24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 31:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4a9,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic Sample 5e2c9ec5a108… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 5e2c9ec5a108…. Malware family: Trojan.Generic. Threat score 100/100. 20/27 AV engines flagged this file. 11 malicious and 20 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409","keywords":["Malicious","Trojan.Generic","malware analysis","sandbox report","threat intelligence","5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409"],"about":{"@type":"SoftwareApplication","name":"26600a8c25b03602f4c4cf47e83c988638b4908a.ico","applicationCategory":["peexe","executable"],"identifier":"5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.Generic","antivirusDetections":{"malicious":20,"total":27},"behavioralIndicators":{"malicious":11,"suspicious":20},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T4c0,Found string "RegOpenKeyExA" (Source: 5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe.bin, API is part of module: ADVAPI32.DLL) Found string "RegQueryValueExA" (Source: 5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe.bin, API is part of module: ADVAPI32.DLL) Found string "RegCloseKey" (Source: 5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe.bin, API is part of module: ADVAPI32.DLL) Found string "CallWindowProcW" (Source: 5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe.bin, API is part of module: USER32.DLL) Found string "ExitWindowsEx" (Source: 5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe.bin, API is part of module: USER32.DLL) Found string "GetLogicalDriveStringsA" (Source: 5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe.bin, API is part of module: KERNEL32.DLL) Found string "MapViewOfFile" (Source: 5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe.bin, API is part of module: KERNELBASE.DLL) Found string "NtSetInformationProcess" (Source: 5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe.bin, API is part of module: NTDLL.DLL)26:T41c,Process "iexplore.exe" (UID: 00018498-00028192) was launched with new environment variables: "PATH="C:\Program Files\Internet Explorer;"" Process "vssadmin.exe" (UID: 00018530-00028320) was launched with missing environment variables: "PATH" Process "iexplore.exe" (UID: 00018562-00028400) was launched with new environment variables: "PATH="C:\Program Files\Internet Explorer;"" Process "iexplore.exe" (UID: 00018562-00028400) was launched with modified environment variables: "CommonProgramFiles, PROCESSOR_ARCHITECTURE, ProgramFiles" Process "iexplore.exe" (UID: 00018562-00028400) was launched with missing environment variables: "PROCESSOR_ARCHITEW6432" Process "vssadmin.exe" (UID: 00018575-00028416) was launched with new environment variables: "PROCESSOR_ARCHITEW6432="AMD64"" Process "vssadmin.exe" (UID: 00018575-00028416) was launched with modified environment variables: "CommonProgramFiles, PROCESSOR_ARCHITECTURE, ProgramFiles" Process "vssadmin.exe" (UID: 00018575-00028416) was launched with missing environment variables: "PATH"27:T9ce,Spawned process ".exe" (UID: 00011229-00003256) Spawned process "cmd.exe" with commandline "/C copy /B "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1 ..." (UID: 00011570-00003672), Spawned process "cmd.exe" with commandline ""/C start "" "%TEMP%\svchosta.exe" "C:\5e2c9ec5a108af92f177cabe2 ..." (UID: 00011606-00004072), Spawned process "svchosta.exe" with commandline ""C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6 ..." (UID: 00011615-00004188) Spawned process "svchosta.exe" with commandline ""C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6 ..." (UID: 00011926-00004792), Spawned process "cmd.exe" with commandline "/C "%PUBLIC%\window.bat"" (UID: 00018456-00028092), Spawned process "cmd.exe" with commandline "/C %USERPROFILE%\Desktop\DECRYPT_INFORMATION.html" (UID: 00018464-00028128), Spawned process "vssadmin.exe" with commandline "vssadmin Delete Shadows /all /quiet" (UID: 00018476-00028160), Spawned process "iexplore.exe" with commandline "%USERPROFILE%\Desktop\DECRYPT_INFORMATION.html" (UID: 00018498-00028192), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=c: /on=c: /maxsize=401MB" (UID: 00018530-00028320), Spawned process "iexplore.exe" with commandline "SCODEF:28192 CREDAT:275457 /prefetch:2" (UID: 00018562-00028400), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=c: /on=c: /maxsize=unbounded" (UID: 00018575-00028416), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=d: /on=d: /maxsize=401MB" (UID: 00018615-00028488), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=d: /on=d: /maxsize=unbounded" (UID: 00018673-00028596), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=e: /on=e: /maxsize=401MB" (UID: 00018715-00003064), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=e: /on=e: /maxsize=unbounded" (UID: 00018786-00004704), Spawned process "cmd.exe" with commandline "/C "%TEMP%\svchostaaexe.bat"" (UID: 00018790-00028072), Spawned process "timeout.exe" with commandline "TIMEOUT /T 10 /NOBREAK" (UID: 00018825-00028260), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=f: /on=f: /maxsize=401MB" (UID: 00018851-00028396), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=f: /on=f: /maxsize=unbounded" (UID: 00018891-00028320)28:T9ce,Spawned process ".exe" (UID: 00011229-00003256) Spawned process "cmd.exe" with commandline "/C copy /B "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1 ..." (UID: 00011570-00003672), Spawned process "cmd.exe" with commandline ""/C start "" "%TEMP%\svchosta.exe" "C:\5e2c9ec5a108af92f177cabe2 ..." (UID: 00011606-00004072), Spawned process "svchosta.exe" with commandline ""C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6 ..." (UID: 00011615-00004188) Spawned process "svchosta.exe" with commandline ""C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6 ..." (UID: 00011926-00004792), Spawned process "cmd.exe" with commandline "/C "%PUBLIC%\window.bat"" (UID: 00018456-00028092), Spawned process "cmd.exe" with commandline "/C %USERPROFILE%\Desktop\DECRYPT_INFORMATION.html" (UID: 00018464-00028128), Spawned process "vssadmin.exe" with commandline "vssadmin Delete Shadows /all /quiet" (UID: 00018476-00028160), Spawned process "iexplore.exe" with commandline "%USERPROFILE%\Desktop\DECRYPT_INFORMATION.html" (UID: 00018498-00028192), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=c: /on=c: /maxsize=401MB" (UID: 00018530-00028320), Spawned process "iexplore.exe" with commandline "SCODEF:28192 CREDAT:275457 /prefetch:2" (UID: 00018562-00028400), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=c: /on=c: /maxsize=unbounded" (UID: 00018575-00028416), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=d: /on=d: /maxsize=401MB" (UID: 00018615-00028488), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=d: /on=d: /maxsize=unbounded" (UID: 00018673-00028596), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=e: /on=e: /maxsize=401MB" (UID: 00018715-00003064), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=e: /on=e: /maxsize=unbounded" (UID: 00018786-00004704), Spawned process "cmd.exe" with commandline "/C "%TEMP%\svchostaaexe.bat"" (UID: 00018790-00028072), Spawned process "timeout.exe" with commandline "TIMEOUT /T 10 /NOBREAK" (UID: 00018825-00028260), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=f: /on=f: /maxsize=401MB" (UID: 00018851-00028396), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=f: /on=f: /maxsize=unbounded" (UID: 00018891-00028320)29:T572,"gimap.jar" has type "data" "it_get.svg" has type "data" "org.eclipse.jface.databinding_1.6.200.v20140528-1422.jar" has type "data" "org-netbeans-modules-core-kit_ja.jar" has type "data" "jfxswt.jar" has type "data" "eclipse.inf" has type "data" "com.jrockit.mc.attach_5.5.1.172852.jar" has type "data" "close.svg" has type "data" "com.jrockit.mc.components.ui.ja_5.5.1.172852.jar" has type "data" "org.eclipse.equinox.p2.transport.ecf_1.1.0.v20140408-1354.jar" has type "data" "org.eclipse.equinox.p2.jarprocessor.nl_zh_4.4.0.v20140623020002.jar" has type "data" "org-netbeans-modules-options-api.jar" has type "data" "com-sun-tools-visualvm-uisupport_ja.jar" has type "data" "org-netbeans-modules-profiler-attach.jar" has type "data" "com-sun-tools-visualvm-host-views.jar" has type "data" "com-sun-tools-visualvm-profiling_zh_CN.jar" has type "data" "org.eclipse.equinox.jsp.jasper.registry_1.0.300.v20130327-1442.jar" has type "data" "com-sun-tools-visualvm-threaddump.jar" has type "data" "org.eclipse.equinox.p2.touchpoint.eclipse.nl_zh_4.4.0.v20140623020002.jar" has type "data" "org-netbeans-modules-keyring-impl_ja.jar" has type "Sendmail frozen configuration - version \301\021\313\245\363\230\245\270\235\324\215\336`F\273\341\227M"\024\030\302\320\247:l\377\257\037\034\2120\304\3353\264e\322\254\312\255)\006\345\257\217`o\021\355k\355N\207\261\200@j\233-6\334"2a:T536,".exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" ".exe" touched file "C:\Windows\SysWOW64\en-US\user32.dll.mui" ".exe" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches" ".exe" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches\cversions.1.db" ".exe" touched file "C:\Windows\SysWOW64\cmd.exe" ".exe" touched file "C:\Windows\AppPatch\sysmain.sdb" ".exe" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000005.db" ".exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\History\desktop.ini" ".exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches" ".exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\cversions.1.db" ".exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000005.db" "cmd.exe" touched file "C:\Windows\AppPatch\sysmain.sdb" "svchosta.exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" "svchosta.exe" touched file "C:\Windows\SysWOW64\en-US\user32.dll.mui" "svchosta.exe" touched file "C:\Windows\AppPatch\sysmain.sdb"2b:T8f4,".exe" wrote bytes "71119f007a3b9e00ab8b02007f950200fc8c0200729602006cc805001ecd9b007d269b00" to virtual address "0x774507E4" (part of module "USER32.DLL") ".exe" wrote bytes "c0dfde771cf9dd77ccf8dd770d64df7700000000c011ca7600000000fc3eca7600000000e013ca76000000009457c57625e0de77c6e0de7700000000bc6ac47600000000cf31ca76000000009319c576000000002c32ca7600000000" to virtual address "0x77551000" (part of module "NSI.DLL") ".exe" wrote bytes "7749ca76cf4ad276e453ca76b079ca7600000000cffd4a7700000000" to virtual address "0x00407000" (part of module "5E2C9EC5A108AF92F177CABE23451D20E592AE54BB84265D1F972FCBD4F6A409.EXE") ".exe" wrote bytes "b4360200" to virtual address "0x75684D68" (part of module "SSPICLI.DLL") ".exe" wrote bytes "68130000" to virtual address "0x76C01680" (part of module "WS2_32.DLL") ".exe" wrote bytes "b830122875ffe0" to virtual address "0x76C01368" (part of module "WS2_32.DLL") ".exe" wrote bytes "d83a6875" to virtual address "0x756901E0" (part of module "SSPICLI.DLL") ".exe" wrote bytes "b4366875" to virtual address "0x75690200" (part of module "SSPICLI.DLL") ".exe" wrote bytes "60122875" to virtual address "0x772DE324" (part of module "WININET.DLL") ".exe" wrote bytes "b4360200" to virtual address "0x75684EA4" (part of module "SSPICLI.DLL") ".exe" wrote bytes "b4366875" to virtual address "0x756901E4" (part of module "SSPICLI.DLL") ".exe" wrote bytes "b840132875ffe0" to virtual address "0x75683AD8" (part of module "SSPICLI.DLL") ".exe" wrote bytes "d83a0200" to virtual address "0x75684E38" (part of module "SSPICLI.DLL") ".exe" wrote bytes "d83a0200" to virtual address "0x75684D78" (part of module "SSPICLI.DLL") ".exe" wrote bytes "d83a6875" to virtual address "0x75690258" (part of module "SSPICLI.DLL") ".exe" wrote bytes "b4366875" to virtual address "0x75690278" (part of module "SSPICLI.DLL") ".exe" wrote bytes "b4366875" to virtual address "0x7569025C" (part of module "SSPICLI.DLL") ".exe" wrote bytes "d83a6875" to virtual address "0x756901FC" (part of module "SSPICLI.DLL")2c:Tefc,".exe" wrote 32 bytes to a remote process "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe" (Handle: 256) ".exe" wrote 52 bytes to a remote process "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe" (Handle: 256) ".exe" wrote 4 bytes to a remote process "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe" (Handle: 256) ".exe" wrote 8 bytes to a remote process "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe" (Handle: 256) ".exe" wrote 1024 bytes to a remote process "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe" (Handle: 256) ".exe" wrote 1 bytes to a remote process "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe" (Handle: 256) ".exe" wrote 512 bytes to a remote process "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe" (Handle: 256) ".exe" wrote 17408 bytes to a remote process "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe" (Handle: 256) ".exe" wrote 3072 bytes to a remote process "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe" (Handle: 256) ".exe" wrote 22528 bytes to a remote process "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe" (Handle: 256) "cmd.exe" wrote 32 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 124) "cmd.exe" wrote 52 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 124) "cmd.exe" wrote 4 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 124) "cmd.exe" wrote 8 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 124) "svchosta.exe" wrote 4 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 256) "svchosta.exe" wrote 8 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 256) "svchosta.exe" wrote 1024 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 256) "svchosta.exe" wrote 1 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 256) "svchosta.exe" wrote 512 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 256) "svchosta.exe" wrote 17408 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 256) "svchosta.exe" wrote 3072 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 256) "svchosta.exe" wrote 22528 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 256) "svchosta.exe" wrote 32 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 256) "svchosta.exe" wrote 52 bytes to a remote process "C:\Users\%OSUSER%\AppData\Local\Temp\svchosta.exe" (Handle: 256) "cmd.exe" wrote 32 bytes to a remote process "C:\Windows\SysWOW64\vssadmin.exe" (Handle: 120) "cmd.exe" wrote 52 bytes to a remote process "C:\Windows\SysWOW64\vssadmin.exe" (Handle: 120) "cmd.exe" wrote 32 bytes to a remote process "C:\Windows\SysWOW64\vssadmin.exe" (Handle: 124) "cmd.exe" wrote 52 bytes to a remote process "C:\Windows\SysWOW64\vssadmin.exe" (Handle: 124) "cmd.exe" wrote 4 bytes to a remote process "C:\Windows\SysWOW64\vssadmin.exe" (Handle: 124) "cmd.exe" wrote 8 bytes to a remote process "C:\Windows\SysWOW64\vssadmin.exe" (Handle: 124) "cmd.exe" wrote 4 bytes to a remote process "C:\Windows\SysWOW64\vssadmin.exe" (Handle: 120) "cmd.exe" wrote 8 bytes to a remote process "C:\Windows\SysWOW64\vssadmin.exe" (Handle: 120)2d:T4e6,Found malicious artifacts related to "172.227.102.35": ... File SHA256: 03a928df275367ee5188550b2a933d96563886ad797fdb8ea3e6f8f7debcd946 (AV positives: 22/71 scanned on 01/11/2019 02:50:42) File SHA256: cb96caf1987e0961ac644f9fd6064e7105046aaf4c000ceb9f1f72cdd3c1be60 (AV positives: 51/71 scanned on 01/10/2019 00:43:46) File SHA256: bcd12e5d4c31dc09bec1f20b6aa61c620a1ffcb6d2c4e05e81ae1a74924f32f9 (AV positives: 59/69 scanned on 01/08/2019 22:27:09) File SHA256: 353c40500028f3f472629d5af186ede3f4354da6e94675b046fa736ebf48d2fa (AV positives: 48/68 scanned on 11/20/2018 10:48:12) File SHA256: fb838994e6d1dbb71c681907e4efafbb4b99fbe144cda2714568f7ec125e3122 (AV positives: 52/69 scanned on 11/20/2018 12:50:33) File SHA256: dc76ee24a7c7bbbc4e08360f4a18718893d90f899f64338de9b6df761de9e0e8 (Date: 08/22/2018 10:42:08) File SHA256: a4091b9731ff117982c796c69f6ab2275d14eca28f1f1056b73fa7649de92990 (Date: 08/14/2018 08:18:16) File SHA256: f3c334318ff59cf265bcad3d0b4e5583521f756f5e5b9f7038e97f3ca9541048 (Date: 08/12/2018 21:18:52) File SHA256: 3c348e97771efff891ddfb836f3dec639e72043f9e714ef104628b1ed5e9e82a (Date: 08/10/2018 05:32:31) File SHA256: f37594849e56dd47314b70278634fb452567d3aacd7aba0b399ceb738c78817b (Date: 08/10/2018 00:02:52)2e:T4e6,Found malicious artifacts related to "172.227.102.35": ... File SHA256: 03a928df275367ee5188550b2a933d96563886ad797fdb8ea3e6f8f7debcd946 (AV positives: 22/71 scanned on 01/11/2019 02:50:42) File SHA256: cb96caf1987e0961ac644f9fd6064e7105046aaf4c000ceb9f1f72cdd3c1be60 (AV positives: 51/71 scanned on 01/10/2019 00:43:46) File SHA256: bcd12e5d4c31dc09bec1f20b6aa61c620a1ffcb6d2c4e05e81ae1a74924f32f9 (AV positives: 59/69 scanned on 01/08/2019 22:27:09) File SHA256: 353c40500028f3f472629d5af186ede3f4354da6e94675b046fa736ebf48d2fa (AV positives: 48/68 scanned on 11/20/2018 10:48:12) File SHA256: fb838994e6d1dbb71c681907e4efafbb4b99fbe144cda2714568f7ec125e3122 (AV positives: 52/69 scanned on 11/20/2018 12:50:33) File SHA256: dc76ee24a7c7bbbc4e08360f4a18718893d90f899f64338de9b6df761de9e0e8 (Date: 08/22/2018 10:42:08) File SHA256: a4091b9731ff117982c796c69f6ab2275d14eca28f1f1056b73fa7649de92990 (Date: 08/14/2018 08:18:16) File SHA256: f3c334318ff59cf265bcad3d0b4e5583521f756f5e5b9f7038e97f3ca9541048 (Date: 08/12/2018 21:18:52) File SHA256: 3c348e97771efff891ddfb836f3dec639e72043f9e714ef104628b1ed5e9e82a (Date: 08/10/2018 05:32:31) File SHA256: f37594849e56dd47314b70278634fb452567d3aacd7aba0b399ceb738c78817b (Date: 08/10/2018 00:02:52)2f:Tc14,Spawned process ".exe" (UID: 00010928-00003236) Spawned process ".exe" (UID: 00011229-00003256) Spawned process "cmd.exe" with commandline "/C copy /B "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe" "%TEMP%\svchosta.exe"" (UID: 00011570-00003672) Spawned process "cmd.exe" with commandline ""/C start "" "%TEMP%\svchosta.exe" "C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe"" (UID: 00011606-00004072), Spawned process "svchosta.exe" with commandline ""C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe"" (UID: 00011615-00004188), Spawned process "svchosta.exe" with commandline ""C:\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe"" (UID: 00011926-00004792), Spawned process "cmd.exe" with commandline "/C "%PUBLIC%\window.bat"" (UID: 00018456-00028092), Spawned process "cmd.exe" with commandline "/C %USERPROFILE%\Desktop\DECRYPT_INFORMATION.html" (UID: 00018464-00028128), Spawned process "vssadmin.exe" with commandline "vssadmin Delete Shadows /all /quiet" (UID: 00018476-00028160), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=c: /on=c: /maxsize=401MB" (UID: 00018530-00028320), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=c: /on=c: /maxsize=unbounded" (UID: 00018575-00028416), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=d: /on=d: /maxsize=401MB" (UID: 00018615-00028488), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=d: /on=d: /maxsize=unbounded" (UID: 00018673-00028596), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=e: /on=e: /maxsize=401MB" (UID: 00018715-00003064), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=e: /on=e: /maxsize=unbounded" (UID: 00018786-00004704), Spawned process "cmd.exe" with commandline "/C "%TEMP%\svchostaaexe.bat"" (UID: 00018790-00028072), Spawned process "timeout.exe" with commandline "TIMEOUT /T 10 /NOBREAK" (UID: 00018825-00028260), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=f: /on=f: /maxsize=401MB" (UID: 00018851-00028396), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=f: /on=f: /maxsize=unbounded" (UID: 00018891-00028320), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=g: /on=g: /maxsize=401MB" (UID: 00018937-00028504), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=g: /on=g: /maxsize=unbounded" (UID: 00018981-00028660), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=h: /on=h: /maxsize=401MB" (UID: 00019018-00028596), Spawned process "vssadmin.exe" with commandline "vssadmin resize shadowstorage /for=h: /on=h: /maxsize=unbounded" (UID: 00019054-00028664), Spawned process "vssadmin.exe" with commandline "vssadmin Delete Shadows /all /quiet" (UID: 00019094-00003068)30:T400,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1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"schema_version":"1.0.15","sha256":"5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1790898703753,"unified_at":"2026-10-01T23:51:43.753Z","metadata":{"hashes":{"sha256":"5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409","sha1":"26600a8c25b03602f4c4cf47e83c988638b4908a","md5":"29f99f63c076a29db46ada694a2201d3","sha512":"19e8580eae6f424c313be076054bbab19b57ff9555b13849dbc6691cb058982565042504989a20861fd4d1661df5320b0fe8acb38ed67cd8b254829d3d7439d5","ssdeep":"3072:uWkPD6tDLxsPMxH3nkxKQo4+vRRWEWF4d8okk95QMv+D4E/kAdG2npGo5m79xhvg:HDtDFD3kJod3LjdmGck9HEn","ssdeep_chunks":["3072:uWkPD6t","3072:WkPD6tD","3072:kPD6tDL","3072:PD6tDLx","3072:D6tDLxs","3072:6tDLxsP","3072:tDLxsPM","3072:DLxsPMx","3072:LxsPMxH","3072:xsPMxH3","3072:sPMxH3n","3072:PMxH3nk","3072:MxH3nkx","3072:xH3nkxK","3072:H3nkxKQ","3072:3nkxKQo","3072:nkxKQo4","3072:kxKQo4+","3072:xKQo4+v","3072:KQo4+vR","3072:Qo4+vRR","3072:o4+vRRW","3072:4+vRRWE","3072:+vRRWEW","3072:vRRWEWF","3072:RRWEWF4","3072:RWEWF4d","3072:WEWF4d8","3072:EWF4d8o","3072:WF4d8ok","3072:F4d8okk","3072:4d8okk9","3072:d8okk95","3072:8okk95Q","3072:okk95QM","3072:kk95QMv","3072:k95QMv+","3072:95QMv+D","3072:5QMv+D4","3072:QMv+D4E","3072:Mv+D4E/","3072:v+D4E/k","3072:+D4E/kA","3072:D4E/kAd","3072:4E/kAdG","3072:E/kAdG2","3072:/kAdG2n","3072:kAdG2np","3072:AdG2npG","3072:dG2npGo","3072:G2npGo5","3072:2npGo5m","3072:npGo5m7","3072:pGo5m79","3072:Go5m79x","3072:o5m79xh","3072:5m79xhv","3072:m79xhvg","6144:uWkPD6t","6144:WkPD6tD","6144:kPD6tDL","6144:PD6tDLx","6144:D6tDLxs","6144:6tDLxsP","6144:tDLxsPM","6144:DLxsPMx","6144:LxsPMxH","6144:xsPMxH3","6144:sPMxH3n","6144:PMxH3nk","6144:MxH3nkx","6144:xH3nkxK","6144:H3nkxKQ","6144:3nkxKQo","6144:nkxKQo4","6144:kxKQo4+","6144:xKQo4+v","6144:KQo4+vR","6144:Qo4+vRR","6144:o4+vRRW","6144:4+vRRWE","6144:+vRRWEW","6144:vRRWEWF","6144:RRWEWF4","6144:RWEWF4d","6144:WEWF4d8","6144:EWF4d8o","6144:WF4d8ok","6144:F4d8okk","6144:4d8okk9","6144:d8okk95","6144:8okk95Q","6144:okk95QM","6144:kk95QMv","6144:k95QMv+","6144:95QMv+D","6144:5QMv+D4","6144:QMv+D4E","6144:Mv+D4E/","6144:v+D4E/k","6144:+D4E/kA","6144:D4E/kAd","6144:4E/kAdG","6144:E/kAdG2","6144:/kAdG2n","6144:kAdG2np","6144:AdG2npG","6144:dG2npGo","6144:G2npGo5","6144:2npGo5m","6144:npGo5m7","6144:pGo5m79","6144:Go5m79x","6144:o5m79xh","6144:5m79xhv","6144:m79xhvg","3072:HDtDFD3","3072:DtDFD3k","3072:tDFD3kJ","3072:DFD3kJo","3072:FD3kJod","3072:D3kJod3","3072:3kJod3L","3072:kJod3Lj","3072:Jod3Ljd","3072:od3Ljdm","3072:d3LjdmG","3072:3LjdmGc","3072:LjdmGck","3072:jdmGck9","3072:dmGck9H","3072:mGck9HE","3072:Gck9HEn"],"imphash":"926bbac552c0f2f7946ebbf780d22f32"},"file_info":{"file_name":"26600a8c25b03602f4c4cf47e83c988638b4908a.ico","file_type":["peexe","executable"],"file_type_id":"exe","file_size":282624,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1536151775000,"last_seen":1640038974000,"last_multi_scan":1640038974000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":["bluteal","bricobert","casdet","gandcrab","genasom","genkryptik","hermes","kryptik","ransomware","stealer","tiggre"]},"stats":{"av":{"malicious_count":20,"suspicious_count":0,"total_engines":27},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":11},"sandbox_signatures":{"informative_count":20,"suspicious_count":20,"malicious_count":11,"total":51},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"malicious","threat_name":"Trojan/Win32.Gandcrab","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"malicious","threat_name":"Trojan/Win32.Tiggre","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"malicious","threat_name":"TR/Agent.efjnz","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"malicious","threat_name":"Gen:Heur.PonyStealer.rm0@d0VRMSnk","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bytehero":{"name":"ByteHero","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"malicious","threat_name":"win/malicious_confidence_100% (W)","status":"malicious","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cyren":{"name":"Cyren","success":true,"verdict":"malicious","threat_name":"W32/VBKrypt.BX.gen!Eldorado","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Gen:Heur.PonyStealer.rm0@d0VRMSnk (B)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"a variant of Win32/Injector.DZJZ trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ikarus":{"name":"IKARUS","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Injector","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"malicious","threat_name":"Trojan ( 00538a651 )","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"malicious","threat_name":"HEUR:Trojan.Win32.Generic","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"malicious","threat_name":"Fareit-FMP!29F99F63C076","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Encoder.ffsbhs","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"quickheal":{"name":"Quick Heal","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"malicious","threat_name":"Mal/FareitVB-L","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"symantec":{"name":"Symantec","success":true,"verdict":"malicious","threat_name":"Trojan.Gen.2","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"malicious","threat_name":"TrojanS.FB6ABE1B","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"malicious","threat_name":"TrojanS.FB6ABE1B","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Encoder.PVO","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"malicious","threat_name":"Trojan.Encoder","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xvirusantimalware":{"name":"Xvirus Anti-Malware","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Trojan.Generic","sources":[{"report_type":"quickscan","report_id":""}]}]},"mitre_attacks":[{"tactic":"Lateral Movement","technique":"Remote Desktop Protocol","attack_id":"T1076","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1076","identifiers":[{"type":"suspicious","value":"Reads terminal service related keys (often RDP related)"}],"sources":[{"report_type":"sandbox","report_id":"5b8fd0df7ca3e1030e1eebb3"},{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"tactic":"Execution","technique":"Service Execution","attack_id":"T1035","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1035","identifiers":[{"type":"suspicious","value":"Opened the service control manager"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"tactic":"Persistence","technique":"Kernel Modules and Extensions","attack_id":"T1215","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1215","identifiers":[{"type":"informative","value":"Opens the Kernel Security Device Driver (KsecDD) of Windows"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"tactic":"Persistence","technique":"Hooking","attack_id":"T1179","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","identifiers":[{"type":"suspicious","value":"Installs hooks/patches the running process"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"tactic":"Privilege Escalation","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","identifiers":[{"type":"malicious","value":"Writes data to a remote process"},{"type":"malicious","value":"Allocates virtual memory in a remote process"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"tactic":"Defense Evasion","technique":"File Deletion","attack_id":"T1107","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1107","identifiers":[{"type":"malicious","value":"Deletes volume snapshots (often used by ransomware)"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"tactic":"Defense Evasion","technique":"Modify Registry","attack_id":"T1112","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1112","identifiers":[{"type":"suspicious","value":"Modifies proxy settings"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"tactic":"Discovery","technique":"Application Window Discovery","attack_id":"T1010","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1010","identifiers":[{"type":"informative","value":"Scanning for window names"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"tactic":"Discovery","technique":"Peripheral Device Discovery","attack_id":"T1120","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","identifiers":[{"type":"informative","value":"Queries volume information of an entire harddrive"},{"type":"informative","value":"Queries volume information"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","identifiers":[{"type":"suspicious","value":"Reads the cryptographic machine GUID"},{"type":"suspicious","value":"Queries sensitive IE security settings"},{"type":"suspicious","value":"Reads the active computer name"},{"type":"suspicious","value":"Reads information about supported languages"},{"type":"informative","value":"Reads the registry for installed applications"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1083","identifiers":[{"type":"malicious","value":"Tries to access unusual system drive letters"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Loads the visual basic runtime environment","description":"\"\" loaded module \"%WINDIR%\\System32\\msvbvm60.dll\" at 72940000","origin":"Loaded Module","id":"module-0","sources":[{"report_type":"sandbox","report_id":"5b8fd0df7ca3e1030e1eebb3"},{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Heuristic match: \"UgR.bE\"","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5b8fd0df7ca3e1030e1eebb3"},{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Remote Access Related","name":"Reads terminal service related keys (often RDP related)","description":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\TERMINAL SERVER\"; Key: \"TSUSERENABLED\")","origin":"Registry Access","mitre_attack_id":"T1076","relevance":10,"id":"registry-61","sources":[{"report_type":"sandbox","report_id":"5b8fd0df7ca3e1030e1eebb3"},{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Input file contains API references not part of its Import Address Table (IAT)","description":"$25","origin":"File/Memory","relevance":10,"id":"string-64","sources":[{"report_type":"sandbox","report_id":"5b8fd0df7ca3e1030e1eebb3"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by a large number of Antivirus engines","description":"49/68 Antivirus vendors marked sample as malicious (72% detection rate)","origin":"External System","relevance":10,"id":"avtest-3","sources":[{"report_type":"sandbox","report_id":"5b8fd0df7ca3e1030e1eebb3"},{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by at least one Antivirus engine","description":"49/68 Antivirus vendors marked sample as malicious (72% detection rate)","origin":"External System","relevance":8,"id":"avtest-0","sources":[{"report_type":"sandbox","report_id":"5b8fd0df7ca3e1030e1eebb3"},{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Contains ability to reboot/shutdown the operating system","description":"ExitWindowsEx@User32.dll at 00016341-00003452-11452-2916-004052F0","origin":"Hybrid Analysis Technology","relevance":5,"id":"stream-23","sources":[{"report_type":"sandbox","report_id":"5b8fd0df7ca3e1030e1eebb3"},{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"Environment Awareness","name":"Queries volume information","description":"\".exe\" queries volume information of \"C:\\\" at 00010928-00003236-00000046-7763376099\n \".exe\" queries volume information of \"C:\\share\" at 00010928-00003236-00000046-7767367540\n \"svchosta.exe\" queries volume information of \"C:\\\" at 00011615-00004188-00000046-30104000651\n \"svchosta.exe\" queries volume information of \"C:\\share\" at 00011615-00004188-00000046-30108941027","origin":"API Call","mitre_attack_id":"T1120","relevance":2,"id":"api-11","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"Environment Awareness","name":"Queries volume information of an entire harddrive","description":"\".exe\" queries volume information of \"C:\\\" at 00010928-00003236-00000046-7763376099\n \"svchosta.exe\" queries volume information of \"C:\\\" at 00011615-00004188-00000046-30104000651","origin":"API Call","mitre_attack_id":"T1120","relevance":8,"id":"api-39","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"Environment Awareness","name":"Reads the registry for installed applications","description":"\".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")\n \".exe\" (Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":10,"id":"registry-55","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"172.227.102.35:80\"\n \"172.227.102.35:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"General","name":"Creates a writable file in a temporary directory","description":"\"cmd.exe\" created file \"%TEMP%\\svchosta.exe\"\n \"cmd.exe\" created file \"%TEMP%\\svchosta.exe:Zone.Identifier\"\n \"iexplore.exe\" created file \"%TEMP%\\~DFCF799AC835F79F2E.TMP\"\n \"iexplore.exe\" created file \"%TEMP%\\~DF700AA34BBC92EA14.TMP\"\n \"iexplore.exe\" created file \"%TEMP%\\~DF17ABA13345BB40C8.TMP\"\n \"iexplore.exe\" created file \"%TEMP%\\JavaDeployReg.log\"","origin":"API Call","relevance":1,"id":"api-4","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\ZonesCacheCounterMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"General","name":"Launches a browser","description":"Launches browser \"iexplore.exe\" (UID: 00018498-00028192)\n Launches browser \"iexplore.exe\" (UID: 00018562-00028400)","origin":"Monitored Target","relevance":3,"id":"target-21","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"General","name":"Overview of unique CLSIDs touched in registry","description":"\".exe\" touched \"Computer\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\SHELLFOLDER\")\n \".exe\" touched \"Memory Mapped Cache Mgr\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\")\n \".exe\" touched \"Security Manager\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\")\n \"vssadmin.exe\" touched \"VSSCoordinator Class\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\")\n \"vssadmin.exe\" touched \"PSFactoryBuffer\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{F2C2787D-95AB-40D4-942D-298F5F757874}\")\n \"vssadmin.exe\" touched \"VssSnapshotMgmt Class\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{0B5A2C52-3EB9-470A-96E2-6C6D4570E40F}\")","origin":"Registry Access","relevance":3,"id":"registry-72","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"$26","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"General","name":"Runs shell commands","description":"\"/C copy /B \"C:\\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe\" \"%TEMP%\\svchosta.exe\"\" on 2019-1-13.20:54:02.577\n \"\"/C start \"\" \"%TEMP%\\svchosta.exe\" \"C:\\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe\"\" on 2019-1-13.20:54:03.108, \"/C \"%PUBLIC%\\window.bat\"\" on 2019-1-13.22:08:00.640, \"/C %USERPROFILE%\\Desktop\\DECRYPT_INFORMATION.html\" on 2019-1-13.22:08:00.750, \"/C \"%TEMP%\\svchostaaexe.bat\"\" on 2019-1-13.22:15:00.609","origin":"Monitored Target","relevance":5,"id":"target-3","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"General","name":"Scanning for window names","description":"\".exe\" searching for class \"Shell_TrayWnd\"\n \"svchosta.exe\" searching for class \"Shell_TrayWnd\"","origin":"API Call","mitre_attack_id":"T1010","relevance":10,"id":"api-70","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"$27","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"General","name":"Spawns new processes that are not known child processes","description":"$28","origin":"Monitored Target","relevance":3,"id":"target-103","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"Installation/Persistance","name":"Connects to LPC ports","description":"\".exe\" connecting to \"\\ThemeApiPort\"\n \"svchosta.exe\" connecting to \"\\ThemeApiPort\"","origin":"API Call","relevance":1,"id":"api-16","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"$29","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"Installation/Persistance","name":"Opens the MountPointManager (often used to detect additional infection locations)","description":"\"cmd.exe\" opened \"\\Device\\MountPointManager\"\n \"iexplore.exe\" opened \"\\Device\\MountPointManager\"","origin":"API Call","relevance":5,"id":"api-51","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"Installation/Persistance","name":"Touches files in the Windows directory","description":"$2a","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"informative","category":"System Security","name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\".exe\" opened \"\\Device\\KsecDD\"\n \"svchosta.exe\" opened \"\\Device\\KsecDD\"\n \"vssadmin.exe\" opened \"\\Device\\KsecDD\"","origin":"API Call","mitre_attack_id":"T1215","relevance":10,"id":"api-37","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Anti-Detection/Stealthyness","name":"Creates a resource fork (ADS) file (often used to hide data)","description":"\"cmd.exe\" created file \"%TEMP%\\svchosta.exe:Zone.Identifier\"","origin":"API Call","relevance":8,"id":"api-19","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Anti-Detection/Stealthyness","name":"Queries kernel debugger information","description":"\"svchosta.exe\" at 00011926-00004792-00000033-41231290137\n \"vssadmin.exe\" at 00018476-00028160-00000033-221485411361\n \"vssadmin.exe\" at 00018530-00028320-00000033-222775153107\n \"vssadmin.exe\" at 00018575-00028416-00000033-228900752088\n \"vssadmin.exe\" at 00018615-00028488-00000033-230361309676\n \"vssadmin.exe\" at 00018673-00028596-00000033-231458660195\n \"vssadmin.exe\" at 00018715-00003064-00000033-227783785800\n \"vssadmin.exe\" at 00018786-00004704-00000033-234462670744\n \"vssadmin.exe\" at 00018851-00028396-00000033-235835781794\n \"vssadmin.exe\" at 00018891-00028320-00000033-237128190176\n \"vssadmin.exe\" at 00018937-00028504-00000033-238254740438\n \"vssadmin.exe\" at 00018981-00028660-00000033-239107682110\n \"vssadmin.exe\" at 00019018-00028596-00000033-235567121022\n \"vssadmin.exe\" at 00019054-00028664-00000033-236455281665\n \"vssadmin.exe\" at 00019094-00003068-00000033-242251142234","origin":"API Call","relevance":6,"id":"api-10","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Anti-Reverse Engineering","name":"Creates guarded memory regions (anti-debugging trick to avoid memory dumping)","description":"\"cmd.exe\" is protecting 8192 bytes with PAGE_GUARD access rights","origin":"API Call","relevance":10,"id":"api-1","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Environment Awareness","name":"Found a dropped file containing the Windows username (possible fingerprint attempt)","description":"Found dropped filename \"HAPUBWS-PC-20171204-1725.log\" containing the Windows username \"HAPUBWS\"","origin":"Binary File","relevance":5,"id":"binary-19","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the active computer name","description":"\".exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"svchosta.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"vssadmin.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":5,"id":"registry-35","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the cryptographic machine GUID","description":"\"svchosta.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")\n \"vssadmin.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":10,"id":"registry-1","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"External Systems","name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"1/66 reputation engines marked \"https://www.bitcoin.com\" as malicious (1% detection rate)\n 1/66 reputation engines marked \"https://www.bitcoin.com/buy-bitcoin\" as malicious (1% detection rate)","origin":"External System","relevance":10,"id":"avtest-6","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"General","name":"Opened the service control manager","description":"\"iexplore.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)","origin":"API Call","mitre_attack_id":"T1035","relevance":10,"id":"api-77","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"General","name":"Reads configuration files","description":"\".exe\" read file \"%USERPROFILE%\\Desktop\\desktop.ini\"","origin":"API Call","relevance":4,"id":"api-6","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Drops executable files","description":"\"org.eclipse.equinox.p2.metadata.repository_1.2.100.v20131209-2144.jar\" has type \"COM executable for DOS\"\n \"cldrdata.jar\" has type \"88K BCS executable\"\n \"template.msi\" has type \"DOS executable (COM)\"\n \"PUBLIC\" has type \"b.out segmented standalone executable 286 286\"","origin":"Binary File","relevance":10,"id":"binary-1","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 172.227.102.35 on port 80 is sent without HTTP header\n TCP traffic to 172.227.102.35 on port 443 is sent without HTTP header","origin":"Network Traffic","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"Detected indicator that file is ransomware","description":"\"document.write(\"All your important files are encrypted\");\" (Source: DECRYPT_INFORMATION.html, Indicator: \"files are encrypted\")\n \"document.write(\"Your files has been encrypted using RSA2048 algorithm with unique public-key stored on your PC.

\"+a1+\"There is only one way to get your files back: contact with us\n pay\n and get decryptor software. \"+a1+\"We accept Bitcoin\n and other cryptocurrencies\n you can find exchangers on \"+link+\"

\"+a1+\"You have unique idkey (in a yellow frame)\n write it in letter when contact with us.

\"+a1+\"Also you can decrypt 1 file for test\n its guarantee what we can decrypt your files.

\"+key+a1+\"Contact information:

\");\" (Source: DECRYPT_INFORMATION.html, Indicator: \"decrypt your files\")","origin":"File/Memory","relevance":7,"id":"string-13","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"The analysis extracted a known ransomware file","description":"Found dropped filename \"DECRYPT_INFORMATION.html\" which has been seen in the context of ransomware (Indicator: DECRYPT_INFORMATION.html)\n Found dropped filename \"_ReadMe_.txt\" which has been seen in the context of ransomware (Indicator: README_.txt)","origin":"Binary File","relevance":5,"id":"binary-9","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"The input sample dropped very many files","description":"The input sample dropped 2000 files (often an indicator for ransomware)","origin":"Binary File","relevance":5,"id":"binary-10","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"System Security","name":"Modifies proxy settings","description":"\".exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")\n \".exe\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")","origin":"Registry Access","mitre_attack_id":"T1112","relevance":10,"id":"registry-27","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"System Security","name":"Queries sensitive IE security settings","description":"\".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":8,"id":"registry-36","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Installs hooks/patches the running process","description":"$2b","origin":"Hook Detection","mitre_attack_id":"T1179","relevance":10,"id":"hooks-8","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Reads information about supported languages","description":"\".exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")\n \"svchosta.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":3,"id":"registry-25","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"malicious","category":"General","name":"The analysis spawned a process that was identified as malicious","description":"47/67 Antivirus vendors marked spawned process \".exe\" (PID: 3256) as malicious (classified as \"Gen:Heur.PonyStealer\" with 70% detection rate)\n 47/67 Antivirus vendors marked spawned process \"svchosta.exe\" (PID: 4188) as malicious (classified as \"Gen:Heur.PonyStealer\" with 70% detection rate)\n 47/67 Antivirus vendors marked spawned process \"svchosta.exe\" (PID: 4792) as malicious (classified as \"Gen:Heur.PonyStealer\" with 70% detection rate)","origin":"Monitored Target","relevance":10,"id":"target-58","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"malicious","category":"Installation/Persistance","name":"Allocates virtual memory in a remote process","description":"\".exe\" allocated memory in \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\Tcpip\\Parameters\\Interfaces\"\n \".exe\" allocated memory in \"%WINDIR%\\AppPatch\\sysmain.sdb\"\n \"svchosta.exe\" allocated memory in \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\Tcpip\\Parameters\\Interfaces\"\n \"cmd.exe\" allocated memory in \"\\Device\\MountPointManager\"","origin":"API Call","mitre_attack_id":"T1055","relevance":7,"id":"api-20","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"malicious","category":"Installation/Persistance","name":"Writes data to a remote process","description":"$2c","origin":"API Call","mitre_attack_id":"T1055","relevance":6,"id":"api-0","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"malicious","category":"Network Related","name":"Malicious artifacts seen in the context of a contacted host","description":"$2d","origin":"Network Traffic","relevance":10,"id":"network-21","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"malicious","category":"Network Related","name":"Multiple malicious artifacts seen in the context of different hosts","description":"$2e","origin":"Network Traffic","relevance":10,"id":"network-27","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"malicious","category":"Ransomware/Banking","name":"Deletes volume snapshots (often used by ransomware)","description":"Deletes volume snapshots files \"vssadmin.exe\" with commandline \"vssadmin Delete Shadows /all /quiet\" (UID: 00018476-00028160)\n Deletes volume snapshots files \"vssadmin.exe\" with commandline \"vssadmin Delete Shadows /all /quiet\" (UID: 00019094-00003068)","origin":"Monitored Target","mitre_attack_id":"T1107","relevance":10,"id":"target-4","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Spawns a lot of processes","description":"$2f","origin":"Monitored Target","relevance":8,"id":"target-14","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Tries to access unusual system drive letters","description":"\"svchosta.exe\" touched \"Y:\\\"","origin":"API Call","mitre_attack_id":"T1083","relevance":9,"id":"api-31","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]}],"incidents":[{"name":"Remote Access","details_count":1,"details":[{"detail":"Reads terminal service related keys (often RDP related)"}],"sources":[{"report_type":"sandbox","report_id":"5b8fd0df7ca3e1030e1eebb3"},{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Ransomware","details_count":2,"details":[{"detail":"Detected indicator that file is ransomware"},{"detail":"Deletes volume snapshots (often used by ransomware)"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Spyware","details_count":2,"details":[{"detail":"Found a string that may be used as part of an injection method"},{"detail":"Deletes volume snapshots (often used by ransomware)"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Persistence","details_count":2,"details":[{"detail":"Writes data to a remote process"},{"detail":"Spawns a lot of processes"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Fingerprint","details_count":6,"details":[{"detail":"Queries kernel debugger information"},{"detail":"Found a dropped file containing the Windows username (possible fingerprint attempt)"},{"detail":"Reads the cryptographic machine GUID"},{"detail":"Reads the windows installation language"},{"detail":"Reads the active computer name"},{"detail":"Queries sensitive IE security settings"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Spreading","details_count":1,"details":[{"detail":"Tries to access unusual system drive letters"}],"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]}]},"activity":{"stats":{"process_count":26,"spawned_processes_count":26,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":34,"imported_dlls_count":143,"dropped_files_count":0,"extracted_files_count":259,"files_written_count":779,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":16,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":16,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":2,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":["bluteal","bricobert","casdet","gandcrab","genasom","genkryptik","hermes","kryptik","ransomware","stealer","tiggre"],"sample_flags":["Multi-Process","Network Traffic","Extracted Files","Sample not shared","TOR analysis"],"sandbox_reports":[{"id":"5c3b94d47ca3e114e50fa310","environment_id":120,"environment_description":"Windows 7 64 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"malware_family":"Gen:Heur.PonyStealer","contacted_countries":["USA"],"submit_name":"5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe","analysis_start_time":"2019-01-13T20:53:45+00:00","indicators_count":{"informative":20,"suspicious":26,"malicious":13},"tags":["Multi-Process","Network Traffic","Extracted Files","Sample not shared","TOR analysis"],"is_in_unified_schema":true},{"id":"5b8fd0df7ca3e1030e1eebb3","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"malicious","threat_score":88,"malware_family":"Gen:Heur.PonyStealer","submit_name":"26600a8c25b03602f4c4cf47e83c988638b4908a.ico","analysis_start_time":"2018-09-05T13:45:09+00:00","indicators_count":{"informative":2,"suspicious":2,"malicious":4},"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"172.227.102.35","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"address":"172.227.102.35","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]}],"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}],"processes":[{"pid":3236,"ppid":0,"name":"5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe","command_line":"","sha256":"5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409","normalized_path":"C:\\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe","uid":"00010928-00003236","icon":"$30"},{"pid":3256,"ppid":3236,"name":"5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe","command_line":"","sha256":"5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409","normalized_path":"C:\\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe","parent_uid":"00010928-00003236","uid":"00011229-00003256"},{"pid":3672,"ppid":3256,"name":"cmd.exe","command_line":"/C copy /B \"C:\\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe\" \"%TEMP%\\svchosta.exe\"","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\SysWOW64\\cmd.exe","parent_uid":"00011229-00003256","uid":"00011570-00003672"},{"pid":4072,"ppid":3256,"name":"cmd.exe","command_line":"\"/C start \"\" \"%TEMP%\\svchosta.exe\" \"C:\\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe\"","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\SysWOW64\\cmd.exe","parent_uid":"00011229-00003256","uid":"00011606-00004072"},{"pid":4188,"ppid":4072,"name":"svchosta.exe","command_line":"\"C:\\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe\"","sha256":"5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409","normalized_path":"%TEMP%\\svchosta.exe","parent_uid":"00011606-00004072","uid":"00011615-00004188"},{"pid":4792,"ppid":4188,"name":"svchosta.exe","command_line":"\"C:\\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe\"","sha256":"5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409","normalized_path":"%TEMP%\\svchosta.exe","parent_uid":"00011615-00004188","uid":"00011926-00004792"},{"pid":28092,"ppid":4792,"name":"cmd.exe","command_line":"/C \"%PUBLIC%\\window.bat\"","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\SysWOW64\\cmd.exe","parent_uid":"00011926-00004792","uid":"00018456-00028092"},{"pid":28160,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin Delete Shadows /all /quiet","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00018476-00028160"},{"pid":28320,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin resize shadowstorage /for=c: /on=c: /maxsize=401MB","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00018530-00028320"},{"pid":28416,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin resize shadowstorage /for=c: /on=c: /maxsize=unbounded","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00018575-00028416"},{"pid":28488,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin resize shadowstorage /for=d: /on=d: /maxsize=401MB","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00018615-00028488"},{"pid":28596,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin resize shadowstorage /for=d: /on=d: /maxsize=unbounded","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00018673-00028596"},{"pid":3064,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin resize shadowstorage /for=e: /on=e: /maxsize=401MB","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00018715-00003064"},{"pid":4704,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin resize shadowstorage /for=e: /on=e: /maxsize=unbounded","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00018786-00004704"},{"pid":28396,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin resize shadowstorage /for=f: /on=f: /maxsize=401MB","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00018851-00028396"},{"pid":28320,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin resize shadowstorage /for=f: /on=f: /maxsize=unbounded","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00018891-00028320"},{"pid":28504,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin resize shadowstorage /for=g: /on=g: /maxsize=401MB","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00018937-00028504"},{"pid":28660,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin resize shadowstorage /for=g: /on=g: /maxsize=unbounded","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00018981-00028660"},{"pid":28596,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin resize shadowstorage /for=h: /on=h: /maxsize=401MB","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00019018-00028596"},{"pid":28664,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin resize shadowstorage /for=h: /on=h: /maxsize=unbounded","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00019054-00028664"},{"pid":3068,"ppid":28092,"name":"vssadmin.exe","command_line":"vssadmin Delete Shadows /all /quiet","sha256":"e09bf4d27555ec7567a598ba89ccc33667252cef1fb0b604315ea7562d18ad10","normalized_path":"%WINDIR%\\SysWOW64\\vssadmin.exe","parent_uid":"00018456-00028092","uid":"00019094-00003068"},{"pid":28128,"ppid":4792,"name":"cmd.exe","command_line":"/C %USERPROFILE%\\Desktop\\DECRYPT_INFORMATION.html","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\SysWOW64\\cmd.exe","parent_uid":"00011926-00004792","uid":"00018464-00028128"},{"pid":28192,"ppid":28128,"name":"iexplore.exe","command_line":"%USERPROFILE%\\Desktop\\DECRYPT_INFORMATION.html","sha256":"58ac3fef55e35bffc0319f37434bda136ae506ec4a984dbb5fe1b7f24852a16e","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00018464-00028128","uid":"00018498-00028192"},{"pid":28400,"ppid":28192,"name":"iexplore.exe","command_line":"SCODEF:28192 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\(x86)\\Internet Explorer\\iexplore.exe","parent_uid":"00018498-00028192","uid":"00018562-00028400"},{"pid":28072,"ppid":4792,"name":"cmd.exe","command_line":"/C \"%TEMP%\\svchostaaexe.bat\"","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\SysWOW64\\cmd.exe","parent_uid":"00011926-00004792","uid":"00018790-00028072"},{"pid":28260,"ppid":28072,"name":"timeout.exe","command_line":"TIMEOUT /T 10 /NOBREAK","sha256":"c4efafc49d46dba7e89cd94892799c739a3103f724fec9be494bf1267fdb059e","normalized_path":"%WINDIR%\\SysWOW64\\timeout.exe","parent_uid":"00018790-00028072","uid":"00018825-00028260"}],"all_imported_dlls":["advapi32.dll","rpcrt4.dll","ntdll.dll","msvbvm60.dll","usp10.dll","sechost.dll","ole32.dll","imm32.dll","msctf.dll","KernelBase.dll","gdi32.dll","oleaut32.dll","kernel32.dll","lpk.dll","msvcrt.dll","user32.dll","vsstrace.dll","VxSSL64.dll","mswsock.dll","d3d10warp.dll","rpcss.dll","credssp.dll","gpapi.dll","ssv.dll","userenv.dll","IEShims.dll","mfplat.dll","DWrite.dll","IPHLPAPI.DLL","wininet.dll","crypt32.dll","wkscli.dll","comdlg32.dll","WindowsCodecs.dll","oleaccrc.dll","normaliz.dll","cryptsp.dll","dnsapi.dll","jp2ssv.dll","netutils.dll","dxgi.dll","ntmarta.dll","winbrand.dll","winsta.dll","mscorwks.dll","jscript9.dll","imagehlp.dll","apphelp.dll","setupapi.dll","version.dll","shell32.dll","wow64cpu.dll","dhcpcsvc.dll","secur32.dll","ntlanman.dll","davhlpr.dll","cryptbase.dll","ieui.dll","FWPUCLNT.DLL","xmllite.dll","MSOHEV.DLL","devobj.dll","urlmon.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","bcrypt.dll","iertutil.dll","ExplorerFrame.dll","wintrust.dll","SensApi.dll","duser.dll","ws2_32.dll","Wldap32.dll","drprov.dll","vssapi.dll","sfc_os.dll","npmproxy.dll","profapi.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","davclnt.dll","d3d11.dll","msasn1.dll","atl.dll","netapi32.dll","sspicli.dll","cscapi.dll","webio.dll","winmm.dll","wow64win.dll","sxs.dll","rsaenh.dll","nlaapi.dll","mf.dll","propsys.dll","msvcr100.dll","srvcli.dll","WSHTCPIP.DLL","deploy.dll","api-ms-win-downlevel-version-l1-1-0.dll","RpcRtRemote.dll","winhttp.dll","URLREDIR.DLL","comctl32.dll","msvcr90.dll","mshtmlmedia.dll","clbcatq.dll","ncrypt.dll","avrt.dll","mshtml.dll","nsi.dll","sqmapi.dll","mscoreei.dll","msimtf.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","dhcpcsvc6.dll","oleacc.dll","wow64.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","netprofm.dll","d2d1.dll","bcryptprimitives.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","schannel.dll","cryptnet.dll","mlang.dll","cfgmgr32.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","dui70.dll","ksuser.dll","uxtheme.dll","shlwapi.dll","ieframe.dll","wship6.dll","sfc.dll","rasadhlp.dll","msimg32.dll","mpr.dll","api-ms-win-downlevel-user32-l1-1-0.dll","dwmapi.dll","ieproxy.dll","mscoree.dll","winnsi.dll","wshqos.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"svchostaaexe.bat","sha256":"98913111013cb65d054eb09398f4f31a80dc8daa0408a01cb76c6fd76332aa34","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Cookies","sha256":"da0f8742c6b43559e54161519cda95b77915a39929cd1b989cc726727764bb14","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"50D6B15D9F2DCE1EDBB0C098625FBE47_281AC807DE0FEF15F2CA9911FE760A9B","sha256":"d2b2d5f0b4954e57ec2a2b576e9d03f39daed71eb1388591ee445fe8bd965eb2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"plugin.jar","sha256":"c08c60884b49b4be809e57487b498b7fd2c20115d4f0525291c4b3f248818ea3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"7-zip.chm","sha256":"2a637535a7d5d3b66eac10d5d9c03e2889a2e77f07ed60fd13fd64f6f852daf9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"History.txt","sha256":"cd909ead2bb9765c177ff4ebad6981d4ad92d69f6d8221e6bcc26694162c7c9b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"an.txt","sha256":"ed4192708f54c1486aaa5f6f5f3f1091f0d85d58835bb00358ce700a8518f4b7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"az.txt","sha256":"6872f0cb49ff607510f0983151f0e3d6fc67deff7f442c8b1fd53049eaa4af46","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"ba.txt","sha256":"5c62169430369b5348b709bb4a8490126578da21c4ae8718229f529f5e4ac9ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"bn.txt","sha256":"02365268022259a9b85652b26dec6194f4ac5956d4c08b9b3634a58e785d2c2d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"br.txt","sha256":"30e21a426838cb40521a47212338974c9e9d8c75db3e937c2f419a892ff64e88","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"ca.txt","sha256":"5f9803e7d7cf945ac356dc88af12ad2e0300dbe109c87c9b45b527fd478dd06a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"es.txt","sha256":"a25457c457bb3dbc38f5206705756cf2eba246f17b2c0af222e59df9a57ee0d2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"ext.txt","sha256":"8acecd05d80470fd0b77075a32611fc50b470c3d7ba487f7dec63ad4577491cf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"fi.txt","sha256":"b3ba43e03681fbdad0e7b58852ae5221ef3e7120100fb8f435bd7a45acc81c28","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"fy.txt","sha256":"71e3a6b41616db4018f72480c18cac6993ead60c725a3e4ab9e73b020584f156","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"ga.txt","sha256":"1455044673e20373fd38c11f3ae448f95d3fd8f90f678898c30a3525850d2b98","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"gl.txt","sha256":"2f45e27e99db93bc14f9969cd4694f8af6d54ad1e02978c9dd852390ca43ecdd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"gu.txt","sha256":"04043a19aae71f836613633254ae686fd2c837edc8a9a670051d11caf7586696","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"hr.txt","sha256":"26a7f0aa742ffab1de2cd9159590e00db22222a7ebfd9380a4784425d78a7d49","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"hu.txt","sha256":"940e647ebf000875af1444e97cd731ae48540d97dcf37fce2819bcc65c7b9c95","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"install.ins","sha256":"37af675a3baebb7fb11096a301c3d2bbf7a83e85dc0921c425a6ebb60a654ba5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"javacpl.cpl","sha256":"f2b029d245d4c22d21eceaefc2787f0caa076d86c1699ea30d4f18efebfb3b01","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Office32WW.msi","sha256":"a4c46729d8f685735665ac573abc92ee4df2d7b786cec5a13dff52b9965515bb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Proofing.msi","sha256":"621c9cce1106d0cd78ddb945bb6894859be22ede696820b8bbae30361b19e013","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"OneNoteMUI.msi","sha256":"be2059e8692ce48fa0c58bdb374cdefc3739c1f5afed065f92539a74ef77fffc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"GrooveMUI.msi","sha256":"06afd749b0d79fe024b751ac85f523e919baa9d1ed8083bf11f796b0e1c486fa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"OfficeMUI.msi","sha256":"3160706c95965c5a8de3e15c00f3377a661db78a9a30752c09d73d8b0f92dfae","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"OfficeMUISet.msi","sha256":"e603f47a6037c249c22277f853503f453b77ec4d9729500ab8c1dc7d19cf08b1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"pss10r.chm","sha256":"71ba761f3e42f33c4df4192f36c22b067805793cfea0860e5d2fc97233644a79","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"gimap.jar","sha256":"bbc7ec22117f17b45c4921c9391cc548d6e3ad5a3a523432cabd58b699a012e8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.jface.databinding_1.6.200.v20140528-1422.jar","sha256":"55fb0706ca07786a7ab0dfc5b5e8d3002ae30a56d71de18128aa43c4c095986e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-core-kit_ja.jar","sha256":"64a4bed82849d3c5cbed725ecf3ee5f5600f814838caa76cbf5e032bc3ed1e91","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"jfxswt.jar","sha256":"a7d73dd61d1107a29fa878efc7e6e2ea1b00f9d93e29d7c2c822776f3669b002","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"eclipse.inf","sha256":"079802108b305fa21830d6817f52b7f06675e04733050720d9e7d606ee7ad849","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.attach_5.5.1.172852.jar","sha256":"0e2e1cbf5619a42193806db22843d242e5f0643cd0a681fe3a689952df11814a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.components.ui.ja_5.5.1.172852.jar","sha256":"a9253383fadd996991b179f7a4e1c29663d2db0c9c506a9f2c5abeff37ea40c0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.transport.ecf_1.1.0.v20140408-1354.jar","sha256":"e60a65dc1f4b1534ae8869e380dabeaaf1ffc0f51d623cf8e299719fda002483","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.jarprocessor.nl_zh_4.4.0.v20140623020002.jar","sha256":"e3cabe2b3fa8dc828c4fd385ce13dd99d1bf7dd48e48947beadec54bca1773c8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-options-api.jar","sha256":"69b872514e530220685ead9eddc06269c0a94628535dc88222312d5f9b1b54f3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-uisupport_ja.jar","sha256":"8eaeb830b0402a219944108da34c032f43fd7ed9951202373613e8d3c0b829f2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-profiler-attach.jar","sha256":"7646bfd093d8a3859c7c3ff5031285ae085db7640c52d7637d8d95a0ca5c4982","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-host-views.jar","sha256":"fb3c489f86fd97103bbd623da43fc74c8361334e3bb2beb6a56efbb9bd9e3615","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-profiling_zh_CN.jar","sha256":"8ed85ae23e73d3115340ae815608d05e2aa16996284caea5111ca890ff3015f5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.jsp.jasper.registry_1.0.300.v20130327-1442.jar","sha256":"5aa5d1409aaf5a448d2eaf5b0e68fa8fa0499d68b04eef5e267dccf85de1f8d1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-threaddump.jar","sha256":"45601c3000ffac9525bb4cae7753007887c6387863ac2ee8b4db1be00deffe4a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.touchpoint.eclipse.nl_zh_4.4.0.v20140623020002.jar","sha256":"6df0b3b7a4432664fc62c8286944319e3b5b6a31112daf1cdbd467128ce58581","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-keyring-impl_ja.jar","sha256":"f7a4de3f54d0e3ee88f76c6aa058c044df4b09728eeee53b3192eb4fc4b5d24f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-sampler_zh_CN.jar","sha256":"2b541b65c0ba4a5983f73e7d5c36c27c1e6909fd101f7459e0f46fbebef03e4e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.browser.ja_5.5.1.172852.jar","sha256":"91b18111bc7d96d0872ced105ee16c084ac7fafc560e751817fe1d2d464c5b58","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-loaders_zh_CN.jar","sha256":"2dd829130aa76bae12299f20df323284e9d54a69fc3d6c059776e29a4e7981c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-queries.jar","sha256":"2231c56dded3753dc7dd5f919bd3f63829c012383c5b69424901afe4ef522944","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.jetty.continuation_8.1.14.v20131031.jar","sha256":"5eff08e287dc0e7f0e137bf9fc6bec28022a0bf6d6d14da0b4500a52fcc66122","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-masterfs-nio2_zh_CN.jar","sha256":"d2f22cae5ce04868762946095b583205eae75bf6cc079b66e5a9378f92ad7bc4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.osgi.compatibility.state_1.0.1.v20140709-1414.jar","sha256":"c28c7413cce607dba515d02b3233e9a310bb7a98dc99e47caca133ea2c2239ac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.console.ui.ja_5.5.1.172852.jar","sha256":"533c119f93e65a59091186a5d5796871977db2e8ae862e5013bc109de0cb6fe7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"derbyLocale_zh_CN.jar","sha256":"f8bebecfdf338138466fa9101bd1ba80ed71621f051f6cbde0519d832b63d5c5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.help.ui.nl_ja_4.4.0.v20140623020002.jar","sha256":"193077849481b534444193cfe44111954dcc9eb8f209b83a857ec5630a2f9c50","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.swt.win32.win32.x86.nl_ja_4.4.0.v20140623020002.jar","sha256":"17d15aa2633aca4e4dc6883f472563d43b826bee513474e12456afb63bdb8edf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.core.net.nl_zh_4.4.0.v20140623020002.jar","sha256":"b85079ceac36cb1526b6fb9b377886736ea20e2b9ebea9e9d0c7203782e01ff3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.jface.databinding.nl_zh_4.4.0.v20140623020002.jar","sha256":"b9f1339e08239b5d899d6257819d4d8a7b7f364b2dd6a885989f49134822e919","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.touchpoint.eclipse.nl_ja_4.4.0.v20140623020002.jar","sha256":"1e553aebeffdc54a564a7d9e5d671bde952780216220a6a120e1b2aeb458e3d3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.console.historicaldata_5.5.1.172852.jar","sha256":"0f52f4f0ac8fa9937221548de2ba094c674fcb75cd8c7086cbdfcd065800f338","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.greychart.ui_5.5.1.172852.jar","sha256":"0e9cfad0203aca963ac03a6a104553314a570bf77f28449331c2b9ad08476f8a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.metadata.repository_1.2.100.v20131209-2144.jar","sha256":"1b958b4165c4293e867d6f85707bd1e0bf363599d0f477d522ebe721cca0e1ca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-io_ja.jar","sha256":"9a606ba103cadaa537fc1eafb09400c71fcee338d8d5c99056673d330706a411","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.ui.sdk.scheduler_1.2.0.v20140422-1847.jar","sha256":"06ef65a8d91b848a8d20fd1619e950b90bcc68ffa110925d1c1c8bc35f056b0a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.core.net.nl_ja_4.4.0.v20140623020002.jar","sha256":"4b1759fd0c34d6dd0a8c1fcea8131882b529c2758338b64d2f64f3b7a2ae3808","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-masterfs_zh_CN.jar","sha256":"417fa00d3a50c5309526748b0b06c95ea4798b8d525f359d97db247c4cf4a0a0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-host-remote.jar","sha256":"425f285d48b93294116260749018d5b4f9de0fa2eece7aa034143ab8553b285c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.flightrecorder.ui.zh_CN_5.5.1.172852.jar","sha256":"2fa9e80f92e39e554ec829d538d0223a3f91d47b4c21a7fb8761324b05f9c2c1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.core.databinding.property.nl_zh_4.4.0.v20140623020002.jar","sha256":"fe484dc02c5c23683dd39d299a7c98b78b459f0ba43d6d970b87ef2994a58f52","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"javax.servlet.jsp_2.2.0.v201112011158.jar","sha256":"fce569dedb88c97ec326915d1613b52809bf6b0f9d9e7b1af0e6a6c6f7fb4c5d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"US_export_policy.jar","sha256":"32459fbb1f8dcf4e92d5ef79db36626474f33d5a19cb40d4816b34afedb7f443","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"cldrdata.jar","sha256":"d924983d1f25acc6ed7374d7ab94e2db462d339a34b2c7c02479e4854808c484","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-lib-profiler_zh_CN.jar","sha256":"5a75afec12c9350e48672541a291532bd3672a4ce0b00bc24395816be3b10214","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-actions_zh_CN.jar","sha256":"d642cb71e75278afbdb500e13e4ce94b5a50aad0ae1433bd4d1f12822f45edd1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-awt.jar","sha256":"7fe793f8788828412951152a83d96e463826aed98027fcd3b527e00ce0cc2f8a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.apache.felix.gogo.runtime_0.10.0.v201209301036.jar","sha256":"f9855c7e448aa671b4b764c9dc2ef729487c6bc7f8e7fd8a0cbab72e119120db","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.core.databinding.property.nl_ja_4.4.0.v20140623020002.jar","sha256":"8ab2a3cf4d37ee8ada1d589daebb6ec1c4c6ff4c60a726d8c4832aeb283eb50b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.artifact.repository.nl_ja_4.4.0.v20140623020002.jar","sha256":"1bc32729bacbd98bab759f494b67db50d17e84a46047ac2974ad6d39437f2007","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"nashorn.jar","sha256":"09a9c4ca20bd92c48c5ecf151386bce74c711e25401f542e2c7d9460c7f0c288","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"template.msi","sha256":"6db01ae9dcc0f4406c5b55fcee344d4e7feb67a257221d75fb1758015f42fe4b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-windows.jar","sha256":"23bf5364b7af0d767ff44ece630cda9147ad351f9927d18dc80d0cb1f6d582d6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.workbench.addons.swt.nl_zh_4.4.0.v20140623020002.jar","sha256":"2d921329b942b249dc0c956a9bfe596c81f04a5192150f2100f94a916d346294","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.workbench_1.2.1.v20140901-1244.jar","sha256":"324b2f69dd3075cf0d628a750bfee24fdbe3f8618d2e2642c9e4dc6ab28bd7d4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.css.swt.theme.nl_zh_4.4.0.v20140623020002.jar","sha256":"bae24800d68373449c509a30431337cd5e0bf45c24becf68ddddae79c4c9d896","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.event_1.3.100.v20140115-1647.jar","sha256":"b19c1d8585d92aa52e1b8f2d38d77e67799701c7aa1c06e0035950703449e549","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.ui.nl_ja_4.4.0.v20140623020002.jar","sha256":"d4cd58456679920410657ca9ed31c403c667b33dfe542cd048cf8c7d83df4fd3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.services.nl_ja_4.4.0.v20140623020002.jar","sha256":"d85cb020d937cae5abf0c8c78ba04a9f503390958c109a397f2eeabb25a6121e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.ecf_3.4.0.v20140827-1444.jar","sha256":"eeb0e87ff70bf753e5a3c3a38fc00b26d46ebcdaba947097524ba8d5de955004","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.workbench3_0.12.0.v20140227-2118.jar","sha256":"c8e7faee07b4ff6632afbe752d1c29adecdd65bc44db10aeff58599a2b1acb6b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.core.commands.nl_ja_4.4.0.v20140623020002.jar","sha256":"103031b1a05dcec2e5573502fe4c6f9c6e00c7d8c0fd88e6e75984f6a8b43495","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-core-windows_ja.jar","sha256":"d0a1fd7860202659d1408a8b0659c1e44f734c11b947d0866cbe7e31e07ff7ac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"startNetworkServer.bat","sha256":"d751efe7a0f4c7a87510e6c899b8e82e0afa2347fc241dd66ce22927de8df73f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.apache.lucene.core_3.5.0.v20120725-1805.jar","sha256":"19680ed24e053fa88bd1944520deda75c215e7be119db52d9a1f1d13daa1e5f1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.osgi.nl_ja_4.4.0.v20140623020002.jar","sha256":"c82ba59734375c022221caa0ea53a18e43ba60f77b8bbe2e161659b74584e139","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.flightrecorder.ui.ja_5.5.1.172852.jar","sha256":"e1135baae3e3cd4fd6fbc03b34967a34cb3a892fcc8fe6396592ef55f29e76e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"notepad.vbs","sha256":"b447da00a46eb3d8f33ba446afe8b292e95876345223f37d732c6dc3e3a11518","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"jfluid-server.jar","sha256":"6e36733e9d3831166122994d6cd294a883d448cd4d807c903d99919401ee7c83","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"setNetworkClientCP.bat","sha256":"14eedc061442accd4fd8637f4f92230d19a641aa8531a4cfc02ebb6cc9904481","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Test2.doc","sha256":"eac7fa4bdfe0be4df103576cbe40daf69486c2cf45989209568c6e751df34300","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.operations.nl_ja_4.4.0.v20140623020002.jar","sha256":"3a50037aeb42e8632054bea55e8a0b9093a598d99e4bb185ec60a0fb44875263","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"derbyLocale_pt_BR.jar","sha256":"6ae1cc5e54992ed286be549ba1011cbca886b11f80ee205aa6be9133252f46d2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-lib-profiler-ui_ja.jar","sha256":"bcf9c0c04addf1fad94aa5e8b11c124cb591b83cd26548a0106059fd76ae1653","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-text_zh_CN.jar","sha256":"df82c7d19e915f27b496c71e899c3b52efb723642e989efacba823cb66e232a9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"jaccess.jar","sha256":"496c723a5ac4fe6c38b18f47cee558b1e35cf469b0e73ff3b1e6c3ddd6e2f155","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-filesystems.jar","sha256":"bcaa879619c8b9594b63c63fbe40dd61116fd7f910a650d9564221bea2996358","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.browser.attach.zh_CN_5.5.1.172852.jar","sha256":"ee0d70c065a8e31315c89af3bd9663fc222ee01d7aed1614ac036260d52c1292","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.alert.ja_5.5.1.172852.jar","sha256":"d0df4dcd6f7a12096f7ea8b7dc367b5f93f6e4368c2ad42d25f5960e3eaf1557","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.emf.ecore.change_2.10.0.v20140901-1043.jar","sha256":"555b37cb2c61c80f5d6828bd3368303c9093bcad08802f71f7d0e125f892d481","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-core-ui_ja.jar","sha256":"5db8ab2ec2b222b79b580b30ba2ca64bd1b68ea11a8fe8b7e3c3e372621ea6f9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.css.core.nl_zh_4.4.0.v20140623020002.jar","sha256":"75814fdc93b50464b46f6a62b066a3ea8bcf116b58578cf179e072208326ab59","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.ui.net.nl_ja_4.4.0.v20140623020002.jar","sha256":"54ca910966cc6f8eac94ed5533f63ad0282b799c64b1e701c4fd57945c6c38f0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-host-remote_ja.jar","sha256":"01fd4161f04abe04313a25341da8053038c361979be32e7b582316c7849055a2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-application_zh_CN.jar","sha256":"7c606197f187b0bbcac6e0357db466824f5067a02c73497429936bd513621fa6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"tap0901.cer","sha256":"52db52a283ac9a03cf4052004407ba7104927560135704c2cec4828a8014edc1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-swing-outline_zh_CN.jar","sha256":"c0b77baa24106b89eb817e09df29630b2bb7290532d296d09f7ff76db5e2dc48","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-api-visual_ja.jar","sha256":"07594e4084384a00424535758a6cf8fdb271daaf744c7fd91bd901405f1d1361","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-util-lookup_zh_CN.jar","sha256":"8ab199333e86bd3fd4f7d1fb60beebdf406af00fb0e7c9f213dad13e739ae415","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.jarprocessor.nl_ja_4.4.0.v20140623020002.jar","sha256":"de0393e14b35afa55aaf9134a5cf361fbd11cab0d74f041907c61762ebcf40e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.ui.zh_CN_5.5.1.172852.jar","sha256":"37b57f97d228e9a3206873c159cda065e01fcf9bac45f0cb9cbd7c788efdb1a7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-profiler_ja.jar","sha256":"8e7230349b1ab066807c092b8f4933dc13b11735f841f3b71099d50ac8ef2d68","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-lib-profiler-charts_zh_CN.jar","sha256":"4f0d9d42c2e5a2aca91c1b80d5db3597b605cc0275b2ec6894a6e3df2167a142","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.model.workbench_1.1.0.v20140512-1820.jar","sha256":"b3d5e57092dd0abbfc0dcae14bf67ba6aee4da6016ecd5002562b4bfd11c3e68","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-profiler-snaptracer_ja.jar","sha256":"bf2c0fcb85ab3d2fe2acf41f48f0b778ca8af31db9096f5f9a0ec1f08264f879","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.ui.intro.nl_zh_4.4.0.v20140623020002.jar","sha256":"45af8925cc6da09ba5b6d4f8fa5e695b8675d6e029b294828f2d1a15484458dd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.metadata.nl_ja_4.4.0.v20140623020002.jar","sha256":"1e40fcd518be051eb3d4ae3fe7d428c2c72cdba45e61a32da1e27946f6c21166","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.touchpoint.eclipse_2.1.200.v20140512-1650.jar","sha256":"e99cec19d54b0bc859c9977adba57732946c6b56bac6c244b9a7d8c9ebbbe6e6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-filesystems_zh_CN.jar","sha256":"021453e07773d14bbdd67d79e105455bcf5f6d9c28137f908ab90b8bb610f624","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-awt_ja.jar","sha256":"ed08512301267c370ffb3464bce596ae7adc027147600fe4f538477064063b67","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.osgi.nl_zh_4.4.0.v20140623020002.jar","sha256":"54b1478fdbcbb0b92ca747aa7bc832e3ffd91403a3b3d784e67d1ba655510f2c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-lib-profiler-charts.jar","sha256":"2ea3cc9a8e149584f8831967f7e13076e3485a3a0148b8be8b0dfe5a93e60ab3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.browser.attach.ja_5.5.1.172852.jar","sha256":"9dc63e093c841307e705fb1f55a5c0f44f3075d1fded62fa079c24ad5552ecc9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.garbagecollector.nl_ja_4.4.0.v20140623020002.jar","sha256":"f92aa3dc93ea7d70e55b2eba399357c9e79cb00c644ad591cecd80c258595311","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-settings_zh_CN.jar","sha256":"6129afed9b880f032d70cf66fe816021447dada8a6f1f9131ed1b07c02a37546","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"derby.jar","sha256":"8ce5937ff4277cfb2bd55d533b12991bb6766842f7db005b718f64dce5d0bc33","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-swing-tabcontrol.jar","sha256":"a5ca4d49d047becd974e3c3124f0d1f0d55506f5e5e410b73d82357c8628aa3d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-profiler-api.jar","sha256":"0d25453dbd3e145f27c83187b8a899c190d0b40e58d8f2dd4e235fe8c9728174","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.ui.views_3.7.0.v20140408-0703.jar","sha256":"7b33ebbdfa66dad1fa3ecf38af8d63b3571c6af1d7425edf8a00dd681ee4ed52","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-core-kit.jar","sha256":"af69aa849a8eff346ecf049c278f816daeb817dabf953bd8f610ee993ebc8c84","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.director.nl_ja_4.4.0.v20140623020002.jar","sha256":"0f8ec24a1deb1f8e02e5d39a68f23bdceeb850d7a6ef02399da370acd6b3a7c5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.core.commands.nl_zh_4.4.0.v20140623020002.jar","sha256":"ef50923f9e5025d43cb9907a1fc7f24a40ce4c6aa58a1eb8b5e9478b7ab638eb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-host.jar","sha256":"ef87241590408f67414339853b4d4e26d211171f6d2e70e2d533e1da6c966825","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.rcp.intro.zh_CN_5.5.1.172852.jar","sha256":"33acf2725db420b6ae320731eb4d742b74d796078110d61485da2b79e1d20f81","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.touchpoint.natives.nl_ja_4.4.0.v20140623020002.jar","sha256":"0fd3d0405e46b046583e3675228bc1df4270f2019685c08653d84db5dcbc5640","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"javaws.jar","sha256":"3ed0de7d29507ec32023b3c859ca0ba90fb015877aa551a215c0b772c7301fa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-applemenu_ja.jar","sha256":"fde1de7310817a5f24951592c8fb2b9650072cc0f1ce47107816d34971dea231","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.commands_5.5.1.172852.jar","sha256":"5fd158d2a3790c8d27992f4fac0f68cf8ef8fffc1ab7c405116b275cc0b611ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.help.webapp.nl_zh_4.4.0.v20140623020002.jar","sha256":"3cbc65a986356e97073dd8ffb066c95378c0aedb7649f50dfd7cb08362beb7aa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-print_zh_CN.jar","sha256":"9b1cab32397dd20363af0a3c6363b73a1e1f108dbed63672f1aa7fbcc92757b5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.extensionlocation.nl_zh_4.4.0.v20140623020002.jar","sha256":"4b33f8f99d804d9683df2374dc21b468f18fef7b6db08237a8a0009a185d5f8b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.widgets_1.0.0.v20140514-1823.jar","sha256":"321f1b3b8d621c5ddf88a8e690082781ae2642e3f66938d4ed51e74b737a83e3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.help.webapp.nl_ja_4.4.0.v20140623020002.jar","sha256":"0223eea7b1fb2b9ef33ed93e950e89534f22e10e0db543ebb7cd9b7b2ca3e45b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-modules.jar","sha256":"da3ecf4d503c78e7adbdfa2987defacd8cc0747f321726657275e4bbdee3c94a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.reconciler.dropins_1.1.200.v20131119-0908.jar","sha256":"d6373bcb5e96af5c688619174e8994435f6b3b604294c31017842f92160facea","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"derbyLocale_ko_KR.jar","sha256":"b9be9076d30ec629b171760cf3ddf1e3fa4fe69d6da2a85514a7f2827025bc0f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-spi-quicksearch_ja.jar","sha256":"69a67ee6024907f1adb7e04e81acf48e2c30be013e695c94be95a382c231756f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-jvm_zh_CN.jar","sha256":"f812780addcacec0ee14d909c11291f17537b72a53eb78d79f40a7d8d58366be","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-profiler-attach_ja.jar","sha256":"d8893f6d7e568f7e235ddae89afc909b2b93edd1b843cd17dddaa25379b4f303","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.emf.ecore_2.10.1.v20140901-1043.jar","sha256":"5bf6dc7ee68876a22a16a9fcd51476d3cc6a95af1f476bc5353fc4b9f089cb63","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-tools_ja.jar","sha256":"3519ed4366d966a212d4ed2d4d82a9da780d83ca31d2add1f46224f259887166","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-actions.jar","sha256":"bff99ed93f21d3aebdb76aaf76cdd2b5735b6270c39308aed5a8ddfae4f527da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-modules_zh_CN.jar","sha256":"deb06bff4ab851d019b6f2677d366a6a3aa648a84f1aa9c4ae42a130dcd569b7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.ui.themes.nl_zh_4.4.0.v20140623020002.jar","sha256":"cd13b490a4c1d72813c22b44a3e46a3d2c63a78c97be902e9f3e2eefef11ae49","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-profiler-api_zh_CN.jar","sha256":"bf93fe8b53733af18c5031b8189d0b23afbe82af81410927f3cd30f1f1c2c78c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.http.servlet_1.1.500.v20140318-1755.jar","sha256":"ce81954ee7a202b53371f5a3f603114598a25b090a54305cff832ba9a031a5f9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.flightrecorder.controlpanel.ui.configuration_5.5.1.172852.jar","sha256":"219d01e91357ea30cd46be3e9c4308d6351288d248b5f658cd335f2ae8c6cefc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-queries_zh_CN.jar","sha256":"9b54c11b7096cd9b08b930bb61ae297bc9eb73144ddef105796258ef68541653","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.artifact.repository.nl_zh_4.4.0.v20140623020002.jar","sha256":"1bcf9bcc29a6a670c0f8fa264338096f80efaf2f804e2d8f99c8b07bf604e29c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-text_ja.jar","sha256":"de49b81c98f88a5b5247728dab08e170ec8d38a3aa4cf25e6546dea3c718429d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"local_policy.jar","sha256":"d4976c2d5400a7c6b120fa8fa4bcd933d37f0496efa2f366a5b29a258fb675e1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.rcp.application_5.5.1.172852.jar","sha256":"ca4a5f483d941dd2a3af61e18e53761983a562033b3e9aca07304cfc9413cebf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-core-io-ui_ja.jar","sha256":"186ba76911efc584fa89d1d3d41fff656d8c5ac372cabb222d2959a0c26c685c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"OemVista.inf","sha256":"483534e778870ba1971d3b4a6540ccde3efc241fadf32c210b9865a1fef2a8ab","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-application-views.jar","sha256":"1c5e9d298a17f2f645d35a39573224ee9ccaa9d911e6617a795ba0b88e1fba6f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"javax.servlet_3.0.0.v201112011016.jar","sha256":"1811e93f353cf71dcd3fbac2a636d6b23e0bca1c87439de43e97d11646e7db94","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.css.swt.nl_zh_4.4.0.v20140623020002.jar","sha256":"ac6ee7dff394b6df85c13b913cd05781e24f9329e735ec46f7976d0f04b3fdda","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.ui.sdk.nl_ja_4.4.0.v20140623020002.jar","sha256":"09acc625ca6fb4ead0d80c2bf7a3a91e053b16bf5896766c8ac6cbbdad811260","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"imap.jar","sha256":"6c39a3d577a62b6bc30fa2593b406dff948d7de34f3d96e03a64ec4d45467915","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.ui.views.nl_ja_4.4.0.v20140623020002.jar","sha256":"e71c0c1b0becb390b73f0a985c255463a09afdce4ce32766e4755bfa44f455bb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.console.nl_ja_4.4.0.v20140623020002.jar","sha256":"4791d9243c9930531bfe4cb4a05a89b04a0c0707b9452e9f2834b1912fc42f33","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-api-annotations-common_ja.jar","sha256":"dc96adee2468c7bb06a72b4b574f7a41b0617392c95ecc01d8ea5e8eb8926126","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"dnsns.jar","sha256":"2593c206f54857287aeb9536b3b7d6e41d5f5343d76b7fb984ccc6734990596e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-lib-profiler-common_ja.jar","sha256":"33630439c7cd5972dee0a4c345bf9948d70cc9a51156826f078afdd0e6091b2a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-settings.jar","sha256":"02cdf869008a358706788ec2f455b4f2f3ef806a513a99a19bf324960cd918df","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-attach.jar","sha256":"619b183ad4f086dc90a8ced05d4e900d3a224dda4098cf89e2addc71b1071f92","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-nodes.jar","sha256":"664244361a9e4782b45a43cc9cb74fc9c28d8773eaeee6a55865cfa848762bc2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-profiler-heapwalker_ja.jar","sha256":"ae59dcd84b457c9500c3ba77fa2ced67a2bef26eaa8ea4c9961d24fb16bca6b3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"derby_common.bat","sha256":"ce2b718549f7277de222075dbf6b819b1f7eda42221b60744739a2427aca67c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.model.workbench.nl_zh_4.4.0.v20140623020002.jar","sha256":"d97b25af6e7e4981fb60ead28e234b730fae4634fc729cf9b8fc0dd6dd57342f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-util-lookup_ja.jar","sha256":"3bf5781b19d451ad83f16e42a78d94fa7a41c08a233e3a77d4a961f7efcafb5d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.css.swt_0.11.101.v20140818-1343.jar","sha256":"fbed8e08bf71646d79c86f5a564b39bf9f9fe4afc6892fc5e9d3176bd0988531","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-core-ui_zh_CN.jar","sha256":"6ce73e9182992c46f44b00f8fdf231ee607c95972a10d2e7aaf6f26275a15954","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.core.jobs_3.6.0.v20140424-0053.jar","sha256":"4be6e434406f69f37a27bd544c7caefcd4ba350dcbf9c029f2da68fab872498b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.browser.attach_5.5.1.172852.jar","sha256":"4138bcbc979ab5524c2c2c9349b02a1e385883e05e59ea04196a8898bd5993ed","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.workbench.swt.nl_ja_4.4.0.v20140623020002.jar","sha256":"a4309b3ef913e9af987ac8d428559d053f0bed7c9c6c8f4c5da6d92bfc175a97","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-profiler_visualvm.jar","sha256":"9005a7e1d80da165f762119d167f066c11bcff1927e8aff86412b00d8103dade","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.jetty.security_8.1.14.v20131031.jar","sha256":"481f12181e897c4f87a19bd5a45a05278db4f7ffa034e3b7d542493eba9ae336","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"AcroRead.msi","sha256":"9b50058f9c0979fb024a5498e71b491c2e20c52aedf16cbc6cec4e48f0b67fc2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.garbagecollector.nl_zh_4.4.0.v20140623020002.jar","sha256":"bc1d53b6c29768a5bf87973de1773e41c3dcf75b39f40218f5b2874fc75a65ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-attach_zh_CN.jar","sha256":"37f1d4548e3101bac03e1bd203cce69d32f70b7291bf0f9a203605b8e4b59eb1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-profiler-utilities.jar","sha256":"533fed80be7cef8dfac49c93d339c1345cce3fc9473babf50c56d02fcf2c01f3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.css.core.nl_ja_4.4.0.v20140623020002.jar","sha256":"4a142ba25cf16187722d8750a5cd553b3665348cdcc15038c1f839b1d10d8f6e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.app_1.3.200.v20130910-1609.jar","sha256":"b6454eaec6fea1f6e11201e1749ec84242c8b65a6f92d252985fe605ff061b73","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.di.nl_zh_4.4.0.v20140623020002.jar","sha256":"dff053b5f63c848687c964aaebc317932b7a14cbe2387649b5a76d39f29b4a98","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-sampler.jar","sha256":"65ebf9acd6150b300fcd9527130f3a5fa9c51437bacd5d2462c6a59d86398290","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.metadata.repository.nl_zh_4.4.0.v20140623020002.jar","sha256":"4b00b5097ddbf73d67b5b15a9bafd5a8d08dcd67315dbb3f898a21af3511b047","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.sat4j.core_2.3.5.v201308161310.jar","sha256":"035c8fb20aef0f8dc9be9ffefc3035d6bb09477ea5f4b46d0a286b3762e4fd47","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-sa_ja.jar","sha256":"325f0d50a132e11b5a211c0b5df77df8eea11d997ac1d2fcdbdcdfd83dc67d2b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-editor-mimelookup_zh_CN.jar","sha256":"21bd77784e8f3100b73d76da2c03ac726e0a3625fbc89c374374fe2690888a53","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-lib-profiler-common.jar","sha256":"9079ed8b39a9456e4c417c9b3bd0fa16bde1b6d97d924db24290313f2cb0022f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-swing-plaf_ja.jar","sha256":"6eaa93e87d5b09f421650522be0919717b205335c6d0a7a1faf0b25366992cf2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"mc.jar","sha256":"adf458e8fedbb8e8574c2c1223d2a2d42eb52fd7db15009a62659079260f900f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-spi-quicksearch_zh_CN.jar","sha256":"44797b4e7fa028565d1f81238bfb1da3dd3da0f958b746af88ffe3d6f00da0ce","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-explorer.jar","sha256":"4dbcebf109f1a0adbed763d83a4882fa88228aa50daa3ef18e2e15f947926111","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.help.nl_ja_4.4.0.v20140623020002.jar","sha256":"d31f73e4724b1dd87b3deda8c62b223d9e9538480925650203d461143894bef2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.workbench.nl_zh_4.4.0.v20140623020002.jar","sha256":"4401a07dc5c856e3e2255c08320dfbf9e4518fce25dc724341ca249829831f9f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.workbench.swt.nl_zh_4.4.0.v20140623020002.jar","sha256":"de9a9224bcfd67a89460416292d300c5d00564829586cf40a1607b68be8848cb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.transport.ecf.nl_zh_4.4.0.v20140623020002.jar","sha256":"f2babaf0d66e2e5a0985cb88e4fb236a556cbf146744e15069af9c1c360909e1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.publisher.nl_zh_4.4.0.v20140623020002.jar","sha256":"7d71a1c335fc26f7f6016068da01c91bf6bcb5b557bb52b064545a4c92278145","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.repository.nl_zh_4.4.0.v20140623020002.jar","sha256":"160da2f39022471cd944e173eafebc87ae8539d994f9bc69e39c2a27fd902245","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-util-enumerations.jar","sha256":"1e28030343f2b681b4df028635d919fc9220ee96c6146505b1dc573b1b413e31","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.apache.felix.gogo.shell_0.10.0.v201212101605.jar","sha256":"9d68c2bbae2528c9e60e8f5d2c9954db5b6c0f08ec6e2806b2c1d7105dbf161e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-swing-plaf_zh_CN.jar","sha256":"9d4e7733749d7a831451d9ea89e532b84822a82560e979012ab410a8bf7ea9b1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"dsn.jar","sha256":"957b67dd70e33bf04c3a8f91e8709fb344a6b59e14bfcf0392bd7e6261b431fc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-applemenu.jar","sha256":"428d6503bae1da15a337e92a002fc231e31e84463b5cf809b69c35e787d1cd55","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-autoupdate-cli_zh_CN.jar","sha256":"c891c87cd8d3d25c4b7ff5a76d4027f0b2e9391543b2b87795b2bee56f817958","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"calculator.vbs","sha256":"558e1a2218b692b2f5f30685ef7adc7b4b1e5d26e66014ccd196e3a5328bd3b8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.jface.nl_zh_4.4.0.v20140623020002.jar","sha256":"9647a22821c8b6e6aabdce48441ba52e47e9292268d5cc32e022b742d88c3815","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-core-multitabs_ja.jar","sha256":"b7f92be50cf25784eb604b02616d7e612823819c217c4b3dd9fd82c749246106","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.p2.repository.nl_ja_4.4.0.v20140623020002.jar","sha256":"5792820f222f75aef4661f5d48e02cad04fdbc06162a5975fb326b8b9954b8a6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.workbench.renderers.swt.nl_zh_4.4.0.v20140623020002.jar","sha256":"a9392d3411730b60886d24f34cfbf0d4fb13efd8cf645443a25ce6bde61b4614","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.apache.httpcomponents.httpclient_4.2.6.v201311072007.jar","sha256":"d535ce9e4b87c789d6999ecda4877216b806058e11ee6ceef9e3bd9ec6d2f935","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.core.databinding.observable_1.4.1.v20140210-1835.jar","sha256":"95f0dadeaaf841d50f3444e2aa3135b72a89968fac6c339fab229b55db2f14c5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.security_1.2.0.v20130424-1801.jar","sha256":"2b8d3c6f461637d12d563cf4d391c7d449c05b184370fedc3e6e89a6d4faa4b4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-sa.jar","sha256":"909fefe245412677155aa277e75a18c0771dfd6744ef8fd59132aab5778df821","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"stylesNative.swf","sha256":"9de903b8d393345a8503d7f83877edb1afd0d79f41c02b71ac4b9a5aa212083c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"management-agent.jar","sha256":"83978d506db3dc255ecbadaeb770e33b8f2a5bf9b3c9c56cacefa9c9928ad443","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-modules-keyring-fallback.jar","sha256":"b663619a8ed293bf0446600459d2471db1363ace82f6a06f9ebd5cdc29d4985c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-charts_ja.jar","sha256":"cc58146a169ef674cc465369b429e9e70747d50e1ffd36f4206b135d01955e7c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"resources.jar","sha256":"f6ade3f4ee2478910d2d37d53f7dc415b7b23f53ed607d511c09ee142586eda0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"oas_sert.cer","sha256":"5360dd28809ecefe47dc058ad6c12c72b5cf215664de8bef42e6ed67af13b9cb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.css.swt.theme_0.9.300.v20140424-2042.jar","sha256":"74f1856c9466231655ad7ead530bab3752a31047eadbc3821076a7a728099c6c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.alert.zh_CN_5.5.1.172852.jar","sha256":"1b82972386ebd1a62c9bb9fda3e5cc0afcd7491f620ac2997a7de96b1941beee","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.apache.commons.codec_1.6.0.v201305230611.jar","sha256":"d57ba8f501089db7cbb093599a28941d564f3df88177d78cc5c52281aed2810e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-swing-plaf.jar","sha256":"9470efdd3badd7c721d95cd7f59d8bce598785da405d640308de908df83bc1d3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-core_visualvm.jar","sha256":"2564741073feac3614d2b457ea2a3afd8b40d5984afcf11975939a2875a8da30","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"jsse.jar","sha256":"86318f657a7ab688275dea449ce90863fb1ae288e77782eba0fdbaf7cf5a72d7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com-sun-tools-visualvm-application.jar","sha256":"0ced0d1cad69ccf579f539ded5ad2ecbb4e5851767f2a257db250361c807e9d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"boot.jar","sha256":"a789b1595aa419a56fdd5b2429c7b6912cae246ef8c2cd9a7e3743a2813aea4e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.console.ui.diagnostic_5.5.1.172852.jar","sha256":"74b2b22b5503477fb81327bb2be694acae8ecebf16308ab9886d1852ea1b0416","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-openide-compat_ja.jar","sha256":"a1d783440232dc9d2fef83f275aa9af30ba0ce4c36c61176a85620cc4a91332f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.equinox.common_3.6.200.v20130402-1505.jar","sha256":"5f70a8bf20e8950f1c72df10590ddeeaf83f466b07be85717e25afe683378780","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"pop3.jar","sha256":"d893b53444720fc2425a68d2dbce4f1884181c5c73e5ff07098120a7dd0eb6ee","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"com.jrockit.mc.browser.jdp.zh_CN_5.5.1.172852.jar","sha256":"17d85bcef2b3dcb76a974be19dcd74d08735e4b7638edd135ee2b220e1c8bdbb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-swing-tabcontrol_zh_CN.jar","sha256":"b8f6539361530880f3117c8b56e8c2973f0e7db739fad525c3014309546a9c08","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org.eclipse.e4.ui.di_1.0.0.v20140328-2112.jar","sha256":"948761afd6b97f9382b57d16cf50c7fc3d1875a1eda52ac8fbda376cc90bb3ca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"org-netbeans-lib-profiler-charts_ja.jar","sha256":"20459bddf6775f3214e7537acb7714a992010e140c6b78f6bcaa07b4ec3059e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]}],"files_written":[{"path":"C:\\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe:Zone.Identifier","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%TEMP%\\svchosta.exe:Zone.Identifier","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\user32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%TEMP%\\svchosta.exe","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409.exe","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Crypto","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Crypto\\RSA","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-686412048-2446563785-1323799475-1001","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-686412048-2446563785-1323799475-1001\\60ab7492cc039a867c9d2b0144c3d0d6_6b06490d-f9fd-424c-8b6d-83edc4369e89","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\ProgramData","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%ALLUSERSPROFILE%\\Microsoft","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%ALLUSERSPROFILE%\\Microsoft\\Crypto","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%ALLUSERSPROFILE%\\Microsoft\\Crypto\\RSA","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%ALLUSERSPROFILE%\\Microsoft\\Crypto\\RSA\\MachineKeys","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%ALLUSERSPROFILE%\\Microsoft\\Crypto\\RSA\\MachineKeys\\60ab7492cc039a867c9d2b0144c3d0d6_6b06490d-f9fd-424c-8b6d-83edc4369e89","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\crypt32.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-686412048-2446563785-1323799475-1001\\08e575673cce10c72090304839888e02_6b06490d-f9fd-424c-8b6d-83edc4369e89","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%ALLUSERSPROFILE%\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_6b06490d-f9fd-424c-8b6d-83edc4369e89","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\share\\1547409237686$OK","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusWW.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0011-0000-1000-0000000FF1CE}-C\\ProPsWW.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusWW.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PUBLIC%\\PUBLIC","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PUBLIC%\\UNIQUE_ID_DO_NOT_REMOVE","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\start.bat","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\share\\1547409237686$MAPFAILURE","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\pagefile.sys","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0011-0000-1000-0000000FF1CE}-C\\ProPsWW2.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\7-zip.chm","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\7z.sfx","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\descript.ion","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\af.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ar.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\be.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\bn.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ca.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\cs.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\eo.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\el.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\da.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\en.ttt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\et.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ext.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\eu.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\fur.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\gl.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ga.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\fi.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\gu.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\hi.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\hu.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\kaa.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\id.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ja.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\is.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\hy.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\it.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ko.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ku.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\lij.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\mn.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\lv.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ms.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\mng2.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ku-ckb.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\mr.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\pt-br.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ro.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\nn.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ne.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\pl.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\nl.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\sa.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\pa-in.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\sq.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\sk.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ru.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\sr-spc.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\sr-spl.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\sl.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\PerfLogs\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\History.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\7zCon.sfx","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\an.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ba.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\az.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ast.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\bg.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\cy.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\br.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\de.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\co.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\es.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\fa.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\fr.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\fy.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\he.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\io.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ka.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\hr.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\kk.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\lt.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ky.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\mk.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\mng.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\nb.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\pt.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ps.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\si.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\zh-cn.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\vi.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ug.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\tr.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\uk.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\License.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\yo.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\th.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\readme.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\Services\\verisign.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\adovbs.inc","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\msado21.tlb","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\msado20.tlb","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\adojavas.inc","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\msado26.tlb","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\msado28.tlb","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\msadomd28.tlb","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\msador28.tlb","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\msadox28.tlb","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\msadc\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\msadc\\adcvbs.inc","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\msadc\\handsafe.reg","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\Ole DB\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\Ole DB\\en-US\\sqloledb.rll.mui","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\Ole DB\\oledbvbs.inc","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\Ole DB\\sqlxmlx.rll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\Ole DB\\sqloledb.rll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\bod_r.TTF","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\directshowtap.ax","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Eurosti.TTF","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\offset.ax","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\rtstreamsink.ax","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\rtstreamsource.ax","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\SecretST.TTF","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\Common.fxh","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DissolveAnother.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DissolveNoise.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BlackRectangle.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\circle_glass_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\cloud_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Dot.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\DvdTransform.fx","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\rectangle_babypink_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\rectangle_glass_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\rectangle_highlights_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\rectangle_performance_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\rectangle_photo_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\rectangle_plain_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\rectangle_postage_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\rectangle_scrapbook_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\rectangle_specialocc_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\rectangle_travel_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\rectangle_widescreen_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\scene_button_style_default_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\va.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\zh-tw.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\ta.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\uz.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\tt.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\7-Zip\\Lang\\sv.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\msado27.tlb","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\msado25.tlb","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\ado\\msado60.tlb","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\msadc\\adcjavas.inc","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\msadc\\handler.reg","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\MSMAPI\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%COMMONPROGRAMFILES%\\System\\Ole DB\\oledbjvs.inc","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\audiodepthconverter.ax","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\fieldswitch.ax","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Vignette\\softedges.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Vignette\\vignettemask25.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\Filters.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\Parity.fx","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\soniccolorconverter.ax","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\sonicsptransform.ax","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\en-US\\eula.rtf","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\ie9props.propdesc","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\images\\bing.ico","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\SIGNUP\\install.ins","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\Timeline.cpu.xml","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\bin\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\heart_glass_Thumbnail.bmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\bin\\server\\classes.jsa","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\COPYRIGHT","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\amd64\\jvm.cfg","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\charsets.jar","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\cmm\\CIEXYZ.pf","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\cmm\\LINEAR_RGB.pf","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\cmm\\sRGB.pf","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\currency.data","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\content-types.properties","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\deploy\\messages_es.properties","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\deploy\\messages.properties","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\deploy\\messages_de.properties","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\deploy\\messages_ko.properties","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\deploy\\messages_sv.properties","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\deploy\\messages_zh_HK.properties","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\deploy\\splash.gif","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\DVD Maker\\Shared\\DvdStyles\\Vignette\\whiteband.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\bin\\javacpl.cpl","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\bin\\server\\Xusage.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\accessibility.properties","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\classlist","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\cmm\\GRAY.pf","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\cmm\\PYCC.pf","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\calendars.properties","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\deploy\\messages_it.properties","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\deploy\\ffjcext.zip","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\deploy\\messages_fr.properties","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\Users\\Public","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\vssadmin.exe","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Low","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Low","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\(x86)\\Internet Explorer\\en\\IEXPLORE.EXE.mui","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\System32\\en-US\\user32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{846EE342-7039-11DE-9D20-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{C3450F58-7060-4AEA-B0A0-C245927D78D0}","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\ieframe.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\cmd.exe","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%USERPROFILE%\\Desktop\\DECRYPT_INFORMATION.html","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\UrlBlockManager\\urlblocklist.bin","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\Low","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\stdole2.tlb","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Internet Explorer\\UserData\\Low","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Tracking Protection","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Feeds","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\TabRoaming","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\PlayReady","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE\\Low","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException\\Low","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache\\Low","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache\\Low","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%TEMP%\\Low","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{89E5C197-1777-11E9-8763-0A0027CC3D88}.dat","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%TEMP%\\~DFCF799AC835F79F2E.TMP","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\L9I86110.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\System32\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Temp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%USERPROFILE%\\AppData","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\Users","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{89E5C199-1777-11E9-8763-0A0027CC3D88}.dat","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%TEMP%\\~DF700AA34BBC92EA14.TMP","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\timeout.exe","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\timeout.exe.mui","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\(x86)\\Internet Explorer\\iexplore.exe","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES(X86)%\\MICROS~2\\Office14\\URLREDIR.DLL","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\(x86)\\Java\\jre1.8.0_151\\lib\\plugin.jar","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\(x86)\\Java\\jre1.8.0_151\\bin\\javaws.exe","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"D:","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%TEMP%\\svchostaaexe.bat","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\VersionManager\\ver8326.tmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_A7A8E86FCB076C144BD04C40841E7074","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\82CB34DD3343FE727DF8890D352E0D8F","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000005.db","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%USERPROFILE%\\Desktop","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"C:\\share","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\shell32.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\shell32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\Fonts\\impact.ttf","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\Fonts\\seguisym.ttf","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\VersionManager\\ver7FCB.tmp","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework64\\v2.0.50727\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe.config","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\Fonts\\tahomabd.ttf","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\System32\\Macromed\\Flash\\Flash64_27_0_0_187.ocx","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\imagestore\\js9ur7b\\imagestore.dat","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\vssadmin.exe.mui","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\System32\\url.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\SysWOW64\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\faviconOD88QR8Z.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AJM3J0V2.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\24I82KXY.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_49FC544F04082FD9F64F9EFB226AF8B5","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\favicon[1].png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\favicon[2].png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\favicon[3].png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\favicon[4].png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\favicon[5].png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\favicon[6].png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\favicon[7].png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\favicon[8].png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\favicon[9].png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\favicon[10].png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\faviconMYM8WIQU.png","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{19EBCDA6-177A-11E9-8763-0A0027CC3D88}.dat","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%TEMP%\\~DF17ABA13345BB40C8.TMP","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WPTOQ9TD.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0LFHIY7P.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\I4S4RSZC.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\50D6B15D9F2DCE1EDBB0C098625FBE47_281AC807DE0FEF15F2CA9911FE760A9B","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\50D6B15D9F2DCE1EDBB0C098625FBE47_10F47D053B284EB5F3ED5550578B001D","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\8FE2C641C99CFA6687FA8D31B7D528A1","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D3BD78A30B98D17C317EDD4FFE850A0","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\suggestions[1].en-US","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.2","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\50D6B15D9F2DCE1EDBB0C098625FBE47_281AC807DE0FEF15F2CA9911FE760A9B","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\N89NDR7U.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_C9FB72B5AE80778A08024D8B0FDECC6F","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_77EB97F2E95D4980FAA5A3E040A0FF80","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A4I1Y063.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FU7M296C.txt","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_C9FB72B5AE80778A08024D8B0FDECC6F","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\search[1].json","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"path":"%PUBLIC%\\window.bat","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]}],"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\ADMINACTIVE\\{00000000-0000-0000-0000-000000000000}\\{00000000-0000-0000-0000-000000000000}","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SQM\\FREEZEUPLOADS\\HIGHTIME\\HIGHTIME","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SQM\\FREEZEUPLOADS\\LOWTIME\\LOWTIME","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{33AAD629-D83F-4FBC-8D2F-FD1B2305E4FB}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\0A-00-27-00-00-00\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TABBEDBROWSING\\NEWTABPAGE\\MFV\\MFV","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"key":"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"IsoScope_6e20_IE_EarlyTabStart_0x6e24_Mutex","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"IsoScope_6e20_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"IsoScope_6e20_ConnHashTable<28192>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"IsoScope_6e20_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"IsoScope_6e20_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_28192","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"IsoScope_6e20_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_28192","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_6e20_IE_EarlyTabStart_0x6e24_Mutex","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_6e20_ConnHashTable<28192>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_6e20_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_6e20_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_6e20_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_6e20_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5c3b94d47ca3e114e50fa310"}]}]}},"report_ids":{"sandbox_job_ids":["5c3b94d47ca3e114e50fa310","5b8fd0df7ca3e1030e1eebb3"]}}}]]}] 1e:null 22:[["$","title","0",{"children":"Malicious Trojan.Generic Sample 5e2c9ec5a108… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 5e2c9ec5a108…. Malware family: Trojan.Generic. Threat score 100/100. 20/27 AV engines flagged this file. 11 malicious and 20 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409"}],["$","meta","4",{"property":"og:title","content":"Malicious Trojan.Generic Sample 5e2c9ec5a108… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 5e2c9ec5a108…. Malware family: Trojan.Generic. Threat score 100/100. 20/27 AV engines flagged this file. 11 malicious and 20 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/5e2c9ec5a108af92f177cabe23451d20e592ae54bb84265d1f972fcbd4f6a409"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Trojan.Generic Sample 5e2c9ec5a108… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 5e2c9ec5a108…. Malware family: Trojan.Generic. Threat score 100/100. 20/27 AV engines flagged this file. 11 malicious and 20 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L31","11",{}]]