25B7-11ED-94FE-080027FCD8B2_.dat","sha256":"7c8d003d69cfb82d22a7c6f29a93818223ffeb9cbaf939c6c3d516b232f73880","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"PostCreation~Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~r~4c415e24.5e5cf5621f8c3e010263_1_.js","sha256":"aadde02bbbef27e9766196395805887b652a15200312935076a25a24ee73d788","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"-core-styles-fonts-notosans-notosans-49dd5c1e17_1_.woff","sha256":"49dd5c1e178c17bf2a754e3fa3327820c27491d6d690aaf5600714f9ec3c5b09","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Medium-1051a531d3e1ee3483a6533158557139-font_1_.woff","sha256":"0191cbe14ade1fe9c80860b60445ec6e1b2694e9dbae70ec8c886a3582ae223a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]}],"files_written":[{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%TEMP%\\~DF21C32DC430517079.TMP","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MM9J61T8.txt","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\KSIvsSwarmzFightliv[1].htm","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\vendors~CommentsPage~ModerationPages~Reddit~reddit-components-ClassicPost~reddit-components-CompactP~d737df3e.506a3ece88e0a905b7a3[1].js","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\runtime~Reddit.3b883c3d5d571006a7ec[1].js","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\-core-styles-fonts-ibmplexsans-regular-5a469cfacd[1].woff","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\CollectionCommentsPage~CommentsPage~CountryPage~FramedGild~GildModal~GovernanceReleaseNotesModal~Mem~c8b748a6.bd556093c4d0516a22e0[1].js","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\CollectionCommentsPage~CommentsPage~ModerationPages~PostCreation~ProfileComments~ProfileOverview~Pro~d39c0d57.22636c24c88cba461d8d[1].js","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\android-icon-192x192[1].png","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{B6A5E845-25B7-11ED-94FE-080027FCD8B2}.dat","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{B6A5E847-25B7-11ED-94FE-080027FCD8B2}.dat","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%TEMP%\\~DF00339E12A2AA4009.TMP","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[3].ico","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\xads[1].js","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\renderTimingPixel[1].png","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.2b4ed4d0588ef1f584a3[1].js","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Reddit.a4fedfc38ea71f9c57ea[1].js","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font[1].woff","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\Medium-Italic-a25d440012460eb8883e539f93040fa7-font[1].woff","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{DBC80044-A445-435B-BC74-9C25C1C588A9}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"key":"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SECURITYPROVIDERS\\SCHANNEL\\","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\VERSIONMANAGER\\","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\ADMINACTIVE\\{00000000-0000-0000-0000-000000000000}\\{00000000-0000-0000-0000-000000000000}","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_540_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"IsoScope_540_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"IsoScope_540_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"IsoScope_540_IE_EarlyTabStart_0xe3c_Mutex","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"IsoScope_540_ConnHashTable<1344>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"IsoScope_540_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_1344","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_540_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"IsoScope_540_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"6309a9ecddac223f4f42fb92"}]}]}},"report_ids":{"sandbox_job_ids":["6309a9ecddac223f4f42fb92"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 4b4c6ad39ba1… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 4b4c6ad39ba1…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/4b4c6ad39ba1a766a5b0bdbdeb407e809f9f114cfa83d64346a21ec29edee89f"}],["$","meta","4",{"property":"og:title","content":"Sample 4b4c6ad39ba1… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 4b4c6ad39ba1…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/4b4c6ad39ba1a766a5b0bdbdeb407e809f9f114cfa83d64346a21ec29edee89f"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 4b4c6ad39ba1… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 4b4c6ad39ba1…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L29","11",{}]]