26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2a:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T40a,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 7471e0d1b6f2… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 7471e0d1b6f2…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/7471e0d1b6f214ed32a6ea8f7ee34adf019f0ebd57c95952cbf3a987d4684a3e","keywords":["malware analysis","sandbox report","threat intelligence","7471e0d1b6f214ed32a6ea8f7ee34adf019f0ebd57c95952cbf3a987d4684a3e"],"about":{"@type":"SoftwareApplication","name":"http://www.google.com/travel/trips/s/UgydtGl0UDLfyITqGr54AaABLKgBh5HACA","applicationCategory":["url"],"identifier":"7471e0d1b6f214ed32a6ea8f7ee34adf019f0ebd57c95952cbf3a987d4684a3e"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":1},"behavioralIndicators":{"malicious":0,"suspicious":0},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Tb85,"urlblockindex_1_.bin" has type "data"- [targetUID: N/A] "A9YBIOJL.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\A9YBIOJL.txt]- [targetUID: 00000000-00002628] "LZWC970U.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\LZWC970U.txt]- [targetUID: 00000000-00002628] "CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA]- [targetUID: 00000000-00002092] "unsupported_1_.htm" has type "HTML document UTF-8 Unicode text with very long lines"- [targetUID: N/A] "F2DDCD2B5F37625B82E81F4976CEE400_C41EDA93256487D15B8DBF29BEA794CD" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\F2DDCD2B5F37625B82E81F4976CEE400_C41EDA93256487D15B8DBF29BEA794CD]- [targetUID: 00000000-00002092] "~DFC730CEB217CEA7FD.TMP" has type "data"- Location: [%TEMP%\~DFC730CEB217CEA7FD.TMP]- [targetUID: 00000000-00002628] "80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53]- [targetUID: 00000000-00002628] "KFOlCnqEu92Fr1MmEU9fBBc-_1_.woff" has type "Web Open Font Format TrueType length 20012 version 1.1"- [targetUID: N/A] "4UabrENHsxJlGDuGo1OIlLU94YtzCwA_1_.woff" has type "Web Open Font Format TrueType length 26412 version 1.1"- [targetUID: N/A] "css_2_.css" has type "ASCII text"- [targetUID: N/A] "search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776]- [targetUID: 00000000-00002628] "KFOlCnqEu92Fr1MmWUlfBBc-_1_.woff" has type "Web Open Font Format TrueType length 19888 version 1.1"- [targetUID: N/A] "265C0DEB29181DD1891051371C5F863A_C4045BC9180A7EB5617FD6C414A03F45" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\265C0DEB29181DD1891051371C5F863A_C4045BC9180A7EB5617FD6C414A03F45]- [targetUID: 00000000-00002092] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 4817 bytes 1 file"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00002628] "KFOlCnqEu92Fr1MmWUlfBBc-_2_.woff" has type "Web Open Font Format TrueType length 20408 version 1.1"- [targetUID: N/A] "~DF582DC79A05A4B649.TMP" has type "data"- Location: [%TEMP%\~DF582DC79A05A4B649.TMP]- [targetUID: 00000000-00002628] "5RM3D05W.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\5RM3D05W.txt]- [targetUID: 00000000-00002628]28:T2903,"GET /images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://www.google.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.gstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_142.251.163.94] "= ++k3\1u1\"\5k\}^p}+\zjkk7pp}\Akz\:Op6WL9\]v[N~^!\u \p6e[g!<=kM/EJNiEFg#~4N ?gY%&x`FRY^FhOK:l[031n^zsf6NN^6Ta?v .0m4P%49A2 W>Xlj, 6 /rWV";Ze.pBC'r(_UB>)XVMFq;Z7j(ab0bX@NbPdt(:O:d+&R6Xl|DLP( /gOT9JgBH)n0EhU* z/Gutw{+'2O%ZZ8\BzWp: Gfc9\Wi8h,ilt# YWS5`TSs2nen8'U7X<\ $YH$`#Gybbs$VaSFQ9+! 6T^}'Bf!K9%-t Rynj*Ha;N)>?uc*a|V%LVDj37PC5 Dwx\0>VvQ05:wW(Oo'm'S`vk3x! 4+UQM: e?GV=f;}4^z h/0JoF^\kXuRsd+W92a4G 'RMn< ^"- [Source: SSL_142.251.163.94] , "X|`! kh'HwqboG2X8"f\DD`C9ggB(?66HJ`1GWxpRD7BlE*V$FLx+6"W(~4N\0Y%"HITnQL;[t@m&&CyHLsXrdb0iw&BRzkL|9Pp)R2m v]x$Q e%.RyWU+,a*]NNXw@E]x_=-Ib~ql/;8D,pAK{(&nJj!?9:nfsal&fp7SEMjf;+OW7*n(qSr]#2'IN@iP$A f-Pm6Fio0h{= @&[ecu=^9}hV(U "6jJ{e`1/=L:'*Ko'W)@HOi6Ht]H~xX~U_/5Ej}f&_OS31&vp2p5tftfnzcD!$[E_>~99Hh2N)b;ur2+^,nW9G<8U4\2 7oA4!y>P#VJR))5.~s(^}**o9v,:29?aPzqgplu!/EN2av~&Pa4P6[lI$2F=rD,{t-p0_d!5y.tEgy#`Hc;BAbvB;c\]>~6**QiZ(I+d/E}C-+b$P+8,skVArTe/%GTr%3'0_\3@`ItKU%:Ka("- [Source: SSL_142.251.163.94] "aa{@ `q8w6W'^^6`C9>@t( 'g"R'n"EdJD"Zdq0.w,'s"NSJOsMKKXb ,V dYO`CLr,t%RZb(>"5vCDB)Au vk]t>*AG+a%o9.pE3XJ7=(l^"{%d=#s'a7Dbhd=R*Jc6?\Tmsd@\:oN`XT 3MI:ypppKEutOpo2(L*_;(~~5`:06p8.}9,KE- ,.r^+@2)g=M^_o@#$TYtMI8sC{H2:i(1)"3 k4e!n6V nm0my'/xx-i`# q 8 =@nBAs`uoB|w$lW_J(N_Cg/9@\\2b-A$~:>pS(mikH7"C NYA:5uhmpi_HXGiRN^eHbSOIhA^:D% m"6(g_$K_%Jf,YzlieB2&G35^mR;T[$d*o~]*..{= HjF6oR/i1`>zwF@=[W<^,dW9r% d>;`9&,Usi#k[toZ+*czcQd7G@>4"(,no+48~Fr`^tvAYw $q#E&9AN6P$Wu6A{B=uQKU$$S/vG=g:PwaWBb,$IF?pN~oE86-);K\X>G'aWaSZZurJE~#(!_VVjOhKwtLR>1(^-*o7} TNvif26pDUl*(MZ5OVWQC&:*)2gR=\fDCg{@J3R-2:EW2fxiT{F{cV(a:^,Q@Rx%iOzj2?ptXfv]kbV QT%+f?e5`1+$_q4nHmtr!_If:IL!L~UUR)er&g+{@MfI4b7*}>}_{z*GTk'[Ps$A~u%y9:+f_n>/6A mjBPNzsNul.w@4V7 yVo-`\u~ol<%xhyG$C}rpW>~;T=WwjOh,d`X_J@SNTr'M?6Z)RRJU]4;ycDDo0nX&;WpPMQ?_)*GCx`S"Y{\w5 zX-RUSY[tg>7.c7=i|m z%V&n[6p+?|9P4Imt^oorAI(6@*?wWMnGx@QYW;g_wh~t i=)? QB<"Cu NmkPWP_rd1wmpSH}s5wJ@?p@cv%A*7VOum\6oi2-]6mOw60e#hC&*Ag;Z;D m>l3glwI]a6O_,`F!"P;6Kjb[C8}2hc $6(3Ie=]F-*J!?.9%"- [Source: SSL_142.251.163.94] , "er`f&u +,t@v?wMZZiWw1r@/'SlbM''3qPJneOx_Jf88WrT;cE2xy`B:(5lB90FMU+@1|I2U4 =y|U+U]q5H]xGV@:>ovE4Dgr1+3`4'/76$i\D<>>8w%a8 ;@B,)zi(yh^]>YKPCf*|cL- -/hLP{B^^++n*S66Zu'|\T]{'Uh6*=]Le~%8Hc!M7pSPh;$i<+xS \B>"W-=U(9nPR@Q2CsaE\slzVQ)(M$!$uyua%V6jU*a*fg=)h?"- [Source: SSL_142.251.163.94] , "A\dE#|UA/CsGK+ uH8-mrlcs7P<0$b({3e=bVO @YE,9x;Q/8hRq/};8"3E_&O9D]"y U,C C% %?9peKO!7rgqVYkdA[tu`W|VZTbdq3JNNS1)'?979DI}AkogPL-l'TQ=t~r)V0rzsoBtUQ/"g h% 0HL^OVM1,H(,CK)``S*V:`t:4Je"R=pO5_InJ*Wi^\\I0~%Yb.E* 6BYcHCt~*ZI_ji`iL! 7^qDWo&>\3At=i.b %Qg3( 9.)D<1V^Aw$e @]+ h|s":59'!`)aooJ+nN4JAH$NM% GADbCq6qd0tHO 2`aoKusazn>H3k: pK!\>DJZ64e|=#[BZoRFDKRg}B6b pGKv~' {RzD|wmX~#>BkIQ*v1iWT0@wv+Fi^aZ o Rr 09m#OqQ"oBuxju(XX]\Ug"9"zAwn!PUJRIP!4FD]yREhsv&z=z0qZJ fKvE.VEGIFR`F0MZzD65: 8^U!;C/e1f*y$MY*@QDmQ6~C:\y(G5Dg2PArqQn,y =/B FT=kbcLpB>3=O?`C)3 OSzdCB&yO"b$ "^;7:(bmz5$>K=7+r82lx@Z66c0%7mg4AmzeOpI6`ckam hJ?FqaR)J:rzWs@fC4CYSUJ~I T\LIg[ Kl*Z(< @R'l4q%Eb,A D}-e6U\/#DT_Q\Ta*df343>F>RGJ}+q<3v>&MCSz:C9tsrF^M8&-dx1p_ F$8Qc``K.aryXXRyDS9z1+F`NbbC\ +?j!2&`HN5uv1\#Kh2[em=\1++!#K|/v$\k>*Xk,%LxN0nUy{@ Bg0h$_Gl;AZhzP1yKIK[Z2'%tJe)j[KpAb#F8x" D?I3Z9RYx?,1`LUw`"s I~&w'h#s4yDX:d?kJ!oDyy5R]] rY},e3$r$vnH!2)EAnQ2onw5*"4hC8x+sJRE}\l#lIRaHE_YiofmgHv%] aX.:.HmU!"th>BV$EN)vT%t!7XzH5TTSgdr8zn;(^o{2I&%%jmy'=p(;|;D1hnpVh|]N0zm?-[;qPG%7i,:D*"eimU:rY.]rXKr@z|d'2$zHRj6 Wv[m8:|AF(]^x1I(mxmpl=1%&`_8FPYC},=jozw8 `#"Zh_Nt8( 6J64]d M#m [14 H,WWN[o\l`(1? fb*e9FYX0ec\p*KH;7vxeF0-1>t6U:p=LRB7yLx4[ kT4G-:Tf'T]oAfl^Z,J{uB_]B:Z~_"O?:4>&T\}]O*E'j#=v16^>vyCV%5!UJWIk:iKNIego'+/NLzgIxGXsq+5&s:S7R;1#jBi;+w]vu8s%Qcl$=T<345O\3*Fzc&&sP{k6m/E l+4{q4j.2aMQ+N$jtDrd6FT0eNDk5]x%A-^'K;e/yq__!Oh.s722NTu\f)d"- [Source: SSL_142.251.163.94] , "k9:8vSZG(yeON5"B G^W=e: 0s+sx8i>0Jp iDzi<`:*B 7sAimX55xk5UB\&c6j:-28^M?"B,[JC os.&+mt6y&#rFQu=W$&rGw";I$tn t@+vsSiM:wM4bXI[$.^/>?}1zxXYo2yPj2fRCr15 ")Y(NqT#AP 05H?4@ f"- [Source: SSL_142.251.163.94] , "FC};pD!qaqLQH+B:Z)ZY1E@S^SaxLdD E)5xd_cg~$$fHIkgaH&$y7n5`;4 6U&"fO)#EhcmnAVomU]5qxXb#[N7yzo&C noU9Gc$SEg)OeyC~)HE g_ F .LPTI8`)/WRTy"u(Z?2%JKaJj kJ=fP~$z'iLsht}"kI4cM4>AJI}HBOQt Hyi'Z=~-iqq5br?&Ox.{_7V5[8+QT7[l4qw/Wcaq;M_T<+ _v)e[NdPa>XuX]3BykUdlrxqm9^#V5Gn$/"M~4Migs93M**J_RpEBJp\af]C,;KQ+[6_UIk),6-S-}jfi@nR]];^O L|3{1;dl}Qy5-lK8^C3>jbUnv)Lo>o> =;&vF! `^$y${R0 kDU&+ `tcNTSPLiUR*w7SbJL`9o$)+oe*8zBQ8z'l'QW!gXrYYRN6E5v,d =NxbF{CP7o/+(rEN\,A9OW]+.~9=\:)Z,Nv9=Ak-Y2Xod0 9~+kdJG`A]2'w[*XN_yqgH gy$ #(=1)d;sn"- [Source: SSL_142.251.163.94] , " '^;SFiurUgqlwR01S%@\ !(cbchZfO2{|U J\"GuG?}W8rhx3};{V_mI[C/qwq|nfZG@ne)M}SXo?-4Y;@h^ `5\2GM3- J8iaTv.*X,fAmx?5H-m:p7: #|OcWN%^xCNk~F; su69xl=%I7en-olKE\#G5>K|GvZNu%]):DA+6lsY8>S$ONt$y^PS">5Y1u hl3g!>hSk1Of.K"\mt'Lj5\)-,2/NdReT2mi3{io1Vp_Mur?r2e]V6)OSL$Ofm2?apNi\ .S]\b|4G-BiBezIm!QMyftCSV:wWPI2zkiw19Sr;su*[Qi5{j9)i ~KW+ G{)Z+.o#h2qj-Q6QizKq[-.C3/Q^4poG}{ +dr d@oA?>aKDWp '=iN|@P-dispA{,q9YwtS].draa.0^~K\ +56o28*7$To%aw26[/XAn`G~7(k\`kM /\ax1Vsnhmd.q%Be,U{emZ)Wd)[-7U.HKiF>Z"- [Source: SSL_142.251.163.94] "qfk9[4[/deZv}pY7l-Ags%<~1$u`hq/n0+_Dn,XO^L_PXPJ[ybjWA`s!d{t$oZJZVn^pehf0/-'YHQ67-ZUN ZC){!Ki8ZQ0 qiKrD*ZHPaY.:NrQNjAkww.Q=Knkr"- [Source: SSL_142.251.163.94] "k5]b;A{kQn#?*^'m)MinmlK#ls,J=zHvQK^!N;K :h` >zp/>/|6MpjWVZMaOc7ysswQzw.GI NcgP3r:HRf>Bp&m\$ 1:1T=?|l5?a#|.rt<:>"Kwlc:#m J;gKrg|8PcyaRUOo] vI{8SlO_Vu=K#}W]\zh-S O8%Ap6uc~7 ^ZF?89>)IP"- [Source: SSL_142.251.163.94] "Ow,4&r`c($3wRK ^j|j\qN\ 'jet{sz47}R##zfW-/t'nFL'p sr=1maAF {` aBz N&uVZ18;n-xI9w:5 ;-D%GWhLUa"U8^nta_G3lUeZL1a+^AEow ;3wyDd>f;k%HH{28t!.{wUJ=E;HA8SD#IfyYZmB\whWua$z#eA7m^oQe'k8Wc #E$p3;YCT=*Ut !l}h,ID^*:e"yon~;'8FIWaXgxxwX+8=~!kq7ke3ke3]jFs*5ExhM!jD/`YHxTj_oh)sy7Y{fxS=Ox$NDEUNT2#+G3[ee`h(O &_U#I]w,MlcsE5OB&kSZB_C4JQ"h\N<8,f6*Tsgcg#g-g?bVbU,$1Xu\0IHU@}.GguTRKrm|}1F 3.;\}'f.u)&9)&pJd5w$kne%3H 8qL{glR/.ha?ihLq5)n(o[s+vwcgnwt,o8x|I<(AA`{9*f#XkVlMgd^SrGf_q5pO,ehMtB\xr`Y.*A(sipojrM|uN|QE;/~jY,:dao3/0SY.eQJ&(@I=I)9_OJJIIJYvby<;%(;["+d5{Krj ;e9Hu|~"- [Source: SSL_142.251.163.94] , "(s>.6rj+wc*;^FnVu[EEo/Vydy(OzqK3,5;V*eX -,f^BP/(udk;N7Sl]pT11M1ZIMe6?=.ovoT/bed[miutmnMpOK&Kk`$UMXX)[vY5TWCNj81aZqaD o7Gx;N3#>5K;v48(S@|[W?dwk3-R]e >qHutd,J[FFW9{)fNV8D3VHRv>dsqXPU@-q['qTZ0kC/$'S%Cn5vT=q0UrV~5Ci.N8,=$ c34py:C6xR}H~kZd$zT$c3_l>;yI.(`r{oqImh}#J*Wwni.Qq9 Up5o'J3,Dm:GkKs3vusS6Tgo=9`Vl{-H7O\_E Wr5P4,NaBF$"BOV0|\@oQO8bM8 {_t @=e9r"v\!wP1wWC{3 u0Quyb.5g)+Ggz.{:>;OVr 3eiE?F8~(tNu?Kat,VE/~9M`[h:d~C-YY.mI(}@Y[R^nh_)7 xt75N-Gj_3?4}h}LJzyi=9k>gk]>gNkxWI? ~j!~10`*xoT(b)gT }cU}AWkq2O@iXq!I*tRuOU]p?@h\;Geh\@e|B`p7D?1?h`EjJwGcnHV^44?kt8\^7m>uA_^R)~CLR.:%4d; (Q)Qt4YcCPf7S!qD0/:s %c8~'e=F\Bo~Vht^hP|3CczL- @SColfd[`g@2fUl?tojEGb fZ{elANmY4xih53go HY2t}k23y0y9BAd $J-#?mvwk0p=<^k %+HYO;]"gy8,m_tm_ SU!`@REpFn8I#DW~/u`\TXMiMQez`Bn-W"- [Source: SSL_142.251.163.94]29:T564,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD0klEQVR42u2XS2hTWRjHg7Nw4TADYqcdxFbFMqtZjjOzUgdFRWtbEjuPMgu3wygoCqXooKIoVGiNaZuWLtsunIdTmG4GN4VQZmBaLPRlKK0P0iZ9JJmYx03u4+/3nZs0zTX39jZx2Q/+5EHO+f++75zznRuHYzu2wxBTU1NYWlrC8vIygsGgTem/DwQCGB0dRX19PUoGmJ6ehqZpKCVkWQaPZwin04mSAdLptJiQQTRNhaqaSYGi5MUxNzcHv9+PyclJNDY2okwAc2OjeQ7gxYsFLC4uis8TExNobm5GyQB2ss5LFmM4+/n5efE+EonA5/PB5XJhSwCSJJkCmJnnAGZmZjA42E8axMDAAIaGhjA8PPy+AMzNeQOychEKhQTM2NiYgCgTQDE1zxnnlUEmkyk4SbOzs+UAbJ71RvMcgC6eR0MikSgVoBzztBADRKPRrQKkRAk3L7nRNG/MJ4nF80Sjka0BpFJGALkk83RaEr3EEuCni5dx9eq1kuT2dL1jngeQ7AHwRG9opVaokYUyQJIno+z5QBWXJsTBY63McwDckCwBlsn8ZQxYSgB3+v/BruMPUHXOjUPf9qD2O++6Pm3woJa+U8QdoWUBjGXPA/Bm5pMUiYStAVZUYCGi4jVBxGnQn6MLONDUhap6N6qd3ah2dZK6sOdMB2oa3JDVQgCjcc5cB1A2B1glgJcE8CoKBGJpQX2bKrH7dDtqzndjf1YVBHDI2VFQAStzPk22AV5R9lyBJA18OhHAgfNe1Ljy5vubvPhEADwsAiAZAFLrsgUQhm4ep9fxuVV89kMv9jk7ydgrzPc1erC34RFVoB21BLBxCcwy3wgQDm8CEOHLIwW8oUqcvfYbKurcONjULcpfVdeBytNttPYd2HXsHg42tBsqUNyYxf2E+0c4vGYN8D8B0AHAyFQIlXUPaQN61813fHUTv4/M4L/nQTi+/AWVJ+8XAJgZ60raA+A+QMnD8+QZPj7VLgC45B98fRPux/9mH800DPme46MjtwuWwGiuAyTXZQsgnr023X88w4cnHtDm68LOI3fR0vlUGEmsrOlfPr+hAsWy3yJAItvl/h4PYOc3bbQMblTRuq/EJGEUl1XqkCokRTc2AzCa2wbgyzdKbZj2IY7+3A/H56344kKvMJFJSQJIkSRSWlENS5BEMslKFFUmI2N1dcUagG/ttZRehWA4ju+v/wrH4Rv48dYTjPlDIDZQAQgGlL2+X3J3gd2wBOBQsj+MxWKIx+PiKcZKXG4e29vbU1Q9Pbr6+vrg8XjMAS5eulLyddzS2opy/wq+BTgoCRlpZOGDAAAAAElFTkSuQmCC1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"7471e0d1b6f214ed32a6ea8f7ee34adf019f0ebd57c95952cbf3a987d4684a3e","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1790430835629,"unified_at":"2026-09-26T13:53:55.629Z","metadata":{"hashes":{"sha256":"7471e0d1b6f214ed32a6ea8f7ee34adf019f0ebd57c95952cbf3a987d4684a3e","sha1":"507fefcaf3b8ebc836f074d7971cfb2b0a8ddf2d","md5":"5c41f0822f9d910ea156e7ea70092e7b","sha512":"f630035311e54234867b14eff77d91091548adf55e894e781d150972491dd0c7c1d4da0aff7b7cf1026cc17af717d420e63cf86108a06d0124d597adebea7e3d","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"http://www.google.com/travel/trips/s/UgydtGl0UDLfyITqGr54AaABLKgBh5HACA","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1661457464000,"last_seen":1664154399000,"last_multi_scan":1664154399000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":1},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":1},"sandbox_signatures":{"informative_count":8,"suspicious_count":0,"malicious_count":0,"total":8},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Found decrypted SSL traffic"}],"sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts domains","description":"\"ocsp.pki.goog\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"142.251.111.94:80\"\n \"142.251.163.94:443\"\n \"142.250.31.95:443\"\n \"172.217.0.35:443\"\n \"142.251.16.138:443\"\n \"172.253.63.94:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a44_IESQMMUTEX_0_519\"\n \"Local\\InternetShortcutMutex\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"IsoScope_a44_IESQMMUTEX_0_331\"\n \"IsoScope_a44_ConnHashTable<2628>_HashTable_Mutex\"\n \"IsoScope_a44_IESQMMUTEX_0_303\"\n \"IsoScope_a44_IESQMMUTEX_0_519\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2628\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"Local\\ZonesCacheCounterMutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"UpdatingNewTabPageData\"\n \"IsoScope_a44_IE_EarlyTabStart_0xa30_Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2628\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$27","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"level":"informative","category":"Network Related","name":"Found decrypted SSL traffic","description":"$28","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"http://www.google.com/travel/trips/s/UgydtGl0UDLfyITqGr54AaABLKgBh5HACA\"- [Source: Input]\n Pattern match: \"http://www.google.com\"- [Source: Input]\n Pattern match: \"https://www.google.com/\"- [Source: SSL_142.251.163.94]","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4817 bytes 1 file\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 1 domain and 1 host"}],"sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":36,"imported_dlls_count":125,"dropped_files_count":0,"extracted_files_count":46,"files_written_count":43,"files_deleted_count":0,"registry_keys_created_count":8,"registry_keys_modified_count":0,"registry_keys_deleted_count":2,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":10,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":6,"dns_resolutions_count":1,"contacted_urls_count":6,"http_requests_count":6},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"6307d437ac95eb705c6c5fc3","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"7471e0d1b6f214ed32a6ea8f7ee34adf019f0ebd57c95952cbf3a987d4684a3e.url","analysis_start_time":"2022-08-25T19:57:44+00:00","indicators_count":{"informative":8,"suspicious":0,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"142.251.111.94","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"address":"142.251.163.94","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"address":"142.250.31.95","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"address":"172.217.0.35","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"address":"142.251.16.138","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"address":"172.253.63.94","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]}],"dns_resolutions":[{"domain":"ocsp.pki.goog","address":"142.251.111.94","ttl":292,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]}],"http_requests":[{"host":"ocsp.pki.goog","host_ip":"142.251.111.94:80","url":"/gsr1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS3V7W2nAf4FiMTjpDJKg6%2BMgGqMQQUYHtmGkUNl8qJUC99BM00qP%2F8%2FUsCEHe9DWzbNvka6iEPxPBY0w0%3D","method":"GET","header":"GET /gsr1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS3V7W2nAf4FiMTjpDJKg6%2BMgGqMQQUYHtmGkUNl8qJUC99BM00qP%2F8%2FUsCEHe9DWzbNvka6iEPxPBY0w0%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"host":"ocsp.pki.goog","host_ip":"142.251.111.94:80","url":"/gtsr1/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBQwkcLWD4LqGJ7bE7B1XZsEbmfwUAQU5K8rJnEaK0gnhS9SZizv8IkTcT4CDQIDvFNZazTHGPUBUGY%3D","method":"GET","header":"GET /gtsr1/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBQwkcLWD4LqGJ7bE7B1XZsEbmfwUAQU5K8rJnEaK0gnhS9SZizv8IkTcT4CDQIDvFNZazTHGPUBUGY%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"host":"ocsp.pki.goog","host_ip":"142.251.111.94:80","url":"/gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQCRHm86eDu9KRJ57xiTEtM3","method":"GET","header":"GET /gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQCRHm86eDu9KRJ57xiTEtM3 HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"host":"ocsp.pki.goog","host_ip":"142.251.111.94:80","url":"/gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEFKcfavRn0HBEvz%2F2Lm7E5k%3D","method":"GET","header":"GET /gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEFKcfavRn0HBEvz%2F2Lm7E5k%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"host":"ocsp.pki.goog","host_ip":"142.251.111.94:80","url":"/gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQC5lAfDeRFyEgrJ2zX2DMGz","method":"GET","header":"GET /gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQC5lAfDeRFyEgrJ2zX2DMGz HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"host":"ocsp.pki.goog","host_ip":"142.251.111.94:80","url":"/gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEFE2A8AcANl5CokbnV68cdg%3D","method":"GET","header":"GET /gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEFE2A8AcANl5CokbnV68cdg%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}],"processes":[{"pid":3832,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\7471e0d1b6f214ed32a6ea8f7ee34adf019f0ebd57c95952cbf3a987d4684a3e.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00003832","icon":"$29"},{"pid":2628,"ppid":3832,"name":"iexplore.exe","command_line":"http://www.google.com/travel/trips/s/UgydtGl0UDLfyITqGr54AaABLKgBh5HACA","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003832","uid":"00000000-00002628"},{"pid":2092,"ppid":2628,"name":"iexplore.exe","command_line":"SCODEF:2628 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002628","uid":"00000000-00002092"}],"all_imported_dlls":["rasadhlp.dll","jscript9.dll","d3d11.dll","rpcrt4.dll","rsaenh.dll","ncrypt.dll","clbcatq.dll","userenv.dll","profapi.dll","FWPUCLNT.DLL","RpcRtRemote.dll","WSHTCPIP.DLL","devobj.dll","deploy.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","mlang.dll","credssp.dll","kernel32.dll","msvcrt.dll","dwmapi.dll","oleaccrc.dll","msimg32.dll","ole32.dll","oleaut32.dll","nlaapi.dll","urlmon.dll","apphelp.dll","cryptnet.dll","DWrite.dll","d2d1.dll","version.dll","msctf.dll","sqmapi.dll","sechost.dll","npmproxy.dll","bcryptprimitives.dll","URLREDIR.DLL","imagehlp.dll","mshtml.dll","srvcli.dll","api-ms-win-downlevel-version-l1-1-0.dll","nsi.dll","msasn1.dll","tzres.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","MSOHEV.DLL","jp2ssv.dll","winmm.dll","iertutil.dll","imm32.dll","normaliz.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","shlwapi.dll","setupapi.dll","msvcr100.dll","advapi32.dll","wship6.dll","gdi32.dll","dhcpcsvc.dll","gpapi.dll","uxtheme.dll","IPHLPAPI.DLL","winhttp.dll","ssv.dll","IEShims.dll","user32.dll","usp10.dll","ws2_32.dll","d3d10warp.dll","KernelBase.dll","ieui.dll","api-ms-win-core-synch-l1-2-0.dll","ieproxy.dll","ExplorerFrame.dll","ntmarta.dll","mscoree.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","wkscli.dll","webio.dll","xmllite.dll","winnsi.dll","netapi32.dll","dui70.dll","comctl32.dll","netprofm.dll","api-ms-win-core-timezone-l1-1-0.dll","comdlg32.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","dhcpcsvc6.dll","cfgmgr32.dll","api-ms-win-downlevel-user32-l1-1-0.dll","netutils.dll","propsys.dll","sxs.dll","powrprof.dll","mscorwks.dll","ieframe.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","wintrust.dll","duser.dll","cryptbase.dll","wininet.dll","mswsock.dll","schannel.dll","shell32.dll","cryptsp.dll","crypt32.dll","SensApi.dll","fltLib.dll","secur32.dll","WindowsCodecs.dll","sspicli.dll","lpk.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","oleacc.dll","wshqos.dll","dxgi.dll","UIAnimation.dll","msimtf.dll","rpcss.dll","Wldap32.dll","mscoreei.dll","msvcr90.dll","bcrypt.dll","dnsapi.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"favicon_3_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"favicon_2_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"0U6ZNTRJ.txt","sha256":"6b7bb93b04fec71ffcddba3581d75b2a8eec55291240167503ba7c7d6b9eaff7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"0YC9OYI1.txt","sha256":"982d466c2ced5a5b3827b9db0ba3702c199d66720a053481f704e19f5c93a11b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"5RM3D05W.txt","sha256":"b49256220d2d8f4c3d68f1a42c70244d9063e8907a9433c250f75ced4b230554","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"A9YBIOJL.txt","sha256":"ef5269e8e8fe4fee3b0c1a9b523702e056716288fb01ebd4cd09d4418ee29832","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"E5WH6J0W.txt","sha256":"58745720b5bc47e5341cf3c184eddcc5180feeb3800b89725546b60bc80a5e9b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"LA07KV9B.txt","sha256":"a9bd23b9b6012a91dfc25ee7f2a5da7cb354c01768cc1f01618a59798cae4251","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"LZWC970U.txt","sha256":"b5bc30caea058d043ca32227078d76dce2ce10d090bf7c3b8136bdf131a62888","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"MUI3GN2Z.txt","sha256":"f629b14d63471fd4c97d684e3884ec07385c86c3a779bd422e874ffab76bd4f7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"ZWJ6RTVK.txt","sha256":"986529588f87c84c6b31a82b2600e2a2ba62ac93da9c759ea6879b6e6f89bd2f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"imagestore.dat","sha256":"13a40530c3f37354183f2db91d4d07fc4f76ccaa3b5b7241667784f1fa2e8e76","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"2952033a84b8c1ff5bb962d342cbaeb74839206bd7bd180b9b00fd967cd6c4ae","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"E87CE99F124623F95572A696C80EFCAF_D4D4A313701C8AC658E698A47EC081A5","sha256":"fd9364db689579d1a4ab2424bbe4d91c54acc1c89cb77951d446ae33d9c7f194","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA","sha256":"cbc8159d89178b21995fa08c45342b350d9a8112471c30898e2ed858482fb245","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"265C0DEB29181DD1891051371C5F863A_C4045BC9180A7EB5617FD6C414A03F45","sha256":"4ed31a8b6e0fcc07b893f0cbdd95bd9062bcf30f699575e85638140eaa9b47bf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"c55a8808a7c200a8809cd6e96c183b7eee4d08da29e3a269ce7308dc27024d13","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"fdcf171953eee5d718488433c18a34cf3d2772e0334ce8cd10c385d2b474a8cc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sha256":"f1aba5807a695b5fec3f9331f6eee956b3db053cc40cb183dcc8869c3e5f1e81","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA","sha256":"91291a5edc4e10a225d3c23265d236ecc74473d9893be5bd07e202d95b3fb172","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"F2DDCD2B5F37625B82E81F4976CEE400_C41EDA93256487D15B8DBF29BEA794CD","sha256":"35a15c522044836a7b6f242cbe426c5e3f9d91d3fcf4127d74c22283ae28ff9a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"F2DDCD2B5F37625B82E81F4976CEE400_EA5E90ED0075911E4948631828E71FE0","sha256":"907edaa69892069a5abc4930ac358d7910fe86f0a653ada2aa7acc8236630535","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"~DF582DC79A05A4B649.TMP","sha256":"a29f4a84188fbdeb4ede57385c4f4a148d8c082b9f0fcd6fc483111e65e3fdbf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"~DF5A95943ABAF5934C.TMP","sha256":"893a298103dc974ef497e96bfe2374d7f9de28cb8b87453078d7bbb68b000367","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"~DF778539D10A49CE37.TMP","sha256":"a2b605343331217a725be38cee28137a310fb4248a7c2d65fe7318b0ab024ff4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"~DFC730CEB217CEA7FD.TMP","sha256":"8becf8a00109b501f7cd7c9131e3e3da87179382b2fec354de0504edd0f7fb73","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"unsupported_1_.htm","sha256":"09a044cb49d977adede5e3d0306febdf57bbcf6601915c7e6b5ce07a7691cacf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"KFOlCnqEu92Fr1MmEU9fBBc-_1_.woff","sha256":"3bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"4UabrENHsxJlGDuGo1OIlLU94YtzCwA_1_.woff","sha256":"f8f2046a2847f22383616cf8a53620e6cecdd29cf2b6044a72688c11370b2ff8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"css_2_.css","sha256":"e099396211b95c522e01012bb18e823f990d3615c46aaac4a57f7baf5408942d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"KFOlCnqEu92Fr1MmWUlfBBc-_1_.woff","sha256":"468e579fe1210fa55525b1c470ed2d1958404512a2dd4fb972cac5ce0ff00b1f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"KFOlCnqEu92Fr1MmWUlfBBc-_2_.woff","sha256":"e0fd57c0d9537d9c9884b6a8ad8c1823800d94dcfb6a2cc988780fe65a592fe6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"travel_logo_32_1_.png","sha256":"f5ea98480959de03877595db12d620936eb21cda08ee830840f2605fe3146477","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"cb_gapi_1_.js","sha256":"ca7f9c5900e62d8ded9ad872ac304175e7fc57bb3998fc4a6b6ced590667c6de","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"5d082b373a1e32e98e11ef444796146964755682cf3a334f707b683d740e693b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"4UaGrENHsxJlGDuGo1OIlL3Owpg_1_.woff","sha256":"1f75065dfb36706ba3dc0019397fca1a3a435c9a0437db038daaadd3459335d7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"_B8417153-249F-11ED-A8DE-080027FA71DE_.dat","sha256":"5e4b36d8d7bd7d15f8b29b663a618954f2e996529ccf47fe83c996a786c21b21","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"select_your_country_510x350_1_.png","sha256":"f0daccd9617c5d89d5da3082f53d41b2fd390006f5b584549b2a6b626410adc8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"_C446D498-249F-11ED-A8DE-080027FA71DE_.dat","sha256":"269ea5feb483d65e0a20492a233cf91e090d2f979cc8618b61d6c804c387c54f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"KFOlCnqEu92Fr1MmSU5fBBc-_1_.woff","sha256":"3ab30e780c8b0bcc4998b838a5b30c3bfe28edead312906dc3c12271fae0699a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"search_1_.json","sha256":"19170bd75edc0b5183a2f9fcc3001d9d222deff61e5915ad1127b65ab581a2a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"KFOmCnqEu92Fr1Mu4mxM_1_.woff","sha256":"f2abf7fbabe298e5823d257e48f5dc2138c6d5e0c210066f76b0067e8eda194f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"RecoveryStore._B8417151-249F-11ED-A8DE-080027FA71DE_.dat","sha256":"3e20360e2d956d3aafd177e791077bfbef4cef41f8896dc33ff47ff188b2e9bf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]}],"files_written":[{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{B8417153-249F-11ED-A8DE-080027FA71DE}.dat","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%TEMP%\\~DF5A95943ABAF5934C.TMP","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\unsupported[1].htm","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{C446D498-249F-11ED-A8DE-080027FA71DE}.dat","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%TEMP%\\~DFC730CEB217CEA7FD.TMP","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\F2DDCD2B5F37625B82E81F4976CEE400_C41EDA93256487D15B8DBF29BEA794CD","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\F2DDCD2B5F37625B82E81F4976CEE400_C41EDA93256487D15B8DBF29BEA794CD","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\css[1].css","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%TEMP%\\~DF582DC79A05A4B649.TMP","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\E87CE99F124623F95572A696C80EFCAF_D4D4A313701C8AC658E698A47EC081A5","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{B8417151-249F-11ED-A8DE-080027FA71DE}.dat","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\5RM3D05W.txt","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[3].ico","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\265C0DEB29181DD1891051371C5F863A_C4045BC9180A7EB5617FD6C414A03F45","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\265C0DEB29181DD1891051371C5F863A_C4045BC9180A7EB5617FD6C414A03F45","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MUI3GN2Z.txt","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\F2DDCD2B5F37625B82E81F4976CEE400_EA5E90ED0075911E4948631828E71FE0","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\F2DDCD2B5F37625B82E81F4976CEE400_EA5E90ED0075911E4948631828E71FE0","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LZWC970U.txt","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\AC-1F-6B-0D-DB-84\\","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\VERSIONMANAGER\\","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\P3P\\HISTORY\\","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\DOWNLOADMANAGER\\","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a44_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"IsoScope_a44_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"IsoScope_a44_ConnHashTable<2628>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"IsoScope_a44_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"IsoScope_a44_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2628","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"IsoScope_a44_IE_EarlyTabStart_0xa30_Mutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2628","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a44_IE_EarlyTabStart_0xa30_Mutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a44_ConnHashTable<2628>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a44_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a44_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a44_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"IsoScope_a44_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"6307d437ac95eb705c6c5fc3"}]}]}},"report_ids":{"sandbox_job_ids":["6307d437ac95eb705c6c5fc3"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 7471e0d1b6f2… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 7471e0d1b6f2…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/7471e0d1b6f214ed32a6ea8f7ee34adf019f0ebd57c95952cbf3a987d4684a3e"}],["$","meta","4",{"property":"og:title","content":"Sample 7471e0d1b6f2… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 7471e0d1b6f2…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/7471e0d1b6f214ed32a6ea8f7ee34adf019f0ebd57c95952cbf3a987d4684a3e"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 7471e0d1b6f2… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 7471e0d1b6f2…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2a","11",{}]]