25:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 29:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 26:Tc14,"80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53]- [targetUID: 00000000-00003164] "OZCXJ846.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\OZCXJ846.txt]- [targetUID: 00000000-00003164] "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776]- [targetUID: 00000000-00003164] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 4817 bytes 1 file"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00003164] "B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04]- [targetUID: 00000000-00003412] "~DF930E3BD0D244D25F.TMP" has type "data"- Location: [%TEMP%\~DF930E3BD0D244D25F.TMP]- [targetUID: 00000000-00003164] "~DF9077C8EEB0652B86.TMP" has type "data"- Location: [%TEMP%\~DF9077C8EEB0652B86.TMP]- [targetUID: 00000000-00003164] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00003164] "~DF0B9DCA9C8DC3F915.TMP" has type "data"- Location: [%TEMP%\~DF0B9DCA9C8DC3F915.TMP]- [targetUID: 00000000-00003164] "en-US.4" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\DomainSuggestions\en-US.4]- [targetUID: 00000000-00003164] "T7KSCC8S.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\T7KSCC8S.txt]- [targetUID: 00000000-00003164] "imagestore.dat" has type "Unknown"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\imagestore\3mt7jhv\imagestore.dat]- [targetUID: 00000000-00003164] "5IKMADI7.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\5IKMADI7.txt]- [targetUID: 00000000-00003412] "5BM8S999.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\5BM8S999.txt]- [targetUID: 00000000-00003412] "ITGNKT3E.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\ITGNKT3E.txt]- [targetUID: 00000000-00003164] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00003164] "~DF3D66B94F4C43D7E2.TMP" has type "Unknown"- Location: [%TEMP%\~DF3D66B94F4C43D7E2.TMP]- [targetUID: 00000000-00003164] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00003164]27:T20c5,"GET /r/Nopehdq/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.reddit.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "l 2024 18:43:08 GMT; HttpOnly; Secure Set-Cookie: csv=2; Max-Age=63072000; Domain=.reddit.com; Path=/; Secure; SameSite=None Set-Cookie: edgebucket=lOtVvLXSdj2rcV5NIV; Domain=reddit.com; Max-Age=63071999; Path=/; secure Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.1, "failure_fraction": 0.1} transfer-encoding: chunked"- [Source: SSL_151.101.1.140] "12e"- [Source: SSL_151.101.1.140] "]MK@+j=K{P(i3.lvuwBK-I7/GXXH6$))LdyE8,;ESzG_:e6zpaRPn`#o1m%+%Y9}}~s_?Cubw7#Pmj7EO?9?vv=h.v|fOhSGzii{mANOv58u*X0mvM%(E58%A@tyU_5nS:W5|tJR#R|m}.B/O ym+Ckhi9fCmU_8s]WEv_s,`BwM[]T;MtK}t] Q/?w\6{+N~}dX)/=3gwgNY99~_!}sBO?zi_C7pMm*/ly.TzZtE t~\f[u5QAG J47O]7 eQX#jpv%/}{t@d-mF=BU@6QU%n)dJCUYAIF:P;g9Eg NlW]l=^t`Cvkx0O>R#gs][nW{co{Jy:Pm"lgWtbhy=7CM(r6>,5bc9|sNk{_5xGeRO`LH:^bd{n.jiArB|v=J7"- [Source: SSL_151.101.1.140] , ")D~hH;.Nal,IS}^B~aw7Zj~pw&iEyP r-n5w9Z=S<<;Mh&?n!&Bpm Y?u1]+CM{!VFh^u,2/@m))}4 !Py8@Iw7Q4\GcFiTg\I8=Ot&Z!?NB0~Fgq|+?tiOB!?\y)AY\V6xdc'#>Q2/Ox4L [Kovc'K:,eo|[\MU#%R;~MvGB:n=9zQy`4dcLTba/99|baE%3CdfFWXsF|iq2AGQ.Zp% }6&^V=$n`39RzzCa*+7Jv!C/9y |aLa2]H=2{w&.60hId*Jpq|6^mS)V* H@c,>HC}j<-~fS? e!iw6<=4"#>!I`[^$vUACw%5n0Z e7poR,5+5@3o!Uqe/5tD4huVz"J^'YA=ubBQpm Su=n7{7Wimjbxs*.'LKqK6f@K rG~Pv-..Q9l.]xjd$RRCm](#d A7D Gps8@[)8}M%u-"F##fifp}_e@U:pa S_ySw7o|L|WF6oavOeV!Z84}m6| iAr(Kl>]wjOv9TG9>x YULvVQ a.?K&!ef2&!/5BUWD:W1JN$UD~~l<\Lh57K8}w/5jaPn;X9'L\!]!}\zGd* vR:'BWS[tQ ;:(x#flFuI?5SV~3=iEW3=%Op|)+n1(M%xs =ZN'/1vJ3 Z`pFgn+:|o70, 'A1`{6#6{PA$($lCP4&'%y,L2EmP~SWRKpB~/7p_tH]rjYW(Q'R&ie$b4)~_6} wM;Q00!"=S0QGKFtz6I\{Sk#2S})~Db"- [Source: SSL_151.101.1.140] , "1000"- [Source: SSL_151.101.1.140] , "S73\gM0)kJ3`@c(=zHB>)myGa ^GuI%+.do PTBCjS(de}a//8MM#T**%ipH<]oNJa#mDMHKnX^"0-"0-"0-"0-oA`^q!6W?(Pt j*Y2u1Tb}_#YL# bfE!GKYV~@avStwkQ.NsI-MAXr 6sFqNO7Nz$QMye&$a["UEJD62^6(;:x_?t}]t'UEX-G) Wvp0YE t0p)FR/W7pv4nlbq +w[7$w.~cl0*='#D-/T5x[#1bbsaC,$w;juS54FqMP:| 6fQ^km3H{9;S':XoBl\RFeZ`sA7Y(L]sa)+$Og|/"9LvV3u$5{4/#K::M: "5oHw4Aa49fy-G2)QK+Q"zZpV-E2SH/AWAO`0;T>t3y%TR#f7]$fbv#C=;s#\M R;23t: ^b@<-wd1Qh/I{<0vMb2am'p!8C e;k,!q3.=pb'!G 'DC~0Ko4.x3!t5Nq1,bSbYL1)s7K~wj`L0CC1B'Qo,FpKMD)GV$mB8cS}td8Hm('1aNtX.$Qyh7w-ePF*haBA4@qPGj?Y@u&L* 3"- [Source: SSL_151.101.1.140] "_eg%UN1E`bY .olmGr":N8P;P D%E_d_HHHHImzdHu6qx6XGh&p#A/---V8:wFNO;ZxF$ @[cym7[^QYz01#Qp0000y3gs wO=\Xwwpuv}UgbJX|wtX2g_&=1j<_r}A431?2GSn IRNDz/OLOW+c$8;wl4d3 u4T)eqW+k#Q2)?[1bhmrt+1;Si8y@=$]yfAtH$i}{|\H%>;q:0=JQ}-e1#t1hcSLe?6^%?&EXY<(s,V-q2B`WN}gQr !`g- "kqPy1P HExLTul"l38d$6F:5AD@G%s`g:6~:Hn/mOVk7l)K"H1j;l}r#WLXI\ %=T<=RWC6^8S4]-B.!8H-#-bvR/dB/&SFMs.[xEVd@*;3~.4bgeiFL%e?$4,i_m,(-Hr35vNi80 i,/m."- [Source: SSL_151.101.1.140] "fX?jvb>LX|hA'ZAuEBFz7?!7R1lu'nCDj9v}9XeZ8Nr]{AT#eaXR,##h:k>-F##fi=j>P5K[S,u yS+EK=O&+# VdTF;oCYVR\{\0P\R2jfY*L>gXUlF-%>}kO$7p}yz|z^xAs=0CKW8%Xn#AnfvmM Scs^~^|FCf_ukWvL 6R!6Zo#0F1LbE-2OuBhBtcF#iHvoL5= ,{l%ihS`16H5c:?Tm 4FP'!rFTgpcfymqpRB29<73]KA{&u*/{$KpB~gB}7/ D]'BqR@85O+ !G~JHCQbXZe3*cf&T,Djh)0Dg=2&0Sx|Z5}wGH~l-~=\uYadbDvgPGl+r+F2GdCh4Jj=B#-V9 .P|db/K0L/K0Lyxb NYJE5%SK>6rb,=W}'4/qSkH/0SxlofhRDwC Nr1<\# m C-*WH7"- [Source: SSL_151.101.1.140] "2Ef'+s +'TPCQr,<' a1ZP7)\`B]4=J$O{N`21%L%mc,/{[E`ZE`ZE`ZE`-Lnh_E\j<5d!,g,c4+ ?iA0u-`5Am JR,] kitMjVRR,fmgf\us$pa6 O8qAWT%~M-j:o92>{J Wv39ag'wn6>ZYLYJVgC ND@)4n/i-ebax- ftiz(W< 3d$Y_"%/T5u||5$eb!&Q;C &a3qMP:d(9CTNccmA>H3u_j56Rt$=HWjGei7}THww(2-i0PRg0yxw64W:X)rl;c!hD"gItkv9GC!,1tt8vDj7sP2XHOL%yli'rAEm[9eS-7Vb'D<,O\-!&i~vXn4)~Kf{WAO`0;T>t3y%2LR#f7y,IbF(^g8PVIPO*!#G@"whdfOP( ;+ms?(lT*&SSarBg1W ,>d^g8+9J6x*"R~ i v'nF@N^wbSbYL1)f1 b%50tKYb5o.^qI7ES TnEW"<0bob/$?&I5^HBCNtX.$QOS1_C bT(CmdV(nF|6x%-_._._._~% z_W!a"8w2},V{\R?k#<>y$_/Zp%CSWnirk&6HJ"( -7+1S3zTz?G@fT_ryvl[f8yu_6!;Ua t,!XX09Xu}3Pc5$0 w'e/#~ `/\DE$]DE$]DE$]DE$ER@c^=3X3$rDZ5=\3CE~@~q4%/QXU_[OSr;p.]]Lx|}6COaOK bO)#+A~FE{c9?.'zl.29Ry>4Y3=:oIz7.a |6,)[ !] B^E6`sVgTO*_P,/'c:X'v">Qzkm\oJ+3'c{-`;"9)$22nZPoP;01 Q@3gd8=drC}gcRHK5?;PQHG8t^p.E?~C\+61([Zz|GPyuGgE,J5Q%ka#v* dI/jU\X"\l: @uUrvfahVE{5=#M3/!vc%=s\!-G\A!-m4Bk.*xn6uJ!iNy)Gw|NS@ B$?[Sc:PmuA&ap5to"\R;FRZvf&2 Ko7)2yg)Z 'C7f#fLR!Zo#=Vnx-bol_e77X#T,G)Uk4COx-=3 (0I|t#-(C^IZNT!%FK5'#UOxce,l}d}lLl.! iP&#ybPj {t'?a'2nH_D_ fy3MD##5/vK' (JHk; *WBl .zP_p}X$mC Vl[)p`= #Hp4V1A&L6NhPPtNFSQKD%V:~q@?(ft)wEo~ OgR|J!ll2*5iz.*;lru Qah}S]4IU38r3\e3^R3A[)FN+V16KV;U_*?s=]<\y/o\4W0d3 MStpa)+'WW'e"tatK6Z!=M}e&-:kTs! d,*[6Lk8aa_k%;F[rA/Ml2[U\2& }lO4xszl~JpoXB pf\\PB'okl&(Lumg_@}/mUgjh,dDb."-"-"-oAe&pV?SXfU/jvHx3zO;=)GFPN||Mb3| AcywRgnSLF 8MDw=T7GKN!5YX-wD=dTNk=~{#D"m_1c $CIE[rTv%y~bL~nQ!T0>IY[$T*5rZt|s!*m4G}D@$YDZJl4F0.5 bQL#ki?^8j qd;$pPWfH+~d%)K.hZhR0c:``Sn$%L836Y$1M@n DKWV7U)|,:|Zt~GowY[.Y;kcQ$^(Gr/A!&9-){5@GMetjI4X!E>Tew+38g%5>?b2t_TjtQ.E5FUC\v{3VV7W`c4jFGL6-]8VN(9UN7Bb$8SufrF(7)X7u*2B AZ$3THpwBiZ(/L90R4?{Bi!S9)f$5BPh*~)] Avsq%|S@6&{t%/brZLNi19-&nrmtwyLNKSNkyU(BvrH( {:P}hsMFp 0*)$DEbyQ$ nzsbjqveRq[U!R=cqY543##h@AEqu!jwWgrl$-*(@sVK!)cjUO?5S0K3"of1GgNTVtQeRo)QAa7^FL&!5pzuJ9~u>ovy6.5U7xjZwuQ"*e63[@[8kt)vwnR&~lrB0.=J\j_DE.3ouQm-SYsv1Y^q8TlI:6w(MU:!Q$:jtI-_G&z8m$,Z8c@'a8ae&zKDOkw [.o D5JAL*QzA^cziAx}^d{iP 4^m[-O@WiY8mmp~\M"- [Source: SSL_151.101.1.140] , "3ffa"- [Source: SSL_151.101.1.140] , "9O O>gFTJX/7rqUP^2bC &f F&hh$*YZ}b1#c@uE@S6kWn#C)oYdR<;^A7{`? wiHsZoj|C}j|M= 8Ax]YKL/C9dy4vKy.Wr67D%1{^gg^_J$yXD--GF[P~#!d%S+FJ?"-;".&Fe/t2--{4CY5+pjF9VD QnGfJaj|?`p;:J Paw u1>{/8Qsf"Qa?~02G;Z9GP8j;R2l0NR#dzX:tFp^?aPQ0LelVq5,&I\=\%JKD]h.E;m-(v,gD'"H99dEAN}'J&$Pp=2f/?aY^xIpj/C>*Eo"$~Ndq#h_HashTable_Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3164\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$26","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"level":"informative","category":"Network Related","name":"Found decrypted SSL traffic","description":"$27","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"https://www.reddit.com/r/Nopehdq/\"- [Source: Input]\n Pattern match: \"https://www.reddit.com\"- [Source: Input]\n Pattern match: \"www.reddit.com\"- [Source: SSL_151.101.1.140]\n Pattern match: \"https://w3-reporting-nel.reddit.com/reports\"- [Source: SSL_151.101.1.140]\n Pattern match: \"www.redditstatic.com\"- [Source: SSL_151.101.1.140]","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4817 bytes 1 file\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 151.101.1.140 on port 443 is sent without HTTP header","origin":"Network Traffic","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":37,"imported_dlls_count":120,"dropped_files_count":0,"extracted_files_count":48,"files_written_count":29,"files_deleted_count":0,"registry_keys_created_count":8,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":8,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":1,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"62d5a9260e908523da3806bd","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"57aa1dae10cf27a3feb256a791dee30157a52d469c0e3aada32a82cb8771f7a2.url","analysis_start_time":"2022-07-18T18:38:03+00:00","indicators_count":{"informative":7,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"151.101.1.140","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]}],"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}],"processes":[{"pid":2924,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\57aa1dae10cf27a3feb256a791dee30157a52d469c0e3aada32a82cb8771f7a2.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00002924","icon":"$28"},{"pid":3164,"ppid":2924,"name":"iexplore.exe","command_line":"https://www.reddit.com/r/Nopehdq/","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002924","uid":"00000000-00003164"},{"pid":3412,"ppid":3164,"name":"iexplore.exe","command_line":"SCODEF:3164 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003164","uid":"00000000-00003412"}],"all_imported_dlls":["dnsapi.dll","normaliz.dll","clbcatq.dll","sspicli.dll","ieproxy.dll","ntmarta.dll","ncrypt.dll","urlmon.dll","msvcrt.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","ssv.dll","shlwapi.dll","ExplorerFrame.dll","winhttp.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","wininet.dll","rasadhlp.dll","wshqos.dll","ws2_32.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","cryptnet.dll","setupapi.dll","user32.dll","nsi.dll","FWPUCLNT.DLL","api-ms-win-downlevel-shlwapi-l1-1-0.dll","rpcss.dll","netapi32.dll","schannel.dll","sechost.dll","mlang.dll","api-ms-win-downlevel-user32-l1-1-0.dll","ieframe.dll","ieui.dll","mscorwks.dll","msvcr90.dll","deploy.dll","dxgi.dll","ole32.dll","Wldap32.dll","t2embed.dll","KernelBase.dll","nlaapi.dll","version.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","oleacc.dll","gpapi.dll","d3d11.dll","d3d10warp.dll","uxtheme.dll","secur32.dll","npmproxy.dll","msimg32.dll","bcryptprimitives.dll","mscoreei.dll","jp2ssv.dll","MSOHEV.DLL","rsaenh.dll","api-ms-win-downlevel-version-l1-1-0.dll","wkscli.dll","IEShims.dll","devobj.dll","bcrypt.dll","imagehlp.dll","sqmapi.dll","wship6.dll","iertutil.dll","shell32.dll","dwmapi.dll","dui70.dll","propsys.dll","WSHTCPIP.DLL","webio.dll","advapi32.dll","usp10.dll","api-ms-win-core-synch-l1-2-0.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","SensApi.dll","dhcpcsvc6.dll","oleaccrc.dll","oleaut32.dll","WindowsCodecs.dll","kernel32.dll","profapi.dll","RpcRtRemote.dll","dhcpcsvc.dll","cfgmgr32.dll","fltLib.dll","crypt32.dll","sxs.dll","msvcr100.dll","mswsock.dll","srvcli.dll","cryptsp.dll","rpcrt4.dll","msctf.dll","comctl32.dll","winnsi.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","msimtf.dll","cryptbase.dll","msasn1.dll","apphelp.dll","credssp.dll","lpk.dll","URLREDIR.DLL","wintrust.dll","comdlg32.dll","IPHLPAPI.DLL","netutils.dll","mshtml.dll","d2d1.dll","duser.dll","mscoree.dll","DWrite.dll","netprofm.dll","userenv.dll","gdi32.dll","imm32.dll","jscript9.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"5BM8S999.txt","sha256":"b5cf410c74dee102f5e57af951e4e0a6ee4af5e62ec1c4115bfb1e9c84a109b6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"5IKMADI7.txt","sha256":"fc3b61b31ac3e65d9fc20004c7b35a76ea936dbb82594376e469952b162be866","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"ITGNKT3E.txt","sha256":"b49256220d2d8f4c3d68f1a42c70244d9063e8907a9433c250f75ced4b230554","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"OZCXJ846.txt","sha256":"f1900aec5bf887629dbbafc8baa44a0ae84649f9cb55697de5d593e39c9c2081","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"T7KSCC8S.txt","sha256":"986264e3eefeb36f8ba9db71f40200074b4e668deed236e0b8b144163d95c51e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"imagestore.dat","sha256":"0dc9d8281dbe8b668b6e538f9740f8d278f78d93373ff8b503f6dff48b13f581","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"e878880764cf0c72ac196d740ea5ee9786a79e18eeba4b3346a34f8c516f1070","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"56886389a25f1d283bf5bd9d6f371c1f70552dc079c17a25f58edf4cd46deeb6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sha256":"b101ad391dc507e820ea11b070a8cd02529bc9b805ffb9f2edf81e539abe95fb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"fcaf5a6f504a75ed3853c7c0bf3af04d861554e35db3974c287d8718eac9f53e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sha256":"ef3c897826ae722eb5ea22764323a0d6b9bfb082fb958db991dad68ded1eab92","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"~DF0B9DCA9C8DC3F915.TMP","sha256":"cced8c1356477c5183fc51a5aa629a3b3a2a329dbdd49f52b811f2bbfdc03bc8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"~DF3D66B94F4C43D7E2.TMP","sha256":"3a148e8b46945a1e76df193c5f209d164625fd5ab5e18e51397bd989b1abae51","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"~DF9077C8EEB0652B86.TMP","sha256":"37760c5711e512c0df3a45808e5b31f2583de5c9c716837da2f0433d8e7f6430","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"~DF930E3BD0D244D25F.TMP","sha256":"965aa610872c5f30e6caf9e46694cf7402b6b35c06b99ec57e49817ff25d35d6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Medium-1051a531d3e1ee3483a6533158557139-font_1_.woff","sha256":"0191cbe14ade1fe9c80860b60445ec6e1b2694e9dbae70ec8c886a3582ae223a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"redesignFont2020.c243fdcd979ddee29305ba28866cf7f1_1_.eot","sha256":"666da693b7a28b435a29181dcc6077f7203c0a7e498841312386e4a1a62fcd71","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Bold-c34ba754b7235b49d33b294ff7a54179-font_2_.woff","sha256":"82ee6ea61b76edbfdb614afe2658b1709d5734a8f81147dc887b1592d6b7a8fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"CollectionCommentsPage~CommentsPage~ModerationPages~PostCreation~ProfileComments~ProfileOverview~Pro~d39c0d57.2ff39bec43a72401dabe_1_.js","sha256":"71e6496f73c70c7ab0068e19e4542983f54f7aff9c4cc15f8a0b31e0c96725cd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Light-Italic-112953068bc678d61f4553a1184561f0-font_1_.woff","sha256":"5b4535205c590c5016abbc67fc2836984421161b62167c662c347356363e120a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"-core-styles-fonts-ibmplexsans-bold-736188bb57_1_.woff","sha256":"736188bb571031e801da01a7f98325d6ae6a10feb714b10e2442f3f376c9260c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Medium-Italic-a25d440012460eb8883e539f93040fa7-font_1_.woff","sha256":"8becec143e829ece508118aa7799e2223289d3a6a22371b3ff4163b76a2a68ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Bold-c34ba754b7235b49d33b294ff7a54179-font_3_.woff","sha256":"82ee6ea61b76edbfdb614afe2658b1709d5734a8f81147dc887b1592d6b7a8fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"vendors~PostCreation~Subreddit.c6c96fbaf04e2c667eb2_1_.js","sha256":"0782931b02c742c40432c4a2b7cdb4759cfd038b1083a2b6e6b79cfd016281e4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font_1_.woff","sha256":"8839c1f7fe11e9d6ce78bfad758ea96e59d17dd023c16417c0a9b37c59fd81ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Chat~Governance~Reddit.8369fbd15c06e95ae380_1_.js","sha256":"8a89732415a7e3efc8cafdc99bf72bef914efda071eee5354deb0cc17c80300d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"-core-styles-fonts-ibmplexsans-regular-5a469cfacd_1_.woff","sha256":"5a469cfacdbad851846169f6d4d541e27e7ab72aac2451bfbbd9e6d992eba9da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"-core-styles-fonts-ibmplexsans-medium-926e6b23b6_1_.woff","sha256":"926e6b23b6f3776460f3bd0a9db2575f37f3fe56777060d53b3a34ed9d77bfbe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"-core-styles-fonts-notosans-notosans-49dd5c1e17_1_.woff","sha256":"49dd5c1e178c17bf2a754e3fa3327820c27491d6d690aaf5600714f9ec3c5b09","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Bold-Italic-255b4934a1f414dd312aa89382d65114-font_1_.woff","sha256":"42d5eb3c9201b3fe6861b3076e48a4fbd3211e5c5418e3f38710745c8a21a3e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"d5c04b9dba4ff31c7b1d7b553cd3dedfad8d1b125477422217010c8971ec57ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Nopehdq_1_.htm","sha256":"ec8cdc6d54b59c6c00e04b69308fdff5e5b52e489a114e614d70554e4e4a1fe4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Reddit~StandalonePostPage.16ef96422c795e7d8cbf_1_.js","sha256":"9596be4eb21e1d27c89605d5507e0127e959263b4c9db627796c2f3c64f6b7e2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"vendors~Reddit.f8535ec7d659d61d3e88_1_.js","sha256":"0c20aaf9c0702005b22e639bca69df50690b3c748b787551a6c7e84e0b84bc88","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"PostCreation~Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~r~4c415e24.13df84498f277f2f67d5_1_.js","sha256":"b406212d88a35a870170a8e1fee2eb61d6a7beaf65fd1c864b25e3ca984ec1db","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.6880093ca488c75212c0_1_.js","sha256":"b8cb057b3f393ccbf760eefe39fb1f33fab9dcc371621ead69852280bb3550a0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~FramedGild~GildModal~GovernanceReleaseNotesModal~Mem~c8b748a6.7720677c3bb4beaa0d66_1_.js","sha256":"dd0a3cff8741fc8838686dd8c846987b95852901d5caf370af976db563a2aace","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"TopicLinksContainer.21144914386926962ae7_1_.js","sha256":"46e637490493a5beb1f41f0750da1778b91fe92b1094e34b9bc1de5179e003d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"CollectionCommentsPage~Subreddit~SubredditWiki.c2941f71995c27a76192_1_.js","sha256":"229737be440bdddd1259468053a89afd21eeb4b853d6bdaa9960e6fa399b9e71","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"CollectionCommentsPage~CommentsPage~GovernanceReleaseNotesModal~ModerationPages~PostCreation~Profile~9a5d9fab.65fbf678f16009c83d4e_1_.js","sha256":"01cbd47960484769ba2f4c9cea3ab9e0eaef72e658c9c1afb869ab3db82fa463","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~Frontpage~GovernanceReleaseNotesModal~ModListing~Mod~e3d63e32.f2c41a831cdf765419f5_1_.js","sha256":"9219ee5539db365e5ed843a0dc7769536b268014a0911795471c3812419c921e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"runtime~Reddit.30458e5b759ad45e279a_1_.js","sha256":"e4f839c097bbc3f23924a1dfcf02e8662397f01a77e3828da2ad0eac1d67390b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"_59555B8E-06B8-11ED-9ABA-0800270AE60F_.dat","sha256":"3e24309b448498e58f4e55f19afb1f6e19f86bde998cf2a284602b2332885903","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Reddit.e4b11b67ad79a83f6a3b_1_.js","sha256":"61e8935d16341ac17685cf5624e99cf8a752cf91d6bc0160990491359e3a355a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"ChatPost~CollectionCommentsPage~CommentsPage~EconTopAwardersModal~ModQueuePages~ModerationPages~Post~38f39fb8.53d573b810504698ac0d_1_.js","sha256":"36615860070b1680155153fdfe0c246381d92dbafbdf61b20dc26f52fd57d796","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]}],"files_written":[{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%TEMP%\\~DF9077C8EEB0652B86.TMP","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{4EDB260F-06B8-11ED-9ABA-0800270AE60F}.dat","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.6880093ca488c75212c0[1].js","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\Governance~Reddit.0fe62a489d775446365d[1].js","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\reddit-components-LargePost.c32cc4c77a6bc53017f8[1].js","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%TEMP%\\~DF3D66B94F4C43D7E2.TMP","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{59555B8E-06B8-11ED-9ABA-0800270AE60F}.dat","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"path":"%TEMP%\\~DF930E3BD0D244D25F.TMP","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKLM\\SOFTWARE\\MICROSOFT\\DOWNLOADMANAGER\\","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\\\","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{DBC80044-A445-435B-BC74-9C25C1C588A9}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c5c_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"IsoScope_c5c_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"IsoScope_c5c_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"IsoScope_c5c_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3164","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"IsoScope_c5c_IE_EarlyTabStart_0xd70_Mutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"IsoScope_c5c_ConnHashTable<3164>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3164","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c5c_IE_EarlyTabStart_0xd70_Mutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c5c_ConnHashTable<3164>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c5c_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c5c_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"IsoScope_c5c_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c5c_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"62d5a9260e908523da3806bd"}]}]}},"report_ids":{"sandbox_job_ids":["62d5a9260e908523da3806bd"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 57aa1dae10cf… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 57aa1dae10cf…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/57aa1dae10cf27a3feb256a791dee30157a52d469c0e3aada32a82cb8771f7a2"}],["$","meta","4",{"property":"og:title","content":"Sample 57aa1dae10cf… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 57aa1dae10cf…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/57aa1dae10cf27a3feb256a791dee30157a52d469c0e3aada32a82cb8771f7a2"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 57aa1dae10cf… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 57aa1dae10cf…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L29","11",{}]]