26:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 31:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 25:T47f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic Sample 5c258f35e2b9… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 5c258f35e2b9…. Malware family: Trojan.Generic. Threat score 100/100. 25/28 AV engines flagged this file. 8 malicious and 23 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3","keywords":["Malicious","Trojan.Generic","malware analysis","sandbox report","threat intelligence","5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3"],"about":{"@type":"SoftwareApplication","name":"file","applicationCategory":["peexe","executable"],"identifier":"5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.Generic","antivirusDetections":{"malicious":25,"total":28},"behavioralIndicators":{"malicious":8,"suspicious":23},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Ta97,".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADDRESSBOOK") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADOBE AIR") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADOBE AIR"; Key: "DISPLAYNAME"; Value: "000000000100000014000000410064006F006200650020004100490052000000") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADOBE AIR"; Key: "DISPLAYVERSION"; Value: "000000000100000016000000320037002E0030002E0030002E003100320034000000") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADOBE FLASH PLAYER ACTIVEX") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADOBE FLASH PLAYER ACTIVEX"; Key: "DISPLAYNAME"; Value: "00000000010000003C000000410064006F0062006500200046006C00610073006800200050006C006100790065007200200032003700200041006300740069007600650058000000") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADOBE FLASH PLAYER ACTIVEX"; Key: "DISPLAYVERSION"; Value: "000000000100000016000000320037002E0030002E0030002E003100380037000000") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADOBE SHOCKWAVE PLAYER") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADOBE SHOCKWAVE PLAYER"; Key: "DISPLAYNAME"; Value: "000000000100000038000000410064006F00620065002000530068006F0063006B007700610076006500200050006C0061007900650072002000310032002E0033000000") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADOBE SHOCKWAVE PLAYER"; Key: "DISPLAYVERSION"; Value: "000000000100000016000000310032002E0033002E0031002E003200300031000000") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AUTOITV3") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AUTOITV3"; Key: "DISPLAYNAME"; Value: "0000000001000000220000004100750074006F00490074002000760033002E0033002E00310034002E0032000000") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AUTOITV3"; Key: "DISPLAYVERSION"; Value: "00000000010000001200000033002E0033002E00310034002E0032000000") ".exe" (Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CONNECTION MANAGER")28:T959,".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-console-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-datetime-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-debug-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-errorhandling-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-file-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-file-l1-2-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-file-l2-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-handle-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-heap-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-interlocked-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-libraryloader-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-localization-l1-2-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-memory-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-namedpipe-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-processenvironment-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-processthreads-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-processthreads-l1-1-1.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-profile-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-rtlsupport-l1-1-0.dll" ".exe" created file "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-string-l1-1-0.dll"29:T42f,".exe" touched file "C:\Windows\SysWOW64\tzres.dll" ".exe" touched file "C:\Windows\SysWOW64\en-US\tzres.dll.mui" ".exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" ".exe" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat" ".exe" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Temporary Internet Files" ".exe" touched file "C:\Users\%OSUSER%\AppData\Roaming\Microsoft\Windows\Cookies" ".exe" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\History" ".exe" touched file "C:\Windows\SysWOW64\en-US\wshtcpip.dll.mui" ".exe" touched file "C:\Windows\SysWOW64\en-US\wship6.dll.mui" ".exe" touched file "C:\Windows\SysWOW64\wshqos.dll" ".exe" touched file "C:\Windows\SysWOW64\en-US\wshqos.dll.mui" ".exe" touched file "C:\Users\%OSUSER%\AppData\Roaming\Microsoft\Windows\Cookies\001KZBCM.txt"2a:Td82,"C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\173531128449488898218.tmp-shm" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\173531128449488898218.tmp-wal" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\173531128449488898218.tmp" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\1735935027289866995533.tmp" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\1736408521459927207457.tmp-shm" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\1736408521459927207457.tmp-wal" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\1736408521459927207457.tmp" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-console-l1-1-0.dll" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-datetime-l1-1-0.dll" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-debug-l1-1-0.dll" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-errorhandling-l1-1-0.dll" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-file-l1-1-0.dll" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-file-l1-2-0.dll" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-file-l2-1-0.dll" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-handle-l1-1-0.dll" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-heap-l1-1-0.dll" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-interlocked-l1-1-0.dll" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-libraryloader-l1-1-0.dll" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-localization-l1-2-0.dll" for deletion "C:\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe" marked "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-memory-l1-1-0.dll" for deletion2b:T9d6,".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\173531128449488898218.tmp-shm" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\173531128449488898218.tmp-wal" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\173531128449488898218.tmp" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\1735935027289866995533.tmp" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\1736408521459927207457.tmp-shm" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\1736408521459927207457.tmp-wal" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\1736408521459927207457.tmp" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-console-l1-1-0.dll" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-datetime-l1-1-0.dll" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-debug-l1-1-0.dll" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-errorhandling-l1-1-0.dll" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-file-l1-1-0.dll" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-file-l1-2-0.dll" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-file-l2-1-0.dll" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-handle-l1-1-0.dll" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-heap-l1-1-0.dll" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-interlocked-l1-1-0.dll" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-libraryloader-l1-1-0.dll" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-localization-l1-2-0.dll" with delete access ".exe" opened "C:\Users\%OSUSER%\AppData\Local\Temp\5FC5C4F5\api-ms-win-core-memory-l1-1-0.dll" with delete access2c:T416,RegEnumKeyA RegCloseKey RegOpenKeyExA CopyFileW LoadLibraryA GetFileAttributesW GetModuleFileNameA UnhandledExceptionFilter LoadLibraryExW CreateDirectoryW GetCommandLineA GetProcAddress GetModuleHandleA FindNextFileW WriteFile GetStartupInfoA DeleteFileW FindFirstFileW Sleep GetTickCount VirtualAlloc RegOpenKeyExW VirtualAllocEx LoadLibraryW VirtualProtect LoadLibraryExA GetTickCount64 CreateFileMappingW SleepConditionVariableCS MapViewOfFile VirtualProtectEx OutputDebugStringA GetModuleHandleW TerminateProcess CreateFileW GetThreadContext IsDebuggerPresent GetComputerNameA SetSecurityDescriptorDacl OpenProcessToken GetFileAttributesA OpenFileMappingA GetTempPathA GetTempPathW OutputDebugStringW GetModuleFileNameW GetVersionExA GetFileSize CreateDirectoryA DeleteFileA FindFirstFileA CreateFileMappingA FindNextFileA CreateFileA GetFileAttributesExW CreateProcessA GetFileAttributesExA accept WSAStartup connect closesocket send listen recv socket bind recvfrom sendto2d:Ta59,".exe" wrote bytes "b436bb74" to virtual address "0x74BC025C" (part of module "SSPICLI.DLL") ".exe" wrote bytes "d83abb74" to virtual address "0x74BC01FC" (part of module "SSPICLI.DLL") ".exe" wrote bytes "68130000" to virtual address "0x74C01680" (part of module "WS2_32.DLL") ".exe" wrote bytes "b840134973ffe0" to virtual address "0x74BB3AD8" (part of module "SSPICLI.DLL") ".exe" wrote bytes "d83a0200" to virtual address "0x74BB4E38" (part of module "SSPICLI.DLL") ".exe" wrote bytes "d83a0200" to virtual address "0x74BB4D78" (part of module "SSPICLI.DLL") ".exe" wrote bytes "7111d7017a3bd601ab8b02007f950200fc8c0200729602006cc805001ecdd3017d26d301" to virtual address "0x756007E4" (part of module "USER32.DLL") ".exe" wrote bytes "d83abb74" to virtual address "0x74BC0258" (part of module "SSPICLI.DLL") ".exe" wrote bytes "b436bb74" to virtual address "0x74BC0278" (part of module "SSPICLI.DLL") ".exe" wrote bytes "d83abb74" to virtual address "0x74BC0274" (part of module "SSPICLI.DLL") ".exe" wrote bytes "b830124973ffe0" to virtual address "0x74C01368" (part of module "WS2_32.DLL") ".exe" wrote bytes "c0df31771cf93077ccf830770d64327700000000c011707500000000fc3e707500000000e0137075000000009457817525e03177c6e0317700000000bc6a807500000000cf3170750000000093198175000000002c32707500000000" to virtual address "0x772C1000" (part of module "NSI.DLL") ".exe" wrote bytes "7d07357781ed3377ae863277c6e03177effd34772d16337760143577478d3277a8e231776089327700000000ad37c0748b2dc074b641c07400000000" to virtual address "0x732D1000" (part of module "WSHTCPIP.DLL") ".exe" wrote bytes "b8c0154973ffe0" to virtual address "0x74BB36B4" (part of module "SSPICLI.DLL") ".exe" wrote bytes "b4360200" to virtual address "0x74BB4D68" (part of module "SSPICLI.DLL") ".exe" wrote bytes "0efc347781ed3377ae863277c6e03177effd34772d163377c0fc3077da8f3b7760143577478d3277a8e231776089327700000000ad37c0748b2dc074b641c07400000000" to virtual address "0x73371000" (part of module "WSHIP6.DLL") ".exe" wrote bytes "b436bb74" to virtual address "0x74BC01E4" (part of module "SSPICLI.DLL") ".exe" wrote bytes "d83abb74" to virtual address "0x74BC01E0" (part of module "SSPICLI.DLL") ".exe" wrote bytes "b436bb74" to virtual address "0x74BC0200" (part of module "SSPICLI.DLL") ".exe" wrote bytes "60124973" to virtual address "0x75BAE324" (part of module "WININET.DLL")2e:T53f,Found malicious artifacts related to "62.173.139.203": ... URL: http://ymad.ug/tesptc/ck/2.exe (AV positives: 9/69 scanned on 03/11/2019 14:08:33) URL: http://mx.bestcharnge.ru/ (AV positives: 9/67 scanned on 03/11/2019 14:05:20) URL: http://tvoi-bileti.com/ (AV positives: 1/66 scanned on 03/11/2019 13:48:44) URL: http://bestdi.net/ (AV positives: 8/67 scanned on 03/11/2019 13:17:58) URL: http://finlzzm.com/ (AV positives: 6/66 scanned on 03/11/2019 13:06:21) File SHA256: d4203c8efb6f64c2da07ce2dee60f3cace59c7fef97f2762f26efa0e66b28d6c (AV positives: 39/66 scanned on 03/11/2019 01:55:25) File SHA256: 4897fb78daa73e84835cbc02d81128af09cefdff35a2078ad7905b46b806f0a9 (AV positives: 40/66 scanned on 03/11/2019 01:37:34) File SHA256: d132fad2906d8e85ba8af75e32c72a85d4cf8c5d7457290006990b9287336e94 (AV positives: 28/64 scanned on 03/10/2019 09:20:45) File SHA256: c7d3679a4d85aaf7d6235b2c50e521d9ded5692bcfda842f36851da03d21b4a5 (Date: 03/07/2019 00:15:06) File SHA256: 114ccacb7ca57c01f3540611fdf49e68416544da8d8077f5896434a4b71b01dd (AV positives: 48/65 scanned on 03/06/2019 22:54:54) File SHA256: 5caffdc76a562e098c471feaede5693f9ead92d5c6c10fb3951dd1fa6c12d21d (AV positives: 43/62 scanned on 03/06/2019 22:54:34) File SHA256: da5958738fb60d1d96d1ecd63bca68f9054ae475e6f267a0aa7ca08d783c8542 (Date: 03/04/2019 23:59:23)2f:T6af,"ucrtbase.dll" claims program is from Sun Feb 8 16:22:31 2054 "api-ms-win-crt-math-l1-1-0.dll" claims program is from Wed Sep 29 08:09:06 1982 "api-ms-win-core-rtlsupport-l1-1-0.dll" claims program is from Mon Sep 2 22:58:18 1991 "api-ms-win-core-memory-l1-1-0.dll" claims program is from Tue May 7 00:38:52 1991 "api-ms-win-crt-runtime-l1-1-0.dll" claims program is from Fri May 31 18:06:00 1974 "api-ms-win-crt-utility-l1-1-0.dll" claims program is from Sun Sep 6 09:19:26 2105 "api-ms-win-crt-private-l1-1-0.dll" claims program is from Sun Mar 31 17:57:49 1996 "api-ms-win-core-processenvironment-l1-1-0.dll" claims program is from Fri Jul 8 10:36:25 2050 "api-ms-win-core-libraryloader-l1-1-0.dll" claims program is from Sun Jul 4 17:26:46 2027 "api-ms-win-core-timezone-l1-1-0.dll" claims program is from Wed Mar 22 16:36:28 2034 "api-ms-win-core-namedpipe-l1-1-0.dll" claims program is from Sat Feb 27 02:21:20 2094 "api-ms-win-core-interlocked-l1-1-0.dll" claims program is from Thu Dec 12 20:31:39 2052 "api-ms-win-crt-convert-l1-1-0.dll" claims program is from Thu Apr 13 15:13:55 2073 "api-ms-win-core-file-l2-1-0.dll" claims program is from Thu May 22 06:29:08 2036 "api-ms-win-core-console-l1-1-0.dll" claims program is from Thu Jul 7 10:18:41 2061 "api-ms-win-crt-conio-l1-1-0.dll" claims program is from Mon Oct 13 02:38:07 2059 "api-ms-win-crt-environment-l1-1-0.dll" claims program is from Fri Apr 21 12:19:18 1972 "api-ms-win-core-processthreads-l1-1-1.dll" claims program is from Wed Oct 18 13:20:17 2084 "api-ms-win-core-file-l1-1-0.dll" claims program is from Wed Nov 26 19:37:56 1980 "api-ms-win-crt-heap-l1-1-0.dll" claims program is from Tue Mar 31 17:26:34 198730:T570,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1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1790716633485,"unified_at":"2026-09-29T21:17:13.485Z","metadata":{"hashes":{"sha256":"5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3","sha1":"a7271e9a20f7da6287c0a967c195fcd4a190d179","md5":"0e3a899fca9dae1a119a6ac894167b06","sha512":"e06c866e1a1a045c073f5c4e00c3d736168d88b1b0781e288b8e25fabc6c2933b3c5218565ac78671d580bcb9d5fc43557ac145b264ce047cbb3a6fc2a032be3","ssdeep":"3072:KExRaX6raoCoCyz6/mqv1JR+yBtGOeaeWgilq:faZ1tme++wi8","ssdeep_chunks":["3072:KExRaX6","3072:ExRaX6r","3072:xRaX6ra","3072:RaX6rao","3072:aX6raoC","3072:X6raoCo","3072:6raoCoC","3072:raoCoCy","3072:aoCoCyz","3072:oCoCyz6","3072:CoCyz6/","3072:oCyz6/m","3072:Cyz6/mq","3072:yz6/mqv","3072:z6/mqv1","3072:6/mqv1J","3072:/mqv1JR","3072:mqv1JR+","3072:qv1JR+y","3072:v1JR+yB","3072:1JR+yBt","3072:JR+yBtG","3072:R+yBtGO","3072:+yBtGOe","3072:yBtGOea","3072:BtGOeae","3072:tGOeaeW","3072:GOeaeWg","3072:OeaeWgi","3072:eaeWgil","3072:aeWgilq","6144:KExRaX6","6144:ExRaX6r","6144:xRaX6ra","6144:RaX6rao","6144:aX6raoC","6144:X6raoCo","6144:6raoCoC","6144:raoCoCy","6144:aoCoCyz","6144:oCoCyz6","6144:CoCyz6/","6144:oCyz6/m","6144:Cyz6/mq","6144:yz6/mqv","6144:z6/mqv1","6144:6/mqv1J","6144:/mqv1JR","6144:mqv1JR+","6144:qv1JR+y","6144:v1JR+yB","6144:1JR+yBt","6144:JR+yBtG","6144:R+yBtGO","6144:+yBtGOe","6144:yBtGOea","6144:BtGOeae","6144:tGOeaeW","6144:GOeaeWg","6144:OeaeWgi","6144:eaeWgil","6144:aeWgilq","3072:faZ1tme","3072:aZ1tme+","3072:Z1tme++","3072:1tme++w","3072:tme++wi","3072:me++wi8"],"imphash":"6d1f2b41411eacafcf447fc002d8cb00"},"file_info":{"file_name":"file","file_type":["peexe","executable"],"file_type_id":"exe","file_size":114688,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1552314091000,"last_seen":1659368822000,"last_multi_scan":1659368822000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":["azorult","commodity","criminal","floxif","informationstealer","adposhel","adware","ausiv","backdoor","bedep","convertad","crypt","downloader","ghokswa","netfilter","softcnapp","wanacrypt0r","wannacry","wannacrypt","wcry","webcake","wizrem","zegost"]},"stats":{"av":{"malicious_count":25,"suspicious_count":0,"total_engines":28},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":14},"sandbox_signatures":{"informative_count":30,"suspicious_count":23,"malicious_count":8,"total":61},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Lmir.laiL","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"malicious","threat_name":"Trojan/Win32.Delf","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"malicious","threat_name":"Trojan[Ransom]/Win32.Blocker","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"malicious","threat_name":"TR/Crypt.XPACK.Gen","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"malicious","threat_name":"Trojan.PWS.Delf.INS","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bytehero":{"name":"ByteHero","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"malicious","threat_name":"win/malicious_confidence_100% (W)","status":"malicious","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cyren":{"name":"Cyren","success":true,"verdict":"malicious","threat_name":"W32/Injector.WKRP-0828","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Trojan-PSW.Delf (A)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"Win32/PSW.Delf.OSF trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ikarus":{"name":"IKARUS","success":true,"verdict":"malicious","threat_name":"Trojan-Spy.Azorult","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"malicious","threat_name":"Password-Stealer ( 0052f96e1 )","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"malicious","threat_name":"Trojan-PSW.Win32.Coins.nav","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"malicious","threat_name":"Trojan-FSEP!0E3A899FCA9D","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Stealer.fitdqk","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"quickheal":{"name":"Quick Heal","success":true,"verdict":"malicious","threat_name":"Trojan.GandcrabIH.S17569987","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"malicious","threat_name":"Confidence_99","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"scrutiny":{"name":"Scrutiny","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"malicious","threat_name":"Troj/PWS-CJR","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"symantec":{"name":"Symantec","success":true,"verdict":"malicious","threat_name":"Trojan.Gen.2","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"malicious","threat_name":"Trojan-PWS/W32.Azorult.114688","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"malicious","threat_name":"TrojanS.D97EF920","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"malicious","threat_name":"TrojanS.D97EF920","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Stealer.BKXJ","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"malicious","threat_name":"TrojanSpy.Stealer","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"webrootsmd":{"name":"Webroot SMD","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xvirusantimalware":{"name":"Xvirus Anti-Malware","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Trojan.Generic","sources":[{"report_type":"quickscan","report_id":""}]}]},"mitre_attacks":[{"tactic":"Execution","technique":"Service Execution","attack_id":"T1035","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1035","identifiers":[{"type":"suspicious","value":"Opened the service control manager"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Persistence","technique":"Kernel Modules and Extensions","attack_id":"T1215","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1215","identifiers":[{"type":"suspicious","value":"Contains ability to enumerate processes/modules/threads"},{"type":"informative","value":"Opens the Kernel Security Device Driver (KsecDD) of Windows"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Persistence","technique":"Hooking","attack_id":"T1179","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","identifiers":[{"type":"suspicious","value":"Installs hooks/patches the running process"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Privilege Escalation","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","identifiers":[{"type":"suspicious","value":"Writes data to a remote process"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Defense Evasion","technique":"File Deletion","attack_id":"T1107","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1107","identifiers":[{"type":"suspicious","value":"Marks file for deletion"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Defense Evasion","technique":"Modify Registry","attack_id":"T1112","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1112","identifiers":[{"type":"suspicious","value":"Modifies proxy settings"},{"type":"informative","value":"Creates or modifies windows services"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Discovery","technique":"System Time Discovery","attack_id":"T1124","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1124","identifiers":[{"type":"informative","value":"Contains ability to query machine time"},{"type":"informative","value":"Contains ability to query the machine timezone"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Discovery","technique":"System Information Discovery","attack_id":"T1082","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1082","identifiers":[{"type":"suspicious","value":"Contains ability to query CPU information"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","identifiers":[{"type":"informative","value":"Reads the registry for installed applications"},{"type":"malicious","value":"Scans for artifacts that may help identify the target"},{"type":"suspicious","value":"Queries sensitive IE security settings"},{"type":"suspicious","value":"Reads the active computer name"},{"type":"suspicious","value":"Reads the cryptographic machine GUID"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Discovery","technique":"Process Discovery","attack_id":"T1057","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1057","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1083","identifiers":[{"type":"informative","value":"Contains ability to query volume size"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Discovery","technique":"Peripheral Device Discovery","attack_id":"T1120","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","identifiers":[{"type":"malicious","value":"Found an IP/URL artifact that was identified as malicious by a significant amount of reputation engines"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Lateral Movement","technique":"Remote Desktop Protocol","attack_id":"T1076","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1076","identifiers":[{"type":"suspicious","value":"Reads terminal service related keys (often RDP related)"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"tactic":"Exfiltration","technique":"Data Compressed","attack_id":"T1002","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1002","identifiers":[{"type":"informative","value":"Matched Compiler/Packer signature"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]}],"sandbox_signatures":[{"level":"informative","category":"Anti-Reverse Engineering","name":"Contains ability to register a top-level exception handler (often used as anti-debugging trick)","description":"SetUnhandledExceptionFilter@KERNEL32.dll at 23576-812-1003D72C\n SetUnhandledExceptionFilter@KERNEL32.dll at 28430-305-1001B760\n SetUnhandledExceptionFilter@KERNEL32.dll at 34055-523-10011FA4","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-4","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Anti-Reverse Engineering","name":"Found strings in conjunction with a procedure lookup that resolve to a known API export symbol","description":"Found reference to API GlobalMemoryStatusEx@KERNEL32.DLL at 00009882-00002296-10737-188-00416584\n Found reference to API IsWow64Process@KERNEL32.DLL at 00009882-00002296-10737-162-00406654\n Found reference to API WTSGetActiveConsoleSessionId@KERNEL32.DLL at 00009882-00002296-10737-125-00407DD4\n Found reference to API wcscmp@NTDLL.DLL at 00009882-00002296-10737-588-00417B29\n Found reference to API ReadFile@KERNEL32.DLL at 00009882-00002296-10737-304-0040561C\n Found reference to API EnumDisplayDevicesW@USER32.DLL at 00009882-00002296-10737-187-00416644","origin":"Hybrid Analysis Technology","relevance":10,"id":"stream-41","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"level":"informative","category":"Anti-Reverse Engineering","name":"PE file contains zero-size sections","description":"Raw size of \"BSS\" is zero","origin":"Static Parser","relevance":10,"id":"static-5","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to query machine time","description":"GetLocalTime@KERNEL32.DLL at 00009882-00002296-10737-191-00417198\n GetLocalTime@KERNEL32.DLL at 00009882-00002296-10737-304-0040561C\n GetSystemTime@KERNEL32.dll at 18809-455-10007B7E","origin":"Hybrid Analysis Technology","mitre_attack_id":"T1124","relevance":1,"id":"stream-2","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to query the machine timezone","description":"GetTimeZoneInformation@KERNEL32.DLL at 00009882-00002296-10737-190-00417098\n GetTimeZoneInformation@KERNEL32.DLL at 00009882-00002296-10737-304-0040561C","origin":"Hybrid Analysis Technology","mitre_attack_id":"T1124","relevance":1,"id":"stream-48","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to query volume size","description":"GetDiskFreeSpaceA@KERNEL32.dll at 23576-407-100356D8","origin":"Hybrid Analysis Technology","mitre_attack_id":"T1083","relevance":3,"id":"stream-37","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Environment Awareness","name":"Reads the registry for installed applications","description":"$27","origin":"Registry Access","mitre_attack_id":"T1012","relevance":10,"id":"registry-55","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"General","name":"Contacts domains","description":"\"ymad.ug\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"62.173.139.203:80\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"General","name":"Contains PDB pathways","description":"\"z:\\build\\build\\src\\obj-firefox\\security\\nss\\lib\\freebl\\freebl_freebl3\\freebl3.pdb\"\n \"z:\\build\\build\\src\\obj-firefox\\security\\nss\\lib\\softoken\\softoken_softokn3\\softokn3.pdb\"","origin":"File/Memory","relevance":1,"id":"string-7","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"General","name":"Contains SQL queries","description":"\"SELECT ALL * FROM %s LIMIT 0;\"\n \"INSERT INTO %s (id%s) VALUES($ID%s);\"\n \"SELECT ALL %s FROM %s WHERE id=$ID;\"\n \"SELECT ALL * FROM metaData WHERE id=$ID;\"\n \"CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);\"\n \"INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);\"\n \"INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);\"\n \"UPDATE %s SET %s WHERE id=$ID;\"\n \"DELETE FROM %s WHERE (id=$ID);\"\n \"SELECT ALL id FROM %s;\"\n \"SELECT ALL id FROM %s WHERE %s;\"\n \"DELETE FROM %s;\"","origin":"File/Memory","relevance":2,"id":"string-16","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"level":"informative","category":"General","name":"Creates a writable file in a temporary directory","description":"$28","origin":"API Call","relevance":1,"id":"api-4","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\A18F76D5A-343A2EC6-B6BB9279-9B5A4290-310E858A\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\ZonesCacheCounterMutex\"\n \"A18F76D5A-343A2EC6-B6BB9279-9B5A4290-310E858A\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"mozglue.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"freebl3.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"nss3.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"nssdbm3.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"softokn3.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"General","name":"Overview of unique CLSIDs touched in registry","description":"\".exe\" touched \"Microsoft Url History Service\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{3C374A40-BAE4-11CF-BF7D-00AA006946EE}\")\n \".exe\" touched \"Computer\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\SHELLFOLDER\")\n \".exe\" touched \"Memory Mapped Cache Mgr\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\")\n \".exe\" touched \"Security Manager\" (Path: \"HKCR\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\")\n \".exe\" touched \"NetworkListManager\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{DCB00C01-570F-4A9B-8D69-199FDBA5723B}\\TREATAS\")\n \".exe\" touched \"Network List Manager\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{A47979D2-C419-11D9-A5B4-001185AD2B89}\\TREATAS\")\n \".exe\" touched \"PSFactoryBuffer\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\\TREATAS\")","origin":"Registry Access","relevance":3,"id":"registry-72","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"cmd.exe\" (UID: 00011413-00003852) was launched with modified environment variables: \"Path\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"General","name":"Runs shell commands","description":"\"/c %WINDIR%\\system32\\timeout.exe 3 & del \"5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe\"\" on 2019-3-11.15:10:27.095","origin":"Monitored Target","relevance":5,"id":"target-3","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"cmd.exe\" with commandline \"/c %WINDIR%\\system32\\timeout.exe 3 & del \"5c258f35e2b9b699746463 ...\" (UID: 00011413-00003852), Spawned process \"timeout.exe\" with commandline \"%WINDIR%\\system32\\timeout.exe 3\" (UID: 00011427-00002284)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"General","name":"Spawns new processes that are not known child processes","description":"Spawned process \"cmd.exe\" with commandline \"/c %WINDIR%\\system32\\timeout.exe 3 & del \"5c258f35e2b9b699746463 ...\" (UID: 00011413-00003852), Spawned process \"timeout.exe\" with commandline \"%WINDIR%\\system32\\timeout.exe 3\" (UID: 00011427-00002284)","origin":"Monitored Target","relevance":3,"id":"target-103","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Installation/Persistance","name":"Connects to LPC ports","description":"\".exe\" connecting to \"\\ThemeApiPort\"","origin":"API Call","relevance":1,"id":"api-16","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Installation/Persistance","name":"Contains ability to lookup the windows account name","description":"GetUserNameW@ADVAPI32.DLL at 00009882-00002296-10737-159-004065CC","origin":"Hybrid Analysis Technology","relevance":5,"id":"stream-28","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"\"mozglue.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"freebl3.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"nss3.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"nssdbm3.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"softokn3.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"173531128449488898218.tmp\" has type \"SQLite 3.x database user version 8\"\n \"1735935027289866995533.tmp\" has type \"SQLite 3.x database user version 4\"","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Installation/Persistance","name":"Touches files in the Windows directory","description":"$29","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"https://dotbit.me/a/\"\n Pattern match: \"http://ip-api.com/json\"\n Heuristic match: \"ymad.ug\"\n Pattern match: \"http://www.mozilla.com/en-US/blocklist/\"\n Heuristic match: \"vwcsource.ax\"\n Heuristic match: \"ycwebcamerasource.ax\"","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"System Security","name":"Creates or modifies windows services","description":"\".exe\" (Access type: \"CREATE\"; Path: \"HKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\TCPIP\\PARAMETERS\")","origin":"Registry Access","mitre_attack_id":"T1112","relevance":10,"id":"registry-67","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"System Security","name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\".exe\" opened \"\\Device\\KsecDD\"","origin":"API Call","mitre_attack_id":"T1215","relevance":10,"id":"api-37","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Unusual Characteristics","name":"Found Delphi 4 - Delphi 2006 artifact","description":"\"5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.bin\" has a PE timestamp using the buggy magic timestamp 0x2A425E19.","origin":"Static Parser","relevance":10,"id":"static-19","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Unusual Characteristics","name":"Matched Compiler/Packer signature","description":"\"5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.bin\" was detected as \"BobSoft Mini Delphi -> BoB / BobSoft\"\n \"mozglue.dll\" was detected as \"Borland Delphi 3.0 (???)\"\n \"freebl3.dll\" was detected as \"Borland Delphi 3.0 (???)\"\n \"nss3.dll\" was detected as \"Borland Delphi 3.0 (???)\"\n \"nssdbm3.dll\" was detected as \"Borland Delphi 3.0 (???)\"\n \"softokn3.dll\" was detected as \"Borland Delphi 3.0 (???)\"","origin":"Static Parser","mitre_attack_id":"T1002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Anti-Reverse Engineering","name":"Looks up many procedures within the same disassembly stream (often used to hide usage)","description":"Found 10 calls to GetProcAddress@KERNEL32.DLL at 00009882-00002296-10737-588-00417B29\n Found 58 calls to GetProcAddress@KERNEL32.DLL at 00009882-00002296-10737-304-0040561C\n Found 13 calls to GetProcAddress@KERNEL32.DLL at 00009882-00002296-10737-297-00408328","origin":"Hybrid Analysis Technology","relevance":10,"id":"stream-40","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Environment Awareness","name":"Contains ability to query CPU information","description":"cpuid at 18809-409-1000CE5F\n cpuid at 18809-565-1000100C\n cpuid at 18809-566-10001077\n cpuid at 18809-567-10001131\n cpuid at 18809-568-100011B6\n cpuid at 18809-569-10001221\n cpuid at 18809-570-10001289\n cpuid at 18809-571-100012F4\n cpuid at 18809-572-1000135F\n cpuid at 18809-573-100013CF\n cpuid at 23576-36-1003DE4E\n cpuid at 28430-36-1001C2BE\n cpuid at 34055-36-100126CE\n cpuid at 37047-55-100EEE16","origin":"Hybrid Analysis Technology","mitre_attack_id":"T1082","relevance":10,"id":"stream-13","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the active computer name","description":"\".exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":5,"id":"registry-35","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the cryptographic machine GUID","description":"\".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":10,"id":"registry-1","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"External Systems","name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"1/67 reputation engines marked \"http://ip-api.com\" as malicious (1% detection rate)\n 2/67 reputation engines marked \"http://ip-api.com/json\" as malicious (2% detection rate)\n 1/66 reputation engines marked \"https://dotbit.me/a/\" as malicious (1% detection rate)\n 8/67 reputation engines marked \"http://ymad.ug\" as malicious (11% detection rate)","origin":"External System","relevance":10,"id":"avtest-6","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"General","name":"Opened the service control manager","description":"\".exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)","origin":"API Call","mitre_attack_id":"T1035","relevance":10,"id":"api-77","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"level":"suspicious","category":"General","name":"POSTs files to a webserver","description":"\"POST /1/index.php HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)\nHost: ymad.ug\nContent-Length: 109\nCache-Control: no-cache\" with no payload\n \"POST /1/index.php HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)\nHost: ymad.ug\nContent-Length: 985479\nCache-Control: no-cache\" with no payload","origin":"Network Traffic","relevance":5,"id":"network-4","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Drops executable files","description":"\"mozglue.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"freebl3.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"nss3.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"nssdbm3.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"softokn3.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"","origin":"Binary File","relevance":10,"id":"binary-1","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Writes data to a remote process","description":"\"cmd.exe\" wrote 32 bytes to a remote process \"%WINDIR%\\SysWOW64\\timeout.exe\" (Handle: 128)\n \"cmd.exe\" wrote 52 bytes to a remote process \"%WINDIR%\\SysWOW64\\timeout.exe\" (Handle: 128)\n \"cmd.exe\" wrote 4 bytes to a remote process \"%WINDIR%\\SysWOW64\\timeout.exe\" (Handle: 128)\n \"cmd.exe\" wrote 8 bytes to a remote process \"%WINDIR%\\SysWOW64\\timeout.exe\" (Handle: 128)","origin":"API Call","mitre_attack_id":"T1055","relevance":6,"id":"api-0","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 62.173.139.203 on port 80 is sent without HTTP header","origin":"Network Traffic","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Network Related","name":"Uses a User Agent typical for browsers, although no browser was ever launched","description":"Found user agent(s): Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)","origin":"Network Traffic","relevance":10,"id":"network-22","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Remote Access Related","name":"Reads terminal service related keys (often RDP related)","description":"\".exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\TERMINAL SERVER\"; Key: \"TSUSERENABLED\")","origin":"Registry Access","mitre_attack_id":"T1076","relevance":10,"id":"registry-61","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Spyware/Information Retrieval","name":"Contains ability to enumerate processes/modules/threads","description":"CreateToolhelp32Snapshot@KERNEL32.DLL at 00009882-00002296-10737-304-0040561C","origin":"Hybrid Analysis Technology","mitre_attack_id":"T1215","relevance":5,"id":"stream-20","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"level":"suspicious","category":"System Destruction","name":"Marks file for deletion","description":"$2a","origin":"API Call","mitre_attack_id":"T1107","relevance":10,"id":"api-26","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"System Destruction","name":"Opens file with deletion access rights","description":"$2b","origin":"API Call","relevance":7,"id":"api-25","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"System Security","name":"Modifies proxy settings","description":"\".exe\" (Access type: \"SETVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYENABLE\"; Value: \"00000000\")\n \".exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYSERVER\")\n \".exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYOVERRIDE\")\n \".exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")\n \".exe\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")","origin":"Registry Access","mitre_attack_id":"T1112","relevance":10,"id":"registry-27","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"System Security","name":"Queries sensitive IE security settings","description":"\".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":8,"id":"registry-36","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"CRC value set in PE header does not match actual value","description":"\"mozglue.dll\" claimed CRC 184974 while the actual is CRC 168590\n \"freebl3.dll\" claimed CRC 395119 while the actual is CRC 184974\n \"nss3.dll\" claimed CRC 1279617 while the actual is CRC 395119\n \"nssdbm3.dll\" claimed CRC 121014 while the actual is CRC 1279617\n \"softokn3.dll\" claimed CRC 154155 while the actual is CRC 121014","origin":"Static Parser","relevance":10,"id":"static-0","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Imports suspicious APIs","description":"$2c","origin":"Static Parser","relevance":1,"id":"static-1","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Installs hooks/patches the running process","description":"$2d","origin":"Hook Detection","mitre_attack_id":"T1179","relevance":10,"id":"hooks-8","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"malicious","category":"External Systems","name":"Found an IP/URL artifact that was identified as malicious by a significant amount of reputation engines","description":"8/67 reputation engines marked \"http://ymad.ug\" as malicious (11% detection rate)","origin":"External System","mitre_attack_id":"T1120","relevance":10,"id":"avtest-7","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by a large number of Antivirus engines","description":"56/70 Antivirus vendors marked sample as malicious (80% detection rate)","origin":"External System","relevance":10,"id":"avtest-3","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by at least one Antivirus engine","description":"56/70 Antivirus vendors marked sample as malicious (80% detection rate)","origin":"External System","relevance":8,"id":"avtest-0","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"malicious","category":"Network Related","name":"Found a reference to an external IP address lookup service","description":"\"http://ip-api.com/json\" (Indicator: \"ip-api.com\"; File: \"5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.bin\")","origin":"File/Memory","relevance":6,"id":"string-56","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"malicious","category":"Network Related","name":"Malicious artifacts seen in the context of a contacted host","description":"$2e","origin":"Network Traffic","relevance":10,"id":"network-21","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"malicious","category":"Spyware/Information Retrieval","name":"Scans for artifacts that may help identify the target","description":"\".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS MESSAGING SUBSYSTEM\\PROFILES\\OUTLOOK\\9375CFF0413111D3B88A00104B2A6676\")\n \".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS MESSAGING SUBSYSTEM\\PROFILES\\OUTLOOK\\9375CFF0413111D3B88A00104B2A6676\\00000001\")\n \".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS MESSAGING SUBSYSTEM\\PROFILES\\OUTLOOK\\9375CFF0413111D3B88A00104B2A6676\\00000002\")\n \".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS MESSAGING SUBSYSTEM\\PROFILES\\OUTLOOK\\9375CFF0413111D3B88A00104B2A6676\\00000003\")\n \".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\15.0\\OUTLOOK\\PROFILES\\OUTLOOK\")\n \".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\16.0\\OUTLOOK\\PROFILES\\OUTLOOK\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":3,"id":"registry-37","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Checks for a resource fork (ADS) file","description":"\".exe\" checked file \"C:\"","origin":"API Call","relevance":5,"id":"api-35","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Environment Awareness","name":"Makes a code branch decision directly after an API that is environment aware","description":"Found API call GetTimeZoneInformation@api-ms-win-core-timezone-l1-1-0.dll directly followed by \"cmp eax, edi\" and \"je 100D52A7h\" at 40151-716-100D5350\n Found API call GetTimeZoneInformation@api-ms-win-core-timezone-l1-1-0.dll directly followed by \"cmp eax, edi\" and \"je 100D507Fh\" at 40151-719-100D5330","origin":"Hybrid Analysis Technology","relevance":10,"id":"stream-39","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"informative","category":"Environment Awareness","name":"Possibly tries to detect the presence of a debugger","description":"GetProcessHeap@api-ms-win-core-heap-l1-1-0.dll at 40151-4796-1002F830","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-31","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Cryptographic Related","name":"Found a cryptographic related string","description":"\"DES\" (Indicator: \"des\"; File: \"ucrtbase.dll.220311809\")","origin":"File/Memory","relevance":10,"id":"string-57","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"General","name":"Reads configuration files","description":"\".exe\" read file \"%USERPROFILE%\\Desktop\\desktop.ini\"","origin":"API Call","relevance":4,"id":"api-6","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Timestamp in PE header is very old or in the future","description":"$2f","origin":"Static Parser","relevance":10,"id":"static-3","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"level":"malicious","category":"Installation/Persistance","name":"Creates a system file in windows directory","description":"\".exe\" created file \"%LOCALAPPDATA%\\Microsoft\\Windows\\INetCache\\\"","origin":"API Call","relevance":7,"id":"api-5","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]}],"incidents":[{"name":"Remote Access","details_count":1,"details":[{"detail":"Reads terminal service related keys (often RDP related)"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"Spyware","details_count":1,"details":[{"detail":"POSTs files to a webserver"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"Stealer/Phishing","details_count":1,"details":[{"detail":"Scans for artifacts that may help identify the target"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"Fingerprint","details_count":7,"details":[{"detail":"Queries kernel debugger information"},{"detail":"Queries process information"},{"detail":"Reads the cryptographic machine GUID"},{"detail":"Queries the internet cache settings (often used to hide footprints in index.dat or internet cache)"},{"detail":"Reads the active computer name"},{"detail":"Queries sensitive IE security settings"},{"detail":"Scans for artifacts that may help identify the target"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"Evasive","details_count":1,"details":[{"detail":"Marks file for deletion"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 1 domain and 1 host"}],"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"Spreading","details_count":1,"details":[{"detail":"Opens the MountPointManager (often used to detect additional infection locations)"}],"sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":8,"imported_dlls_count":108,"dropped_files_count":0,"extracted_files_count":51,"files_written_count":1740,"files_deleted_count":0,"registry_keys_created_count":3,"registry_keys_modified_count":0,"registry_keys_deleted_count":8,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":11,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":1,"dns_resolutions_count":1,"contacted_urls_count":1,"http_requests_count":1},"behavior_tags":["azorult","commodity","criminal","floxif","informationstealer","adposhel","adware","ausiv","backdoor","bedep","convertad","crypt","downloader","ghokswa","netfilter","softcnapp","wanacrypt0r","wannacry","wannacrypt","wcry","webcake","wizrem","zegost"],"sample_flags":["Network Traffic","Extracted Files","Sample not shared"],"sandbox_reports":[{"id":"5c866d9c02883839932bbbe4","environment_id":120,"environment_description":"Windows 7 64 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"malware_family":"Trojan.PWS.Delf","contacted_countries":["RUS"],"submit_name":"5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe","analysis_start_time":"2019-03-11T14:07:17+00:00","indicators_count":{"informative":28,"suspicious":28,"malicious":8},"tags":["Network Traffic","Extracted Files","Sample not shared"],"is_in_unified_schema":true},{"id":"5c866d99028838cb022bbbc4","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"malware_family":"Trojan.PWS.Delf","contacted_countries":["RUS"],"submit_name":"5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe","analysis_start_time":"2019-03-11T14:08:42+00:00","indicators_count":{"informative":28,"suspicious":31,"malicious":9},"tags":["Network Traffic","Extracted Files","Sample not shared"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"62.173.139.203","port":80,"protocol":"TCP","country":"Russian Federation","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]}],"dns_resolutions":[{"domain":"ymad.ug","address":"62.173.139.203","ttl":59,"country":"Russian Federation","registrar_organization":"Googel","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]}],"http_requests":[{"host":"ymad.ug","host_ip":"62.173.139.203:80","url":"/1/index.php","method":"POST","header":"POST /1/index.php HTTP/1.1\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)\nHost: ymad.ug\nContent-Length: 109\nCache-Control: no-cache","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}],"processes":[{"pid":2296,"ppid":0,"name":"5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe","command_line":"","sha256":"5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3","normalized_path":"C:\\5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe","uid":"00009882-00002296","icon":"$30"},{"pid":3852,"ppid":2296,"name":"cmd.exe","command_line":"/c %WINDIR%\\system32\\timeout.exe 3 & del \"5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3.exe\"","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\SysWOW64\\cmd.exe","parent_uid":"00009882-00002296","uid":"00011413-00003852"},{"pid":2284,"ppid":3852,"name":"timeout.exe","command_line":"%WINDIR%\\system32\\timeout.exe 3","sha256":"c4efafc49d46dba7e89cd94892799c739a3103f724fec9be494bf1267fdb059e","normalized_path":"%WINDIR%\\SysWOW64\\timeout.exe","parent_uid":"00011413-00003852","uid":"00011427-00002284"}],"all_imported_dlls":["urlmon.dll","cryptsp.dll","api-ms-win-crt-utility-l1-1-0.dll","apphelp.dll","sfc_os.dll","rpcrt4.dll","crtdll.dll","ws2_32.dll","sechost.dll","imm32.dll","GdiPlus.dll","WSHTCPIP.DLL","FWPUCLNT.DLL","nss3.dll","dbghelp.dll","api-ms-win-crt-runtime-l1-1-0.dll","kernel32.dll","oleaut32.dll","shlwapi.dll","api-ms-win-downlevel-user32-l1-1-0.dll","msvcr100.dll","wship6.dll","clbcatq.dll","nlaapi.dll","sspicli.dll","RpcRtRemote.dll","npmproxy.dll","vcruntime140.dll","api-ms-win-core-file-l2-1-0.dll","api-ms-win-core-file-l1-2-0.dll","api-ms-win-crt-locale-l1-1-0.dll","wsock32.dll","api-ms-win-downlevel-version-l1-1-0.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","api-ms-win-core-timezone-l1-1-0.dll","api-ms-win-crt-math-l1-1-0.dll","api-ms-win-crt-multibyte-l1-1-0.dll","api-ms-win-crt-environment-l1-1-0.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","ntdll.dll","wow64.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","normaliz.dll","winhttp.dll","netprofm.dll","rsaenh.dll","api-ms-win-crt-stdio-l1-1-0.dll","wow64cpu.dll","KernelBase.dll","lpk.dll","usp10.dll","msasn1.dll","tzres.dll","version.dll","dnsapi.dll","advapi32.dll","IPHLPAPI.DLL","comctl32.dll","msvcp140.dll","api-ms-win-core-processthreads-l1-1-1.dll","api-ms-win-crt-time-l1-1-0.dll","api-ms-win-crt-filesystem-l1-1-0.dll","vaultcli.dll","wow64win.dll","crypt32.dll","wininet.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","webio.dll","dhcpcsvc6.dll","api-ms-win-core-localization-l1-2-0.dll","shell32.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","secur32.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","winnsi.dll","ucrtbase.dll","api-ms-win-core-synch-l1-2-0.dll","api-ms-win-crt-string-l1-1-0.dll","user32.dll","msvcrt.dll","ole32.dll","profapi.dll","mswsock.dll","mlang.dll","propsys.dll","Wldap32.dll","mozglue.dll","api-ms-win-crt-heap-l1-1-0.dll","api-ms-win-crt-convert-l1-1-0.dll","ntmarta.dll","sfc.dll","cryptbase.dll","ieframe.dll","cfgmgr32.dll","devobj.dll","winbrand.dll","msctf.dll","iertutil.dll","rasadhlp.dll","userenv.dll","nsi.dll","dhcpcsvc.dll","winmm.dll","uxtheme.dll","setupapi.dll","gdi32.dll","wshqos.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"freebl3.dll","sha256":"393ae7f06fe6cd19ea6d57a93dd0acd839ee39ba386cf1ca774c4c59a3bfebd8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"mozglue.dll","sha256":"830533bb569594ec2f7c07896b90225006b90a9af108f49d6fb6bebd02428b2d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"nss3.dll","sha256":"f0e6210d4a0d48c7908d8d1c270449c91eb4523e312a61256833bfeaf699abfb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"nssdbm3.dll","sha256":"541a293c450e609810279f121a5e9dfa4e924d52e8b0c6c543512b5026efe7ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"softokn3.dll","sha256":"9a7f11c212d61856dfc494de111911b7a6d9d5e9795b0b70bbbc998896f068ae","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"173531128449488898218.tmp","sha256":"1fb9bf85db30e532271b8afecc7bb83ab5da62b869ef70cfad321564d1ef9fda","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"name":"1735935027289866995533.tmp","sha256":"dcbf13bb10e2680331097a289b14a86edea1a3a3155cd354e07c93c4cdb65c6f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"name":"api-ms-win-core-console-l1-1-0.dll","sha256":"94a5df1227818edbfd0d5091c6a48f86b4117c38550343f780c604eee1cd6231","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-datetime-l1-1-0.dll","sha256":"90fae0e7c3644a6754833c42b0ac39b6f23859f9a7cf4b6c8624820f59b9dad3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-debug-l1-1-0.dll","sha256":"c310cc91464c9431ab0902a561af947fa5c973925ff70482d3de017ed3f73b7d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-errorhandling-l1-1-0.dll","sha256":"a97dcca76cdb12e985dff71040815f28508c655ab2b073512e386dd63f4da325","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-file-l1-1-0.dll","sha256":"7ea06b7050f9ea2bcc12af34374bdf1173646d4e5ebf66ad690b37f4df5f3d4e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-file-l1-2-0.dll","sha256":"c8c499b012d0d63b7afc8b4ca42d6d996b2fcf2e8b5f94cacfbec9e6f33e8a03","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-file-l2-1-0.dll","sha256":"c85dc081b1964b77d289aac43cc64746e7b141d036f248a731601eb98f827719","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-handle-l1-1-0.dll","sha256":"945cc64ee04b1964c1f9fcdc3124dd83973d332f5cfb696cdf128ca5c4cbd0e5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-heap-l1-1-0.dll","sha256":"44f6df4280c8ecc9c6e609b1a4bfee041332d337d84679cfe0d6678ce8f2998a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-interlocked-l1-1-0.dll","sha256":"deccd75fc3fc2bb31338b6fe26deffbd7914c6cd6a907e76fd4931b7d141718c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-libraryloader-l1-1-0.dll","sha256":"bb25ccf8694d1fcfce85a7159dcf6985fdb54728d29b021cb3d14242f65909ce","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-localization-l1-2-0.dll","sha256":"03ad57c24ff2cf895b5f533f0ecbd10266fd8634c6b9053cc9cb33b814ad5d97","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-memory-l1-1-0.dll","sha256":"bb33a9e906a5863043753c44f6f8165afe4d5edb7e55efa4c7e6e1ed90778eca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-namedpipe-l1-1-0.dll","sha256":"c4f60f911068ab6d7f578d449ba7b5b9969f08fc683fd0ce8e2705bbf061f507","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-processenvironment-l1-1-0.dll","sha256":"96898930ffb338da45497be019ae1adcd63c5851141169d3023e53ce4c7a483e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-processthreads-l1-1-0.dll","sha256":"9dab884071b1f7d7a167f9bec94ba2bee875e3365603fa29b31de286c6a97a1d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-processthreads-l1-1-1.dll","sha256":"91eeb842973495deb98cef0377240d2f9c3d370ac4cf513fd215857e9f265a6a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-profile-l1-1-0.dll","sha256":"8eb5270fa99069709c846db38be743a1a80a42aa1a88776131f79e1d07cc411c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-rtlsupport-l1-1-0.dll","sha256":"2257fea1e71f7058439b3727ed68ef048bd91dcacd64762eb5c64a9d49df0b57","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-string-l1-1-0.dll","sha256":"7670fdede524a485c13b11a7c878015e9b0d441b7d8eb15ca675ad6b9c9a7311","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-synch-l1-1-0.dll","sha256":"5dd4ccd63e6ed07ca3987ab5634ca4207d69c47c2544dfefc41935617652820f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-synch-l1-2-0.dll","sha256":"30d99ce1d732f6c9cf82671e1d9088aa94e720382066b79175e2d16778a3dad1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-sysinfo-l1-1-0.dll","sha256":"4b704b36e1672ae02e697efd1bf46f11b42d776550ba34a90cd189f6c5c61f92","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-timezone-l1-1-0.dll","sha256":"24c9aa0b70e557a49dac159c825a013a71a190df5e7a837bfa047a06bba59eca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-core-util-l1-1-0.dll","sha256":"f7d450a0f59151bcefb98d20fcae35f76029df57138002db5651d1b6a33adc86","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-conio-l1-1-0.dll","sha256":"9ca21763c528584bdb4efebe914faaf792c9d7360677c87e93bd7ba7bb4367f2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-convert-l1-1-0.dll","sha256":"3cc1377d495260c380e8d225e5ee889cbb2ed22e79862d4278cfa898e58e44d1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-environment-l1-1-0.dll","sha256":"c0d75d1887c32a1b1006b3cffc29df84a0d73c435cdcb404b6964be176a61382","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-filesystem-l1-1-0.dll","sha256":"7633774effe7c0add6752ffe90104d633fc8262c87871d096c2fc07c20018ed2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-heap-l1-1-0.dll","sha256":"f5cf623ba14b017af4aec6c15eee446c647ab6d2a5dee9d6975adc69994a113d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-locale-l1-1-0.dll","sha256":"565a2eec5449eeeed68b430f2e9b92507f979174f9c9a71d0c36d58b96051c33","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-math-l1-1-0.dll","sha256":"bece7bab83a5d0ec5c35f0841cbbf413e01ac878550fbdb34816ed55185dcfed","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-multibyte-l1-1-0.dll","sha256":"66abf3a1147751c95689f5bc6a259e55281ec3d06d3332dd0ba464effa716735","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-private-l1-1-0.dll","sha256":"65ded8d2ce159b2f5569f55b2caf0e2c90f3694bd88c89de790a15a49d8386b9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-process-l1-1-0.dll","sha256":"c03124ba691b187917ba79078c66e12cbf5387a3741203070ba23980aa471e8b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-runtime-l1-1-0.dll","sha256":"c9bbc07a033bab6a828ecc30648b501121586f6f53346b1cd0649d7b648ea60b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-stdio-l1-1-0.dll","sha256":"b1e702b840aebe2e9244cd41512d158a43e6e9516cd2015a84eb962fa3ff0df7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-string-l1-1-0.dll","sha256":"73cc56f20268bfb329ccd891822e2e70dd70fe21fc7101deb3fa30c34a08450c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-time-l1-1-0.dll","sha256":"69885fd581641b4a680846f93c2dd21e5dd8e3ba37409783bc5b3160a919cb5d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"api-ms-win-crt-utility-l1-1-0.dll","sha256":"a1d1d6b0cb0a8421d7c0d1297c4c389c95514493cd0a386b49dc517ac1b9a2b0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"msvcp140.dll","sha256":"334e69ac9367f708ce601a6f490ff227d6c20636da5222f148b25831d22e13d4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"ucrtbase.dll","sha256":"0bb8c77de80acf9c43de59a8fd75e611cc3eb8200c69f11e94389e8af2ceb7a9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"vcruntime140.dll","sha256":"c40bb03199a2054dabfc7a8e01d6098e91de7193619effbd0f142a7bf031c14d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"38322811682434583413452.tmp","sha256":"53b34eefdbebb2f708fec6bd9b95bd1bccd63396bedb0a33b9b290c59dc97f82","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]}],"files_written":[{"path":"%WINDIR%\\SysWOW64\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\tzres.dll.mui","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{846EE342-7039-11DE-9D20-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{C3450F58-7060-4AEA-B0A0-C245927D78D0}","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%WINDIR%\\SysWOW64\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\wshtcpip.dll.mui","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\wship6.dll.mui","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%WINDIR%\\SysWOW64\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\wshqos.dll.mui","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%TEMP%\\5FC5C4F5","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\filezilla\\recentservers.xml","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\.purple\\accounts.xml","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\001KZBCM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\00522F3X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\008D98V9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\00W5KTBM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\01G2G7NV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\01IRN157.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\01L3RA7Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\01PGGPIU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\01Q66WZY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\01Z9XFST.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\032Z07QK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\03LU5SMD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\03Z3LBKW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\04EK1BFC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\04M9SL9K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\04MSXFIV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\04NQL9VB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\04YN0175.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\057HOJ6H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\057Y0I5U.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\05I4TBK6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\05PW2TL0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\07CN5BVO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\07IK6MXK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\07JDM5IO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\089TLGN1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\08S5JQ1I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0AA48JJO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0AMW4IAG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0AXT8QY9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0AYX2DKN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0BLILZDW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0DFD30N2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0DFXJQYI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0DJ1Q2Q3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0DK2UPKN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0E42O7ES.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0E6KNPBS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0ECXXJ7B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0EH292W1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0G38WMZE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0G6B6ORE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0G744Q9Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0HGCWYU2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0I3CD9OV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0IE3U8RQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0JAZWCFZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0JIJL1U1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0K02946Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0K1BPDGU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0K33A0QC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0KFLVEXF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0KGYURB2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0KIZE9ZN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0L39ORLY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0N6JNRPW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0NB28QCE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0NCVIDY0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0OW0CAQ5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0PFMHNID.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0QO0F5BP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0QYU6RJA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0SK83C10.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0T3JA7YB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0T9WHMC0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0UJPLO1D.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0WXTRUWN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0YFBS5EF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0YIBR6RF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\103A08MU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\10M1CE58.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\11GS1G9X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\126RJGJJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\139REQNS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\13EM00BV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\13TM7I8J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\13YM57O3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\14BIMAKC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\14EH4LLK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\14GLXPB0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\14MU6IMB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\15WNNKNZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\15Y8HPEV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\15YUQTFF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1605KC42.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\167KUOPI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\16P65P35.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\16PM3RX8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\16VH4V6A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\16ZKD2EF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\17Q67TYW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\17WHZ7RH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\182F4GK2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\18KDFFYW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\18X6U2CI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\199R468N.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1A42UUXQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1A87VOS2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1A8U2VC5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1AU597VG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1B10M3A9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1B7J1SXR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1BJZ4CKG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1BMM58RC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1CDOC3GT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1CFFD6HD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1EHOEHNP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1EJJO0B1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1EV8QDRU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1EZFFQJD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1F6N6GG9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1FUOEQD7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1GWKLM1B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1HOTWXF0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1HXARN7T.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1I5NCIS1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1JC9BALC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1JHJFJTJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1JJ7UF4M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1KDYIQ9T.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1KL2LGDC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1LIN2QY1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1NQU6A6P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1NS22CCZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1O6ZNI34.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1OM0NI8U.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1OYYEREX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1P1CVI0A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1P65R1VP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1P6J7EHB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1PGZMOFN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1PL4WWAG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1QL3N5M8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1QXQEVZW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1R79TWO2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1SFXSKPT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1TQTS44S.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1UFVEWE2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1UJYH06Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1UW5LUUE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1V1NNEOC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1V5F4246.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1VJTH042.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1WM1P7IF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1X41KEC9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1XPJMYM0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1XWARC8E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1Y45IY1E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1YBOFNLK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1YDE9U6X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1YP6N3U0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1YVAFI8H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1Z4C860M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1Z6Y7SGJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1ZFJH2NL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\216C66HS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2183NVAE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\21N9SI5Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\22O6CMUI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\22RC08HB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\23FBUL0U.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\23JX5DNW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\23Q36ZIA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\24DUE7JY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\24I82KXY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\24Q0O02V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\25BY62P0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\25GKXKAQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\25GOZQTI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\25MJ1REB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\273XVG9G.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\288RY77G.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\29ACLVWM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\29N64ZFX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\29PSGNWH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2A0H055A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2A1A3THM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2A3TGFW9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2ADRMABK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2AVD0JEO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2B3V8YES.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2BDI1TIK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2BF8O48X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2BHV1GRM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2BMGDNA3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2BXWX64T.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2C2I5GIC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2CM2LAF9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2E1DM6X7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2E2BM44O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2E3OX8CC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2EJU3VKK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2EMK8HVZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2ESXFXML.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2FPN2SWC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2FY1HDR8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2HFFWGLK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2I56XR3K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2I92D73P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2IQQ24DM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2J2K993D.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2JFWN5J3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2K2198T1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2K4BXKGD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2LCB1G4A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2LVHDBNX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2LYSI9RZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2LZ0GNB0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2MSZGNLL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2MZYDS2E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2NMZBJWT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2O87FMXG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2OL8YGZ3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2PEZ0ZII.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2PYW02AR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2R6MIEYT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2S3YBKSG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2SEY7FT2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2SVVOLQ8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2T148Y4N.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2TWINM40.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2V5RZDGF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2VGIVK2Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2WBSNRAG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2WCOZVZH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2X1OSQSC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2XA1KD69.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2XTPPNTN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2Y6P6M7U.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2Z08K0O0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\30A74SE6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\318FCAPO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\32D32XW3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\32M9WUKT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\32WZTDWC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\333SLRWN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\33BJEZXQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\33F3K3OB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\33GBKJVV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3473XYXV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\34W5L7CB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\360QWOZM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\37DNKDNH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\37NSROH4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\37PPUNB2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\37PXHXRB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\388FPEQ5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\38LNH7BX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\38RS6GFC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\39FNPOH3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3AKXBOLI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3APVHDNI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3BH3DT21.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3BWLHSH2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3C4JJZIP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3CF3I2SK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3D5JYPS9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3EJPVJHW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3F2YQ9YC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3F5LGQA0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3GIOQQ8I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3H4MJQPV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3HT7FHAI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3HZ7P2DM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3HZ8CHN5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3HZVGLF4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3ID5XN7Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3J59FTSE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3JDO57FO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3JNX2DUW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3JYB60LH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3K8AHMHY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3KD1BE4G.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3LN2LZ7U.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3LX9AE78.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3LYHITAZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3LZJKTHF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3OQ3UC14.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3OZO9YXD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3P11SQIU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3PA35AX9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3QN8GH2T.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3RMV2C03.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3RP5ATVX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3T00FUKU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3T6PTA3E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3TAK3B2N.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3TOE7KJ0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3UNUQ9F1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3VFIDHI8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3VXMDF5W.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3XPLH0N2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3Y5JRVQ5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3ZGY8OJJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3ZLNITHY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\40MH3247.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\40Y78GDD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\40YD3HWN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\422LDGH2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4232U09M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\42MYX3RT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\42US4JCN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\42ZQ4TEE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\43O5ULO5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\440VP1WA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\44ONRQ3E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\45EJY5R1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\45RZQMBF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\45TSBEQK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\46LQAZ2I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\473EIQMZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\47BAW5II.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4811IOA9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\482ULKT8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\48BRWNIS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\49A8CN7Z.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\49H5G5RR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4AEESOE9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4AGWIAUM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4AJ7PGLG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4B9B061H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4CM9YLAW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4DKPBMNC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4DVS0W2J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4E60NKNA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4FJBT9MF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4FKN6Q22.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4FXM1BOX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4GWFVXQQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4I4Z6PA8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4JV5KQ0M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4K0E3VK5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4K615YIU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4KRY8JXY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4KWEG5KK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4L9N6R9D.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4LYV48XP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4M9UUL58.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4MMN2RXC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4NB7XAHL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4NHF385P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4NUWHH26.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4O5A3XCU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4P0SBRM7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4P31UU5O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4Q0ZQVTY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4QI6BXKX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4QXI874X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4QYTGJAX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4RU2SNMO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4SOCSF00.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4SOLU0MY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4UR2W20W.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4V2S4S8M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4X5JJI1T.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4XJJTKKF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4Y7DNY8O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4YFQMUQ4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4YUU13EZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4Z9EQKTA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4ZAILEUS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4ZZG8T9T.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\501N8WSW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\507R1S83.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\50SC68I8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\50UZQ0HF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\51AJSSP7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\51JZHJ4J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\51TRR495.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\51VE9UHW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\524MYPVV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\52IQOAXB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\52LAKLU6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\52M89J0P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\52ULCA5B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\532U1DBV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\535XT97D.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\53T3BNQ2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\55IB7KS3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\563DLONQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\573J0M0T.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\57E091S1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\57QFOUK0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\585IMZLS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\587W3CER.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\589NXRM6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5949E9JV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5A7WD629.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5A9IL3SA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5AK6AUST.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5C52RAGV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5CDFPVJV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5FIS81MD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5G7K1NG3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5GAEKNLU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5GCR3MIO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5GVISC2H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5HKTYE68.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5JB23T6I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5KH9PU96.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5L3WFMC2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5L827MLW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5LBP4KA6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5LF31F4Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5MG1IA1S.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5MXDZ6WM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5N444AKH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5NA4MMR0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5OS2NI8M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5OUPWUEF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5Q0POWN3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5Q1XATYQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5QEQ6QIL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5ROIEMK0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5S3ERZDY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5SAJYMMA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5SC0NSZQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5T5WKO6C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5TDXUZ6G.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5TL524D5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5TP76NBR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5TR5XWBS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5TX1O2HK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5U4O5ZGH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5UJ2Y42N.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5UPOUWG1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5VD6HH8B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5VQV5FFM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5VRYFEBK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5WHWSISN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5WL97ER2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5Y9BG3MA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5YF0UV6R.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5ZALF3MN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5ZM1UW0W.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5ZUDV5DA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\610WB0MX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\61325DLC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\61UJYX3T.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\627GP43S.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6294Z21R.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\631XGQBO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\635HDZOC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\637N5G3X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\654HXCRD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\655BVBU6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\66BP8Q6X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\66PFAWKE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\68BYUF84.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\69A7S6DI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\69DT79HD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\69K3SUKF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\69NDCAPU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6BXLSU73.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6CBTNEUH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6COHDBVC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6CY2NG59.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6CYPOZRK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6DUR4BLI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6E701P1V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6F3XVH5E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6FXKRQ34.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6FZUI4V4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6G4G50F4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6GT5ZWZ8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6H9YJI7M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6HTUNFTW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6IK398Z1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6J7C8RHZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6JDVAPP8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6JMK1YD4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6JREEW1E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6JRX0PFT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6JWRH12H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6KAC7AEA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6L5BPV9V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6MGAJUFO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6MQSMF9M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6NT02T6X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6OBX127C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6Q3C6E1M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6Q5VYTJN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6QCRLEEU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6QY73979.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6SMXUA4V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6TXW7EKW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6U6BNZ5S.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6VEKSJ0O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6VUQDJ7A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6X43BR9K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6XDMNEMD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6XLN3RE8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6XOLTJ4Z.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6XPWKXG4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6Y8JCNOW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6YOAUAFJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6Z4LTOYN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6ZZL41CA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\706MV4NO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\70P81S8R.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\72CP2KPP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\72QB3X5J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\73G2TVHV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7456USS1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\759OM23G.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\75MV1YC3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\75RJA6NR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\76R6PYOR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\770MH0AU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\77FJV89G.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\77NSWS12.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\78JH88ES.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\78TQ09DZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\78XAODAI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\798SA21R.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\799ZD2QF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\79CZBFEB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\79I7DS9U.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\79YKIEPF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\79ZUTCGA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7A1E2VG1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7A3T4HTU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7AK8ENU6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7ANMRBIY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7AR448C1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7BIBCOLL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7CF8YP1X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7CS7MCXZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7D9I30FT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7DXFBNXB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7F9TWL6G.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7FTHCXC9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7GPKCQ85.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7HQ6WO5X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7I93CB62.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7IDK146H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7MKN52QQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7MLV85YH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7N9B58SG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7NH40SCT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7O0JSAIB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7OJIKY65.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7OK3V1KB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7P361J76.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7P68KWRU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7QWTSOTJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7RKBPXFP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7RSKCI3R.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7SL3UC3E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7TNG3X52.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7TQ5XJAQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7W0PBJGQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7WO9USP8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7WQL5D86.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7XEDXIRY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7YAG1DA1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7ZZXT5M0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\800K5PBQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\80B7JHEP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\80VGAQA3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\82G8QRF0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\83LYB2OB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\84AME1V3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\84ZAHQ1J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\85BGS6VW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\868RGMP9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\86D3S42I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\87N4VNX4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8AK3YIFS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8AV9U3WN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8CFRGU38.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8CTHKHCD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8CY53VS3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8DCDQ56H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8DU6WT4A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8E34PMJR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8E4I5O0U.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8EM7JS4T.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8EOOC275.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8F0S9PGZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8FHX9FDM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8FZMW5WW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8G6HGTHA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8GHMUNJ6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8H2ZV3DT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8IFWJ791.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8IJ08TOG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8J7C6HRO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8JEIS75R.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8JPGDP3W.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8JPL32S7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8K5CY5JB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8K8XFWF1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8LYIUY4W.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8M3BEOF8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8MV6HYPK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8MZR0EGO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8OH2RL36.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8QEITZJ4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8QU33SBU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8R5CVAE5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8RL8VQYL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8S0DIX1M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8TQK91UX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8U0XQUWH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8U855DHB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8U973IK8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8UGIW40C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8UHWWXRN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8UP8KOR1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8UYDTX00.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8VMJE86H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8VQM8JNP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8WTTT9NN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8XCBZYX7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8XG5O9H9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8XQCIVGI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8YIPITVL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8YP2DUKQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8ZG5X95A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\90F1PZXF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\90RTEH47.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\938CZURG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\93OUYNIQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\942H53QM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\94B8XINL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\95ROJJIJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\96BW3BYI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\96EZYOR6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\977LR477.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9844WMLG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\987MVACR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\98EZOW9I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\98HOER8Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\98P8698V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\98Z9W15B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\99HGLEWQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\99S6A05W.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9A0KKLHT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9ALZVUUY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9C6OA7EL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9DQV7CB1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9E27ZUWK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9EBEVFS2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9FEUGJTL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9GOXH0D0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9HEEKWLZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9HZP47WG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9IHERXZD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9IYA8Q8V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9JFVJ4CP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9KBCP8Q4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9KC1MB5V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9LAEOTYR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9LI8X83C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9LR1AEI8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9LW31UTL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9M1MBTPV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9NIERB21.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9PB0SOW6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9PK6AHPC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9PN1YJ1I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9PVHARC5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9QYJVYBX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9RB70BK0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9RHZSET9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9SE2S76H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9SNOSN0V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9UTC302H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9VBCIUL0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9VJBWF09.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9VTXNZS6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9WIFOL9V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9WWLX9LY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9XCN4UIU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9XFWMR6A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9Y8LF37F.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9YITDZ8F.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9YV01IS2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9ZUI58BT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A08DCO1L.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A0A51RJ9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A0FIQWGH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A0GNBP57.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A1M7DLK5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A34XXT6A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A37NVGJ2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A4UGT2PZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A5AN7IK6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A6MV3B0N.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A6NXDMYT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A82FK9W0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A9BNB01C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A9V5XEG7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A9ZFLKWO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AA7Q5NXO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AA7R1WGR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AABQEE3K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AAV0ZTAU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ACXJ1L8Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ADBIBSIQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ADFAOAR5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ADGKAZDU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ADZHJD14.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AE1GZCKW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AED2H0TV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AELS1CBD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AEOXLSN7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AEVS637I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AF1BRUVW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AF80K0Y8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AG395MJS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AGA0CXQ4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AHD2ZI39.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AHIYYF2Z.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AJ8ZU7NI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ALHFNG5L.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ALZ08XR9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AMBGKFBZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AMZ8UPAX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ANDQKS6B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\APFELGXZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\APKEZ5HF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\APYAOHHK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\APYJQ9BX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AR0WVH7D.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ARDZCL9N.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AT94RNX7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AUY4PWZG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AVPF751B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AZ8ST3S5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AZH8BPCO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AZKHEI83.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AZVGDL4M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B0PG9ANE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B18RDMNN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B1FAL0FP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B2DQ28E7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B35LRWU5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B3DQ92OT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B3JM6DDB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B3LILRRA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B3Q9OS7Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B4D94S53.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B5OVRCH1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B5R4UKL5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B6CVEPWV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B6QRJH02.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B6ZFPNWK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B74S1K1P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B750MGRZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B88P14T6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B8D253LY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B8L41PSY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B92OY3DI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B9931LJ1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B9H9DJ0P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B9SY8N5A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BA2SY60E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BA60U9PM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BAJGT2VC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BB1H0DV3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BDNU8MXQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BDYQXL9Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BEURQH4Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BFEXEVRP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BFU4FALO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BGJMTJNX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BGNQH33W.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BH7P2YU2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BH7X25KG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BHIU04JG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BIKWR4L4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BJ14DZ8G.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BJAFYJCD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BJZC58K4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BK6VXCHZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BKC66UXM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BNGFETHA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BNR0QZX6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BNW7TFHX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BO92UZTW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BOM3Z4PM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BPEOOBM1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BPL6K5VV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BPRXXXDP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BQ90Y5VE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BROQEUF1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BRTU5IAN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BSY81E0W.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BVP3YS19.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BVRMVWF8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BWPXQZ76.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BXR8IO70.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C00208YK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C22MWK5O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C2R13O7E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C2U7P3Z2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C2Z5HFI5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C372T5RZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C3BPK5IC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C3Q3DY32.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C4EUFIMH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C4SJBAWI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C5RJ8RRY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C60CFWU0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C6SY0C5X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C7LNFRE0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C7WA66E9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C7ZM5MB4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C8L0NI71.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C9YY5YDM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CBFMIW9H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CBLBCDD9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CBW5OTHK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CCLA9PM7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CCN2J3JN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CCPLJM2I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CCW3OVLS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CDO5VLCR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CDYU73XZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CE0C31CY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CEUI3EAP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CF7YU5OA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CGA1SZ4Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CH9G9DZZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CHD3115Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CI2V0AV0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CI66G3HP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CI7Y73ZE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CIKKVT1L.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CJQ6DAON.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CKNDTUFM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CL0UZ6II.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CL34PJXT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CL73XRTL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CLIFXAZ3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CM0TTXMP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CM3JF2DS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CM4OVKEE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CO8P2R6Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\COSZW6G1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CRPY5UW2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CSDDOI57.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CTQG3NW2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CU70KTLS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CU9V1AEE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CUHJC9TJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CUTRF7W8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CUX6Y6OV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CW91DO5X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CWVJN84D.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CXJ9DCG0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CYOXPC00.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CYUC653Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CYWKNKBA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CZGU6RNW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CZP432SL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D01I4PYE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D0DXQD4K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D0MJ2JU0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D0N21D5F.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D0RY4F39.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D16F7CM6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D1AC81I2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D1IEU6IL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D2188GWX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D2C2AQ6I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D2CAYZ4Z.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D2CQQ1LW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D3FAQX28.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D3GFJXFW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D3WK7238.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D3WUYSJS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D43M3QQK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D4NISX1H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D51MPI5O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D69P56HV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D79HS08A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D7YESR1C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D8TMBIEB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D8ZH5KOG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D9ILLIAB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DA9WXXUB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DAH00ZYO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DAT3XZD1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DBHC35AZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DBI9708G.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DC5CO9A2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DC86PNSY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DCZLVT72.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DDCI22NO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DDOY97KA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DE259CKQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DFGTFOGM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DG5LSGTE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DG9I21FL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DG9XLXFT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DGE0850O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DGSYQJ1M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DIFW8THU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DJ371JU5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DJB6JAGB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DJOK9Y40.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DJS9SY9M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DK38801U.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DKRU1PUA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DKYBP270.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DLALVHNN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DLLMMW82.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DM1STYQI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DM79D8O8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DMQ3A61N.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DN43ODUR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DND3KTUG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DNFT6DXU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DO9L3QTM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"path":"%WINDIR%\\System32\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01}","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%TEMP%\\EB3DD2FD","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\013SKKWU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\01RLWRK4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\02251G37.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\04C1GH32.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\04ZFG79Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\05DR3CFO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\06NUD4Y2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\07N0EWO6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\09BAA8W6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0BLUACH0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0DEAJOR6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0GCX0MOZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0K93Q13F.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0L4X42T9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0LRUA0MV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0MYAT1N3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0OBTYDGS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0PN4NSUQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0QJ5TC37.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0S10SYKB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0UJVY412.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0UT1Z46B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0VKSPGO0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0WADNNR9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0WW5EB2S.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0XGX6FYI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\10C02Z83.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\16215H2K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\19GTZQZZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\19RIRH0Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1D3GUNWO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1ESZ120A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1G15GMUT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1GFNR5CP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1IQJPSHK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1LMFO54P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1LUB8WF5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1QLEFO60.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1UAPZ106.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1VWCDN42.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1WQOCIZG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\221WOL3A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\230Y2DXP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\23BHJLHS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\23TZ4C41.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\27T0G6FE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2ASN9ZFJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2AYSNF73.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2AZ4YJF2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2E8G701Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2GICE76P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2GM80UBQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2IKL0V3W.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2IUXOXPF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2KROEWGU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2KTGZAK9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2Q1JPPOS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2R8EW0H6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2SFOEJKI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2SHFHYAN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2SID68SA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2SM7L33C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2TWZDGAB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2ZHB7W15.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\310B2E1Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\31G5X0FP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\324HCTEV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\32ALEBD1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\32WAKFWK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\339OUP0A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\36S64XSJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\385UJPQB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\38T8GEM0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3E754NAJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3GCO4IC6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3IQ1JVTO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3PXSHL20.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3R6FVOUK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3RY3ZKPE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3S9Q96YC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3T7OSXRU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3T9SFXV9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3TALQNSD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3UFSXBZN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3URUEPPV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3VKDSCYJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3WE9P32V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\404HCFVH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\405XVMKT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\40CP9X6Z.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\43WE71VL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\43WU2GJM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\454LE7N0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\45RKLALH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\46IBQU6X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4EGB3V4H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4F7NV88N.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4FNSL9JX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4HCU4XAS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4INBF33D.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4JMVUU7K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4K672PF0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4KEO5OP1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4KG7RANH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4LXHKV4X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4MHUIOAJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4R8K4TXJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4RCVZDED.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4S29DBEW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4TM2AL5G.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4TOPRDV2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4UYRHNFO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4V9DPS1F.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4XD8W14A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4ZF3700Z.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4ZJKUZYT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\51NZY7LR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\51UMV1TD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\535SA7XK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5564U8ZR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\557KL2WF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5709KGFY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\586VP2IU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\58UDWIQP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\59JDWDOT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5CYF3WN0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5E7Q4O4D.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5EMNIV5X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5ENEGGQL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5FH705TQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5FZO8VEX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5G1XK2AB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5GSH63GR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5HMRUNH7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5IUU2LLS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5KM0IP1M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5ND6VTN0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5O335U41.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5OP8JZOW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5SSY9BS4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5U79IPE4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5UMHG6OC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5UNAAB11.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5UXNIF1H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5WG27NHJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5XO7BFYT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5YNOA1KG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6145P1Q8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\61K47WWL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\66KUI2L4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6860D43Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\68GKW6CZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\68KPW6T8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6CUCCV61.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6EEINFTU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6EGF0VEQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6G9MNF0X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6NDG7VVY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6OHRY6JZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6PVO0Z2D.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6TZSSPY7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6U8CRMHQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6WA644VW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\73T92V3V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\75EER6O6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\76MBVR56.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\77I3XLE1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\77KRIE44.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\77YTTLB6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\78XR3IBM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7B1F2GY0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7C6N2ZIC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7CYHXFBH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7EOXJDTX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7HL6915E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7HUMXJVF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7KBAKSFW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7LR228YE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7MGUHXME.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7N4RVANK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7SB3GQSO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7WEYCOC9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7WQY6NYF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\7ZTHQ0TD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\80YA6J4B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\82HTV1I0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\83SC4SVU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\84U45E5J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8AW81I5B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8C4S2TAB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8KSJFTIA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8MAU4Z9Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8MB6PW14.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8ORR48RI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8SR0RZ8S.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8TX65I3H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8W06FIXJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8WDKE33C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8YA38V3D.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8YN60N3P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8Z2519VC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\91WSNDQW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\91Y5PODI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\96WSSSUT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\98BPD9H4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\997KD8QR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9B9G7L2I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9D4P0RO9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9EF1YA3V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9FUM217Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9IO3RXXP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9JWGQ2LE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9M2Q14XJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9RNN67IT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9S1L8RR8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9SU46K5Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9SWVP8MQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9U7JOM7O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9VV77FEK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9WHA3VHC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9WN7O6V0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\9XF43GJS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A06WSKZF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A1PVK38K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A1U2HBI8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A4CBMRKK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A5AQD0PY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A5M9XLOM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AEDD88EP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AHV4QFIV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AI5E1J2S.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AJGQSKWT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AMA7XDDV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ANR24PVM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AONJLIHR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\APQCCL1C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ASEOAR02.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AUJEKFNS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AV8VCUFA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AVNGK9XL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AYKC4XF0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AYND2QOU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AYXLKKWH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AZHNRXZJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B038QLA8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B0DVB9HC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B0GJXIL8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B4KO4RYQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B5ZJ32W3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\B77H6FFJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BA0KXJ2E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BA3XWAZG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BAO38TQG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BBRYI3C3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BCGMC3XK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BDKDXZG2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BJG9CUKD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BL040IC1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BMPAYBB5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BN2NNT78.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BU3SJ9CN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BUPBRUNT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BWPS167Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BWTLUPMK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BX8AZBNI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\BZAQ6YZD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C0O6T1SK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C2S1T5RV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C3C840FK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C3CG1Q8Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C6A8IDYO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C86Q6NCQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C9OZZOGC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C9WTA3HM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CA2UOKMA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CHAUNNB1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CJ53Q6CC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CJOQWP79.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CLOVKGT4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\COTGT0NQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CT2VZ6EG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CTCZEQ5A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CUNQWOR4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CXMCXA3K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CYOIE8B1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CYWWAARX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D0QL52XR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D2VM7GM4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D3G70Y6C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D3Q9TF2C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D4SU0Q1Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D5QUY1SJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D81CETKA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DD7E4C1K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DE4O148X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DEATXCIP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DG4755JJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DKY861BK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DL8G4R2I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DMT6IPLI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DNVL5VVX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DOUX56PV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DRKW117O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DTX67EFT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DV7OR04E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DVFX56FS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DYBRXUFE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DZ8W0RNO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\E2MA61ZG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\E3K7V3RJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\E59EKDHL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\E6BQ653F.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\E6SI7R5K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\E99SM18R.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EAH0WAJY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EB19HU9F.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EBOHPPOY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ECWMK291.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EHQPJXMT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EJFQQYWA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EOML20XX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EQG2JF8U.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EQHOR8QT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EQIBU18E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EQNO0XTH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ERV9N2EC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EV0P3E9R.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EVR7UQO6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EXFY08X6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EY1S0BHW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\F0IHR1QW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\F3E8FKJH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\F3EATH7P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FA6U29G9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FACNTKJX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FAK1EWIV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FBE9Q5WV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FE7PLVTZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FFL0BLJZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FH6T9SX6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FLNQ3VVL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FN7CXJFC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FN8E6MXK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FR9FYY9V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FRTT3KR3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FUP75WJK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FVG0F44Z.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FW38JJY7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\G6PP1OIH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\G7N0DDRP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\G9RCZIPL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GDY86RGU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GEDI3OQD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GEY1DRRQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GG3UVGKJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GGGEH140.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GL3784LY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GQ82X18L.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GRNZPSDK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GS96H9Y7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GTS1VNZ8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GWBTHDFX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GYOT8W2J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\H090URCE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\H0GUJSAG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\H0HMY6SF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\H0KL86HW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\H1DLG3UG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\H1FQQXXX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\H4NWGEGC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\H8XWSV0W.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\H9G0IQ8B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HBXE6AOC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HCV90UR2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HG00O08L.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HKRJ0QO3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HM9DGIBM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HNPTURCM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HOI17G02.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HOQ0X51V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HQ6EI340.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HQOYZKJF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HTXQW2SJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HTYQEA4B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HU36IGM5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HUER35OJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HV0FILDS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HV357N9V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HXSJ9CMV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HYAYS0J2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\I2QH9ZJ4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\I6OV373A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\I88H097X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IBSVDCQU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ICDFOK4O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IEWURUWP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IFUGM3LE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IGCKB2FS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IJHCG2BT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\INCDJHCA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IONCNQZY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IQ5P0QV3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IR2M64HQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IR43M8J4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ISV2CW9J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IWG6QAX4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IWHX7DU8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IWOKB0WE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IXI6T9WT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IZ4IBGAP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\J0L7U6UH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\J1STPYTK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\J9SAKFQB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JA5UIE6S.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JB53R38P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JBDBH796.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JCLPBLKO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JDXQX5DA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JFMLH81C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JG3XUQRV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JJ0PM589.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JKR7M6W4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JKXOAR58.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JO9N2K9B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JP1FT924.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JQLKBQOX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JRP3VDW8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JS11S8H2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JSD1L5RH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JVA9GESD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\JX53Y0B9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\K441MBLS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\K478D572.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\K4GNOP07.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\K4QTM1YQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\K7DTZRFS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KBJV220Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KC4C4N52.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KE53L2X5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KEPX1ISW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KGTYZ2E9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KIZIQJGD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KK660GX2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KK724HDY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KLBT3VD4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KP21JIQN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KPKJ5820.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KQRMV8R8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KRDZT123.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KRFXMOQE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KSPFQAJW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KVCJ23AF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\KVWY5PRY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\L1833CZC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\L2IY7WMX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\L5NHDZUQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\L6W45OEV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\L8DC4A47.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\L8V9RV16.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\L95LWQPM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LA6GEDYH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LBEDIY9J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LCP14KHR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LGDQUSTD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LHIEYQ2E.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LI6LKW2L.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LLQ6EYZJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LN07Y3UR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LR7GLS2B.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LRCTX333.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LSG5ZAKX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LTPX41VG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LW3NQK8P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LW56E0QX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LWTCTS7Z.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LYWOTXDE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\M01Q6LLD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\M03O4QH0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\M18HUH6H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\M1G0BCWJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\M4JFV55X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\M4WV59EK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\M52QF5C9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\M68E68LO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\M7GN79UH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\M8Y0I0FU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MA0Z9XER.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MBFZM0QZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MDQTYSJ1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MH9I1XL2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MJ10J49P.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MKL36YWS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MLMDTSVO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MMJ8ZSWF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MOVPEM6I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MSYA8AE9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MTL2UJF7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MU2VFQ77.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MUOB6MI8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MVI0BUXA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MX11C1IJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MY4Y43HR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MYAI8V7A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MYDUOBHO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\N2U6DGMC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\N3IUR4XY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\N40A6DU5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\N5M0OHAT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\N8UE3V4F.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\N9FEGLMJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NAL6OODV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NEQF7WWG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NES27REN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NF87Q0LY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NHPZ332I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NNJ9MMQH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NNT3FDHT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NQ3Y0TUI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NQUASX4O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NRPSPEKY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NTQ01M15.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NW2AXEWT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\O0UL4XQ0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\O0YJCVGT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\O3OP5L5T.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\O6K6PLMM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\O8RSPUFP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ODIBK18F.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\OED99Y0T.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\OJU2035K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\OPAYQ1ZG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\OQY8LS8I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\OR3JHZXT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ORP5GCAY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\OVHFHYDC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\OZD7BASV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\P097YVCB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\P0AOUH26.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\P1GJI666.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\P23TOUTS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\P2FWC30N.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\P9D42UGW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PDSE03KC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PDVKLJX7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PHD6XSRS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PHMEXVYQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PINJMUQD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PJ7625QG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PKXUWU21.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\POEMXS4Z.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PP7TD6TL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PQHWPJ5D.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PTZ1LR7Y.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PWT4AKNK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PXIJHW39.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PY9HSWFT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PYEAH6IM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PYER2P4T.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PYHTQU01.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Q131X7O7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Q27AZWQ5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Q28E8U6M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Q2IZENR8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Q3JP60NG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Q4FYVX8F.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Q4Z9Y3MG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Q5D5EE51.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Q765PXJP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Q8C6Z1I5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QC74LP1Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QE6SCH22.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QEAE9RRP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QG23O46V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QGVG79K3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QJ920GCU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QJ97IDE4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QKBFCM95.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QMKW1DZS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QPA4O1MC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QUABOCS7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QUZOXG47.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QVXA74WM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\R18DD8RJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\R20DHMSH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\R20NRKJF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\R21160E8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\R2J3W505.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\R3XRG71U.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\R6GHEDVE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\R8Y3O0WI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\R9TNJI3Z.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RBS6C4JB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RBZAV52C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RC9ABRAT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RD52GZ12.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RF3MO83J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RFZL12IC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RKNEQEGT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RKWOKIGV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RN1WXXA1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RNNPPAQM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RPFZW1QA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RQ2314YB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RRY2UU1J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RT2DMBBL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RTI8H929.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RUYXBTVM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RWMC384S.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RZHJCKRG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\S31J4UEJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\S72MUU39.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\S9WNZLXD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SA8SG1GY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SADH3ZKD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SBQU4KSG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SCQFJPVH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SFYJ7WZS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SFZJR217.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SGOKMG50.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SHWY0F78.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SMKP0CHX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SNSGL6C4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SO8VBCTY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SQRUJR4I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SRAYK61D.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\STAXPDTD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\STPPQQL6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\STRE6335.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SUCE9DFT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SURXAJU1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SWOC3U2C.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SXPY5VRE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SY1ZHZ4O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SYOWX991.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SZ6E3UFC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\SZ9ZXSX8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\T2WZ7CPV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\T3326YKP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\T6TP7BJD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\T7QD8T7X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TA3ULE9K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TARS2ASX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TBP2HH18.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TC5J7C22.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TCCK2GZW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TGLZOB2I.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TJ830E0K.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TJZIYP3H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TK1CXJFU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TK1OX1F3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TMUN27NK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TN837HJA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TOSUHSPT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TR303ORS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TVSHZ68V.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TWT0E83W.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\TZ1RT2M5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\U0LUYXQP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\U4MCWFKO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\U581PND6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\U8K96OZ5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UAOYDGXG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UC03NY2X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UDVSWEZ0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UE318OQT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UEVVU232.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UFK2NTGP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UFVG60G2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UGJBXHD8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UKID4BVZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UNQAFUNH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UNS002ER.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UOUM2LL0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UQL2QHOM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UQOBSEK1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UQZ5SDKU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\URWWZSI2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UTB90UM1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UXD8UU2Z.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UY3KEL7M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UYLTR4OO.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UZ8S43SB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\V0SU1VEH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\V17QTD7A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\V27OU2VF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\V2WLP1Y7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\V61HIQL5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\V7JC7KYP.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\V91RWN6L.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VAW7MV86.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VFS58JH1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VG8BU31O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VGO1ICYI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VGW7SHHX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VIG24O8F.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VQT656YD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VS80HBG1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VVGYB4TC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VVNCVQUB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VYWEV1X0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\W0O02PTC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\W0O9DJSL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\W1JHKY69.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\W1PZJ11R.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\W3F37XYG.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\W3GNZNIF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\W3UFQ43L.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\W56J4HEV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\W6192RE2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\W7L1L0T8.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WINX7TMB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WJQHKB3M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WOPDNSYZ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WPDS8QIC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WRW0OY9Q.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WT1EEJVU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WTUVPV0H.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WUK9CBQ0.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WVJP4FCA.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WWPO5Q9Z.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WX4K1CIF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X0787ZIQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X0NE58AH.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X25X1YWW.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X2L53FGD.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X34HY9N3.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X3V4WOK5.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X43EXFN4.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X46QHW5O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X8FGLAIV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X8VW6IE7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X9K1U7OS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\XD183BLN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\XD1PRFQ1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\XEN1V148.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\XJA8FC58.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\XJF0V77J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\XP5QPRIE.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\XV17Z9GM.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\XVEIWLSI.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\XYA0X9N9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\XZ1B4FAY.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\XZO6QKEU.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Y0BKUAS2.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Y0HO67HN.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Y0TMQN68.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Y6A66GJK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Y9ACOSVF.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YCFOSGDT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YJ28AXUT.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YRHQSPCB.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YSUSG75A.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YTFSGZNR.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YTQ5NYJL.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YWY474LQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YX4VX51O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YXG69G7O.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YY0ORI7J.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YZNGQHEC.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Z0UZO146.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Z31D82MK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Z5KXTS08.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Z5L0RPYV.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Z6I2ALQ1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Z7FLPC1M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Z8II9K5M.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZC4XWSHK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZDGUCG6X.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZDSD3AC1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZDUVJ7SJ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZGUF7OP6.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZH0K2F0U.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZJF43MYX.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZMCLLDB1.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZMZDJ8XQ.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZN1CVVJS.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZQAB1ENK.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZV175VY9.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZYVGHHF7.txt","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\cookies.sqlite","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\All Control Panel Items.lnk","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\Appearance and Personalization.lnk","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\Database1.lnk","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\desktop.lnk","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\Downloads.lnk","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\Network and Internet.lnk","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\slowfuzzer.lnk","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\System and Security.lnk","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\VxFuzzer.lnk","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%WINDIR%\\System32\\cmd.exe","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%WINDIR%\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%WINDIR%\\System32\\timeout.exe","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%WINDIR%\\System32\\en-US\\timeout.exe.mui","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\\\","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\A18F76D5A-343A2EC6-B6BB9279-9B5A4290-310E858A","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"},{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"A18F76D5A-343A2EC6-B6BB9279-9B5A4290-310E858A","sources":[{"report_type":"sandbox","report_id":"5c866d9c02883839932bbbe4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\AD19930C9-343A2EC6-B6BB9279-9B5A4290-4F88E236","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]},{"name":"AD19930C9-343A2EC6-B6BB9279-9B5A4290-4F88E236","sources":[{"report_type":"sandbox","report_id":"5c866d99028838cb022bbbc4"}]}]}},"report_ids":{"sandbox_job_ids":["5c866d9c02883839932bbbe4","5c866d99028838cb022bbbc4"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Malicious Trojan.Generic Sample 5c258f35e2b9… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 5c258f35e2b9…. Malware family: Trojan.Generic. Threat score 100/100. 25/28 AV engines flagged this file. 8 malicious and 23 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3"}],["$","meta","4",{"property":"og:title","content":"Malicious Trojan.Generic Sample 5c258f35e2b9… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 5c258f35e2b9…. Malware family: Trojan.Generic. Threat score 100/100. 25/28 AV engines flagged this file. 8 malicious and 23 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/5c258f35e2b9b6997464631e1178841d090a47f3b43d1f6f54621128d352d2f3"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Trojan.Generic Sample 5c258f35e2b9… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 5c258f35e2b9…. Malware family: Trojan.Generic. Threat score 100/100. 25/28 AV engines flagged this file. 8 malicious and 23 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L31","11",{}]]