26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2b:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T41f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 8e3988ce95d9… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 8e3988ce95d9…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/8e3988ce95d9bef34706423714c50bd16290abd23106fd2fe98beefb6123476a","keywords":["malware analysis","sandbox report","threat intelligence","8e3988ce95d9bef34706423714c50bd16290abd23106fd2fe98beefb6123476a"],"about":{"@type":"SoftwareApplication","name":"https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/","applicationCategory":["url"],"identifier":"8e3988ce95d9bef34706423714c50bd16290abd23106fd2fe98beefb6123476a"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":1},"behavioralIndicators":{"malicious":0,"suspicious":2},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Tc1a,"LU3X38KD.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\LU3X38KD.txt]- [targetUID: 00000000-00002404] "~DF0401AEFA8120DD52.TMP" has type "data"- Location: [%TEMP%\~DF0401AEFA8120DD52.TMP]- [targetUID: 00000000-00003564] "P3SIU320.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\P3SIU320.txt]- [targetUID: 00000000-00002404] "80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53]- [targetUID: 00000000-00003564] "2OUD9705.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\2OUD9705.txt]- [targetUID: 00000000-00003564] "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776]- [targetUID: 00000000-00002404] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 4817 bytes 1 file"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00002404] "~DFC8576E7FB1624C22.TMP" has type "data"- Location: [%TEMP%\~DFC8576E7FB1624C22.TMP]- [targetUID: 00000000-00003564] "B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04]- [targetUID: 00000000-00002404] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00003564] "en-US.4" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\DomainSuggestions\en-US.4]- [targetUID: 00000000-00003564] "imagestore.dat" has type "Unknown"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\imagestore\3mt7jhv\imagestore.dat]- [targetUID: 00000000-00002404] "4CSZPK8U.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\4CSZPK8U.txt]- [targetUID: 00000000-00003564] "~DF256CE76E96697D71.TMP" has type "Unknown"- Location: [%TEMP%\~DF256CE76E96697D71.TMP]- [targetUID: 00000000-00003564] "Y8ZWBBZ9.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\Y8ZWBBZ9.txt]- [targetUID: 00000000-00002404] "~DF055D309D62727143.TMP" has type "Unknown"- Location: [%TEMP%\~DF055D309D62727143.TMP]- [targetUID: 00000000-00003564] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00002404] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00003564]28:T2246,"GET /r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.reddit.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "l 2024 20:55:49 GMT; HttpOnly; Secure Set-Cookie: csv=2; Max-Age=63072000; Domain=.reddit.com; Path=/; Secure; SameSite=None Set-Cookie: edgebucket=CkSuiwAwKqzOXCV3s7; Domain=reddit.com; Max-Age=63071999; Path=/; secure Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.2, "failure_fraction": 0.2} transfer-encoding: chunked"- [Source: SSL_151.101.1.140] "1c4e"- [Source: SSL_151.101.1.140] "}ksw l\"bCNEjmeyT0j7`HJb[Ow>}}~s_?Cubw7#Pmj7EO?9?vv=h.v|fOhSGzii{mANOv58u*X0mvM%(E58%A@tyU_5nS:W5|tJR#R|m}.B/O ym+Ckhi9fCmU_8s]WEv_s,`BwM[]T;MtK}t] Q/?w\6{+N~}dX)/=3gwgNY99~_!}sBO?zi_C7pMm*/ly.TzZtE t~\f[u5QAG J47O]7 eQX#jpv%/}{t@d-mF=BU@6QU%n)dJCUYAIF:P;g9Eg NlW]l=^t`Cvkx0O>R#gs][nW{co{Jy:Pm"lgWtbhy=7CM(r6>,5bc9|sNk{_5xGeRO`LH:^bd{n.jiArB|v=J7"- [Source: SSL_151.101.1.140] , ")D~hH;.Nal IS}^B~aw7Zj~pw&iEyP r-n5w9Z=S<<;Mh&?n!&Bpm Y?u1]+CM{!VFh^u 2/@m))}4 !Py8@Iw7Q4\GcFiTg\I8=Ot&Z!?NB0~Fgq|+?tiOB!?\y)AY\V6xdc'#>Q2/Ox4L,[Kovc'K: eo|[\MU#%R;~MvGB:n=9zQy`4dcLTba/99|baE%3CdfFWXsF|iq2AGQ.Zp% }6&^V=$n`39RzzCa*+7Jv!C/9y |aLa2]H=2{w&.60hId*Jpq|6^mS)V* H@c >HC}j<-~fS? e!iw6<=4"#>!I`[^$vUACw%5n0Z e7poR,5+5@3o!Uqe/5tD4huVz"J^'YA=ubBQpm Su=n7{7Wimjbxs*.'LKqK6f@K rG~Pv-..Q9l.]xjd$RRCm](#d A7D Gps8@[)8}M%u-"F##fifp}_e@U:pa S_ySw7o|L|WF6oavOeV!Z84}m6| iAr(Kl>]wjOv9TG9>x YULvVQ a.?K&!ef2&!/5BUWD:W1JN$UD~~l<\Lh57K8}w/5jaPn;X9'L\!]!}\zGd* vR:'BWS[tQ ;:(x#flFuI?5SV~3=iEW3=%Op|)+n1(M%xs =ZN'/1vJ3 Z`pFgn+:|o70, 'A1`{6#6{PA$($lCP4&'%y,L2EmP~SWRKpB~/7p_tH]rjYW(Q'R&ie$b4)~_6} wM;Q00!"=S0QGKFtz6I\{Sk#2S})~DbS73\gM0)"- [Source: SSL_151.101.1.140] , "kJ3`@c(=zHB>)myGa ^GuI%+.do PTBCjS(de}a//8MM#T**%ipH<]oNJa#mDMHKnX^"0-"0-"0-"0-oA`^q!6W?(Pt j*Y2u1Tb}_#YL# bfE!GKYV~@avStwkQ.NsI-MAXr 6sFqNO7Nz$QMye&$a["UEJD62^6(;:x_?t}]t'UEX-G) Wvp0YE t0p)FR/W7pv4nlbq +w[7$w.~cl0*='#D-/T5x[#1bbsaC,$w;juS54FqMP:| 6fQ^km3H{9;S':XoBl\RFeZ`sA7Y(L]sa)+$Og|/"9LvV3u$5{4/#K::M: "5oHw4Aa49fy-G2)QK+Q"zZpV-E2SH/AWAO`0;T>t3y%TR#f7]$fbv#C=;s#\M R;23t: ^b@<-wd1Qh/I{<0vMb2am'p!8C e;k,!q3.=pb'!G 'DC~0Ko4.x3!t5Nq1,bSbYL1)s7K~wj`L0CC1B'Qo,FpKMD)GV$mB8cS}td8Hm('1aNtX.$Qyh7w-ePF*haBA4@qPGj?Y@u&L* 3_eg%UN"- [Source: SSL_151.101.1.140] "1E`bY .olmGr":N8P;P D%E_d_HHHHImzdHu6qx6XGh&p#A/---V8:wFNO;ZxF$ @[cym7[^QYz01#Qp0000y3gs wO=\Xwwpuv}UgbJX|wtX2g_&=1j<_r}A431?2GSn IRNDz/OLOW+c$8;wl4d3 u4T)eqW+k#Q2)?[1bhmrt+1;Si8y@=$]yfAtH$i}{|\H%>;q:0=JQ}-e1#t1hcSLe?6^%?&EXY<(s,V-q2B`WN}gQr !`g- "kqPy1P HExLTul"l38d$6F:5AD@G%s`g:6~:Hn/mOVk7l)K"H1j;l}r#WLXI\ %=T<=RWC6^8S4]-B.!8H-#-bvR/dB/&SFMs.[xEVd@*;3~.4bgeiFL%e?$4,i_m,(-Hr35vNi80 i,/m.fX?j"- [Source: SSL_151.101.1.140] "vb>LX|hA'ZAuEBFz7?!7R1lu'nCDj9v}9XeZ8Nr]{AT#eaXR,##h:k>-F##fi=j>P5K[S,u yS+EK=O&+# VdTF;oCYVR\{\0P\R2jfY*L>gXUlF-%>}kO$7p}yz|z^xAs=0CKW8%Xn#AnfvmM Scs^~^|FCf_ukWvL 6R!6Zo#0F1LbE-2OuBhBtcF#iHvoL5= ,{l%ihS`16H5c:?Tm 4FP'!rFTgpcfymqpRB29<73]KA{&u*/{$KpB~gB}7/ D]'BqR@85O+ !G~JHCQbXZe3*cf&T,Djh)0Dg=2&0Sx|Z5}wGH~l-~=\uYadbDvgPGl+r+F2GdCh4Jj=B#-V9 .P|db/K0L/K0Lyxb NYJE5%SK>6rb,=W}'4/qSkH/0SxlofhRDwC Nr1<\# m C-*WH7 2Ef'+s +'TPCQr,<' a1ZP7)\`B]4=J$O{N`21%L%mc,/{[E`ZE`ZE`ZE`-Lnh_E\j<5d!,g,c4+ ?iA0u-`5Am JR,] kitMjVRR,fmgf\us$pa6 O8qAWT%~M-j:o92>{J Wv39ag'wn6>ZYLYJVgC ND@)4n/i-ebax- ftiz(W"- [Source: SSL_151.101.1.140] "GET /desktop2x/runtime~Reddit.0706bf22425064a6ec05.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "GET /desktop2x/vendors~CommentsPage~ModerationPages~Reddit~reddit-components-ClassicPost~reddit-components-CompactP~d737df3e.018ac3526130b46d3191.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "GET /desktop2x/js/xads.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "GET /desktop2x/img/renderTimingPixel.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "GET /desktop2x/PostCreation~Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~r~4c415e24.13df84498f277f2f67d5.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "GET /desktop2x/vendors~Reddit.f8535ec7d659d61d3e88.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "GET /desktop2x/vendors~Chat~Governance~Reddit.75ad7bc6f7be757ab8f1.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "GET /desktop2x/CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.48d527517a82e5b605ac.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "GET /desktop2x/vendors~CommentsPage~Governance~ModListing~ModerationPages~Reddit~Subreddit.f468f4fbfe44aa5cfabf.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140]29:T509,Found malicious artifacts related to "184.50.50.164": ... URL: https://aka.ms/JoinTeamsMeeting (AV positives: 1/92 scanned on 04/29/2022 02:36:00) URL: https://aka.ms/LearnAboutSenderIdentification (AV positives: 1/92 scanned on 04/29/2022 02:30:39) URL: https://aka.ms/AzEflowMSI (AV positives: 1/92 scanned on 04/28/2022 21:59:08) URL: http://aka.ms/LearnAboutSenderIdentification (AV positives: 1/92 scanned on 04/28/2022 19:28:12) URL: https://aka.ms/DiaNino22/REG (AV positives: 1/92 scanned on 04/27/2022 21:07:31) File SHA256: 972df512d2921232e9a2308d8140b22bd17d2233bc16b0acb7242b12cbe2e5a5 (Date: 04/11/2022 20:56:57) File SHA256: 3f3938428c645139a8151803ca62719569eea619ef2f4a8a12f7b64503df6c81 (AV positives: 1/72 scanned on 01/13/2022 23:18:22) File SHA256: 0aeb20222e7317e2e2671dcc92136def40620c8ff88b9a2f1024498c1123cbe4 (AV positives: 1/72 scanned on 01/10/2022 11:42:32) File SHA256: 670b00e90a7c9eb7ac6674441551e7764a8364c26e44dcc92474a9abcfac4c04 (AV positives: 50/71 scanned on 12/05/2021 06:04:00) File SHA256: 4c031823291b00b06e0ebc6b21fbc8013e9b5fed4badc475474bb7463d66444e (AV positives: 1/71 scanned on 11/19/2021 22:56:09) File SHA256: d43e0270e609ddded82a5f0232bf87e287be3b148258a025e9c3740a0c279747 (AV positives: 1/71 scanned on 11/13/2021 11:29:15)2a:T564,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:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"8e3988ce95d9bef34706423714c50bd16290abd23106fd2fe98beefb6123476a","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1792062703595,"unified_at":"2026-10-15T11:11:43.595Z","metadata":{"hashes":{"sha256":"8e3988ce95d9bef34706423714c50bd16290abd23106fd2fe98beefb6123476a","sha1":"d1dd07c47c0904f472d7251804530230c4c6248f","md5":"b9e73986c630ff872c769cd313a852b7","sha512":"289997c380287304bddf4c13f45ede990f25179a49cab18d73d9a9d1251884f077cdd1ab89d5b8a2e66b36079d912afaa6bd6206297a5404a1a68a0fa1c07dce","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1658436799000,"last_seen":1663353040000,"last_multi_scan":1663353040000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":1},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":1},"sandbox_signatures":{"informative_count":8,"suspicious_count":2,"malicious_count":0,"total":10},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-classification","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/","report_link":"https://urlscan.io/result/a421e935-e8d0-43b5-91c7-e8b737098a5a/","extra_fields":[{"name":"percent","value":0}]}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Found decrypted SSL traffic"}],"sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts domains","description":"\"www.reddit.com\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"151.101.1.140:443\"\n \"184.50.50.164:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"Local\\InternetShortcutMutex\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"UpdatingNewTabPageData\"\n \"IsoScope_dec_IESQMMUTEX_0_519\"\n \"IsoScope_dec_IESQMMUTEX_0_303\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3564\"\n \"IsoScope_dec_ConnHashTable<3564>_HashTable_Mutex\"\n \"Local\\ZonesCacheCounterMutex\"\n \"IsoScope_dec_IE_EarlyTabStart_0xe74_Mutex\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"IsoScope_dec_IESQMMUTEX_0_331\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"\\Sessions\\1\\BaseNamedObjects\\IsoScope_dec_IESQMMUTEX_0_519\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$27","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"level":"informative","category":"Network Related","name":"Found decrypted SSL traffic","description":"$28","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/\"- [Source: Input]\n Pattern match: \"https://www.reddit.com\"- [Source: Input]\n Pattern match: \"www.reddit.com\"- [Source: PCAP]\n Pattern match: \"https://w3-reporting-nel.reddit.com/reports\"- [Source: SSL_151.101.1.140]\n Pattern match: \"www.redditstatic.com\"- [Source: SSL_151.101.1.140]\n Pattern match: \"https://www.msn.com/spartan/ientpgbconfig?locale=en-us&market=us\"- [Source: SSL_184.50.50.164]","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4817 bytes 1 file\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"level":"suspicious","category":"Network Related","name":"Malicious artifacts seen in the context of a contacted host","description":"$29","origin":"Network Traffic","relevance":10,"id":"network-21","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 151.101.1.140 on port 443 is sent without HTTP header\n TCP traffic to 184.50.50.164 on port 443 is sent without HTTP header","origin":"Network Traffic","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 1 domain and 1 host"}],"sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":26,"imported_dlls_count":120,"dropped_files_count":0,"extracted_files_count":49,"files_written_count":40,"files_deleted_count":0,"registry_keys_created_count":6,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":6,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":2,"dns_resolutions_count":1,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"62d9bcbead6a415df8222583","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"8e3988ce95d9bef34706423714c50bd16290abd23106fd2fe98beefb6123476a.url","analysis_start_time":"2022-07-21T20:53:18+00:00","indicators_count":{"informative":8,"suspicious":2,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"151.101.1.140","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"address":"184.50.50.164","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]}],"dns_resolutions":[{"domain":"www.reddit.com","address":"151.101.1.140","ttl":8980,"country":"United States","registrar_name":"GANDI SAS","registrar_organization":"Reddit Inc","registrar_name_servers":"NS-1029.AWSDNS-00.ORG","registrar_creation_date":"2005-04-29T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}],"processes":[{"pid":2848,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\8e3988ce95d9bef34706423714c50bd16290abd23106fd2fe98beefb6123476a.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00002848","icon":"$2a"},{"pid":3564,"ppid":2848,"name":"iexplore.exe","command_line":"https://www.reddit.com/r/nopestreamsfree/comments/w4qry3/watch_nope_2022_streaming_for_free/","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002848","uid":"00000000-00003564"},{"pid":2404,"ppid":3564,"name":"iexplore.exe","command_line":"SCODEF:3564 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003564","uid":"00000000-00002404"}],"all_imported_dlls":["comctl32.dll","sqmapi.dll","api-ms-win-downlevel-version-l1-1-0.dll","dui70.dll","schannel.dll","gpapi.dll","sspicli.dll","oleaccrc.dll","ncrypt.dll","mscoree.dll","DWrite.dll","ntmarta.dll","wshqos.dll","user32.dll","userenv.dll","WindowsCodecs.dll","d2d1.dll","oleaut32.dll","setupapi.dll","ws2_32.dll","duser.dll","sxs.dll","msvcrt.dll","MSOHEV.DLL","msvcr100.dll","t2embed.dll","kernel32.dll","Wldap32.dll","rpcrt4.dll","cryptsp.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","propsys.dll","webio.dll","cryptnet.dll","rpcss.dll","rsaenh.dll","apphelp.dll","deploy.dll","usp10.dll","jp2ssv.dll","dhcpcsvc.dll","wintrust.dll","urlmon.dll","dwmapi.dll","ExplorerFrame.dll","jscript9.dll","version.dll","normaliz.dll","URLREDIR.DLL","msimtf.dll","api-ms-win-downlevel-user32-l1-1-0.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","ieproxy.dll","ssv.dll","advapi32.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","ieui.dll","mscorwks.dll","secur32.dll","WSHTCPIP.DLL","mscoreei.dll","KernelBase.dll","dhcpcsvc6.dll","devobj.dll","wininet.dll","msimg32.dll","msvcr90.dll","d3d10warp.dll","imm32.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","dnsapi.dll","bcryptprimitives.dll","shell32.dll","RpcRtRemote.dll","gdi32.dll","lpk.dll","shlwapi.dll","uxtheme.dll","cfgmgr32.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","ieframe.dll","clbcatq.dll","FWPUCLNT.DLL","comdlg32.dll","SensApi.dll","imagehlp.dll","ole32.dll","bcrypt.dll","nlaapi.dll","iertutil.dll","api-ms-win-core-synch-l1-2-0.dll","crypt32.dll","nsi.dll","fltLib.dll","rasadhlp.dll","mshtml.dll","wkscli.dll","winhttp.dll","cryptbase.dll","netapi32.dll","sechost.dll","IEShims.dll","netutils.dll","mlang.dll","srvcli.dll","msctf.dll","oleacc.dll","wship6.dll","npmproxy.dll","netprofm.dll","profapi.dll","credssp.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","mswsock.dll","IPHLPAPI.DLL","dxgi.dll","winnsi.dll","msasn1.dll","d3d11.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"2OUD9705.txt","sha256":"373bc5097bdfa187f4845a84c74156bb932e0366b4c063477933800f6734e7b9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"4CSZPK8U.txt","sha256":"b49256220d2d8f4c3d68f1a42c70244d9063e8907a9433c250f75ced4b230554","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"LU3X38KD.txt","sha256":"b98fdc86ae9ac83b9f9dd53a3de6fe1a882e91210e01090c0b73674fec7fd4a9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"P3SIU320.txt","sha256":"7a852fd9696e11738bc1526a6317693df748f1f1bc2b87c8863993d3310a5960","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Y8ZWBBZ9.txt","sha256":"0098d674193956130414a1cd5983e62659e4ff74ae93ff80308dc310a419b5a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"imagestore.dat","sha256":"cfea5b6716dff8aece82ae2353abb695bf70862bee5aa6613a0c39124d192338","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"f461804fda43ef18965595715f8e9571953a34901e857c3f1cc48af3d8d45446","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"84839ef3402bb8248073b0e7401cc74b5a80bebe7b77629f2cfc77f584a7fabb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sha256":"7da0771d399685cf25db8b6488791eeef8f03f116c9d85ff2b8d2cfbce6b8189","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"fc10ad26bfa6be930703348993f9fe870df5a73142b5bb8ba3038a2f7fc81627","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sha256":"df4e780c616e5660968be659700addc46f4cb9a7cfa20e0d5e358bba8f87cdfd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"~DF0401AEFA8120DD52.TMP","sha256":"35da78a3ac6e97ca9e8a0ed552451b4ac3708395805d22cf469d1695ac1a6d87","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"~DF055D309D62727143.TMP","sha256":"0b8660308f06dc802cfcbca51c864b80376cb0243f9910f1db4076b8ba001eb0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"~DF256CE76E96697D71.TMP","sha256":"0422e72811a8292e309708f94c79b9b0d478a6b039ff345d142619c8a19812de","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"~DFC8576E7FB1624C22.TMP","sha256":"6e693db344f7775abc741da37668955a1efc9cee76dcf0d1a25c068b3153de9f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"CollectionCommentsPage~CommentsPage~GovernanceReleaseNotesModal~ModerationPages~PostCreation~Profile~9a5d9fab.e13416064901f4b4df54_1_.js","sha256":"6f37fc868e4b14a1c84f470f58ad6154d5c50def7361c15513e8f6057b9c4082","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Reddit~StandalonePostPage.986ea7caa26f11ff09f1_1_.js","sha256":"a22fe73b8d9b21665c240939ed6b2f1d7ebf205e3435ad4e4e12b16894bd8ed7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Medium-1051a531d3e1ee3483a6533158557139-font_1_.woff","sha256":"0191cbe14ade1fe9c80860b60445ec6e1b2694e9dbae70ec8c886a3582ae223a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Reddit.4dd52665a1e2217d46a2_1_.js","sha256":"3b0a3030933014bbe597eb4c6f5d3ea9aec0ec3a03108f58b03d8d3c27fe832d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Governance~Reddit~SubredditForkingCTA.01e552859ce65045683f_1_.js","sha256":"3509ca7954c76f67b283696a7cbe07742a3a8634b0fb7e53c4153298f6fc7d79","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"-core-styles-fonts-ibmplexsans-regular-5a469cfacd_1_.woff","sha256":"5a469cfacdbad851846169f6d4d541e27e7ab72aac2451bfbbd9e6d992eba9da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"AuthorHovercard~Reddit.7a609b7d775749106f64_1_.js","sha256":"a39618bf6528aafd4f38b5fbacec7ca19d52d6d4759b6343382ba83130b853d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"-core-styles-fonts-ibmplexsans-bold-736188bb57_1_.woff","sha256":"736188bb571031e801da01a7f98325d6ae6a10feb714b10e2442f3f376c9260c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"-core-styles-fonts-notosans-notosans-49dd5c1e17_1_.woff","sha256":"49dd5c1e178c17bf2a754e3fa3327820c27491d6d690aaf5600714f9ec3c5b09","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Bold-c34ba754b7235b49d33b294ff7a54179-font_1_.woff","sha256":"82ee6ea61b76edbfdb614afe2658b1709d5734a8f81147dc887b1592d6b7a8fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font_1_.woff","sha256":"8839c1f7fe11e9d6ce78bfad758ea96e59d17dd023c16417c0a9b37c59fd81ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.48d527517a82e5b605ac_1_.js","sha256":"0c98d7a378b4fd6a426898d7d57307fb380b57ee0ac77cd11245b33197854410","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"android-icon-192x192_1_.png","sha256":"38f250a84aeda6e0235ad20a22c846520fe976c3137c3c5fc9c5a2690b206156","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"vendors~Chat~Governance~Reddit.75ad7bc6f7be757ab8f1_1_.js","sha256":"073cad0f9f0fbaecb35ff5376c8cfcf7eadf25a8c306b73fc53e0d4d220673c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Italic-5267af566ab853eb9d74db1a78a46c67-font_2_.woff","sha256":"2328dcdf67d98788b1bed8931f34e6be962d5131932efcf56259fd69c24b528b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"NewCommentPill.bc8181e0dadd1b6a2dfb_1_.js","sha256":"9397344677fa903784211355b5b6973b89a1669f36f7ca0a884e0a022895b2b0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"runtime~Reddit.0706bf22425064a6ec05_1_.js","sha256":"567a75ec38bec1ca9f913ff1705362c2e2eb02d5b1d14ae97150430b5fbdd50c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"TopicLinksContainer.21144914386926962ae7_1_.js","sha256":"46e637490493a5beb1f41f0750da1778b91fe92b1094e34b9bc1de5179e003d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Italic-5267af566ab853eb9d74db1a78a46c67-font_1_.woff","sha256":"2328dcdf67d98788b1bed8931f34e6be962d5131932efcf56259fd69c24b528b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Bold-Italic-255b4934a1f414dd312aa89382d65114-font_1_.woff","sha256":"42d5eb3c9201b3fe6861b3076e48a4fbd3211e5c5418e3f38710745c8a21a3e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Governance~Reddit.dd56b36c9312a9721363_1_.js","sha256":"a24c61929df00c61574f194b5649a92effbc44f98a80e743dd1f2f3803ad7aea","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"b152df8e02ae4891c02abc70bd41447dc8c2f2dddae742d283f4c3e54fb153c5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"vendors~Reddit.f8535ec7d659d61d3e88_1_.js","sha256":"0c20aaf9c0702005b22e639bca69df50690b3c748b787551a6c7e84e0b84bc88","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"PostCreation~Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~r~4c415e24.13df84498f277f2f67d5_1_.js","sha256":"b406212d88a35a870170a8e1fee2eb61d6a7beaf65fd1c864b25e3ca984ec1db","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"CommentsPage.f1ea24d11f1bbf3c8e61_1_.js","sha256":"f53f7aad54ab1659f93f3436e6c233bcc20682b04dc61a79f3d5ab7908e32f39","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Light-Italic-112953068bc678d61f4553a1184561f0-font_1_.woff","sha256":"5b4535205c590c5016abbc67fc2836984421161b62167c662c347356363e120a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"watch_nope_2022_streaming_for_free_1_.htm","sha256":"128caf1eebdf8c6760c7c82556ee91749bb7653e348c54c476d98499ed82be5b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"CollectionCommentsPage~CommentsPage~ProfileComments~ProfileOverview~ProfilePrivate~RpanListingUnit~S~5809214e.2363a5d6fea3b6e6c0ae_1_.js","sha256":"3ce4db69eb8dcf179fe41f7661e94978879d6dfd146eb50ef42414b0818b559d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Governance~ModListing~Reddit~ReportFlow~Subreddit.262b15dc42bb30bfd8d2_1_.js","sha256":"1d0e96b73216d99df2ab9014107f4e0ccd20978db39dbacac3751566767d0b15","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Governance~Reddit~Subreddit.cc5ef033aec3132031e3_1_.js","sha256":"5be025be8b44956bee3b6c2b4924cd837db8cadb45b4667ccce12c7c6c9a808b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Medium-Italic-a25d440012460eb8883e539f93040fa7-font_1_.woff","sha256":"8becec143e829ece508118aa7799e2223289d3a6a22371b3ff4163b76a2a68ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]}],"files_written":[{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\android-icon-192x192[1].png","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{BE1492E0-0926-11ED-8399-08002783DDE2}.dat","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4CSZPK8U.txt","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{B3DABCDD-0926-11ED-8399-08002783DDE2}.dat","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%TEMP%\\~DFC8576E7FB1624C22.TMP","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{B3DABCDF-0926-11ED-8399-08002783DDE2}.dat","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%TEMP%\\~DF256CE76E96697D71.TMP","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Y8ZWBBZ9.txt","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\P3SIU320.txt","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\renderTimingPixel[1].png","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%TEMP%\\~DF055D309D62727143.TMP","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.4","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active\\RecoveryStore.{88B090C0-D917-11E7-B67B-080027A49DD6}.dat","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%TEMP%\\~DF0401AEFA8120DD52.TMP","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{DBC80044-A445-435B-BC74-9C25C1C588A9}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"key":"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SECURITYPROVIDERS\\SCHANNEL\\","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TOOLBAR\\","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"IsoScope_dec_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"IsoScope_dec_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3564","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"IsoScope_dec_ConnHashTable<3564>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"IsoScope_dec_IE_EarlyTabStart_0xe74_Mutex","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"IsoScope_dec_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_dec_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_dec_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"IsoScope_dec_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62d9bcbead6a415df8222583"}]}]}},"report_ids":{"sandbox_job_ids":["62d9bcbead6a415df8222583"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 8e3988ce95d9… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 8e3988ce95d9…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/8e3988ce95d9bef34706423714c50bd16290abd23106fd2fe98beefb6123476a"}],["$","meta","4",{"property":"og:title","content":"Sample 8e3988ce95d9… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 8e3988ce95d9…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/8e3988ce95d9bef34706423714c50bd16290abd23106fd2fe98beefb6123476a"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 8e3988ce95d9… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 8e3988ce95d9…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2b","11",{}]]