20:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/4109t72175nm8.js","/_next/static/chunks/04k_7k5p4krw4.js","/_next/static/chunks/30r--1re9i9ly.js"],"SampleDetailWrapper"] 27:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 21:T564,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:T6167,"GET /hqRUiG HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/images/sponsor/hire-2.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/images/sponsor/hire-3.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /content/css/csharpcolors.css HTTP/1.1 Accept: text/css, */* Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /content/css/desktop?v=lB95znbnUy7LIb3t450ddZsklXxbpbM7HToPqHWtqQs1 HTTP/1.1 Accept: text/css, */* Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /content/images/ajax-loader.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/images/sponsor/hire-4.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/images/sponsor/hire-1.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/packages/bootstrap-3.0.2/css/bootstrap.min.css?v=2 HTTP/1.1 Accept: text/css, */* Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /bundles/codemirrorcss?v=a3BXkN-CPs0uir7jXyTovklTyOV7sImo2wgaeho3aRo1 HTTP/1.1 Accept: text/css, */* Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /content/images/logo.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/packages/bootstrap-3.0.2/js/bootstrap.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/images/sponsor/zzzprojects-logo-50x36.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /bundles/utils?v=DG6S1LVYLBzhp-8AWPGB2sCat3YRoqackHFy60l9tu01 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /bundles/jqueryui?v=lc_RCpFs7BhXflBrmcGNMTXHnVlW_8_i6uPgTjDnxFk1 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /bundles/common?v=0GrduoDFak-O0gh1axXnM0W9DJXA3CFldVZrnWwLAQo1 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://dotnetfiddle.net/hqRUiG Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "HTTP/1.1 200 OK Cache-Control: public,max-age=8640000 Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 08 Jun 2022 20:03:53 GMT Accept-Ranges: bytes ETag: "80da79e0727bd81:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 13 Jul 2022 08:09:15 GMT Content-Length: 16830 };m{s67&-Gt}fXd099b*Qoza4{u/>%?BX?i7vJePws;|.9#^ZPSZe'FWdyczqCi/;_2OA)cYpoNEypWUh8_W,9YqYgU#[@vS:+NuY T!n?$IO?1>>fuA~3xI?eN?5{'TzEnm1_'Sftq[Ku-.5o>nK 1>2CKn=/c/9qzmCyu[L-#Z'Mg\e_EI&V<]g5P^DY2xy'mcrME o+Mg9U|<;]r,Ne~"CVY/lq`~76'w]ULKr*.So~2eAiL%^wb*y.2NL6sXr7c,Vsq]gqf4TO,bV2/g32\|`}lXr.XU\{ 7K)6;a>= wLy0)>3Pz6`0PpL@2;$y%%D-I*lO/R{l):~6Cffrnm.%L/ &q1t-Fji2lSr(7bVicUu0Vx1k/Vji^oO4Ugr);ENl}2A3#0Fm4A8l.{AwnPSn/zjr '?XojR7 rFu,X^T67$7y@1c2brzjIodOSKU9(Ngx[}E~^M<.f[l^EGsn_?}S#"y_O>jc,WH}eUQvpMPvf(_vj9ynxH';HtdeWvk.]Zd:_.7='3NdE8r3*K<2w)r2}Ka!K!KaeFDizN?zRcD2/srCSphJM)MCST:4MC[V<5mC[VtFU&&965lDkUBUQWg&o'zTQ%W.w:ZTa*C&K_]LSKXZ\~CF/yOSPYU.'1U17t =JS.rYDJSl}9MPI>#`U^|i}%\,\'Qk @jm0F ^Ni"E Mj-UdJ>UD>co76 nlp&75M njp3f77 nnp[4- nip+[V7#+:X)W@~`Qk_m2"nz|+SWD 'SY)4lO2b!@q0 +!qx2j<$yU!l6"J6<^Oh$#b/Q65;2Egu+gAbF+llz[^5}f>!1 Eh1'?OPtB0Q(0+e3W97<\}mZ-OT)R7yA-g#go6sn'X45;d;7Da@I7"9V[8pjY*2 0EXoU.Eup|}d;hX0yC3o'`pLIDILJ y#9njtuP31!!_jod$~lwUz #N;`~W %uI;-KzER9@4Q"sT8>s<2*l5YUQ::J %qIYmc21y@,Q!(W`I.E"9"UIuBUZx}PdawPCJWc""Vufwn1?; w+~QC/8x5D4{*;zx4?ZL:D)xzarf"X b-Q(0\M\a_;hb@]2GtG4+bI~`QM/u3.w^*,>\$FVDb!.jP'le`|A@::vi}f[ Y) Lg}[!~2j~G0:P@Ay7`>MQ PtI8N0fNH0yL'I@:6VuNNv8ef0]._C8qR;#wG>"OyG>-o9ry5G=B>)^Hx<;T`O$ ]:hr'NddWa4ibhRF9VK#y4M>oz4[t0VCUjF&d[2'1$x2|ax2'Whr$).@Pta-.]&mVgGz9m^)tP\ulJ8.)_umj9 GsJ0u/!c(G(7pn5kv!j{;=f-L0W#'{\pqiT6YrNh/"BNfMC.uS8MU2v8 npA>_E7Y>}qmz[^oRu %7@mhBBrCO<>S=xjiFB<6,Osv1?aNd ?o s6J/eAx$6./.G#4gJ@mFze9;g8xs"o<0`Mf.: 7IH\YmD(BP4e)8O$tOE,.4nDRe8'ngz+Rc;xQgj?8!anoAqNy<#$9t{%;17-r 9&M"3A&n'qsFN1h)9b:q#kFdNy6\[($mDNFk:(RLS=M'4sIA1t;;#$lXa6u;$D)gr,nshW3$g:_r[g51(cP#Qo<$iF2*SFBgtM:n',<=%))ZcJZ 8Z@/i8OFN*-Z%VT{*De#%F4E}g Ip9nv )ZL80# }6GEk Z^p GNh)ly%-=\e:~HNtq[f~-8p( :lAs|Np3X$*`h8{&grv .pW[ "6hYI#n~um/57B ~`mN7%;m3H ^{:<=xwFs<9^z}l)}d'~zcdW^eZhSkE{s`x ZRZ;[3y=V-Fx'3 Z F9wM] ^yZf-U}sh!E f-Q\h.Buu\"ZJh|]uOsV- "Io]aQS+r#gwBKXSM4L@aa |H@]5`t>czX UySD)8>hOm`$Bw31*g}NP A[A{w^U,"J}(^_lod|",u0A^cyA%gO1)6D=-z*>Kt#o6+C/'FKDYg#hsYF!_)/L$la|-LOJ^5^ r6 OsX5l+E[u20?}&.R[H*%h^kTM!OP-[oS1.=xNVR|%m/~d^["> _fHl'_v=h'FL3r=SAV\2@#)*Pyw"gx. (5StxCcGU A)` vYkMm`49&- dIUrw$h/p@^7".ihu2FVI\J{G'*x {}oX(bom@Q=[JQ`7CD}wk0~:=+9'WO&X`:jf+mJpX?y;K{Eq%o;'^^m/v}`6.yiG3{Xn5X;q_#Rhq}z/|EXf(hp3U|ZMiwCmMCo -q}iNC4FoWeuuyG^mKSD^Xep g'qUQp.9^56 AOr?#&I=6`+uxuwU=rXwJ+Sv|D3NL+wB$W2q$=SdXOpS(*6w1H /8=~Ell)8)M\M mbmou@3KjX!V "dk]Ff9VuFg]j[gzG(C%Bcb<9&Nc~M@l#c"4G0+7udsTX2N_^z9gh#9$8'Q~)x[yxz\Y=>)N&72btrR{R;2v~J2&3zSKs/?fUu287#yeXlbLO'B)C'Af!Tw?`Ypgz>fgUF+ ._Stu.\b|*+ LwB8Zia($Xp8-L-_6ms>M/s*Ye`>x^!sU5^2k1pc5`O;/%UqP[/\s.cYQY3fz{KrrOC"8w9+zT<=.`YpW6zr`7&7N]##~}fXo%4`mH39.'tZ^G)?MENnPmuMtDx%,`0) q!pW{@N V/,rW!SPi'b$4N`sh+alrYI"jm<6wPMtf@%AkU\+1e'QQ/c|EK>"IcZj{^]-=[B{^uEBW!4N"GHDW}G ? K7kRJ7J6Bv5K=su+R;*x]Gw0LJ./-bEgx1kic)^4GV\tnx)5mbdFQkwF/y,p%x!<mE]3 4y_GfF=d`twe-F3*|.Yq@ #6 &Q7m7u&0)>a:i8NgX_ubv&rDq ^>gQqL?jYnE&/M k"rOPVe&{_7U\B'pv9!Uv:]%&SunwQBU!H6r&bSvQLSt^nj6"G0'Tn5qNq\`)t;5/[Q5VYRheUXGrNPyW^]~ '{Kpi'nx:wE)H}Of!-:dC J*+a~$S#;yG vo]'d^:rO1*)3(: -1Muefe6uswoIW(RV6Y>*gzgL YDM1'_$0"MhiObRs{yR=d';EvXbj4(NNZFe eP_Glh___h\nKQ/Pl?m|e< (Q)btWH2_WEL$#C8ncd'3>q(oIFhFtz]3g`{}znKQG}[?*J*9MDW{b\.<|R#;%dY(a#b ";;D^@MUaL@o|ll%uDQLYdw6&SCQ,Sc Y.)VzSO{T4gn}fp/Vj>t~EzV'6#qa2}.WI`{GxWHVL|m5K9QOx-9epgyuCN?+Fqs|V6+5'}OG>s3Na$abd]vSJaRT8S`Gs{Eeo"3a$.4y{HY](x<5#qY/D\s3BGFHSR+06<5<<[hGIKW"]!MT@&^DT75v\Ejl6BE`vY2N185Ni)hPo(VZJt0q3rq2prI8jbS"89S*l338`zxF0;#@7>LCMk8ml@!u4Fwl2#n\)jQvi )V~ QVlg42Pw4Yynkvr[irGgbmPGQ!z4}}:'/|cn-/^Sy|e|x< lkhrWe|AX4SF6Vz M( p*FjbmxA;=xKqK^(fn=E=TE+^>+WwZ*j_9a'6t_U/*0PqYK~S#o_##JOoso^Oux3{=oO}Tu:}}:f[w2iIVrSe"f2@~_7Z$lC44W?p7QlU2cG4k-L>>fu~vAmMVoeA:A?0.fh&5UVY~WOz6cDfE3Z=`DgX_06="Ap&Eua \8y3}g4&^aWXX@]u*w"Ux)STZ/qQt5gIhREH*@mf_]NS"- [Source: SSL_104.42.145.67] "(X3!2l(]SY+6o8u]7""Vg''6&YW(B6~M(/sZr9Tm~M^k:D@&C>(C%0GdhA.3*xZ@Vf{!9|*;--]2@''Trw{T4N&JB3gmW2R]7@''T++J k(|*qTutrB%*lA )>dTX79_Ya@$~[a-:9[3A ),s(utrB%Z:9_[a-mGuP+TSXTHp9@-DNoZ"- [Source: SSL_104.42.145.67] "HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Content-Encoding: gzip Expires: Thu, 13 Jul 2023 08:09:16 GMT Last-Modified: Wed, 13 Jul 2022 08:09:16 GMT Vary: User-Agent,Accept-Encoding Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:12b08763-5c5a-4606-bd08-4079974aa642 Access-Control-Expose-Headers: Request-Context X-Powered-By: ASP.NET Date: Wed, 13 Jul 2022 08:09:15 GMT Content-Length: 33575 `I%&/m{JJt`$@iG#)*eVe]f@{{;N'?\fdlJ!?~|?"i[T4u-V_7yu[G?|yv~/}m3wf/g2GBuJ|u_fu~F FBnJF}DT~wWo=%w~/zVfeN$ZA{h9^O*az.j_XWfxg~UGwFGGm[=$kTIhOY6Z_:-]zguv6^j*}Y;/QGilsQN4 dGjt>*>d|ms&r]RyV>y$eSGy#zSMYohmj|o 2F2 ?XfCl~v\4g&i>3Hgx/T%# ZNqcb~1q:r4"og}q9g~&l9sS(gyM|?i"",slB[~g=~$4$!0H~/l<*j&@-I 55xPV[>j?=>Q{0 B;ih1H36K] \>e3W|4.~>Z/gyg197#4,IUgxtM|E7YGlWuuG9#o!=e'hyS2-qbPiOdJu">"\SlIYIS[CpmD_.f|q BBrnWA;UEN h:{Gfdfd}Bb8vQn-50eH)Edtsj{q+so)YCp9^!,z$\/+?s=~g,_^w_}f~k$u2$`!3Q[B^zTGV}=[o~o/jZ+yiOmM\QvHW6oG[}tS8gO_F6|lI VC!MMBy% JYYeYAoua^6yJcjB|tB!_kQrNG9cBTly.\CPw\~'Hd >(,kB dYq5hEL )-KC^TsjHH}/E I2B)'Alh!m>q[_w@AooYeu{`&j>Af Iz^\QOKr5>?'f>Y-}j:GUdeRuug}t\qVxxJG?9Gr(AB#X|RvOFzUJaF(1A>3h7Oi=XUI(:nIu{s(PsMyIsO:%"t;HI>"MZ;Lv1I/rLzl?3ng)4[?B Ofc34$>Y4>q2Te(zP^cw_zS'TlK9qZGoY6KEpdHS8@Wu.byATx}co>G rZ6~bQ{cb|Bj2!5C c7"' _~3S%jgE892b})P'S-f=aA=Y#|qh,%!R"?ump)DS0A `5A;>.)4s2rI>*rS]nz=5,py#634_5xYj)FbOHbXHO#m~jp_X~v.'qI7}]rBV`0_BL`K,O~GG>iGKY +"J@$x6K*/2^9~bX}o>GSVq4)[CGp6'wFG ciRvJ=YZ>=,+F$ wQfECqjb}hiG)45uIF|ag[1>zCJ&xiM>\\ct\VQWY@z%sz^QhBVoKJ:=yFZK_!;4_4c^u5#|6~#iP;|e>X.RAKcRB-yD2hFp-:}53?9l.(>Gwx]VpL9&evom@W)SNd=HtcS3`<*%E'_!r48M Mj:I>s z GGd( );-f6."E_z%+6}F57dn}@Rh6Y G{*pIX,$q*f_. 'K4(QjlkzFoi1>Q(,SOK>x]DvS h:,%% GA|H5y&JW _2g[F_,8}oYL!nqa .?~OyercZ+KXx/.w{R2o8;{D?F@Y10`9If!030%3NCsTBa;o(n$1~q=u1LH($PrWmLOy"Ky*+@0REG|& E\?#kIVC4?Y4-DH%+6wr4w0X"iG1!-ED&m-}h1YJ-}}BZ{KG^`"cbb2[c*cqc[xK"1~?][JJg~0eYu9}Hn )[B0l^5(p/Rj[b60CYqTRc#,cEhDz2(98@KGGe[P9!`&6 bKre7z2uKJn~-1%wy4/'LTV`%}lDpaI^ i;]d-f)dQMUe+\T\b%in3QMAuMBMuM]v Z[X{~KFwv& RG{w~ %)"X;"hyFE(H?eJC(w+zAgu]e3}$[6^9i_r)}"&%]Xkt_(1Q4RdTEgkvJ%- rSrzT7Z));}y>srS=Vhh`3Z}v':yr-Yp4xeUxnC4V* JF|4hV]?Zg4rki!%YuS-gxDLOz}>:8:7-$+I'|s@Ky:Z?SYYn~yz>Q80Dz q|3s j8FLJpgyE= "MQI{LG[-">,Z;hMt-A.RbihLb1-bDzzI?%8 P!rRBYV_)J"$;p(*hG*>-'PE'0iI11r \n}BE2 \-?3D$Cg|o{;# X@{GeYQ M*>0i| S#C2"wG-@SG;)vNcsE]I\G`\0:Q(34^g^7-?n]dM'}+FlLM~q3?\D>kRc'v{?iB#! (4Y4gF4w='D',M1Sg<'7l32@f9-#Tg{r1; RC]?ujk[WT'UJc+g"Q?Z~?%2E\} Dt%2MI3#NahaSj?"9j"RMSJ(2xr"I }7h/\zEs0uYX"4u+/,=&9_$M5&a|"w%Q>@`9P82F"/H`XI|w?[RS[.w;+r?}DRf(~Y[r FR[^zGsO${GwM8pAdwW>LZhgp17 (8]PE9H{,I>9j}rC$tz6wwBdz@n@bV]o @hmFvcyU@Br5Zx;dyc}8v{Tj(zomH_'k%t#i$[fm{`#KD-St9.v1A:Ea'I`}c[K#Xlrw0) 3jlAZV9jV0&x=hm6^n 8r")MV.f<1K"f+`2e%\Ca a\Q=r(EK7iA#%qr,ha:,=[YPg >#;npSwhRQoI|BAZP/AksI&l&CyNvJGbB.6AZ{*gxd&Ga1/!CHR`h(tajkV7:hrh'ft#>]?+( }"R;5z].)P>fDtd_x[S`?%Efg~Lg;k.1Y/(4_*McvzMCO>!-?P$S w<3Uq323odi+3>.&IyFg_G;: OC'OP0"m!=Exc_/M9(@##g[4M#15m$iZF &P(&iZ_DA~] % RI;CS>y4}VCZ|VloM+9w29=^mh[l!<_[StBpCZp6Te{VX(@ihJqoA=CLT]4t: R(]NATP-cf"@' peP$+@g-ynkoaYL 5JZ:bD0REA;ghw;g2;X1h!w*Z3X)_b5ejR4 sh #, ;3 Rc]}tO.:EALA.b~8.x" 3E0iBjJ)|bFQ}$}*%1;OS`U/@ l=DE8#)V9;kQBDFc\fF >&LAP):-vKrI`l5#T-" %Z@l}k4s_LD&m9GSOL PQYZJOwSD?_lSjA5ZWuA>P!9E!IC|Y=mM=G>*-_p ])y{'#l_~9|X{w+T|Sk4z EYM(7| MXVu~B+_.}f&<.X SIL?jCRi~GJd)*EmeG)s(]+:rd"tg+bkWBl~YtoC?LIn}#h_U@_3>*W~? -2gh>W4u(D!e>B?9{D}d[Eqw|08H{_Kg;>".-YYQ$}^`{)dI%gsX4KOLCLY;x+;n:cM\4&{<&=ghN9Y~+]Y&Ix^h:3J'K7("/9 ~ogkZ0)@S,YSD.6T:k)`"F]RB%/d#"OJYAaP)'yYHWu[[|U@03h)+5PfG_~aXByGh]>?n!i@")z,P~'G&}tjoA<#{I#yX}dyWeFW p+4i!f1V9/I,iX(j#G-D.w67#G!dOGZR6J)JKE^L J-X\g2>$# W|AToyl7O}o}m~JB{|Yk|~Kn~wGW/Bo5.X_Z;?~P?x/M|3o3g~gxx&Xt2~46DVG$8JVlGg~fvG}!}9IF-4?'}aK\OPbQ e$~V}isHkP+B ??}[[~F: '{|_GXw^54BcsRCR(L4$'$m](o73?C_L->Y/gQ>~'L@O'Qs;+?u'm}%-b9#~IyIP>*+|+KJ'k&ZjF:v4}XJ}D50S% ~o5 4j=psG={Q3/! Kg [OJqUIL9iDXZ9*-#c5/6O.2C$fg3`?Q0d%bG}%[=S(|,~( I/s-f-QHb; a%?fwF&G'`$_S.Si$a3E/n-hVP9'b_B/8s|%P+I6G}z~|y|RpR8b;& 34C%]!a7lu9]2z GMJ^Aa^p]Hl{C;~Gcxd^RnC9)"V}M2QNr Cri]W.]YSy]+xEbsENb,I-xq&D'nP;tGw@19Om&""`1J2GC%Ee99-hVj%ow;vC&ArzO~V};7f:Zb^}h>q_<{~ug >gxg\O{l'>?h#bl '>~9(iN,Y2n;-PiqUabeQWKh_<|}"%fC&\%R.$iqZHU6b|R^\j:N_!^j]{*j SB)lfu@% 1#Ne>Uw<:a'Gt ;)q&*E+h+dvw:HVPf$u]X Nh".<'Z/v -H(b/yGG5%,+E({i 0-x!a:H{{ahdj|y}e9wP h P$HI?%cLR+_{F1xijZKt?-j%_R># 5njRKKs'=Ub.F:7~J' yEd$]%yf5jhVI9/)>%&w!n{=O*!rM?TJ9 KG+&7H7(kS|vI-yLR' qd(ZCVTs)fkky,5>8`h:~Wub&N~9OI#eo&/5%Hv_2C%R1a:95%z|BcECj!,5|Y._$tX.S`PYsb0(>oB)Fd=hIC?HOu74XH1H$eFvn?s *od;Kr!gu|FT_W.b1|_c1-KFw34`E~PahZH{@Es;4'e#w8dSgI%MmvV(t*" _=B;Be>'K>SIuw}nG'Qjr;t~tX'RaG4sl>#tVR&|8b|ch>DCzJj;lfN+`uMM24!WBoA8w/_Xu'3Ze":-z&mx^zsvq?V+3D}^@9V`Pl+?fwG9oN??}xFt{5?rI]V/|~zB{|D'>{D(/"H>/kq!b#FZT~Z?hnkr+#4f[gSoX~D6IU6_[JPvG_>{t$#}:jXIM@!?z?:(.7Gjrvw;cwdL=>7:G_G_<}?yh|`tvX/+{;]zqG{1`K#G{DAxlQuB?_[SYzr K98S!O<|%x!ZR4uOHLI%:\Cws~Ib>|A~vNA_B^}FG){PB@QGV}|p]r7b5+FpH7r=I%_{S>/y}b?!_6/^~!Ej;O>@puI_H{+_>#A2F7w-hOA7o~SM@7}zY@7o~SM@741o34ow4] gdQ(AfbbN~Gym}Z#N{-[S;Jc0&F7X:IirK}&oBNM+B=#K#_w(1nkNGm('H7fYmm07`wm{#~w7=]o7}o[c8MdX1NDN:;Zo;o[o]i/hg}S{$?1oS~K?ex`t>AoGoLK: H`EG~?O&~"M}11}&7DKWAo31h&71hK"MBoDM!7"~3">ENJ{?v}J)K'$~D>%D')~)GR0V41b/fKiaH)F o7fl~g>U*7~*oJEoo3f%XAo31h&71hkAU4~sh&74~KAc7kNs&\Fw#t"_N&8NDIl'Eu~A[zmIb"}oFW#o3~Cy>7}~whge+G15)VJ/nuuu}tmfhdpyh>{Kn:Og-I^5IEK[~g~fyg%3Fg#8{lS*x95thG.+~7ZeQv45lvt9>e-D(M-WF&GZzO_03\.AI[}zIsT,(o)Y2Q+(_W+LBaq-/'O-acf"}/5_\oU*1<^c-pz_<*>3HxC8_ Z%W+?3ZQ=r .]WwMxXvkzQ,3aFdG{^ ?Om>*wyuj +A$>~{Ku}V9jyA/]*[QzQ)!%aU}|OGrAAJc/nweXGm6_]P#%_?u=E/K0Sq]g?ux.U0]UMSI6%mQ4U9l w~Z3:AD7;#}{= jtyuHC$u|nHu>nG_WJ#k.Wu5[i~GX99s|yQ7k[9;oGeh~>\/S\|/w(R$Tg M4;R&Ik,D{YYn5bD}F#h:mW}YLrb'|22Yi 46<|pGK~lO|F_N)xFQ76&y&pW1/_V&iY?]9$$4QJ.P_5Z_?co?Gg/?P@rvCw 0FhS 4'9JKFLG33qR)FL4j#?12|"|R{<}w{3Bq/+ OW9>T2^*nc8R{VUbxL$$FTgK !$q4mMB(}n. ACA'L;2{OeM:||iG@'x9""6:reto|cj41;x JfnCk8 dfv/lD_m8v!w)%#@xgT;P/4x}Q12Ru{|4%gLm'!]M+(/nLIM?Z~"MD"tF@;!Y]Bqdz[4[k;!]m80K@q'~CjhI)848(rH,b2_OYA5 lxlHl|=p?D4FbLi:V9b"Q1bT/x7`)J'vTA#mYQ2.J=lI~QxziH[Z|UvV$J77AJ&Qz/6- >1_KF(7Z9]J^rwMKi0>ea ]gIH v&pKG,,7k2o[wr}0bLRR~qS401QigOK}~p~|`O[<0j||P>}bwO?cO[o~:e-,%'K{:y{JZO:0\O??{~n)tr9KP}G~{lmw;/gHy oo%wf[_z8~~O~'K}'/~q_R`O_Egw > O?~%G~}>2?OK[sSf>$qA~|p}~~/'Gvk~M}ot`pKwKH1tZ0xmGAkH;BhSZ5CZVSblZ2WKRKZ} m@u#y%#DFHEe)ZjV5o>sdG;Ol:s$(ge$w@GYFRb]|V?J0OI\KFG5DbUi>)uP[ w+ ?4[!'HQ|=DcT@?@j~A".Xa(;YUE,h^d+()KHsu2cL0#0nrr%4"z=2Z{`}C[c^(mR0~(m\e(l jJ2)iVj 8kBk9.9v}HA{P)]I=Xo&VGPZ)_% YLCr.$r>\U/o*&K0 (h%92d0,m4pr,;45$WN24,h^UE#%BCckJ}PEJyE0 qK>N5SinMe|n-k)yK-T4-6%K~6V;Z;w'=87TI}|Gd}Tre)S|sr9%1<]VmW+n# !5/9Z?%H4`z1)*!gM%o^a_z$ & c~4[X(leebn]w/Di64u0Q{8GFCDAoaQ{Xlo"^r=i}=j=r1O[-D7R!HI\W&s42`;blG%Q/^=?}:g_e?O_S x5vt>Uq>gm\M$~89Id=wK}IG''Y$N)f.Y]d$ ?~OYJ{_Hf;=Ir(YF*D~nCJb/Md}NPq%& LR8y~w:3Ar]>p_B\V,i\~"*>;)nVe~[Paj88G%v]7^ZTA@^*@M>~\-|5:%.o"7~1Q_$%o Xe^)n: !_X,~ yH')BZ!@ChcwyZa_[3OiV'Ci1fysK0@O$"$/$n}]kbyeb5t\<526[JQeN"L,4$wl6V]x_TZ NCa@Z in~8".Hw#A$Lj&JwI-0AL7A#%oY0r+=HzovoA 5'T?NRjav!/iFZdlY;wJ)T'Lg;@5n?%$ %CJ%y45 FM"-xq}#PNaOzQ#%,:B{|FZDUB wP6b<=2$` G,}/[k*H*P}]aeZZlx9GXQ[U%THCG: "#]YB8[1RGF0h^@?3$=juJFNeJ-IG<|B<>xD H.; atKM0=HViax!X&p^#T>[zNfdFgv"'tk;xXiM%hM#}t,`7eAtuQ[#Z1 J`N7KCjG)E,YV2`{ppJH4uc3@cCBdAC'N[ `<]n4Su}OHa>m#~!0Fgw{~"/K`[wZ9n A~!3)Bk9QTv4@s~/cMFzCyN)TqyQ9K8 Kr<&m0C*^HR)qA_9`fDQ{b}:'[GHYT-MKGQ'v\2H`7tu}X/Ysr8W|~7)!H[;Ds&=]&1~E:Hhu[J%>&Qe_22 [P2#m {~[7u?nM">P`32dG9w/:s$^zo!^&XFuXtY-'z-Z_i _DW$_u=Sc|waPJZSE'_*\M$7dBp3h ak:2zXZAZP`B'TQoL5Y\H<$.&|W13EC@Biy3_`zr.wnFa,"hAEF9xERFmKITRCz??AC'L)-+C#Ywc-+3;3Oum9k<@JIlA9I0nnhi9?I}P#Y?;(D&"[B)~gD&V1o1#8Hb|KB14Txno]k |X2a47;n@cu#2LESGm~/ @|rPkF #~p?Q>ctG^V@oC^(ZKF//5;d $=&>fKZJY&$ 5jCe11}BW1 =DwJ$l?*!cx|KhB9RS'(D-ZWW)4l3YO>g~{no-C. w*?6Z3',iE0vGS^Fu~_z>>>>]Vkb;|||HpBOLm4I ` Vg7OM%5%711`( ~14z$ L|G#hENBr{Nf#rk9!ylKY" ?ihF.$GQYw61~#6EQ $>3}PS4 ,;)+upwh!wlG8b|Iv/I)2:k oYI+n^&k0Q0pG1(ZT##H$iD^3IS"M6$)isU+w-kzGRyJnl.Io G6m/MyU<[?>'}trMijnZ^J:x<^)a ~(ae*#kjtU'MA>:d BV`%EUkZeC# ?UAz]#^po>"Ek1~uO>?21SNGtb"dx2{=<":}f0mx~~h><]wilA/&.9q|x$d+'P4K7$mh%_dK2T]bP3'sj]w6o"NFfINU:x\ R5*|X~qcExQrY#Ehj.WpM7e<;w~]4%V{ixV5%hf{^QDu c&v6^l)EaW+#DQbY]Ir|u'vh27#6=Q6]!'P|i/KXX@$f )v#m?3C9q`dmK&.fjR* IUF~E>#I'nR)4;/"_)m8;E!I$B/O-9XE(gIJ+Rd/cgQ)FJ6/|QjQ> ]R}y{BsA|s^}$4}Q MiavOIvwb;;!+LzZ4F|uD?;R?NbMuBAfv[%%Ywz$rFrZ=,!XvQ-}<1dV^wg?|s#7w/zQLAGyu_r6k5]>z7~hF('Kb{_3Hu{}(bNJ=$%X&ah}I^'gdg%vf9CS4RI*~i9Fm"+j(KQKz:%atDCr^|Et>Ta-Bk'kJ"a0?,Qg#)l||ZuV+;g;w~1Mu{/CghIdu2K$5t\/v>5g|}ipxW'O n?dIKpIVbzz+\T~/$q3Hs-@:EI|'y o>s42w&eFG,SFh548dhzIY]/Ix[?,:xsQ#~ ["8}?i"'\<;|D$(j-Tk=%@9~D##2dK2fC;a5IC"8(p\/\N,9G~"9AR [;bG.His}NRM(O#(m|&(ETALINcDc_H R<'Hh/}TdugFY$R[-DF#&=x4Ky~\@1`xt#m!o.jBl"BxO'tVsZx&}HY&R+(X/BP7WuCyk~f[;N21FD`0hkkU x6&.XB!g`&>> SA.-9]n+Kv[|U$|g3 IjASjn/wuGf:&QOy8ER;uu&m\tp9Ej"~WZ^+%~v/"Jl9jZh,9h0}Fg}XmJU5q,t#D9_ QJ)&,H?*<|>?3bR#HUoir(0$-j'@v`G4/#a_5T4ZIOzt7c+wbSaG7isGlt5B%-M$G!$MGhIcb\%u0 2&?J#OG`JsSBjk$J`u0G*B90GdTK]yG _i]yd|? o$Nz=a3 gul:`$Ry)fsl}GR#L=XxrrN|lg+{g|&ijp% {rd qsbAx5wlzLwB?{(d[zncqS7#nYddW0Qr=BJ|zu c=b{^LAbW"IPc&?h=S>f|r 4Ow`{U Q2BgQZ0/P/ I/dp(6!X4UFsg?n7<#)(5HG_= aM}~-$P>,h~t dzT88iMFr"`M, Htq61*0R|&f'EdiJdc(W~]%5w4\P49EzgCpgXk#0/)Mq"?^o_b(k,a::go:iE *y@0D1z7J#3a!~v&Lk-)1?kO G P+P7?{4r}U_ Kx6P'}NPh*#O8-uSoy/6<24c;"lw%\J@O^''/|pkGIF{>=H^^:I4`F2#WB^>E^h#~:f#~,wv{vF/>qzGGiMpui=a45$ZzICN:!mCA`y>wmkFE%)I5x#;>A89->\;cml)QGe%Ouu"- [Source: SSL_104.42.145.67]23:Td7d,Pattern match: "https://dotnetfiddle.net/hqRUiG"- [Source: Input] Pattern match: "https://dotnetfiddle.net"- [Source: Input] Heuristic match: "x1.c.lencr.org"- [Source: PCAP] Heuristic match: "GET / HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: x1.c.lencr.org"- [Source: PCAP] Heuristic match: "o.ss2.us"- [Source: PCAP] Heuristic match: "GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: o.ss2.us"- [Source: PCAP] Heuristic match: "ocsp.rootg2.amazontrust.com"- [Source: PCAP] Heuristic match: "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.rootg2.amazontrust.com"- [Source: PCAP] Heuristic match: "ocsp.rootca1.amazontrust.com"- [Source: PCAP] Heuristic match: "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.rootca1.amazontrust.com"- [Source: PCAP] Heuristic match: "ocsp.sca1b.amazontrust.com"- [Source: PCAP] Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAQvYCBFexRqLOIAbcSHSxA%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com"- [Source: PCAP] Heuristic match: "ocsp.sectigo.com"- [Source: PCAP] Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEGdbMLgBHZG4cYSL%2BZkHXI0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com"- [Source: PCAP] Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECECn8VTxu0%2B%2FIXczCIzuUm6k%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com"- [Source: PCAP] Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAICcwxZhBqdEntNWzHBxb8%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com"- [Source: PCAP] Heuristic match: "cdn.carbonads.com"- [Source: PCAP] Heuristic match: "cdn4.buysellads.net"- [Source: PCAP] Heuristic match: "dotnetfiddle.net"- [Source: PCAP] Heuristic match: "netdna.bootstrapcdn.com"- [Source: PCAP] Pattern match: "www.cityballetsf.org/profile/watch-minions-the-rise-of-gru-2022/profile\nhttps://www.cityballetsf.org/profile/download-top-gun-maverick-2022-on-123movies/profile\nhttps://www.cityballetsf.org/profile/watch-elvis-2022-on-1080p-hd-4k-english/profile\nhttps:/"- [Source: SSL_104.42.145.67] Pattern match: "www.loadinfo.net"- [Source: SSL_104.42.145.67] Pattern match: "http://mozilla.org/MPL/2.0/"- [Source: SSL_108.139.1.49] Pattern match: "https://hub.togetherjs.com"- [Source: SSL_108.139.1.49] Pattern match: "http://www.w3.org/1999/02/22-rdf-syntax-ns#"- [Source: SSL_94.31.29.32] Pattern match: "https://static.adsafeprotected.com/skeleton.gif?gdpr=$&gdpr_consent=$&gdpr_pd=$&network=BUYSELLADS"- [Source: SSL_3.230.213.248]24:T75d,Found malicious artifacts related to "94.31.29.32": ... URL: https://bsajs.bsa.netdna-cdn.com/ (AV positives: 1/87 scanned on 07/13/2022 07:16:52) URL: https://cdn4.buysellads.net/uu/1/116661/1650994946-Gulp_Banner_Carbon_V2.png (AV positives: 1/87 scanned on 07/06/2022 14:01:12) URL: https://cdn4.buysellads.net/uu/1/118579/1654633436-CarbonAd_ServicesBossWebinar_260x200_1.png (AV positives: 1/87 scanned on 07/06/2022 13:59:58) URL: https://cdn4.buysellads.net/uu/1/112766/1649440368-V2.png (AV positives: 1/87 scanned on 07/06/2022 13:59:04) URL: https://cdn4.buysellads.net/uu/1/112766/1649796038-OctopusDeploy_Deploy_April2022.png (AV positives: 1/87 scanned on 07/06/2022 13:57:39) File SHA256: 70f61c7dcef6ded5e304ab816c83a9cd7062f3dc41e2167f1b4bf3dfc30174b7 (Date: 07/03/2022 10:07:01) File SHA256: ed4ebf29fa6aa341502d29bd9f086356e026ecb5a82c195ab0461814b319592b (Date: 07/03/2022 09:56:35) File SHA256: 2c044aac3035bd41964e67e7afe2dff05c83de82ddac88c1fad0230d856f146c (Date: 06/30/2022 14:02:09) File SHA256: 5f7df21fc0695b21487d142c9f594cb232c274f70d31211a942dfaedc47f186c (Date: 04/24/2022 13:12:24) File SHA256: d02824b385816cc2347264b0edfe0a7c48a20cf421eded6608350c9dd8752263 (Date: 04/24/2022 12:46:09) File SHA256: 7921a6035cc8a0981a5dee737dd3d29b150ddd48407717d3fca4b6376f2b0e70 (AV positives: 1/75 scanned on 02/28/2021 00:12:30) File SHA256: 31f6232ff8f4edda994bcd687bd5c535eb41908b68353f9e986ea820468624b8 (AV positives: 1/56 scanned on 07/05/2017 06:17:14) File SHA256: 7b10697c30d441464bbde9da77e420cc3210ce36f408d9c6351d65d0681cac21 (AV positives: 1/55 scanned on 07/02/2017 00:05:53) File SHA256: 8bb6a275c278448bdb523527a5e05cd78c011a89bcf8cb46b82be80ca3cfca26 (AV positives: 1/57 scanned on 06/28/2017 08:42:06) File SHA256: 54c63a7d4e70f30b1bdd19566828054609bf3064efa3fe229f7f74f4e09639ec (AV positives: 1/56 scanned on 05/18/2017 18:58:53)25:T52d,TCP traffic to 104.42.145.67 on port 443 is sent without HTTP header TCP traffic to 184.31.135.120 on port 80 is sent without HTTP header TCP traffic to 104.18.11.207 on port 443 is sent without HTTP header TCP traffic to 108.139.1.49 on port 443 is sent without HTTP header TCP traffic to 108.138.245.11 on port 80 is sent without HTTP header TCP traffic to 108.139.0.211 on port 80 is sent without HTTP header TCP traffic to 108.139.0.15 on port 80 is sent without HTTP header TCP traffic to 108.138.245.199 on port 80 is sent without HTTP header TCP traffic to 142.251.32.46 on port 443 is sent without HTTP header TCP traffic to 104.17.28.92 on port 443 is sent without HTTP header TCP traffic to 108.161.187.27 on port 443 is sent without HTTP header TCP traffic to 172.217.5.99 on port 80 is sent without HTTP header TCP traffic to 142.250.142.155 on port 443 is sent without HTTP header TCP traffic to 172.64.155.188 on port 80 is sent without HTTP header TCP traffic to 138.68.230.22 on port 443 is sent without HTTP header TCP traffic to 94.31.29.32 on port 443 is sent without HTTP header TCP traffic to 142.251.32.38 on port 443 is sent without HTTP header TCP traffic to 3.230.213.248 on port 443 is sent without HTTP header TCP traffic to 108.138.246.105 on port 443 is sent without HTTP header26:Tca1,"UEUXQIMZ.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\UEUXQIMZ.txt]- [targetUID: 00000000-00002404] "6BADA8974A10C4BD62CC921D13E43B18_28DEA62A0AE77228DD387E155AD0BA27" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_28DEA62A0AE77228DD387E155AD0BA27]- [targetUID: 00000000-00002404] "7D6243C18F0F8F9AEC6638DD210F1984_6F7EA7DEEA126C2A17A01FF9D68C57E6" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\7D6243C18F0F8F9AEC6638DD210F1984_6F7EA7DEEA126C2A17A01FF9D68C57E6]- [targetUID: 00000000-00002404] "CabDA5A.tmp" has type "Microsoft Cabinet archive data 61712 bytes 1 file"- Location: [%TEMP%\CabDA5A.tmp]- [targetUID: 00000000-00002404] "CabDA49.tmp" has type "Microsoft Cabinet archive data 61712 bytes 1 file"- Location: [%TEMP%\CabDA49.tmp]- [targetUID: 00000000-00002404] "77EC63BDA74BD0D0E0426DC8F8008506" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506]- [targetUID: 00000000-00002404] "CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA]- [targetUID: 00000000-00002404] "07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D]- [targetUID: 00000000-00002404] "1EK8R52Q.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\1EK8R52Q.txt]- [targetUID: 00000000-00002404] "U75BL62I.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\U75BL62I.txt]- [targetUID: 00000000-00002404] "BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894]- [targetUID: 00000000-00002404] "TarDA6C.tmp" has type "data"- Location: [%TEMP%\TarDA6C.tmp]- [targetUID: 00000000-00002404] "~DF74079365220F2F30.TMP" has type "data"- Location: [%TEMP%\~DF74079365220F2F30.TMP]- [targetUID: 00000000-00003320] "DD94LQ4I.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\DD94LQ4I.txt]- [targetUID: 00000000-00002404] "80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53]- [targetUID: 00000000-00003320] "3NU2O4BO.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\3NU2O4BO.txt]- [targetUID: 00000000-00002404] "TarDA6B.tmp" has type "data"- Location: [%TEMP%\TarDA6B.tmp]- [targetUID: 00000000-00002404] "~DF536234C3E404CACD.TMP" has type "data"- Location: [%TEMP%\~DF536234C3E404CACD.TMP]- [targetUID: 00000000-00003320] "E09A724BAF1455BCB168CC1984DED82D" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\E09A724BAF1455BCB168CC1984DED82D]- [targetUID: 00000000-00002404]18:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample 6627608391d9… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample 6627608391d9…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/6627608391d9c2cc36b0cad2557b3f19e19413b22841920543c30aa840fa51ea\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"6627608391d9c2cc36b0cad2557b3f19e19413b22841920543c30aa840fa51ea\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"https://dotnetfiddle.net/hqRUiG\",\"applicationCategory\":[\"url\"],\"identifier\":\"6627608391d9c2cc36b0cad2557b3f19e19413b22841920543c30aa840fa51ea\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":1},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":2},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L20",null,{"initialData":{"activity":{"behavior_tags":null,"file_activity":{"dropped_files":[],"extracted_files":[{"name":"T9TFA0C8.txt","sha256":"fb9ae39286f4d4d8dc10ed00ef9caa04a37d5b6324cd502356b8033a158be655","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"YP7URJC6.txt","sha256":"e5d032abdd324288049330db45204f0f672115dd9959f1e625b6aa4377ce1776","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA","sha256":"b6395ba10f9199a1f4a6b254beb75c3d65452074d74f14fa840f122cd3a46ad9","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"c1433f09d67fbbd97d47ab7aaf5dbe4ac4950f50aac125bb5872c84f646f268b","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"A16C6C16D94F76E0808C087DFC657D99_A6B073BF0216E21AFC70413CC84E6A7A","sha256":"78d4e90e6e3dca75876362ef9d43a2472744bd56fda3a518026119cbafe859ff","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA","sha256":"91291a5edc4e10a225d3c23265d236ecc74473d9893be5bd07e202d95b3fb172","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"3NL8UZUE.txt","sha256":"5c1f7e4c69da8a236fb372bc10dc2fcc094961b80ab6e81102155c3632e761df","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"7D6243C18F0F8F9AEC6638DD210F1984_10231F26CD9846A3739E48CC9077DD4A","sha256":"2ddcea3d11118bd5438e05e08d670097d8cbeeede89a62326fd868988a6e8806","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"E09A724BAF1455BCB168CC1984DED82D","sha256":"5551362c4f8a333887a83e8081fd92ea91135a6daa88e7aa28ef3fd825d8f969","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"~DF74079365220F2F30.TMP","sha256":"9069f05a8aa70f9adf2a220f24bd3d454df3b25d55c92e5090ea762262f345ee","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"6F2GRA5S.txt","sha256":"85fb446582854e136d16bae98f99cd78f41ce81f04631f0175d08254eb5cfb7e","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"OCTZFYOD.txt","sha256":"d3d0a72851d51f5f0ad0af5fd9bfe79025a665e7b3da915a21018b5531813c9c","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"imagestore.dat","sha256":"a43883ebdedd9f51aacf0a6cbd8e1248e1f81b0c5f64213c7127f4e9ea3d881f","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"7D6243C18F0F8F9AEC6638DD210F1984_6F7EA7DEEA126C2A17A01FF9D68C57E6","sha256":"c623aa4aa84fb3fc83d397167fe1db177edc0ff4443aada218e5cfabb5e45f2d","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"font-awesome.min_1_.css","sha256":"b12c1cd811f54d11bfdcb5e235e73934a8b8a7a85eafb8529117f9a5bb64ccf8","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"TarDA6C.tmp","sha256":"5db917ab6dc8a42a43617850dfbe2c7f26a7f810b229b349e9dd2a2d615671d2","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"77EC63BDA74BD0D0E0426DC8F8008506","sha256":"2e5cb72e9eb43baafb6c6bfcc573aac92f49a8064c483f9d378a9e8e781a526a","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"CabDA49.tmp","sha256":"2e5cb72e9eb43baafb6c6bfcc573aac92f49a8064c483f9d378a9e8e781a526a","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"G1YHT6U3.txt","sha256":"55ada64f36aaf10e53e0b6e472e0a56095e8ed07d320c39d9ac821ee55b2e90e","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"TNAFAQCM.txt","sha256":"b51fbca3c4f1cc739296b047e999a0e40ef80ebed7e2fed511049d5f0f8683bf","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"U75BL62I.txt","sha256":"12a3544d3299f3995c261556bc79b0f55e06c104fea457dbd643f9bf85d62bd5","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D","sha256":"d04dcaa1bea5d53d491d222c7f75cc1fa42cfdfc9ea3cb27f98235202fba144f","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"TarDA6B.tmp","sha256":"5db917ab6dc8a42a43617850dfbe2c7f26a7f810b229b349e9dd2a2d615671d2","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"4EV3C9Z5.txt","sha256":"165f78798d5f625348065d81114cba4cf92cdb94bb3ce8fa7bcfc101ae85e414","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"75CA58072B9926F763A91F0CC2798706_93E4B2BA79A897B3100CCB27F2D3BF4F","sha256":"3392caeabc2134c44bf29bfb8b3eb0deb78200a2273ae17dcb80cc60abbff94c","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sha256":"109e46050813f78ae171c473a66ca7cde33450ce66b366ea7a33c8b7e2c2676b","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"F816A6CB7A4EC4741AAFCBCEB7B84E26","sha256":"eabc64ecbee4f0d8c7a1213b03fee02babc7bc4c584bc3f7eb34583dcb9847c8","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"~DF751BD4D5EFD01400.TMP","sha256":"87530e2bbe0706e2ab914122f295c2f2cc2ffe01da778bdd109a0fe1ac73922e","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"IZDBPJUH.txt","sha256":"b49256220d2d8f4c3d68f1a42c70244d9063e8907a9433c250f75ced4b230554","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"PUL14WY7.txt","sha256":"9a53dd3dcb380d27b715ff0065d580fcc037c0d6b27fc868041006c71a950c7b","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"UEUXQIMZ.txt","sha256":"e465b80e87dd336bb36824dbaa1407ca51aaab59a64df66a8e6ce492ef5f19c2","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"YMNNM8W3.txt","sha256":"5c1f7e4c69da8a236fb372bc10dc2fcc094961b80ab6e81102155c3632e761df","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"6BADA8974A10C4BD62CC921D13E43B18_28DEA62A0AE77228DD387E155AD0BA27","sha256":"ab833242c0e6e20fd87fd52dc59b599a60c022d5c69572a30f09730c3cc39d88","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"~DF536234C3E404CACD.TMP","sha256":"a236fd8b8a8d84f359408aab210dda1f0080ef2b2f5e555322b42925ee73dbe2","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"1EK8R52Q.txt","sha256":"165f78798d5f625348065d81114cba4cf92cdb94bb3ce8fa7bcfc101ae85e414","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"J179GF47.txt","sha256":"614bd03c935934a9ba375d218a32be487358f7ac87365f29ac46401fe991702e","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E","sha256":"9d27cd982bcdd5976faed4dbd2fcba1fead8b1efc9a5ba9566c93af2596462b9","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"265C0DEB29181DD1891051371C5F863A_DB5E2849E55F33CDD3C1DCE045A05107","sha256":"dc651e9f2f49494614f1c9f3600120942f935ac2e9cc1c140a67d36ad44ed8ae","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"c623640fd5b0278edc4cc44b43288704cab35bbf5837aa71ae91fa1280b8ecca","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"CabDA5A.tmp","sha256":"2e5cb72e9eb43baafb6c6bfcc573aac92f49a8064c483f9d378a9e8e781a526a","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"~DF24C7EE2136B40026.TMP","sha256":"4ec3043eabce6379d17fc26c42192d948dfa133231f419a60d3e3b7c7ec30e93","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"3NU2O4BO.txt","sha256":"a8c7e0278057e86184fd73e018a5694fc9fbee64f052d824a2530c47a4e4ba3c","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"DD94LQ4I.txt","sha256":"776f727e1ed869839d0a2c654b25b17ecd8390d8087fe07e3a75d1a536abedf8","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894","sha256":"aa85dedc01679d63aaeaea450a7f4407de2636b7f1b139523bc35dd0952b8235","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"103621DE9CD5414CC2538780B4B75751","sha256":"e634c2d1ed20e0638c95597adf4c9d392ebab932d3353f18af1e4421f4bb9cab","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"7cb420bf794a38495d345c8b19b5f72f9a35ccdfa4838c44cfeb2891460aa5d5","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62","sha256":"6e8f250014e0849457f1e76c63a8d57b9cadb1e1893bd4bd17b2cd41933e7f42","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"},{"name":"F2DDCD2B5F37625B82E81F4976CEE400_12EDABE7F42D330012E99BF50004DBA7","sha256":"8787be80bf8472902c0bd71df3b321711ef7d69a9b3399277271ad89aa32991f","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"verdict":"undetected"}],"files_deleted":[],"files_written":[{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{49E6ACDB-0272-11ED-AD1C-080027C498BA}.dat","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\7D6243C18F0F8F9AEC6638DD210F1984_10231F26CD9846A3739E48CC9077DD4A","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\hire-1[1].png","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[1].ico","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\103621DE9CD5414CC2538780B4B75751","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\103621DE9CD5414CC2538780B4B75751","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\ajax-loader[1].gif","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_28DEA62A0AE77228DD387E155AD0BA27","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%TEMP%\\~DF74079365220F2F30.TMP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\75CA58072B9926F763A91F0CC2798706_93E4B2BA79A897B3100CCB27F2D3BF4F","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\UEUXQIMZ.txt","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%TEMP%\\~DF536234C3E404CACD.TMP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\spinner[1].gif","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%TEMP%\\~DF751BD4D5EFD01400.TMP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{49E6ACD9-0272-11ED-AD1C-080027C498BA}.dat","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{54385A60-0272-11ED-AD1C-080027C498BA}.dat","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf8_IESQMMUTEX_0_274","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\InternetExplorerDOMStoreQuota","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"IsoScope_cf8_IE_EarlyTabStart_0xd6c_Mutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"IsoScope_cf8_ConnHashTable<3320>_HashTable_Mutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf8_IE_EarlyTabStart_0xd6c_Mutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"Local\\https://dotnetfiddle.net/","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf8_IESQMMUTEX_0_303","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\https://dotnetfiddle.net/","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3320","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"IsoScope_cf8_IESQMMUTEX_0_274","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf8_IESQMMUTEX_0_331","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf8_IESQMMUTEX_0_519","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"IsoScope_cf8_IESQMMUTEX_0_331","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"Local\\InternetExplorerDOMStoreQuota","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf8_ConnHashTable<3320>_HashTable_Mutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"IsoScope_cf8_IESQMMUTEX_0_303","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"IsoScope_cf8_IESQMMUTEX_0_519","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3320","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]}]},"network_activity":{"contacted_hosts":[{"address":"104.17.28.92","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"172.217.5.99","country":"United States","port":80,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"142.250.142.155","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"108.139.1.49","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"108.138.245.11","country":"United States","port":80,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"108.139.0.15","country":"United States","port":80,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"108.138.245.199","country":"United States","port":80,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"94.31.29.32","country":"United Kingdom","port":443,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"172.64.155.188","country":"United States","port":80,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"108.161.187.27","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"138.68.230.22","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"142.251.32.38","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"3.230.213.248","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"108.138.246.105","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"104.18.11.207","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"104.42.145.67","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"184.31.135.120","country":"United States","port":80,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"108.139.0.211","country":"United States","port":80,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"address":"142.251.32.46","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]}],"dns_resolutions":[{"address":"108.138.245.11","country":"United States","domain":"o.ss2.us","registrar_creation_date":"2015-04-16T18:03:31+00:00","registrar_name":"GODADDY.COM, INC.","registrar_name_servers":"NS-19.AWSDNS-02.COM","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"ttl":60},{"address":"108.139.0.211","country":"United States","domain":"ocsp.rootg2.amazontrust.com","registrar_creation_date":"2007-05-11T00:00:00+00:00","registrar_name":"MarkMonitor, Inc.","registrar_name_servers":"NS-1249.AWSDNS-28.ORG","registrar_organization":"Amazon Trust Services LLC","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"ttl":60},{"address":"108.138.245.199","country":"United States","domain":"ocsp.sca1b.amazontrust.com","registrar_creation_date":"2007-05-11T00:00:00+00:00","registrar_name":"MarkMonitor, Inc.","registrar_name_servers":"NS-1249.AWSDNS-28.ORG","registrar_organization":"Amazon Trust Services LLC","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"ttl":60},{"address":"172.64.155.188","country":"United States","domain":"ocsp.sectigo.com","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"ttl":3600},{"address":"184.31.135.120","country":"United States","domain":"x1.c.lencr.org","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"ttl":98},{"address":"108.161.187.27","country":"United States","domain":"cdn.carbonads.com","registrar_creation_date":"2009-06-26T00:00:00+00:00","registrar_name":"ENOM, INC.","registrar_name_servers":"NS1.P08.DYNECT.NET","registrar_organization":"WHOISGUARD, INC.","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"ttl":1374},{"address":"104.18.11.207","country":"United States","domain":"netdna.bootstrapcdn.com","registrar_creation_date":"2012-05-25T00:00:00+00:00","registrar_name":"MarkMonitor, Inc.","registrar_name_servers":"DNS1.P07.NSONE.NET","registrar_organization":"DNStination Inc.","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"ttl":300},{"address":"172.217.5.99","country":"United States","domain":"ocsp.pki.goog","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"ttl":141},{"address":"108.139.0.15","country":"United States","domain":"ocsp.rootca1.amazontrust.com","registrar_creation_date":"2007-05-11T00:00:00+00:00","registrar_name":"MarkMonitor, Inc.","registrar_name_servers":"NS-1249.AWSDNS-28.ORG","registrar_organization":"Amazon Trust Services LLC","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"ttl":39},{"address":"94.31.29.32","country":"United Kingdom","domain":"cdn4.buysellads.net","registrar_creation_date":"2008-09-24T18:55:51+00:00","registrar_name":"ENOM, INC.","registrar_name_servers":"NS1.P08.DYNECT.NET","registrar_organization":"BUYSELLADS.COM, INC.","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"ttl":44},{"address":"104.42.145.67","country":"United States","domain":"dotnetfiddle.net","registrar_creation_date":"2013-10-24T14:47:58+00:00","registrar_name":"GoDaddy.com, LLC","registrar_name_servers":"NS33.DOMAINCONTROL.COM","registrar_organization":"ENTech Solutions","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"ttl":600}],"http_requests":[{"header":"GET /gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQDCSoBbhNBPphIl6mS4f11q HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","host":"ocsp.pki.goog","host_ip":"172.217.5.99:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"/gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQDCSoBbhNBPphIl6mS4f11q"},{"header":"GET / HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: x1.c.lencr.org","host":"x1.c.lencr.org","host_ip":"184.31.135.120:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"/"},{"header":"GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.rootca1.amazontrust.com","host":"ocsp.rootca1.amazontrust.com","host_ip":"108.139.0.15:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D"},{"header":"GET /gtsr1/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBQwkcLWD4LqGJ7bE7B1XZsEbmfwUAQU5K8rJnEaK0gnhS9SZizv8IkTcT4CDQIDvFNZazTHGPUBUGY%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","host":"ocsp.pki.goog","host_ip":"172.217.5.99:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"/gtsr1/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBQwkcLWD4LqGJ7bE7B1XZsEbmfwUAQU5K8rJnEaK0gnhS9SZizv8IkTcT4CDQIDvFNZazTHGPUBUGY%3D"},{"header":"GET /gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEAT%2FrubUb6nOEpcsoEFY3SI%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","host":"ocsp.pki.goog","host_ip":"172.217.5.99:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"/gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEAT%2FrubUb6nOEpcsoEFY3SI%3D"},{"header":"GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEGdbMLgBHZG4cYSL%2BZkHXI0%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.sectigo.com","host":"ocsp.sectigo.com","host_ip":"172.64.155.188:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEGdbMLgBHZG4cYSL%2BZkHXI0%3D"},{"header":"GET /gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEG8ah82mu6j%2FCizjSGtvLoA%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","host":"ocsp.pki.goog","host_ip":"172.217.5.99:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"/gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEG8ah82mu6j%2FCizjSGtvLoA%3D"},{"header":"GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECECn8VTxu0%2B%2FIXczCIzuUm6k%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.sectigo.com","host":"ocsp.sectigo.com","host_ip":"172.64.155.188:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECECn8VTxu0%2B%2FIXczCIzuUm6k%3D"},{"header":"GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAICcwxZhBqdEntNWzHBxb8%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.sca1b.amazontrust.com","host":"ocsp.sca1b.amazontrust.com","host_ip":"108.138.245.199:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAICcwxZhBqdEntNWzHBxb8%3D"},{"header":"GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: o.ss2.us","host":"o.ss2.us","host_ip":"108.138.245.11:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"//MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D"},{"header":"GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.rootg2.amazontrust.com","host":"ocsp.rootg2.amazontrust.com","host_ip":"108.139.0.211:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"/MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D"},{"header":"GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAQvYCBFexRqLOIAbcSHSxA%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.sca1b.amazontrust.com","host":"ocsp.sca1b.amazontrust.com","host_ip":"108.138.245.199:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAQvYCBFexRqLOIAbcSHSxA%3D"},{"header":"GET /gsr1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS3V7W2nAf4FiMTjpDJKg6%2BMgGqMQQUYHtmGkUNl8qJUC99BM00qP%2F8%2FUsCEHe9DWzbNvka6iEPxPBY0w0%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","host":"ocsp.pki.goog","host_ip":"172.217.5.99:80","method":"GET","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"url":"/gsr1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS3V7W2nAf4FiMTjpDJKg6%2BMgGqMQQUYHtmGkUNl8qJUC99BM00qP%2F8%2FUsCEHe9DWzbNvka6iEPxPBY0w0%3D"}]},"process_activity":{"all_imported_dlls":["WSHTCPIP.DLL","gdi32.dll","ole32.dll","mlang.dll","bcrypt.dll","Wldap32.dll","sxs.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","shell32.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","wkscli.dll","dhcpcsvc.dll","uxtheme.dll","sqmapi.dll","nlaapi.dll","jp2ssv.dll","credssp.dll","comdlg32.dll","normaliz.dll","msctf.dll","srvcli.dll","devobj.dll","rsaenh.dll","clbcatq.dll","winnsi.dll","cryptsp.dll","msvcr100.dll","userenv.dll","powrprof.dll","mscoree.dll","lpk.dll","api-ms-win-core-synch-l1-2-0.dll","d2d1.dll","SwDir_1231201.dll","rpcrt4.dll","URLREDIR.DLL","tzres.dll","WindowsCodecs.dll","urlmon.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","RpcRtRemote.dll","imagehlp.dll","crypt32.dll","jscript9.dll","netapi32.dll","devrtl.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","cabinet.dll","KernelBase.dll","winhttp.dll","d3d10warp.dll","oleaut32.dll","secur32.dll","wininet.dll","cryptbase.dll","shlwapi.dll","ncrypt.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","msimg32.dll","msxml6.dll","dwmapi.dll","usp10.dll","WindowsCodecsExt.dll","SensApi.dll","netprofm.dll","version.dll","api-ms-win-downlevel-version-l1-1-0.dll","IEShims.dll","IPHLPAPI.DLL","dxgi.dll","dui70.dll","msasn1.dll","ssv.dll","FWPUCLNT.DLL","oleaccrc.dll","ieui.dll","msimtf.dll","ieframe.dll","dnsapi.dll","ieproxy.dll","sechost.dll","kernel32.dll","ws2_32.dll","DWrite.dll","oleacc.dll","iertutil.dll","nsi.dll","api-ms-win-downlevel-user32-l1-1-0.dll","ntmarta.dll","msvcrt.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","cryptnet.dll","cfgmgr32.dll","gpapi.dll","mscoreei.dll","schannel.dll","dhcpcsvc6.dll","npmproxy.dll","wshqos.dll","deploy.dll","setupapi.dll","mscorwks.dll","rasadhlp.dll","mswsock.dll","d3d11.dll","xmllite.dll","profapi.dll","advapi32.dll","msxml6r.dll","user32.dll","comctl32.dll","sspicli.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","netutils.dll","propsys.dll","bcryptprimitives.dll","npctrl.dll","MSOHEV.DLL","apphelp.dll","fltLib.dll","mshtml.dll","webio.dll","imm32.dll","t2embed.dll","wship6.dll","duser.dll","ExplorerFrame.dll","rpcss.dll","wintrust.dll","msvcr90.dll"],"processes":[{"command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\6627608391d9c2cc36b0cad2557b3f19e19413b22841920543c30aa840fa51ea.url","icon":"$21","name":"rundll32.exe","normalized_path":"%WINDIR%\\System32\\rundll32.exe","pid":2680,"ppid":0,"sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","uid":"00000000-00002680"},{"command_line":"https://dotnetfiddle.net/hqRUiG","name":"iexplore.exe","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002680","pid":3320,"ppid":2680,"sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","uid":"00000000-00003320"},{"command_line":"SCODEF:3320 CREDAT:275457 /prefetch:2","name":"iexplore.exe","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003320","pid":2404,"ppid":3320,"sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","uid":"00000000-00002404"}],"sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TABBEDBROWSING\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CTLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\MY\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CERTIFICATES\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CRLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUSTEDPEOPLE\\CTLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\DOMAINSUGGESTION\\FILENAMES\\\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CTLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\DOMAINSUGGESTION\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CRLS\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CERTIFICATES\\","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]}],"keys_deleted":[],"keys_modified":[]},"sample_flags":["Network Traffic","Extracted Files","Decrypted SSL traffic"],"sandbox_reports":[{"analysis_start_time":"2022-07-13T08:07:04+00:00","contacted_countries":["GBR","USA"],"environment_description":"Windows 7 32 bit","environment_id":100,"id":"62ce7d275916577154777806","indicators_count":{"informative":8,"malicious":0,"suspicious":2},"is_in_unified_schema":true,"state":"SUCCESS","submit_name":"6627608391d9c2cc36b0cad2557b3f19e19413b22841920543c30aa840fa51ea.url","tags":["Network Traffic","Extracted Files","Decrypted SSL traffic"],"verdict":"no specific threat"}],"stats":{"contacted_hosts_count":19,"contacted_urls_count":13,"dns_resolutions_count":11,"dropped_files_count":0,"embedded_domains_count":0,"embedded_ips_count":0,"embedded_urls_count":0,"extracted_files_count":50,"files_deleted_count":0,"files_written_count":41,"http_requests_count":13,"imported_dlls_count":130,"injected_processes_count":0,"mutex_created_count":41,"process_count":3,"registry_keys_created_count":32,"registry_keys_deleted_count":0,"registry_keys_modified_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":32,"script_calls_count":0,"spawned_processes_count":3}},"all_analysis_status":{"fastscan_status":"SUCCESS","qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS"},"detections":{"attributions":{},"av_detections":{"engines":{"urlscanio":{"data_source":"urlscan.io","extra_fields":[{"name":"percent","value":0}],"name":"urlscan.io","permalink":"https://urlscan.io/","progress":100,"report_link":"https://urlscan.io/result/91f4e9c9-0f76-4d29-82b1-bea58d90a302/","status":"no-classification","success":true,"verdict":"undetected"}}},"incidents":[{"details":[{"detail":"Contacts 11 domains and 11 hosts"}],"details_count":1,"name":"Network Behavior","sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]}],"mitre_attacks":[{"attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Found decrypted SSL traffic"}],"sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}],"tactic":"Command and Control","technique":"Encrypted Channel"}],"rule_matches":{},"sandbox_signatures":[{"category":"Network Related","description":"$22","id":"string-102","level":"informative","mitre_attack_id":"T1573","name":"Found decrypted SSL traffic","origin":"File/Memory","relevance":3,"sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"category":"Network Related","description":"$23","id":"string-3","level":"informative","name":"Found potential URL in binary/memory","origin":"File/Memory","relevance":10,"sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"category":"Network Related","description":"$24","id":"network-21","level":"suspicious","name":"Malicious artifacts seen in the context of a contacted host","origin":"Network Traffic","relevance":10,"sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"category":"General","description":"\"x1.c.lencr.org\"\n \"o.ss2.us\"\n \"ocsp.rootg2.amazontrust.com\"\n \"ocsp.rootca1.amazontrust.com\"\n \"ocsp.sca1b.amazontrust.com\"\n \"ocsp.pki.goog\"\n \"ocsp.sectigo.com\"\n \"cdn.carbonads.com\"\n \"cdn4.buysellads.net\"\n \"dotnetfiddle.net\"\n \"netdna.bootstrapcdn.com\"","id":"network-0","level":"informative","name":"Contacts domains","origin":"Network Traffic","relevance":1,"sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"category":"General","description":"\"104.42.145.67:443\"\n \"184.31.135.120:80\"\n \"104.18.11.207:443\"\n \"108.139.1.49:443\"\n \"108.138.245.11:80\"\n \"108.139.0.211:80\"\n \"108.139.0.15:80\"\n \"108.138.245.199:80\"\n \"142.251.32.46:443\"\n \"104.17.28.92:443\"\n \"108.161.187.27:443\"\n \"172.217.5.99:80\"\n \"142.250.142.155:443\"\n \"172.64.155.188:80\"\n \"138.68.230.22:443\"\n \"94.31.29.32:443\"\n \"142.251.32.38:443\"\n \"3.230.213.248:443\"\n \"108.138.246.105:443\"","id":"network-1","level":"informative","name":"Contacts server","origin":"Network Traffic","relevance":1,"sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"category":"Unusual Characteristics","description":"\"CabDA5A.tmp\" has type \"Microsoft Cabinet archive data 61712 bytes 1 file\"\n \"CabDA49.tmp\" has type \"Microsoft Cabinet archive data 61712 bytes 1 file\"\n \"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4817 bytes 1 file\"\n \"77EC63BDA74BD0D0E0426DC8F8008506\" has type \"Microsoft Cabinet archive data 61712 bytes 1 file\"","id":"binary-5","level":"informative","name":"Drops cabinet archive files","origin":"Binary File","relevance":10,"sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"category":"Network Related","description":"$25","id":"network-23","level":"suspicious","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","origin":"Network Traffic","relevance":5,"sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"category":"General","description":"\"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf8_IESQMMUTEX_0_519\"\n \"Local\\InternetShortcutMutex\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"IsoScope_cf8_IESQMMUTEX_0_331\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"IsoScope_cf8_IE_EarlyTabStart_0xd6c_Mutex\"\n \"IsoScope_cf8_ConnHashTable<3320>_HashTable_Mutex\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"IsoScope_cf8_IESQMMUTEX_0_303\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3320\"\n \"IsoScope_cf8_IESQMMUTEX_0_519\"\n \"UpdatingNewTabPageData\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3320\"","id":"mutant-0","level":"informative","name":"Creates mutants","origin":"Created Mutant","relevance":3,"sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"category":"General","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")\n Antivirus vendors marked dropped file \"TarDA6C.tmp\" as clean (type is \"data\")\n Antivirus vendors marked dropped file \"TarDA6B.tmp\" as clean (type is \"data\")","id":"binary-16","level":"informative","name":"Drops files marked as clean","origin":"Binary File","relevance":10,"sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]},{"category":"Installation/Persistence","description":"$26","id":"binary-0","level":"informative","name":"Dropped files","origin":"Binary File","relevance":3,"sources":[{"report_id":"62ce7d275916577154777806","report_type":"sandbox"}]}],"stats":{"attributions":{"campaigns_count":0,"cves_count":0,"malware_families_count":0,"threat_actors_count":0,"threat_types_count":0},"av":{"malicious_count":0,"suspicious_count":0,"total_engines":1},"mitre_attacks":{"total":1},"rule_matches":{"sigma_count":0,"suricata_count":0,"yara_count":0},"sandbox_signatures":{"informative_count":8,"malicious_count":0,"suspicious_count":2,"total":10}},"summary":{"score":0,"tags":null,"verdict":"no specific threat"}},"metadata":{"file_info":{"file_name":"https://dotnetfiddle.net/hqRUiG","file_size":0,"file_type":["url"],"file_type_id":"url"},"hashes":{"imphash":"Unknown","md5":"ad50ce0fbabaa306a98d110169d25fc9","sha1":"aeefd8d0bfb4e1fd32157514a8af32ef07390ae8","sha256":"6627608391d9c2cc36b0cad2557b3f19e19413b22841920543c30aa840fa51ea","sha512":"b55c51a3904d44ba32e9052c355737a09f6d275ddca638644f8abd8897e26571287b5a2bb3ff915d245e8881d22b7b6ad924145cc6ee0f554ba3dfb630a7efee","ssdeep":"Unknown"},"submissions":{"first_seen":1657699634000,"last_multi_scan":1677028427000,"last_seen":1677028427000}},"overall_status":"SUCCESS","report_ids":{"sandbox_job_ids":["62ce7d275916577154777806"]},"schema_version":"1.0.9","sha256":"6627608391d9c2cc36b0cad2557b3f19e19413b22841920543c30aa840fa51ea","threat_score":0,"unified_at":"2026-09-02T05:31:18.919Z","unified_at_epoch_ms":1788327078919,"verdict":"no specific threat"}}]]}] 1b:null 1f:[["$","title","0",{"children":"Sample 6627608391d9… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 6627608391d9…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/6627608391d9c2cc36b0cad2557b3f19e19413b22841920543c30aa840fa51ea"}],["$","meta","4",{"property":"og:title","content":"Sample 6627608391d9… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 6627608391d9…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/6627608391d9c2cc36b0cad2557b3f19e19413b22841920543c30aa840fa51ea"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 6627608391d9… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 6627608391d9…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L27","11",{}]]