26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2d:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4b5,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 80896df1c43d… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 80896df1c43d…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/80896df1c43d1ff6a4187d285250f93244d45876f1f799679e2d6e6eb35427bb","keywords":["malware analysis","sandbox report","threat intelligence","80896df1c43d1ff6a4187d285250f93244d45876f1f799679e2d6e6eb35427bb"],"about":{"@type":"SoftwareApplication","name":"https://twitter.com/ufc287livest/status/1644784546246959105%20https:/twitter.com/ufc287livest/status/1644784522763046912%20https:/twitter.com/ufc287livest/status/1644784504173903872%20https:/twitter.com/ufc287livest/status/1644784484586496000","applicationCategory":["url"],"identifier":"80896df1c43d1ff6a4187d285250f93244d45876f1f799679e2d6e6eb35427bb"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":3},"behavioralIndicators":{"malicious":0,"suspicious":1},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Tfc1,"https://twitter.com/ufc287livest/status/1644784546246959105%20https:/twitter.com/ufc287livest/status/1644784522763046912%20https:/twitter.com/ufc287livest/status/1644784504173903872%20https:/twitter.com/ufc287livest/status/1644784484586496000" (Indicator: "twitter") "https://twitter.com" (Indicator: "twitter") "URL=https://twitter.com/ufc287livest/status/1644784546246959105%20https:/twitter.com/ufc287livest/status/1644784522763046912%20https:/twitter.com/ufc287livest/status/1644784504173903872%20https:/twitter.com/ufc287livest/status/1644784484586496000" (Indicator: "twitter") "guest_id_marketingv1%3A168098282851702251twitter.com/102539285795843117259687934996631025729*" (Indicator: "twitter") "twitter.com/" (Indicator: "twitter") "guest_id_marketingv1%3A168098282851702251twitter.com/102539285795843117259687934996631025729*guest_id_adsv1%3A168098282851702251twitter.com/102539285795843117259687997496631025729*" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") ".r-37j5jr{font-family:"TwitterChirp",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;}" (Indicator: "twitter") "

" (Indicator: "twitter") "

Weve detected that JavaScript is disabled in this browser. Please enable JavaScript or switch to a supported browser to continue using twitter.com. You can see a list of supported browsers in our Help Center.

" (Indicator: "twitter") "

Help Center

" (Indicator: "twitter") "Terms of Service" (Indicator: "twitter") "Privacy Policy" (Indicator: "twitter") "Cookie Policy" (Indicator: "twitter") "Imprint" (Indicator: "twitter") "Ads info" (Indicator: "twitter") "2023 Twitter, Inc." (Indicator: "twitter") "personalization_id"v1_//I1swJOO+vo63HCrN7bfQ=="twitter.com/102539285795843117259688013121631025729*guest_id_marketingv1%3A168098282851702251twitter.com/102539285795843117259687934996631025729*guest_id_adsv1%3A168098282851702251twitter.com/102539285795843117259687997496631025729*" (Indicator: "twitter") "personalization_id"v1_//I1swJOO+vo63HCrN7bfQ=="twitter.com/102539285795843117259688013121631025729*guest_idv1%3A168098282851702251twitter.com/102539285795843117259688013121631025729*guest_id_marketingv1%3A168098282851702251twitter.com/102539285795843117259687934996631025729*guest_id_adsv1%3A168098282851702251twitter.com/102539285795843117259687997496631025729*" (Indicator: "twitter")28:T9fc,"urlref_httpstwitter.comufc287liveststatus1644784546246959105%20httpstwitter.comufc287liveststatus1644784522763046912%20httpstwitter.com" has type "HTML document UTF-8 Unicode text with very long lines"- [targetUID: N/A] "urlblockindex_1_.bin" has type "data"- [targetUID: N/A] "en-US.4" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\DomainSuggestions\en-US.4]- [targetUID: 00000000-00002448] "RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "~DFDE1127982654B872.TMP" has type "data"- Location: [%TEMP%\~DFDE1127982654B872.TMP]- [targetUID: 00000000-00002448] "~DF2861B649CD34FCCA.TMP" has type "data"- Location: [%TEMP%\~DF2861B649CD34FCCA.TMP]- [targetUID: 00000000-00002448] "~DF276BC4CCE53E9B78.TMP" has type "data"- Location: [%TEMP%\~DF276BC4CCE53E9B78.TMP]- [targetUID: 00000000-00002448] "~DFD45C2B60F82558C1.TMP" has type "data"- Location: [%TEMP%\~DFD45C2B60F82558C1.TMP]- [targetUID: 00000000-00002448] "RecoveryStore._6F224517-D634-11ED-918D-0800273D75B2_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "_6F224519-D634-11ED-918D-0800273D75B2_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "_765F1660-D634-11ED-918D-0800273D75B2_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "logo46x38_1_.png" has type "PNG image data 46 x 38 8-bit/color RGBA non-interlaced"- [targetUID: N/A] "0GZXCJTA.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\0GZXCJTA.txt]- [targetUID: 00000000-00002448] "M7GG5MEL.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\M7GG5MEL.txt]- [targetUID: 00000000-00002448] "B0PRMRNH.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\B0PRMRNH.txt]- [targetUID: 00000000-00002448] "J2BFMOKL.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\J2BFMOKL.txt]- [targetUID: 00000000-00002448] "357IMZFV.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\357IMZFV.txt]- [targetUID: 00000000-00001804] "XU60NQ75.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\XU60NQ75.txt]- [targetUID: 00000000-00001804] "search_2_.json" has type "JSON data"- [targetUID: N/A]29:T420,Found requests in header "GET /ufc287livest/status/1644784546246959105%20https:/twitter.com/ufc287livest/status/1644784522763046912%20https:/twitter.com/ufc287livest/status/1644784504173903872%20https:/twitter.com/ufc287livest/status/1644784484586496000 HTTP/1.1Accept: text/html, application/xhtml+xml, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: twitter.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /errors/logo46x38.png HTTP/1.1Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5Referer: https://twitter.com/ufc287livest/status/1644784546246959105%20https:/twitter.com/ufc287livest/status/1644784522763046912%20https:/twitter.com/ufc287livest/status/1644784504173903872%20https:/twitter.com/ufc287livest/status/1644784484586496000Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: abs.twimg.comDNT: 1Connection: Keep-Alive"; in File: "SSL")2a:T42f,"" (Indicator: ".onion") in Source: urlref_httpstwitter.comufc287liveststatus1644784546246959105%20httpstwitter.comufc287liveststatus1644784522763046912%20httpstwitter.com2b:T200f,Pattern match: "https://twitter.com/ufc287livest/status/1644784546246959105%20https:/twitter.com/ufc287livest/status/1644784522763046912%20https:/twitter.com/ufc287livest/status/1644784504173903872%20https:/twitter.com/ufc287livest/status/1644784484586496000" Pattern match: "https://twitter.com" Pattern match: "3A168098282851702251twitter.com/102539285795843117259687934996631025729*" Pattern match: "SUIDMmicrosoft.com/9216299926758431025846190309996631025729*MUID110A5160BA28656A29DC438DBB6464B2microsoft.com/1025313175680031104200190325621631025729*_EDGE_V1microsoft.com/9216313175680031104200190325621631025729*SRCHDAF=NOFORMmicrosoft.com/10243323789440" Pattern match: "IESS4Abing.com/1024294378944031085610419731758630938742*SRCHUIDV=2&GUID=DD3EB05AD9C54D24A2443E918EB9AD6D&dmnchg=1bing.com/1024294378944031085610419731758630938742*SRCHUSRDOB=20220131&T=1643622536000bing.com/1088404823347231085593429095039930938742*_URD=0bi" Pattern match: "MUIDB110A5160BA28656A29DC438DBB6464B2ieonline.microsoft.com/9216313175680031104200190325621631025729*" Pattern match: "3A168098282851702251twitter.com/102539285795843117259687934996631025729*guest_id_adsv1%3A168098282851702251twitter.com/102539285795843117259687997496631025729*" Pattern match: "https://abs.twimg.com/responsive-web/client-web/vendor.3a0e728a.js" Pattern match: "https://twitter3e4tixl4xyajtrzo62zg5vztmjuricljdp2c5kshju4avyoid.onion/" Pattern match: "https://abs.twimg.com/errors/logo46x38.png" Pattern match: "https://help.twitter.com/using-twitter/twitter-supported-browsers" Pattern match: "https://twitter.com/tos" Pattern match: "https://twitter.com/privacy" Pattern match: "https://support.twitter.com/articles/20170514" Pattern match: "https://legal.twitter.com/imprint.html" Pattern match: "https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html?ref=web-twc-ao-gbl-adsinfo&utm_source=twc&utm_medium=web&utm_campaign=ao&utm_content=adsinfo" Pattern match: "isdomainmigratedtruewww.msn.com/1025403517632031061955190716246631025729*" Pattern match: "www.msn.com/" Pattern match: "SUIDMmicrosoft.com/9216299926758431025846190309996631025729*SRCHDAF=NOFORMmicrosoft.com/102433237894403108561027971357230938743*SRCHUIDV=2&GUID=426377958C8445E3B4EA69482BD0E747&dmnchg=1microsoft.com/102433237894403108561027971357230938743*SRCHUSRDOB=202201" Pattern match: "twitter.com/102539285795843117259688013121631025729*guest_id_marketingv1%3A168098282851702251twitter.com/102539285795843117259687934996631025729*guest_id_adsv1%3A168098282851702251twitter.com/102539285795843117259687997496631025729*" Pattern match: "SUIDMmicrosoft.com/9216299926758431025846190309996631025729*MUID110A5160BA28656A29DC438DBB6464B2microsoft.com/1025313175680031104200190325621631025729*SRCHDAF=NOFORMmicrosoft.com/102433237894403108561027971357230938743*SRCHUIDV=2&GUID=426377958C8445E3B4EA6" Pattern match: "twitter.com/102539285795843117259688013121631025729*guest_idv1%3A168098282851702251twitter.com/102539285795843117259688013121631025729*guest_id_marketingv1%3A168098282851702251twitter.com/102539285795843117259687934996631025729*guest_id_adsv1%3A16809828285" Pattern match: "MUID1EF1A837AF526E2E1E29BADAAED66FC6msn.com/1025314175680031104200190731871631025729*" Heuristic match: "abs.twimg.com" Heuristic match: "twitter.com" Pattern match: "twitter.com/ufc287livest/status/1644784522763046912%20https:/twitter.com/ufc287livest/status/1644784504173903872%20https:/twitter.com/ufc287livest/status/1644784484586496000" Pattern match: "https://twitter.com/ufc287livest/status/1644784546246959105%20https:/twitter.com/ufc287livest/status/1644784522763046912%20https:/twitter.com/ufc287livest/status/1644784504173903872%20https:/twitter.com/ufc287livest/status/1644784484586496000Accept-Languag" Pattern match: "twitter.com/ufc287livest/status/1644784546246959105%20https:/twitter.com/ufc287livest/status/1644784522763046912%20https:/twitter.com/ufc287livest/status/1644784504173903872%20https:/twitter.com/ufc287livest/status/1644784484586496000" Heuristic match: "witter.com" Pattern match: "https://twitter.com/ufc287livest/status/164478454624695910" Pattern match: "http://www.windows.com/pctv" Pattern match: "http://go.microsoft.com/fwlink/?linkid=53081" Pattern match: "www.microsoft.com/extender/help" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=30564-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwl" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=70599" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=145837" Pattern match: "http://go.microsoft.com/fwlink/?LinkID=57190" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=145765" Heuristic match: "Example: computer.fabrikam.com" Pattern match: "vista.gallery.microsoft.com/vista/SideShow.aspx" Pattern match: "http://www.icra.org/vocabulary/" Pattern match: "wmploc.dll/Offline_Buy.htm'res://wmploc.dll/Offline_MediaGuide.htm*res://wmploc.dll/Offline_Subscriptions.htm" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=32146res://wmploc.dll/ICW_ErrorPage.htm" Pattern match: "wmploc.dll/Service_Initial.htm" Pattern match: "wmploc.dll/Error_ServiceInfo.htm'res://wmploc.dll/Offline_InfoCenter.htm&res://wmploc.dll/Offline_AlbumInfo.htm" Pattern match: "wmploc.dll/Service_NoFunc.htm%res://wmploc.dll/Service_No_Local.htm" Pattern match: "wmploc.dll/RT_IMAGE/ServiceLarge.png*res://wmploc.dll/RT_IMAGE/ServiceSmall.png*res://wmploc.dll/RT_IMAGE/ServiceSmall.png" Pattern match: "wmploc.dll/Blocked_AlbumInfo.htm&res://wmploc.dll/Blocked_AlbumInfo.htm,http://go.microsoft.com/fwlink/?LinkId=70183'res://wmploc.dll/offline_radioguide.htm" Pattern match: "http://images.metaservices.microsoft.com/cover/6http://redir.metaservices.microsoft.com/redir/buynow/" Pattern match: "redir.metaservices.microsoft.com/dvdcover/P" Pattern match: "http://redir.metaservices.microsoft.com/redir/buynow/" Pattern match: "http://windowsmedia.com/redir/findmedia.asp" Pattern match: "redir.metaservices.microsoft.com/redir/getmdrdvd/" Pattern match: "redir.metaservices.microsoft.com/redir/getmdrcd/?Bhttp://redir.metaservices.microsoft.com/redir/getmdrcdbackground/??http://redir.metaservices.microsoft.com/redir/getmdrcdposturl/?Ihttp://redir.metaservices.microsoft.com/redir/getmdrcdposturlbackground/?=h" Pattern match: "redir.metaservices.microsoft.com/redir/submittoc/?-http://windowsmedia.com/redir/QueryTOCExt.asp1res://wmploc.dll/Offline_MediaInfo_NowPlaying.htm7http://redir.metaservices.microsoft.com/redir/buynowmg/,http://windowsmedia.com/redir/buyticket9.asp" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=321507Optimized" Pattern match: "http://go.microsoft.com/fwlink/?linkid=8792" Pattern match: "http://redir.metaservices.microsoft.com/redir/mediaguide/?9http://redir.metaservices.microsoft.com/redir/radiotuner/,http://windowsmedia.com/redir/QueryTOCNP.asp#Show" Pattern match: "http://windowsmedia.com/redir/services.asp?WMPFriendly=true" Pattern match: "http://www.microsoft.com/windows/windowsmedia/musicservices.aspx?http://redir.metaservices.microsoft.com/redir/allservices/?sv=2?http://redir.metaservices.microsoft.com/redir/allservices/?sv=3?http://redir.metaservices.microsoft.com/redir/allservices/?sv=5" Pattern match: "http://www.w3.org/1999/XSL/Transform" Pattern match: "http://*.microsoft.co.jp" Pattern match: "http://microsoft.*.com" Pattern match: "www.treyresearch.net" Pattern match: "http://treyresearch.net" Heuristic match: "- fineartschool.net" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=226247" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=233329" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=228745" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=787651" Heuristic match: "GridParent.Height = Grid.Height + Grid.Top" Pattern match: "http://www.w3.org/2001/XMLSchema" Pattern match: "http://www.iec.ch" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=121315" Pattern match: "http://go.microsoft.com/fwlink/p/?LinkId=255142"2c:T584,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1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"80896df1c43d1ff6a4187d285250f93244d45876f1f799679e2d6e6eb35427bb","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1791175942923,"unified_at":"2026-10-05T04:52:22.923Z","metadata":{"hashes":{"sha256":"80896df1c43d1ff6a4187d285250f93244d45876f1f799679e2d6e6eb35427bb","sha1":"d8b3d95330b252172a4e2d2928c5a94147e8da9b","md5":"c2c851d422848b1fb8ef94d5f67c2f79","sha512":"2e387db00f28f65132b5cdb3e0153042b6584e2eef6278f01226da2470ca8a7c40f99e6ac085df74d1d1d30b7d250ab19f683cc288bd2c90f2acc60e1a34debc","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://twitter.com/ufc287livest/status/1644784546246959105%20https:/twitter.com/ufc287livest/status/1644784522763046912%20https:/twitter.com/ufc287livest/status/1644784504173903872%20https:/twitter.com/ufc287livest/status/1644784484586496000","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1680982677000,"last_seen":1680982677000,"last_multi_scan":1680982677000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":3},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":6},"sandbox_signatures":{"informative_count":10,"suspicious_count":1,"malicious_count":0,"total":11},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"cleandns":{"name":"CleanDNS","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"CleanDNS","permalink":"https://www.cleandns.com/","extra_fields":[{"name":"domain","value":"twitter.com"},{"name":"percent","value":0},{"name":"reports_count","value":0}]},"scamadviser":{"name":"ScamAdviser","success":true,"verdict":"clean","status":"clean","progress":100,"data_source":"ScamAdviser","permalink":"https://www.scamadviser.com/?utm_source=hybridanalysis","report_link":"https://www.scamadviser.com/check-website/twitter.com?utm_source=hybridanalysis","extra_fields":[{"name":"domain","value":"twitter.com"},{"name":"percent","value":0}]},"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Collection","technique":"Email Collection","attack_id":"T1114","attack_id_wiki":"https://attack.mitre.org/techniques/T1114","identifiers":[{"type":"suspicious","value":"Found a potential E-Mail address in binary/memory"}],"sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Contacts server"},{"type":"informative","value":"Found potential URL in binary/memory"},{"type":"informative","value":"Found potential IP address in binary/memory"}],"sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"tactic":"Command and Control","technique":"DNS","attack_id":"T1071.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/004","identifiers":[{"type":"informative","value":"Queries DNS server"}],"sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"tactic":"Command and Control","technique":"Multi-hop Proxy","attack_id":"T1090.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1090/003","identifiers":[{"type":"informative","value":"Contains Tor Onion URL"}],"sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"tactic":"Command and Control","technique":"Web Protocols","attack_id":"T1071.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/001","identifiers":[{"type":"informative","value":"Communicates with HTTPS webserver (GET/POST requests)"}],"sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"informative","value":"Dropped files"}],"sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts server","description":"\"104.244.42.1:443\"\n \"152.199.24.185:443\"","origin":"Network Traffic","mitre_attack_id":"T1071","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\IsoScope_990_IESQMMUTEX_0_519\"\n \"Local\\InternetShortcutMutex\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"IsoScope_990_IESQMMUTEX_0_519\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"UpdatingNewTabPageData\"\n \"IsoScope_990_IESQMMUTEX_0_331\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2448\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"IsoScope_990_ConnHashTable<2448>_HashTable_Mutex\"\n \"IsoScope_990_IE_EarlyTabStart_0xe48_Mutex\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"IsoScope_990_IESQMMUTEX_0_303\"\n \"Local\\ZonesCacheCounterMutex\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2448\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"$27","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"level":"informative","category":"General","name":"Queries DNS server","description":"\"abs.twimg.com\"\n \"twitter.com\"","origin":"Network Traffic","mitre_attack_id":"T1071.004","relevance":1,"id":"network-51","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$28","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"level":"informative","category":"Network Related","name":"Communicates with HTTPS webserver (GET/POST requests)","description":"$29","origin":"File/Memory","mitre_attack_id":"T1071.001","relevance":1,"id":"string-505","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"level":"informative","category":"Network Related","name":"Contains Tor Onion URL","description":"$2a","origin":"File/Memory","mitre_attack_id":"T1090.003","relevance":1,"id":"string-176","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"level":"informative","category":"Network Related","name":"Found potential IP address in binary/memory","description":"Potential IP \"1.0.0.0\" found in string \"Microsoft.Windows.IsolationAutomation,processorArchitecture=\"x86\",publicKeyToken=\"6595b64144ccf1df\",type=\"win32\",version=\"1.0.0.0\"C:\\Windows\\WinSxS\\manifests\\x86_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.0.0_none_35d357a66c38ade4.manifest\"\n Potential IP \"5.1.0.0\" found in string \"Microsoft.Windows.Shell.rundll32,processorArchitecture=\"x86\",type=\"win32\",version=\"5.1.0.0\"C:\\Windows\\system32\\RunDll32.exe\"\n Potential IP \"5.1.0.0\" found in string \"Microsoft.Windows.InetCore.ieframe,processorArchitecture=\"x86\",type=\"win32\",version=\"5.1.0.0\"C:\\Windows\\System32\\ieframe.dll\"\n Potential IP \"5.1.0.0\" found in string \"version=\"5.1.0.0\"\"\n Potential IP \"1.0.1.6\" found in string \"1.0.1.6 (vbl_wcp_d2_drivers.060616-1619)\"\n Potential IP \"1.0.0.0\" found in string \"1.0.0.0,2006\"\n Potential IP \"157.54.23.41\" found in string \"ftp://157.54.23.41/\"\n Potential IP \"1.01.2.70\" found in string \"1.01.2.70 (fbl_dox_dev_ihvs.090312-0417)\"\n \"1.01.2.70\"","origin":"File/Memory","mitre_attack_id":"T1071","relevance":3,"id":"string-14","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$2b","origin":"File/Memory","mitre_attack_id":"T1071","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"level":"suspicious","category":"General","name":"Found a potential E-Mail address in binary/memory","description":"Pattern match: \"logo46x38@2x.png\"","origin":"File/Memory","mitre_attack_id":"T1114","relevance":3,"id":"string-63","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 2 domains and 2 hosts"}],"sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":28,"imported_dlls_count":117,"dropped_files_count":0,"extracted_files_count":29,"files_written_count":34,"files_deleted_count":0,"registry_keys_created_count":41,"registry_keys_modified_count":0,"registry_keys_deleted_count":4,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":45,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":2,"dns_resolutions_count":2,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment"],"sandbox_reports":[{"id":"6431c2940a097742140a3e9e","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"80896df1c43d1ff6a4187d285250f93244d45876f1f799679e2d6e6eb35427bb.url","analysis_start_time":"2023-04-08T19:37:56+00:00","indicators_count":{"informative":10,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"104.244.42.1","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"address":"152.199.24.185","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]}],"dns_resolutions":[{"domain":"abs.twimg.com","address":"152.199.24.185","ttl":276,"country":"United States","registrar_name":"CSC CORPORATE DOMAINS, INC.","registrar_organization":"Twitter, Inc.","registrar_name_servers":"D01-01.NS.TWTRDNS.NET","registrar_creation_date":"2008-09-22T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"domain":"twitter.com","address":"104.244.42.1","ttl":1800,"country":"United States","registrar_name":"CSC CORPORATE DOMAINS, INC.","registrar_organization":"Twitter, Inc.","registrar_name_servers":"D01-01.NS.TWTRDNS.NET","registrar_creation_date":"2000-01-21T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}],"processes":[{"pid":2648,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\80896df1c43d1ff6a4187d285250f93244d45876f1f799679e2d6e6eb35427bb.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00002648","icon":"$2c"},{"pid":2448,"ppid":2648,"name":"iexplore.exe","command_line":"https://twitter.com/ufc287livest/status/1644784546246959105%20https:/twitter.com/ufc287livest/status/1644784522763046912%20https:/twitter.com/ufc287livest/status/1644784504173903872%20https:/twitter.com/ufc287livest/status/1644784484586496000","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002648","uid":"00000000-00002448"},{"pid":1804,"ppid":2448,"name":"iexplore.exe","command_line":"SCODEF:2448 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002448","uid":"00000000-00001804"}],"all_imported_dlls":["wininet.dll","gdi32.dll","devobj.dll","urlmon.dll","npmproxy.dll","dxgi.dll","winhttp.dll","MSOHEV.DLL","rpcrt4.dll","oleaut32.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","IEShims.dll","ssv.dll","shlwapi.dll","msasn1.dll","dhcpcsvc6.dll","URLREDIR.DLL","bcryptprimitives.dll","cryptsp.dll","sxs.dll","cryptbase.dll","sechost.dll","usp10.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","ncrypt.dll","wship6.dll","schannel.dll","comdlg32.dll","secur32.dll","wkscli.dll","ieui.dll","ntmarta.dll","msvcrt.dll","sspicli.dll","IPHLPAPI.DLL","apphelp.dll","KernelBase.dll","FWPUCLNT.DLL","fltLib.dll","crypt32.dll","mlang.dll","profapi.dll","setupapi.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","mswsock.dll","oleaccrc.dll","duser.dll","dhcpcsvc.dll","jp2ssv.dll","user32.dll","jscript9.dll","d3d11.dll","iertutil.dll","mscoree.dll","oleacc.dll","api-ms-win-core-synch-l1-2-0.dll","dwmapi.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","wintrust.dll","advapi32.dll","d3d10warp.dll","msvcr100.dll","deploy.dll","nlaapi.dll","wshqos.dll","kernel32.dll","lpk.dll","ieproxy.dll","msimg32.dll","mscoreei.dll","netapi32.dll","ExplorerFrame.dll","netprofm.dll","nsi.dll","dnsapi.dll","imagehlp.dll","rsaenh.dll","ws2_32.dll","sqmapi.dll","mshtml.dll","uxtheme.dll","DWrite.dll","clbcatq.dll","dui70.dll","msimtf.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","imm32.dll","shell32.dll","WSHTCPIP.DLL","comctl32.dll","Wldap32.dll","msctf.dll","ieframe.dll","userenv.dll","RpcRtRemote.dll","winnsi.dll","ole32.dll","bcrypt.dll","version.dll","webio.dll","rpcss.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","rasadhlp.dll","d2d1.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","gpapi.dll","netutils.dll","msvcr90.dll","cfgmgr32.dll","credssp.dll","mscorwks.dll","normaliz.dll","WindowsCodecs.dll","api-ms-win-downlevel-version-l1-1-0.dll","api-ms-win-downlevel-user32-l1-1-0.dll","srvcli.dll","propsys.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"favicon_2_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"favicon_3_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"0GZXCJTA.txt","sha256":"aa9c4fd3dc73081a573645c666336aa61f6fbde2d816fae18b4e38324ee64912","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"357IMZFV.txt","sha256":"5b6201d0865c8c0799c6ed1bd510855709f25543f347bf4638d47f245516664b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"703TQXFF.txt","sha256":"c77b6e1380420995e2b7be0afee2355f12cac99e66e5b1c87cbc293020db2a23","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"ADUZ6Z95.txt","sha256":"f386fdbcdd49b94d4c1c0bb48219803b5a33bf1b46341983c5de2241a189338f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"B0PRMRNH.txt","sha256":"c321a6893acb6060537530d9170f4820f5e12afd69ea0ab9dc117db7770e987d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"DB322SWQ.txt","sha256":"55b3c2477d1ce07c54d6b6cb85a00fa6850028cd474851f49c2d66263125bf95","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"H1RNBZMV.txt","sha256":"5b6201d0865c8c0799c6ed1bd510855709f25543f347bf4638d47f245516664b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"J2BFMOKL.txt","sha256":"e6b3a94e7c57c1c33829a8c95f5e4225545df305ff655e9aabe2f16a16336227","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"M7GG5MEL.txt","sha256":"f0203f64ffad940faf502f4a9db02d5d6f99ae30c7e6fc823dd2e2a34348a86b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"TB2MBGU3.txt","sha256":"755bbedd43dd79da86b550184f99692ea4725495014e4fcbee07b3e34f13d0dd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"UIN6A3RU.txt","sha256":"bc7fd10801dc33dcd3e4bc73eec857c91e47e64771c4b8b8cd5348d70e6e40d9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"XTXUADFP.txt","sha256":"94bed482a7cd63f9cd0809a11512e0ea2f2da61c239d57c1059af4a9c8577f9d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"XU60NQ75.txt","sha256":"8e0e62969961311aaed99cc8abc87dd6e8ed9d631034cf932561a338fc4fb057","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"~DF276BC4CCE53E9B78.TMP","sha256":"9f2f338073830310fc379190f42c8fdb9cbb865e393d9641909c240ac6ce3c86","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"~DF2861B649CD34FCCA.TMP","sha256":"c141f4c81ff4254367bf022b9bb2eb5a71575e318f077120dfca0d57732ecca5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"~DFD45C2B60F82558C1.TMP","sha256":"01239085ddd0dbf72b45371d186fc30d455ba558753d3436820bfa240a255b15","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"~DFDE1127982654B872.TMP","sha256":"acaffb78c594e21e02b5e0eb1aa97b04da3e1405753b2114b84783ffa654e2f4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"urlref_httpstwitter.comufc287liveststatus1644784546246959105%20httpstwitter.comufc287liveststatus1644784522763046912%20httpstwitter.com","sha256":"edde92411edf359734e7cd19c69c7dd6822208b9938c3bd03cf9f35d39676e22","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"ae4a8cc0d6bf16d31f5403cc497a0683fd39d8c089e9fec7f8264ca2d2888f09","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"RecoveryStore._6F224517-D634-11ED-918D-0800273D75B2_.dat","sha256":"30239ca7cb4f2ff7bbfec658db286293cfdcc915a07d66006dbf26de686b8679","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"_6F224519-D634-11ED-918D-0800273D75B2_.dat","sha256":"9dbdcfe8b508389b591f10bf9d29d3ec596b20a284f70c8b8f5afdf30a0c2737","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"_765F1660-D634-11ED-918D-0800273D75B2_.dat","sha256":"85a68f9c60d49a0bfecf6642aebc2eda2e1276d806caf6594681828d6224efef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"logo46x38_1_.png","sha256":"cc9e476c4f6128fe6ecc8c2fc704c3ac64cd38f6858b541e0004cdf956c93e91","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"search_2_.json","sha256":"19170bd75edc0b5183a2f9fcc3001d9d222deff61e5915ad1127b65ab581a2a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]}],"files_written":[{"path":"\\FileSystem\\Filters\\FltMgrMsg","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%TEMP%\\~DFDE1127982654B872.TMP","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{6F224517-D634-11ED-918D-0800273D75B2}.dat","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[3].ico","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{765F1660-D634-11ED-918D-0800273D75B2}.dat","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%TEMP%\\~DF2861B649CD34FCCA.TMP","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active\\RecoveryStore.{88B090C0-D917-11E7-B67B-080027A49DD6}.dat","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%TEMP%\\~DF276BC4CCE53E9B78.TMP","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.4","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\search[1].json","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\search[2].json","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{6F224519-D634-11ED-918D-0800273D75B2}.dat","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%TEMP%\\~DFD45C2B60F82558C1.TMP","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{DBC80044-A445-435B-BC74-9C25C1C588A9}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\DOWNLOADMANAGER\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\TCPIP\\PARAMETERS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\MY\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_990_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"IsoScope_990_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"IsoScope_990_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2448","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"IsoScope_990_ConnHashTable<2448>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"IsoScope_990_IE_EarlyTabStart_0xe48_Mutex","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"IsoScope_990_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2448","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_990_ConnHashTable<2448>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"IsoScope_990_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_990_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6431c2940a097742140a3e9e"}]}]}},"report_ids":{"sandbox_job_ids":["6431c2940a097742140a3e9e"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 80896df1c43d… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 80896df1c43d…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/80896df1c43d1ff6a4187d285250f93244d45876f1f799679e2d6e6eb35427bb"}],["$","meta","4",{"property":"og:title","content":"Sample 80896df1c43d… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 80896df1c43d…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/80896df1c43d1ff6a4187d285250f93244d45876f1f799679e2d6e6eb35427bb"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 80896df1c43d… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 80896df1c43d…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2d","11",{}]]