33:"SampleDetailWrapper" 34:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$33"] 3b:I[27201,["$1","$2","$3","$4","$5"],"IconMark"] 35:T2317,"urlblockindex_1_.bin" has type "data"- [targetUID: N/A] "Chat~Governance~Reddit.45778f1c41267603a894_1_.js" has type "UTF-8 Unicode text with very long lines with no line terminators"- [targetUID: N/A] "vendors~Subreddit~SubredditWiki.c17b16c26feb8de5d65f_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "vendors~Chat~Governance~Reddit.6921f706c26009a1fbb3_1_.js" has type "data"- [targetUID: N/A] "ufc288dazntv_1_.htm" has type "HTML document UTF-8 Unicode text with very long lines"- [targetUID: N/A] "urlref_httpswww.reddit.comrufc288dazntv" has type "HTML document UTF-8 Unicode text with very long lines"- [targetUID: N/A] "Subreddit.de6b61655dc2fa342b10_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "Reddit.9de9676689e5de844a0e_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "Governance~Reddit.52bc17c0519857f08c36_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "vendors~CommentsPage~Governance~ModListing~ModerationPages~Reddit~Subreddit.f468f4fbfe44aa5cfabf_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.9c583b1365fc99ea5772_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "IdCard.63add95c40abadb6678e_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "redesignFont2020.2b6489253c61d19d62f0f59ea19dcc12_1_.eot" has type "Embedded OpenType (EOT) redesignFont2020 family"- [targetUID: N/A] "tags-slim_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "Governance~Reddit~Subreddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compo~bd4baca2.2ec8c25078e54ff3c7c0_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "runtime~Reddit.084a3d355f18c8804ed4_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compone~9b425435.cd4be39ebca1216b2ef6_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "CollectionCommentsPage~CommentsPage~CountryPage~FramedGild~GildModal~GovernanceReleaseNotesModal~Hap~a5d6a3b8.3954822edbc7ef3550e6_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "Governance~ModListing~Reddit.da944f8cf05892532e39_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "CollectionCommentsPage~CommentsPage~CountryPage~Frontpage~GovernanceReleaseNotesModal~ModListing~Mod~e3d63e32.37201feab44ade8dcf12_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "Governance~Reddit~SubredditForkingCTA.dd2791e1a63b3555974f_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "CountryPage~Frontpage~ModListing~Multireddit~ProfileComments~ProfileOverview~ProfilePosts~Subreddit.07a792dfb6a59f7caef3_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "Governance~ModListing~Reddit~ReportFlow.b3eebe720685de18a3c7_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "ModListing~Reddit~StandalonePostPage.bd37319a4f78703e6421_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "CollectionCommentsPage~CommentsPage~CountryPage~GovernanceReleaseNotesModal~ModerationPages~Multired~4b0513d5.819a0de66bac2fd40596_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "Reddit~RichTextEditor~reddit-components-MediumPost~reddit-components-NotificationUnit-Button~removal~87f825ba.ee913686f849d34fe9c4_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "vendors~CommentsPage~ModerationPages~Reddit~reddit-components-ClassicPost~reddit-components-CompactP~d737df3e.31f8d07ab88edabff736_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "vendors~Reddit.dc91fa7b0b3c8db569d9_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "vendors~PostCreation~Subreddit.e1c74d9c118cc2abc046_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "imagestore.dat" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\imagestore\3mt7jhv\imagestore.dat]- [targetUID: 00000000-00003120] "en-US.4" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\DomainSuggestions\en-US.4]- [targetUID: 00000000-00003120] "RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "~DF86A64886C92EACDA.TMP" has type "data"- Location: [%TEMP%\~DF86A64886C92EACDA.TMP]- [targetUID: 00000000-00003120] "~DFFB3D8CE49ADF70A1.TMP" has type "data"- Location: [%TEMP%\~DFFB3D8CE49ADF70A1.TMP]- [targetUID: 00000000-00003120] "~DFD3A40970B2285CD1.TMP" has type "data"- Location: [%TEMP%\~DFD3A40970B2285CD1.TMP]- [targetUID: 00000000-00003120] "~DF01C2178E43220695.TMP" has type "data"- Location: [%TEMP%\~DF01C2178E43220695.TMP]- [targetUID: 00000000-00003120] "android-icon-192x192_1_.png" has type "PNG image data 192 x 192 8-bit/color RGBA non-interlaced"- [targetUID: N/A] "_41D6E7C5-EB7B-11ED-8454-080027388387_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "RecoveryStore._41D6E7C3-EB7B-11ED-8454-080027388387_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "_4AF2F1B6-EB7B-11ED-8454-080027388387_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "TopicLinksContainer.09b9956a882940f72f3c_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "4DW8TRWH.txt" has type "ASCII text with very long lines"- Location: [%APPDATA%\Microsoft\Windows\Cookies\4DW8TRWH.txt]- [targetUID: 00000000-00000616] "E0968A1E3A40D2582E7FD463BAEB59CD" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\E0968A1E3A40D2582E7FD463BAEB59CD]- [targetUID: 00000000-00000616] "CQYLNE0K.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\CQYLNE0K.txt]- [targetUID: 00000000-00003120] "QQJ7WWNP.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\QQJ7WWNP.txt]- [targetUID: 00000000-00003120] "UXN07Z5U.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\UXN07Z5U.txt]- [targetUID: 00000000-00003120] "0008PFQ2.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\0008PFQ2.txt]- [targetUID: 00000000-00000616] "search_2_.json" has type "JSON data"- [targetUID: N/A] "E0968A1E3A40D2582E7FD463BAEB59CD" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\E0968A1E3A40D2582E7FD463BAEB59CD]- [targetUID: 00000000-00000616] "GK72J6VA.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\GK72J6VA.txt]- [targetUID: 00000000-00003120] "xads_1_.js" has type "ASCII text"- [targetUID: N/A] "5XMNPXMI.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\5XMNPXMI.txt]- [targetUID: 00000000-00003120] "U8H5CPWQ.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\U8H5CPWQ.txt]- [targetUID: 00000000-00003120] "Medium-Italic-a25d440012460eb8883e539f93040fa7-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "Light-Italic-112953068bc678d61f4553a1184561f0-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "Bold-Italic-255b4934a1f414dd312aa89382d65114-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "Italic-5267af566ab853eb9d74db1a78a46c67-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "Medium-1051a531d3e1ee3483a6533158557139-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "Light-56973edfcf61447fc1ffeb7a6eb6b178-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "Bold-c34ba754b7235b49d33b294ff7a54179-font_2_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A] "TME5UVKG.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\TME5UVKG.txt]- [targetUID: 00000000-00003120] "www.reddit_1_.xml" has type "ASCII text with no line terminators"- [targetUID: N/A] "favicon_1_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "favicon_2_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "Bold-c34ba754b7235b49d33b294ff7a54179-font_1_.woff" has type "ASCII text with no line terminators"- [targetUID: N/A]36:T1ffc,Found requests in header "GET /r/ufc288dazntv/ HTTP/1.1Accept: text/html, application/xhtml+xml, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.reddit.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/js/xads.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/fonts/BentonSans/Light-56973edfcf61447fc1ffeb7a6eb6b178-font.woff HTTP/1.1Accept: */*Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.reddit.comAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/fonts/IBMPlexSans/Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font.woff HTTP/1.1Accept: */*Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.reddit.comAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/fonts/IBMPlexSans/Medium-1051a531d3e1ee3483a6533158557139-font.woff HTTP/1.1Accept: */*Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.reddit.comAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/vendors~CommentsPage~Governance~ModListing~ModerationPages~Reddit~Subreddit.f468f4fbfe44aa5cfabf.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/Governance~ModListing~Reddit~ReportFlow.b3eebe720685de18a3c7.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/Chat~Governance~Reddit.45778f1c41267603a894.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/CollectionCommentsPage~CommentsPage~CountryPage~GovernanceReleaseNotesModal~ModerationPages~Multired~4b0513d5.819a0de66bac2fd40596.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/vendors~Chat~Governance~Reddit.6921f706c26009a1fbb3.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/vendors~Reddit.dc91fa7b0b3c8db569d9.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compone~9b425435.cd4be39ebca1216b2ef6.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/fonts/BentonSans/Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font.woff HTTP/1.1Accept: */*Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.reddit.comAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/fonts/BentonSans/Italic-5267af566ab853eb9d74db1a78a46c67-font.woff HTTP/1.1Accept: */*Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.reddit.comAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/fonts/BentonSans/Bold-Italic-255b4934a1f414dd312aa89382d65114-font.woff HTTP/1.1Accept: */*Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.reddit.comAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/vendors~Subreddit~SubredditWiki.c17b16c26feb8de5d65f.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/vendors~CommentsPage~ModerationPages~Reddit~reddit-components-ClassicPost~reddit-components-CompactP~d737df3e.31f8d07ab88edabff736.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/Governance~Reddit~Subreddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compo~bd4baca2.2ec8c25078e54ff3c7c0.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/ModListing~Reddit~StandalonePostPage.bd37319a4f78703e6421.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /desktop2x/CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.9c583b1365fc99ea5772.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.reddit.com/r/ufc288dazntv/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.redditstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL")37:T424,Observed email domain:"._1plxnykerei9igjsl9jyrp{display:block}._2ljgqihlcz9ldbcqx5kaoi{margin-top:16px}._2-uiodhyj4whbv7rc2fedr{margin:24px 0}._2-uiodhyj4whbv7rc2fedr.c1cmib1jfdq4sxidlpdax{margin-bottom:0}._2-uiodhyj4whbv7rc2fedr._1yytghoil7vz6fnj2-s3dl{margin:6px 0 12px}._2r6tbsjdsgxwd1ozbbrijl{margin-top:8px}._2r6tbsjdsgxwd1ozbbrijl:first-child{margin-top:2px}.fjnsiirwoptg58aegw2jx{margin-bottom:24px;font-size:.8em;text-align:center}._2-h7kmbqejxa6vjyax4gmx{background-color:var(--newcommunitytheme-inactive);border-radius:4px;padding-bottom:56%;position:relative;width:100%;margin-bottom:20px}._2-h7kmbqejxa6vjyax4gmx:after{bottom:8px;content:var(--placeholder-content-text,"");font-size:.9em;left:16px;position:absolute}._2-h7kmbqejxa6vjyax4gmx._18dflntnlz_shfobk19vzn{width:175px;height:175px;padding-bottom:0;margin:6px 0}._2-h7kmbqejxa6vjyax4gmx._2o6zajbtx6ogys4gi6egy-{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;-ms-flex-pack:distribute;justify-content:space-around}" [Source: urlref_httpswww.reddit.comrufc288dazntv]38:T2e0d,Pattern match: "https://www.reddit.com/r/ufc288dazntv/" Pattern match: "https://www.reddit.com" Pattern match: "https://www.reddit.com/r/ufc288dazntv" Pattern match: "http://www.w3.org/2000/svg,viewBox:0" Pattern match: "loid000000000aohsapqgf.2.1683322222000.Z0FBQUFBQmtWWFZ1TUFMRnJmX1JsLURla2c3b0V5Sm9aVDR6Q0JrU3ZMZV8telVqdGFmc3VPal9ZOWd6T2lMQWtmaHNEWngzMDBMaTJtbmhnYnVKREFSOVhRcU9kUXdoSGh3RUFabUliRDRKZUNGYUlMMklHR3NNdHpKV1ZCcDVEWWtVWXBoSUFDcGwreddit.com/1025389329177631178" Pattern match: "crl.comodoca.com/AAACertificateServices.crl04" Pattern match: "SUIDmicrosoft.com/9216225240627231031293114771740431031176MUID2CBBFE354AE667A81341ED3D4BAA6653microsoft.com/1025238489548831109647114771740431031176_EDGE_Vmicrosoft.com/9216238489548831109647114787365431031176SRCHDAF=NOFORMmicrosoft.com/1024332378944031085" Pattern match: "SUIDmicrosoft.com/9216225240627231031293114771740431031176MUID2CBBFE354AE667A81341ED3D4BAA6653microsoft.com/1025238489548831109647114771740431031176SRCHDAF=NOFORMmicrosoft.com/102433237894403108561027971357230938743SRCHUIDV=2&GUID=426377958C8445E3B4EA69482" Pattern match: "SUIDmicrosoft.com/9216225240627231031293114771740431031176SRCHDAF=NOFORMmicrosoft.com/102433237894403108561027971357230938743SRCHUIDV=2&GUID=426377958C8445E3B4EA69482BD0E747&dmnchg=1microsoft.com/102433237894403108561027971357230938743SRCHUSRDOB=20220131mi" Pattern match: "9216239489548831109647115115490431031176MUID1DAAD4CFF93463AC2CCDC7C7F8B06273msn.com/1025239489548831109647115131115431031176" Pattern match: "MUIDB2CBBFE354AE667A81341ED3D4BAA6653ieonline.microsoft.com/9216238489548831109647114771740431031176" Pattern match: "isdomainmigratedtruewww.msn.com/1025328831500831067402115115490431031176" Pattern match: "http://fb.me/use-check-prop-types" Pattern match: "https://www.redditstatic.com/desktop2x/vendors~CommentsPage~ModerationPages~Reddit~reddit-components-ClassicPost~reddit-components-CompactP~d737df3e.31f8d07ab88edabff736.js.map" Pattern match: "http://meyerweb.com/eric/tools/css/reset/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/vendors~Reddit.b083583d66634241e810_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/Governance~Reddit~Subreddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compo~bd4baca2.ed2e9c24ce3213d2fad1_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compone~9b425435.e2db692a574de770c988_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/Reddit~RichTextEditor~reddit-components-MediumPost~reddit-components-NotificationUnit-Button~removal~87f825ba.5569bbcfca5096e59799_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/Governance~ModListing~Reddit~ReportFlow.3f6a4b0a4bd41b00990b_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/fonts/NotoSans/Regular-d6a6aa8dc0f93416a832ea04a18c6fb8-font.woff2" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/Chat~Governance~Reddit.4075ef68e55c88c9b008_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/Governance~ModListing~Reddit.f0e6814c2dd64ba3b618_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/ModListing~Reddit~StandalonePostPage.9cc9a122bf677a5c6071_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/Governance~Reddit.af725272a97a52ae2008_.css.map*/" Heuristic match: "crt.usertrust.com" Pattern match: "https://www.redditstatic.com/desktop2x/fonts/BentonSans/Light-6dccf00b06936bd0fb2913d5e7279816-font.woff2" Pattern match: "https://www.redditstatic.com/desktop2x/fonts/RedditSans/RedditSans-Regular-f6da4a74985e726695c5550b2a96360d-font.woff2" Pattern match: "https://www.redditstatic.com/desktop2x/fonts/VCR/Regular-8917e4f4dcb46c5f44221e2652d435d4-font.woff2" Heuristic match: "GET /USERTrustRSAAddTrustCA.crt HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: crt.usertrust.com" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/Reddit.e1deeb563780f90f0e50_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/runtime~Reddit.084a3d355f18c8804ed4.js" Pattern match: "https://www.redditstatic.com/desktop2x/img/favicon/apple-icon-57x57.png/" Pattern match: "https://www.reddit.com/r/ufc288dazntv//" Pattern match: "http://www.w3.org/2000/svg" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/CollectionCommentsPage~CommentsPage~CountryPage~FramedGild~GildModal~GovernanceReleaseNotesModal~Hap~a5d6a3b8.10dbe47c974d014d6ce6_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/CollectionCommentsPage~CommentsPage~CountryPage~GovernanceReleaseNotesModal~ModerationPages~Multired~4b0513d5.380e6144ce852373eab8_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/CollectionCommentsPage~CommentsPage~CountryPage~Frontpage~GovernanceReleaseNotesModal~ModListing~Mod~e3d63e32.74eb929a3827c754ba25_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/CountryPage~Frontpage~ModListing~Multireddit~ProfileComments~ProfileOverview~ProfilePosts~Subreddit.e72fce90a7f3165091b9_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/img/trending-placeholder.png" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/Subreddit.53198d5622245e29ab49_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/IdCard.ea0ac1df4e6491a16d39_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/chunkCSS/TopicLinksContainer.3b33fc17a17cec1345d4_.css.map*/" Pattern match: "https://www.redditstatic.com/desktop2x/js/xads.js" Pattern match: "https://www.redditstatic.com/gold/awards/icon/silver_512.png},staticIcon:{url:https://www.redditstatic.com/gold/awards/icon/silver_512.png},id:gid_1,isEnabled:true,isNew:false,name:Silver,daysOfPremium:null,tiers:null,giverCoinRewar" Pattern match: "https://www.redditstatic.com/js/tags-slim.js,288922D4BE1987530B4E5D4A17952C" Heuristic match: "api-js.datadome.co" Heuristic match: "query.prod.cms.msn.com" Pattern match: "www.reddit.com" Pattern match: "https://www.redditstatic.com/desktop2x/Reddit~RichTextEditor~reddit-components-MediumPost~reddit-components-NotificationUnit-Button~removal~87f825ba.ee913686f849d34fe9c4.js.map" Pattern match: "www.redditstatic.com" Pattern match: "https://api-js.datadome.co/js/',this['version']='4.8.0',this['ajaxListenerPath']=null,this['ajaxListenerPathExclusion']=null,this['customParam']=null,this['exposeCaptchaFunction']=!0x1,this['abortAsyncOnCaptchaDisplay']=!0x0,this['patternToRemoveFromReferr" Pattern match: "https://${o.pointsDocsBaseUrl}v1.json?web`,n=await" Pattern match: "www.reddit.comDNT" Pattern match: "https://www.redditstatic.com/desktop2x/Reddit.9de9676689e5de844a0e.js.map" Pattern match: "http://www.w3.org/2000/svg,locationHref=,initialDefaultFrame=-999999,subframeEnabled=!0,expressionsPlugin,isSafari=/^((?!chrome|android).)*safari/i.test(navigator.userAgent),cachedColors={},bm_rounder=Math.round,bm_rnd,bm_pow=Math.pow,bm_sqrt=Math.sqrt," Pattern match: "https://www.redditstatic.com/desktop2x/vendors~CommentsPage~Governance~ModListing~ModerationPages~Reddit~Subreddit.f468f4fbfe44aa5cfabf.js.map" Pattern match: "https://www.redditstatic.com/desktop2x/CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.9c583b1365fc99ea5772.js.map" Pattern match: "https://www.redditstatic.com/desktop2x/Subreddit.de6b61655dc2fa342b10.js.map" Pattern match: "https://www.redditstatic.com/desktop2x/vendors~PostCreation~Subreddit.e1c74d9c118cc2abc046.js.map" Pattern match: "https://w3-reporting-nel.reddit.com/reports" Pattern match: "https://www.reddit.com/r/ufc288dazntv/Accept-Language" Pattern match: "https://www.microsoft.com/windows/microsoft-edge" Pattern match: "https://${e}`}},./src/lib/humanizeDate/index.ts:function(e,t,s){use" Pattern match: "https://www.redditstatic.com/desktop2x/Governance~Reddit~Subreddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compo~bd4baca2.2ec8c25078e54ff3c7c0.js.map" Pattern match: "bignumber.js/bignumber.js" Pattern match: "https://www.reddit.comReport-To" Pattern match: "https://www.redditstatic.com/desktop2x/Governance~Reddit~SubredditForkingCTA.dd2791e1a63b3555974f.js.map" Pattern match: "SUIDMmicrosoft.com/9216225240627231031293114771740431031176*MUID2CBBFE354AE667A81341ED3D4BAA6653microsoft.com/1025238489548831109647114771740431031176*SRCHDAF=NOFORMmicrosoft.com/102433237894403108561027971357230938743*SRCHUIDV=2&GUID=426377958C8445E3B4EA6" Pattern match: "https://www.redditstatic.com/desktop2x/runtime~Reddit.084a3d355f18c8804ed4.js.map" Pattern match: "r.fb/r.nb" Pattern match: "https://www.redditstatic.com/desktop2x/Governance~ModListing~Reddit~ReportFlow.b3eebe720685de18a3c7.js.map" Pattern match: "https://www.redditstatic.com/desktop2x/CollectionCommentsPage~CommentsPage~CountryPage~Frontpage~GovernanceReleaseNotesModal~ModListing~Mod~e3d63e32.37201feab44ade8dcf12.js.map" Pattern match: "https://www.redditstatic.com/desktop2x/TopicLinksContainer.09b9956a882940f72f3c.js.map" Pattern match: "https://www.redditstatic.com/desktop2x/CollectionCommentsPage~CommentsPage~CountryPage~GovernanceReleaseNotesModal~ModerationPages~Multired~4b0513d5.819a0de66bac2fd40596.js.map" Pattern match: "https://www.redditstatic.com/desktop2x/Chat~Governance~Reddit.45778f1c41267603a894.js.map" Pattern match: "https://www.redditstatic.com/desktop2x/ModListing~Reddit~StandalonePostPage.bd37319a4f78703e6421.js.map" Pattern match: "https://www.redditstatic.com/desktop2x/IdCard.63add95c40abadb6678e.js.map" Pattern match: "http://www.w3.org/2000/svg},d.a.createElement" Pattern match: "https://www.redditstatic.com/desktop2x/CollectionCommentsPage~CommentsPage~CountryPage~FramedGild~GildModal~GovernanceReleaseNotesModal~Hap~a5d6a3b8.3954822edbc7ef3550e6.js.map" Pattern match: "SUIDMmicrosoft.com/9216225240627231031293114771740431031176*MUID2CBBFE354AE667A81341ED3D4BAA6653microsoft.com/1025238489548831109647114771740431031176*_EDGE_V1microsoft.com/9216238489548831109647114787365431031176*SRCHDAF=NOFORMmicrosoft.com/10243323789440" Pattern match: "https://www.redditstatic.com/desktop2x/vendors~Subreddit~SubredditWiki.c17b16c26feb8de5d65f.js.map" Pattern match: "https://www.redditstatic.com/desktop2x/vendors~Reddit.dc91fa7b0b3c8db569d9.js.map" Pattern match: "https://www.redditstatic.com/desktop2x/Governance~ModListing~Reddit.da944f8cf05892532e39.js.map" Pattern match: "https://www.google.com/recaptcha/enterprise.js?render=${e}`,d=e=" Pattern match: "https://www.redditstatic.com/desktop2x/Governance~Reddit.52bc17c0519857f08c36.js.map" Pattern match: "SUIDMmicrosoft.com/9216225240627231031293114771740431031176*SRCHDAF=NOFORMmicrosoft.com/102433237894403108561027971357230938743*SRCHUIDV=2&GUID=426377958C8445E3B4EA69482BD0E747&dmnchg=1microsoft.com/102433237894403108561027971357230938743*SRCHUSRDOB=202201" Pattern match: "u.KR/�2�,ȶ��Ȗ��S�5�eO:�i�Ҍ�VL�.&�otʑ��|��6�PHH/Y" Pattern match: "https://i.redd.it/snoovatar,s=snoovatars,a=avatars;function" Pattern match: "https://www.redditstatic.com/desktop2x/Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compone~9b425435.cd4be39ebca1216b2ef6.js.map" Pattern match: "https://www.redditstatic.com/desktop2x/CountryPage~Frontpage~ModListing~Multireddit~ProfileComments~ProfileOverview~ProfilePosts~Subreddit.07a792dfb6a59f7caef3.js.map" Pattern match: "www.redditstatic.comDNT"39:T8003,"/** (version 4.8.0) */ !function e(b,c,d){var f={'GBIoo':function(k,l){return k0x0){for(q=[],l=0x0;lj;},'HTCCn':'https://geo.captcha-delivery.com'},f=['https://c.datado.me','https://c.captcha-delivery.com','https://ct.captcha-delivery.com',d['HTCCn']],g={'matchURLParts':function(j,k){var q,v,x,y,z,A,B,C,D,E,F,G,H,I,J;return'string'==typeof k&&(null==j['host']&&null==j['path']&&null==j['query']&&null==j['fragment']?null!=j['url']&&k['indexOf'](j['url'])>-0x1:(q='',v='',x='',y='',z='//',A='/',B='?',C='#',D=k['indexOf'](z),k['indexOf']('://')>-0x1||0x0===D?(F=(E=k['slice'](D+z['length']))['indexOf'](A),q=E['slice'](0x0,F>-0x1?F:void 0x0)):(E=k,q=document['location']['host']),G=E['indexOf'](A),H=E['indexOf'](B),I=E['indexOf'](C),J=G>-0x1?G:0x0,H>-0x1&&(v||(v=E['slice'](J,H)),x=E['slice'](H,I>-0x1?I:void 0x0)),I>-0x1&&(v||(v=E['slice'](J,I)),y=E['slice'](I)),v||(v=E['slice'](J)),null!=j['host']&&q['indexOf'](j['host'])>-0x1||d['GliDy'](null,j['path'])&&v['indexOf'](j['path'])>-0x1||null!=j['query']&&x['indexOf'](j['query'])>-0x1||null!=j['fragment']&&y['indexOf'](j['fragment'])>-0x1||null!=j['url']&&k['indexOf'](j['url'])>-0x1));},'isAbsoluteUrl':function(h){return'string'==typeof h&&(-0x1!==h['indexOf']('://')||0x0===h['indexOf']('//'));},'isDatadomeOrigin':function(h){var j='.captcha-delivery.com',k=d['xWCPX'](h['slice'](h['indexOf'](j)),j);return d['YEiHD'](f['indexOf'](h),-0x1)||k;},'hasDatadomeOrigin':function(h){for(var j=0x0;jj;},'agxXw':'object','MPYjW':'renderer','sOUtu':'name','atJkj':'__webdriver_evaluate','QWPve':'$chrome_asyncScriptInfo','oFxgm':function(h,j,k){return h(j,k);},'LJOxg':function(h,j){return h===j;},'qoXot':'E425597ED9CAB7918B35EB23FEDF90','ZoZbH':'denied','tIbPg':'b_u','IMhjC':function(h,j){return h!==j;},'luAbu':'err','OZgei':function(h,j){return h==j;},'TIXas':'Firefox','lVtOe':function(h,j){return h>=j;},'QXgJX':function(h,j){return h>=j;},'ueAyC':'Windows','gqGVx':'ipad','knmRz':'mac','fyeDn':function(h,j){return h>=j;},'ISkJa':function(h,j){return h!==j;},'OtBDe':'ipod','Ydcbm':function(h,j){return h in j;},'hDQcE':'audio/3gpp;','CGASC':'audio/webm;','mxALU':function(h,j){return h>j;},'NCvff':'8FE0CF7F8AB30EC588599D8046ED0E','xChfH':'click','qbZss':function(h,j){return h-j;},'csQtg':function(h,j){return h===j;}},f=a('./../common/DataDomeTools'),g=function(h){var j={'jPDAj':function(x,y){return x(y);},'QtGqu':function(z,A){return z!==A;},'OwXpr':function(x,y){return x(y);},'gUwyc':'Firefox','CdRaK':'Chrome','EUgUy':'safari','PfDOA':'Opera','mcASO':function(z,A){return z===A;},'sQwZy':'windows\x20phone','gRPuO':'linux','jiIie':'Mac','ASHTt':'ontouchstart','YxlEF':function(z,A){return z!==A;},'OHvei':'Android','Hwuxw':function(z,A){return z!==A;},'xvwFL':'empty','wQLdc':'audio/webm;','AamaC':function(z,A){return z||A;},'tiVdq':'video/3gpp;','WlNRa':d['ZoZbH'],'gRUoI':'catch','MjdCv':function(z,A){return z!=A;},'MlVwo':function(z,A){return z-A;},'XWuez':function(z,A){return z+A;},'ymArN':function(z,A){return z in A;},'WEhHo':function(x){return x();}};function k(){return-0x1===navigator['userAgent']['toLowerCase']()['indexOf']('android')&&-0x1===navigator['userAgent']['toLowerCase']()['indexOf']('iphone')&&-0x1===navigator['userAgent']['toLowerCase']()['indexOf']('ipad');}function l(x){if(window['btoa'])try{return window['btoa'](x);}catch(y){return'b_e';}return'b_u';}function m(){return!!(h['cfpp']||h['slat']||h['cfcpw']||h['cffpw']||h['cffrb']||h['cfse']);}function p(x){if(void 0x0!==window['Event']&&d['XCzPN']==typeof window['dispatchEvent']){var y=new Event(x);window['dispatchEvent'](y);}}function q(x){var y={'WTWSs':function(B){return B();}},z=x['navigator'],A=function(B){var C={'Iutft':function(M,N){return M==N;},'mQAFM':function(M,N){return M===N;},'iEQDe':function(M,N){return M!=N;},'OTJyn':function(M,N){return M+N;}},D,E,F,G,H,I,J,K,L={};if(y['WTWSs'](k))try{E=performance['now'](),F=B['document']['createElement']('canvas')['getContext']('webgl'),B['navigator']['buildID']&&+/Firefox\/(\d+)/['exec'](B['navigator']['userAgent'])[0x1]>0x5b?(G=F['VENDOR'],H=F['RENDERER']):(G=(I=F['getExtension']('WEBGL_debug_renderer_info'))['UNMASKED_VENDOR_WEBGL'],H=I['UNMASKED_RENDERER_WEBGL']),J=F['getParameter'](G),K=F['getParameter'](H),D=performance['now']()-E+Math['random'](),L={'vd':J,'rd':K};}catch(M){D='NA',L={'vd':'NA','rd':'NA'};}else D=0xa*Math['random']();return h['tagpu']=function(N){var O,P,Q,R,S;try{if(!(window['chrome']||window['navigator']&&window['navigator']['vendor']&&C['Iutft']('Google\x20Inc.',window['navigator']['vendor'])))return N;if(O=(function(){var T,U=!0x1;if(Object['defineProperty'])try{T=new Error(),window['Object']['defineProperty'](T,'stack',{'configurable':!0x1,'enumerable':!0x1,'get':function(){return U=!0x0,'';}}),window['console']['debug'](T);}catch(V){}return U;}()),P='5D768A5D53EF4D2F5899708C392EAC'!=window['ddjskey']&&C['mQAFM'](-0x1,v['indexOf'](0x5))&&(function(){var T,U,V,W,X;try{return(T=document['createElement']('iframe'))['setAttribute']('style','display:\x20none;'),U='var\x20Q=[\x27fSomWOtdSCoQ\x27,\x27ASoaW5jNW5O\x27,\x27svBdVCotW4e\x27,\x27tCoeimoFW53cNG\x27,\x27oamObCo5W4/cJMm\x27,\x27qmoqyCkcuq\x27,\x27yCkruSo5qHWnWRfFtmo6yG\x27,\x27z8kNsHW\x27,\x27bxZdMMWv\x27,\x27oCopWOpdL8kSWPXZW40\x27,\x27xSkAWOJcPCkIzSoU\x27,\x27nmodbSkKfu4VWQ1BtmowC1tcPa\x27,\x27W7W4WQyNEW\x27,\x27WRddGe0NBbJdLa\x27,\x27WPvuWOFcJSoI\x27,\x27kH4uhmoiW47cGxBdJgqjEa\x27,\x27WOtcSSoIkw/dOa\x27,\x27W64Qb2pcJxzFW5tdVxG+W6u\x27,\x27xK9EW7xcQG\x27,\x27W5FdKmkrW7rL\x27,\x27WRRdHcNcNSkA\x27,\x27w35sW4JcTq\x27,\x27bCorgmkOnW\x27,\x27WP/cRce/WQWjWO7cJ8kdW6axoG\x27,\x27d8kVeWfr\x27,\x27z21wW4/cIG\x27,\x27WPfWWReIWOC\x27,\x27jmonWPJdNSol\x27,\x27WOXIW4NdUCknhwG\x27,\x27r0uPu8oI\x27,\x27W6dcLH9Wj2/dU8oal8krCLO\x27,\x27r1HAW7NcIG\x27,\x27WPHVWPFcQmozrXW\x27,\x27kYNcHH1j\x27,\x27WOrVWQKmWRNcMI0FdSkkDwpcSIKM\x27,\x27WPzPWPpcQfvxWPrFW7PzW4NcLSkd\x27,\x27WP51WQWkWQRcGtK\x27,\x27W58kWPyfDG\x27,\x27bSoLW4jyW5xdQGq\x27,\x27WR59trBdOW4\x27,\x27WRLUxdBdHW\x27,\x27ue7dNhCYwGlcKmovkmkCWODn\x27,\x27WO9Ltd/dTW\x27,\x27WRPiWR3cP0BdOsZdRG\x27,\x27DCo1W7vUW6u\x27,\x27kWKpiCo5W4NcLgVdU3iDEmorWR4\x27,\x27WR3dI08REJldOSo7oSkMu3hdRdi\x27,\x27W7zbW4ddKwNcUmkkW4ODW7CWgSkC\x27,\x27uSo2wSk+rG\x27,\x27WRFcPSkFW6ei\x27,\x27WQJdMqXjWOm\x27,\x27BSomW61RW6y\x27,\x27pb4ubCoKW5lcMxtdQG\x27,\x27cmoFkCkMdW\x27,\x27p8obWR7dH8kXWPG\x27,\x27WQyrWPRcPZG\x27,\x27oCk0WQpcO8kU\x27,\x27WRFcVSkTW4pdQq\x27,\x27W6SGfupcPf4ZWO1Sn8kxWQ0\x27,\x27WR8GWRFcHZa\x27,\x27kSkiyCkpWOxdIJyFkmkIz8oQ\x27,\x27W4JdQtjbW7HvWQFcICktWQ8terzuW6O7\x27,\x27mGVcNs1Sba\x27,\x27W7LpnCoUBa\x27,\x27gSogWR7dMmo2WQ7cHX7dQLO\x27,\x27W493W63dRCkkiW\x27,\x27W4JcI1pdPtpdPSoyW5JdTmo3W7NcOxddGq\x27,\x27vmoMo8oVW7G\x27,\x27cSkNpIH4yq\x27,\x27WRmDWQlcNcVdOCoDW6O\x27,\x27WOfZWPZcUCooFamFjG\x27,\x27nSkXns5W\x27,\x27WQ/dTKuKFW\x27,\x27WRpcN8k2W4BdPG\x27,\x27nCkCWQO5WRH3W68SzmkGkmoS\x27,\x27WQjuDdFdGq\x27,\x27EZn4tCoHWRhcSG\x27,\x27WQPcWOZcPLm\x27,\x27z8o4W61lW40\x27,\x27WP1mAXJdKSo3W5pdTSk4W5i\x27,\x27WO/cISoOWQ8iWOPOWOZdRIy6Fa\x27,\x27WPbaW7dcI38\x27,\x27WPxcOmkYW7WWWPeZWQO2a0RdMNRdQq\x27,\x27mSozW5n4W6ysW6O\x27,\x27WQ9eWOxcNfu\x27,\x27WQ/dMYlcUSkHwG\x27,\x27W6RdHmkQW750W49OWO3dT2Xtxmo0FGRcGmoh\x27,\x27aaLcr8oJ\x27,\x27iColWOxcT2u\x27,\x27ow7dNgacW4S\x27,\x27qGBdPHWSj8krEtWHWOtcJGJcNq\x27,\x27pXGAeSoG\x27,\x27tCkcW6dcH8kmW7/dJcNdONDyW4T4\x27,\x27D3zzW5/cJSkrW58\x27,\x27pbXFjSkyAxKtpttdG8o2za\x27,\x27B8kIW7/dSba\x27,\x27WPtcPmkOW4GTWPm\x27,\x27WPNdHGLbWR0CW50/xCoSWOecWOG7zG\x27,\x27fSo7WQNcVw9I\x27,\x27k8kCgGXb\x27,\x27ACovW4XmW5S\x27,\x27ydBdPSkevSod\x27,\x27i2hcUCoscSkzpeePqmktuCo4\x27,\x27qCkCW6BdOZqTW5S\x27,\x27k8kzWPBcICkD\x27,\x27rYddSmkfDq\x27];var\x20k=d;function\x20d(G,a){G=G-0x1db;var\x20t=Q[G];if(d[\x27yjQbwt\x27]===undefined){var\x20s=function(q){var\x20p=\x27abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=\x27;var\x20l=\x27\x27;for(var\x20P=0x0,Z,R,U=0x0;R=q[\x27charAt\x27](U++);~R&&(Z=P%0x4?Z*0x40+R:R,P++%0x4)?l+=String[\x27fromCharCode\x27](0xff&Z>>(-0x2*P&0x6)):0x0){R=p[\x27indexOf\x27](R);}return\x20l;};var\x20E=function(q,p){var\x20l=[],P=0x0,Z,R=\x27\x27,U=\x27\x27;q=s(q);for(var\x20v=0x0,K=q[\x27length\x27];v0x0){for(q=[],l=0x0;lj;},'HTCCn':'https://geo.captcha-delivery.com'},f=['https://c.datado.me','https://c.captcha-delivery.com','https://ct.captcha-delivery.com',d['HTCCn']],g={'matchURLParts':function(j,k){var q,v,x,y,z,A,B,C,D,E,F,G,H,I,J;return'string'==typeof k&&(null==j['host']&&null==j['path']&&null==j['query']&&null==j['fragment']?null!=j['url']&&k['indexOf'](j['url'])>-0x1:(q='',v='',x='',y='',z='//',A='/',B='?',C='#',D=k['indexOf'](z),k['indexOf']('://')>-0x1||0x0===D?(F=(E=k['slice'](D+z['length']))['indexOf'](A),q=E['slice'](0x0,F>-0x1?F:void 0x0)):(E=k,q=document['location']['host']),G=E['indexOf'](A),H=E['indexOf'](B),I=E['indexOf'](C),J=G>-0x1?G:0x0,H>-0x1&&(v||(v=E['slice'](J,H)),x=E['slice'](H,I>-0x1?I:void 0x0)),I>-0x1&&(v||(v=E['slice'](J,I)),y=E['slice'](I)),v||(v=E['slice'](J)),null!=j['host']&&q['indexOf'](j['host'])>-0x1||d['GliDy'](null,j['path'])&&v['indexOf'](j['path'])>-0x1||null!=j['query']&&x['indexOf'](j['query'])>-0x1||null!=j['fragment']&&y['indexOf'](j['fragment'])>-0x1||null!=j['url']&&k['indexOf'](j['url'])>-0x1));},'isAbsoluteUrl':function(h){return'string'==typeof h&&(-0x1!==h['indexOf']('://')||0x0===h['indexOf']('//'));},'isDatadomeOrigin':function(h){var j='.captcha-delivery.com',k=d['xWCPX'](h['slice'](h['indexOf'](j)),j);return d['YEiHD'](f['indexOf'](h),-0x1)||k;},'hasDatadomeOrigin':function(h){for(var j=0x0;jj;},'agxXw':'object','MPYjW':'renderer','sOUtu':'name','atJkj':'__webdriver_evaluate','QWPve':'$chrome_asyncScriptInfo','oFxgm':function(h,j,k){return h(j,k);},'LJOxg':function(h,j){return h===j;},'qoXot':'E425597ED9CAB7918B35EB23FEDF90','ZoZbH':'denied','tIbPg':'b_u','IMhjC':function(h,j){return h!==j;},'luAbu':'err','OZgei':function(h,j){return h==j;},'TIXas':'Firefox','lVtOe':function(h,j){return h>=j;},'QXgJX':function(h,j){return h>=j;},'ueAyC':'Windows','gqGVx':'ipad','knmRz':'mac','fyeDn':function(h,j){return h>=j;},'ISkJa':function(h,j){return h!==j;},'OtBDe':'ipod','Ydcbm':function(h,j){return h in j;},'hDQcE':'audio/3gpp;','CGASC':'audio/webm;','mxALU':function(h,j){return h>j;},'NCvff':'8FE0CF7F8AB30EC588599D8046ED0E','xChfH':'click','qbZss':function(h,j){return h-j;},'csQtg':function(h,j){return h===j;}},f=a('./../common/DataDomeTools'),g=function(h){var j={'jPDAj':function(x,y){return x(y);},'QtGqu':function(z,A){return z!==A;},'OwXpr':function(x,y){return x(y);},'gUwyc':'Firefox','CdRaK':'Chrome','EUgUy':'safari','PfDOA':'Opera','mcASO':function(z,A){return z===A;},'sQwZy':'windows\x20phone','gRPuO':'linux','jiIie':'Mac','ASHTt':'ontouchstart','YxlEF':function(z,A){return z!==A;},'OHvei':'Android','Hwuxw':function(z,A){return z!==A;},'xvwFL':'empty','wQLdc':'audio/webm;','AamaC':function(z,A){return z||A;},'tiVdq':'video/3gpp;','WlNRa':d['ZoZbH'],'gRUoI':'catch','MjdCv':function(z,A){return z!=A;},'MlVwo':function(z,A){return z-A;},'XWuez':function(z,A){return z+A;},'ymArN':function(z,A){return z in A;},'WEhHo':function(x){return x();}};function k(){return-0x1===navigator['userAgent']['toLowerCase']()['indexOf']('android')&&-0x1===navigator['userAgent']['toLowerCase']()['indexOf']('iphone')&&-0x1===navigator['userAgent']['toLowerCase']()['indexOf']('ipad');}function l(x){if(window['btoa'])try{return window['btoa'](x);}catch(y){return'b_e';}return'b_u';}function m(){return!!(h['cfpp']||h['slat']||h['cfcpw']||h['cffpw']||h['cffrb']||h['cfse']);}function p(x){if(void 0x0!==window['Event']&&d['XCzPN']==typeof window['dispatchEvent']){var y=new Event(x);window['dispatchEvent'](y);}}function q(x){var y={'WTWSs':function(B){return B();}},z=x['navigator'],A=function(B){var C={'Iutft':function(M,N){return M==N;},'mQAFM':function(M,N){return M===N;},'iEQDe':function(M,N){return M!=N;},'OTJyn':function(M,N){return M+N;}},D,E,F,G,H,I,J,K,L={};if(y['WTWSs'](k))try{E=performance['now'](),F=B['document']['createElement']('canvas')['getContext']('webgl'),B['navigator']['buildID']&&+/Firefox\/(\d+)/['exec'](B['navigator']['userAgent'])[0x1]>0x5b?(G=F['VENDOR'],H=F['RENDERER']):(G=(I=F['getExtension']('WEBGL_debug_renderer_info'))['UNMASKED_VENDOR_WEBGL'],H=I['UNMASKED_RENDERER_WEBGL']),J=F['getParameter'](G),K=F['getParameter'](H),D=performance['now']()-E+Math['random'](),L={'vd':J,'rd':K};}catch(M){D='NA',L={'vd':'NA','rd':'NA'};}else D=0xa*Math['random']();return h['tagpu']=function(N){var O,P,Q,R,S;try{if(!(window['chrome']||window['navigator']&&window['navigator']['vendor']&&C['Iutft']('Google\x20Inc.',window['navigator']['vendor'])))return N;if(O=(function(){var T,U=!0x1;if(Object['defineProperty'])try{T=new Error(),window['Object']['defineProperty'](T,'stack',{'configurable':!0x1,'enumerable':!0x1,'get':function(){return U=!0x0,'';}}),window['console']['debug'](T);}catch(V){}return U;}()),P='5D768A5D53EF4D2F5899708C392EAC'!=window['ddjskey']&&C['mQAFM'](-0x1,v['indexOf'](0x5))&&(function(){var T,U,V,W,X;try{return(T=document['createElement']('iframe'))['setAttribute']('style','display:\x20none;'),U='var\x20Q=[\x27fSomWOtdSCoQ\x27,\x27ASoaW5jNW5O\x27,\x27svBdVCotW4e\x27,\x27tCoeimoFW53cNG\x27,\x27oamObCo5W4/cJMm\x27,\x27qmoqyCkcuq\x27,\x27yCkruSo5qHWnWRfFtmo6yG\x27,\x27z8kNsHW\x27,\x27bxZdMMWv\x27,\x27oCopWOpdL8kSWPXZW40\x27,\x27xSkAWOJcPCkIzSoU\x27,\x27nmodbSkKfu4VWQ1BtmowC1tcPa\x27,\x27W7W4WQyNEW\x27,\x27WRddGe0NBbJdLa\x27,\x27WPvuWOFcJSoI\x27,\x27kH4uhmoiW47cGxBdJgqjEa\x27,\x27WOtcSSoIkw/dOa\x27,\x27W64Qb2pcJxzFW5tdVxG+W6u\x27,\x27xK9EW7xcQG\x27,\x27W5FdKmkrW7rL\x27,\x27WRRdHcNcNSkA\x27,\x27w35sW4JcTq\x27,\x27bCorgmkOnW\x27,\x27WP/cRce/WQWjWO7cJ8kdW6axoG\x27,\x27d8kVeWfr\x27,\x27z21wW4/cIG\x27,\x27WPfWWReIWOC\x27,\x27jmonWPJdNSol\x27,\x27WOXIW4NdUCknhwG\x27,\x27r0uPu8oI\x27,\x27W6dcLH9Wj2/dU8oal8krCLO\x27,\x27r1HAW7NcIG\x27,\x27WPHVWPFcQmozrXW\x27,\x27kYNcHH1j\x27,\x27WOrVWQKmWRNcMI0FdSkkDwpcSIKM\x27,\x27WPzPWPpcQfvxWPrFW7PzW4NcLSkd\x27,\x27WP51WQWkWQRcGtK\x27,\x27W58kWPyfDG\x27,\x27bSoLW4jyW5xdQGq\x27,\x27WR59trBdOW4\x27,\x27WRLUxdBdHW\x27,\x27ue7dNhCYwGlcKmovkmkCWODn\x27,\x27WO9Ltd/dTW\x27,\x27WRPiWR3cP0BdOsZdRG\x27,\x27DCo1W7vUW6u\x27,\x27kWKpiCo5W4NcLgVdU3iDEmorWR4\x27,\x27WR3dI08REJldOSo7oSkMu3hdRdi\x27,\x27W7zbW4ddKwNcUmkkW4ODW7CWgSkC\x27,\x27uSo2wSk+rG\x27,\x27WRFcPSkFW6ei\x27,\x27WQJdMqXjWOm\x27,\x27BSomW61RW6y\x27,\x27pb4ubCoKW5lcMxtdQG\x27,\x27cmoFkCkMdW\x27,\x27p8obWR7dH8kXWPG\x27,\x27WQyrWPRcPZG\x27,\x27oCk0WQpcO8kU\x27,\x27WRFcVSkTW4pdQq\x27,\x27W6SGfupcPf4ZWO1Sn8kxWQ0\x27,\x27WR8GWRFcHZa\x27,\x27kSkiyCkpWOxdIJyFkmkIz8oQ\x27,\x27W4JdQtjbW7HvWQFcICktWQ8terzuW6O7\x27,\x27mGVcNs1Sba\x27,\x27W7LpnCoUBa\x27,\x27gSogWR7dMmo2WQ7cHX7dQLO\x27,\x27W493W63dRCkkiW\x27,\x27W4JcI1pdPtpdPSoyW5JdTmo3W7NcOxddGq\x27,\x27vmoMo8oVW7G\x27,\x27cSkNpIH4yq\x27,\x27WRmDWQlcNcVdOCoDW6O\x27,\x27WOfZWPZcUCooFamFjG\x27,\x27nSkXns5W\x27,\x27WQ/dTKuKFW\x27,\x27WRpcN8k2W4BdPG\x27,\x27nCkCWQO5WRH3W68SzmkGkmoS\x27,\x27WQjuDdFdGq\x27,\x27EZn4tCoHWRhcSG\x27,\x27WQPcWOZcPLm\x27,\x27z8o4W61lW40\x27,\x27WP1mAXJdKSo3W5pdTSk4W5i\x27,\x27WO/cISoOWQ8iWOPOWOZdRIy6Fa\x27,\x27WPbaW7dcI38\x27,\x27WPxcOmkYW7WWWPeZWQO2a0RdMNRdQq\x27,\x27mSozW5n4W6ysW6O\x27,\x27WQ9eWOxcNfu\x27,\x27WQ/dMYlcUSkHwG\x27,\x27W6RdHmkQW750W49OWO3dT2Xtxmo0FGRcGmoh\x27,\x27aaLcr8oJ\x27,\x27iColWOxcT2u\x27,\x27ow7dNgacW4S\x27,\x27qGBdPHWSj8krEtWHWOtcJGJcNq\x27,\x27pXGAeSoG\x27,\x27tCkcW6dcH8kmW7/dJcNdONDyW4T4\x27,\x27D3zzW5/cJSkrW58\x27,\x27pbXFjSkyAxKtpttdG8o2za\x27,\x27B8kIW7/dSba\x27,\x27WPtcPmkOW4GTWPm\x27,\x27WPNdHGLbWR0CW50/xCoSWOecWOG7zG\x27,\x27fSo7WQNcVw9I\x27,\x27k8kCgGXb\x27,\x27ACovW4XmW5S\x27,\x27ydBdPSkevSod\x27,\x27i2hcUCoscSkzpeePqmktuCo4\x27,\x27qCkCW6BdOZqTW5S\x27,\x27k8kzWPBcICkD\x27,\x27rYddSmkfDq\x27];var\x20k=d;function\x20d(G,a){G=G-0x1db;var\x20t=Q[G];if(d[\x27yjQbwt\x27]===undefined){var\x20s=function(q){var\x20p=\x27abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=\x27;var\x20l=\x27\x27;for(var\x20P=0x0,Z,R,U=0x0;R=q[\x27charAt\x27](U++);~R&&(Z=P%0x4?Z*0x40+R:R,P++%0x4)?l+=String[\x27fromCharCode\x27](0xff&Z>>(-0x2*P&0x6)):0x0){R=p[\x27indexOf\x27](R);}return\x20l;};var\x20E=function(q,p){var\x20l=[],P=0x0,Z,R=\x27\x27,U=\x27\x27;q=s(q);for(var\x20v=0x0,K=q[\x27length\x27];v_HashTable_Mutex\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"Local\\ZonesCacheCounterMutex\"\n \"IsoScope_c30_IE_EarlyTabStart_0x114_Mutex\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"UpdatingNewTabPageData\"\n \"IsoScope_c30_IESQMMUTEX_0_331\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3120\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c30_IESQMMUTEX_0_519\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"file/memory contains long string with (Indicator: \"dir \"; File: \"urlref_httpswww.reddit.comrufc288dazntv\")","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"General","name":"Queries DNS server","description":"\"api-js.datadome.co\"\n \"crt.usertrust.com\"\n \"query.prod.cms.msn.com\"\n \"teredo.ipv6.microsoft.com\"\n \"www.reddit.com\"\n \"www.redditstatic.com\"","origin":"Network Traffic","mitre_attack_id":"T1071.004","relevance":1,"id":"network-51","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$35","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"Installation/Persistence","name":"Drops XML files","description":"\"www.reddit_1_.xml\" has type \"ASCII text with no line terminators\"","origin":"Binary File","mitre_attack_id":"T1105","relevance":1,"id":"binary-39","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"Installation/Persistence","name":"Read files","description":"\"iexplore.exe\" reads file \"c:\\users\\%osuser%\\appdata\\local\\temp\\~df01c2178e43220695.tmp\"\n \"iexplore.exe\" reads file \"c:\\users\\%osuser%\\appdata\\local\\microsoft\\internet explorer\\recovery\\high\\active\\recoverystore.{41d6e7c3-eb7b-11ed-8454-080027388387}.dat\"\n \"iexplore.exe\" reads file \"c:\\users\\%osuser%\\appdata\\local\\microsoft\\internet explorer\\recovery\\high\\active\\{41d6e7c5-eb7b-11ed-8454-080027388387}.dat\"\n \"iexplore.exe\" reads file \"c:\\users\\%osuser%\\appdata\\local\\temp\\~dfd3a40970b2285cd1.tmp\"","origin":"API Call","mitre_attack_id":"T1083","relevance":1,"id":"api-243","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"Installation/Persistence","name":"Write files","description":"\"iexplore.exe\" writes file \"c:\\users\\%osuser%\\appdata\\local\\microsoft\\internet explorer\\recovery\\high\\active\\recoverystore.{41d6e7c3-eb7b-11ed-8454-080027388387}.dat\"\n \"iexplore.exe\" writes file \"c:\\users\\%osuser%\\appdata\\local\\temp\\~df01c2178e43220695.tmp\"","origin":"API Call","mitre_attack_id":"T1105","relevance":1,"id":"api-242","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"Network Related","name":"Communicates with HTTP webserver (GET/POST requests)","description":"Found http requests in header \"GET /USERTrustRSAAddTrustCA.crt\"","origin":"Network Traffic","mitre_attack_id":"T1071.001","relevance":1,"id":"network-62","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"Network Related","name":"Communicates with HTTPS webserver (GET/POST requests)","description":"$36","origin":"File/Memory","mitre_attack_id":"T1071.001","relevance":1,"id":"string-505","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"Network Related","name":"Contacts random domain names","description":"\"query.prod.cms.msn.com\" seems to be random","origin":"Network Traffic","mitre_attack_id":"T1071.001","relevance":5,"id":"network-6","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"Network Related","name":"Found mail related domain names","description":"$37","origin":"File/Memory","mitre_attack_id":"T1071.003","relevance":1,"id":"string-169","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$38","origin":"File/Memory","mitre_attack_id":"T1071","relevance":3,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops files with image extension","description":"\"android-icon-192x192_1_.png\" has type \"PNG image data 192 x 192 8-bit/color RGBA non-interlaced\" and extension \"png\"","origin":"Binary File","mitre_attack_id":"T1105","id":"binary-56","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"suspicious","category":"Exploit/Shellcode","name":"Contains escaped byte string (often part of obfuscated shellcode)","description":"$39","origin":"File/Memory","mitre_attack_id":"T1140","relevance":10,"id":"string-15","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"level":"suspicious","category":"General","name":"GETs files from a webserver","description":"\"GET /USERTrustRSAAddTrustCA.crt HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: crt.usertrust.com\" Response ==> HTTP/1.1 200 OK\nDate: Fri\n 05 May 2023 21:30:28 GMT\nContent-Type: application/pkix-cert\nContent-Length: 1413\nConnection: keep-alive\nLast-Modified: Tue\n 12 Mar 2019 00:00:00 GMT\nETag: \"5c86f680-585\"\nX-CCACDN-Mirror-ID: sscrl1\nCache-Control: max-age=14400\n s-maxage=3600\nX-CCACDN-Proxy-ID: scdpinlb4\nX-Frame-Options: SAMEORIGIN\nCF-Cache-Status: HIT\nAge: 3362\nAccept-Ranges: bytes\nServer: cloudflare\nCF-RAY: 7c2c15b6bd9b24fc-SJC with response body ==>3082058130820469A00302010202103972443AF922B751D7D36C10DD313595300D06092A864886F70D01010C0500307B310B3009060355040613024742311B30.......","origin":"Network Traffic","mitre_attack_id":"T1071.001","relevance":10,"id":"network-61","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 6 domains and 6 hosts"}],"sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":41,"imported_dlls_count":127,"dropped_files_count":0,"extracted_files_count":48,"files_written_count":23,"files_deleted_count":0,"registry_keys_created_count":13,"registry_keys_modified_count":0,"registry_keys_deleted_count":2,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":15,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":4,"dns_resolutions_count":6,"contacted_urls_count":1,"http_requests_count":1},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"645574c59591c9ec7807f39b","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"98df272dd2628593cbe6d24ab71c36750e9d2d861e453fc79438c057e7556f9b.url","analysis_start_time":"2023-05-05T21:27:34+00:00","indicators_count":{"informative":17,"suspicious":2,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"151.101.1.140","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"address":"52.8.237.242","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"address":"172.64.155.188","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"address":"52.155.62.95","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]}],"dns_resolutions":[{"domain":"api-js.datadome.co","address":"52.8.237.242","ttl":60,"country":"United States","registrar_name":"CCI REG S.A.","registrar_organization":"DATADOME","registrar_name_servers":"ns-888.awsdns-47.net","registrar_creation_date":"2015-04-08T13:59:49+00:00","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"domain":"crt.usertrust.com","address":"172.64.155.188","ttl":161,"country":"United States","registrar_name":"CSC CORPORATE DOMAINS, INC.","registrar_organization":"Comodo Group, Inc.","registrar_name_servers":"NS0.COMODODNS.COM","registrar_creation_date":"1997-12-05T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"domain":"query.prod.cms.msn.com","address":"52.155.62.95","ttl":21237,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Microsoft Corporation","registrar_name_servers":"NS1.MSFT.NET","registrar_creation_date":"1994-11-10T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"domain":"teredo.ipv6.microsoft.com","ttl":27,"country":"-","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Microsoft Corporation","registrar_name_servers":"NS1.MSFT.NET","registrar_creation_date":"1991-05-02T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"domain":"www.reddit.com","address":"151.101.1.140","ttl":1916,"country":"United States","registrar_name":"GANDI SAS","registrar_organization":"Reddit Inc","registrar_name_servers":"NS-1029.AWSDNS-00.ORG","registrar_creation_date":"2005-04-29T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"domain":"www.redditstatic.com","address":"151.101.1.140","ttl":88,"country":"United States","registrar_name":"GANDI SAS","registrar_organization":"Reddit Inc","registrar_name_servers":"NS-1495.AWSDNS-58.ORG","registrar_creation_date":"2011-11-09T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]}],"http_requests":[{"host":"crt.usertrust.com","host_ip":"172.64.155.188:80","url":"/USERTrustRSAAddTrustCA.crt","method":"GET","response_code":"200","response_phrase":"OK","header":"GET /USERTrustRSAAddTrustCA.crt HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: crt.usertrust.com","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}],"processes":[{"pid":2852,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\98df272dd2628593cbe6d24ab71c36750e9d2d861e453fc79438c057e7556f9b.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00002852","icon":"$3a"},{"pid":3120,"ppid":2852,"name":"iexplore.exe","command_line":"https://www.reddit.com/r/ufc288dazntv/","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002852","uid":"00000000-00003120"},{"pid":616,"ppid":3120,"name":"iexplore.exe","command_line":"SCODEF:3120 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003120","uid":"00000000-00000616"}],"all_imported_dlls":["mscoreei.dll","DWrite.dll","npctrl.dll","ole32.dll","rsaenh.dll","WSHTCPIP.DLL","iertutil.dll","netapi32.dll","winnsi.dll","msctf.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","dui70.dll","oleaut32.dll","msvcrt.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","WindowsCodecs.dll","deploy.dll","xmllite.dll","secur32.dll","ieui.dll","dhcpcsvc.dll","powrprof.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","imm32.dll","rpcss.dll","credssp.dll","KernelBase.dll","rpcrt4.dll","tzres.dll","sspicli.dll","urlmon.dll","duser.dll","bcrypt.dll","sechost.dll","nsi.dll","SwDir_1231201.dll","usp10.dll","ieframe.dll","uxtheme.dll","bcryptprimitives.dll","mshtml.dll","d3d11.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","profapi.dll","nlaapi.dll","srvcli.dll","VxSSL32.dll","ExplorerFrame.dll","msvcr90.dll","kernel32.dll","gdi32.dll","oleaccrc.dll","propsys.dll","mscoree.dll","msvcr100.dll","cryptbase.dll","sqmapi.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","ws2_32.dll","wininet.dll","wshqos.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","IPHLPAPI.DLL","wship6.dll","rasadhlp.dll","user32.dll","msimg32.dll","Wldap32.dll","imagehlp.dll","FWPUCLNT.DLL","fltLib.dll","d2d1.dll","msimtf.dll","URLREDIR.DLL","MSOHEV.DLL","jscript9.dll","t2embed.dll","IEShims.dll","netutils.dll","setupapi.dll","userenv.dll","webio.dll","dnsapi.dll","advapi32.dll","mswsock.dll","oleacc.dll","jp2ssv.dll","SensApi.dll","shell32.dll","msasn1.dll","mscorwks.dll","crypt32.dll","gpapi.dll","dxgi.dll","cfgmgr32.dll","shlwapi.dll","comctl32.dll","mlang.dll","schannel.dll","netprofm.dll","cryptsp.dll","apphelp.dll","ntmarta.dll","jsIntl.dll","winhttp.dll","wintrust.dll","dwmapi.dll","npmproxy.dll","dhcpcsvc6.dll","cryptnet.dll","ssv.dll","sxs.dll","api-ms-win-downlevel-user32-l1-1-0.dll","lpk.dll","ncrypt.dll","d3d10warp.dll","RpcRtRemote.dll","wkscli.dll","devobj.dll","version.dll","normaliz.dll","api-ms-win-core-synch-l1-2-0.dll","clbcatq.dll","ieproxy.dll","api-ms-win-downlevel-version-l1-1-0.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","comdlg32.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"0008PFQ2.txt","sha256":"c15980072124aebe073ac5bb4d8cf865abb50ee8947ee4ebb667fe0b24e6fcbe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"4DW8TRWH.txt","sha256":"42ce51acbbe2f31f236e2acd79a46f8fdb7f64921d164e9ef8ad60f78b0a13ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"5XMNPXMI.txt","sha256":"6b74b28fa915b8799822be259cb671a959c80fdef90d3ff6a15ac56e4406c6b8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"CQYLNE0K.txt","sha256":"e5e2c6df21ae8a4a3e894cd693b2cad75626e78b0e7755f4f519158c1ca4b101","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"GK72J6VA.txt","sha256":"549a7607d874f459b77a99dbee6e7d0e8c1788748a216519b1a190c1e467a064","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"QQJ7WWNP.txt","sha256":"85d54d7108074ca31d5db1dc923ab133bb80c7db8fe07a2f0940a24efa8807c9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"TME5UVKG.txt","sha256":"010cd5817a74f27c51348fe241ed71a036ad3011d8fb5fb86bc5628ea1402678","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"U8H5CPWQ.txt","sha256":"c1e6c3773781613b7ef5f9c58fbf7de61a58ae65f214813ee0786bff40364fba","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"UXN07Z5U.txt","sha256":"1d65ccf25c663d3ceb428e7790f0a565e4d77626a8140f47d927f050e6f592a3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"imagestore.dat","sha256":"efa926cd20a945ea9a3e4404ac98b4eb6db02849fc7562f7e343ac7038552b74","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"E0968A1E3A40D2582E7FD463BAEB59CD","sha256":"68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"~DF01C2178E43220695.TMP","sha256":"b8ab363e3fa6d1027e899c96ce82608545251c41209f0658c054517747cac064","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"~DF86A64886C92EACDA.TMP","sha256":"04d2758fcf085ff0f721f9878664a0f29a10420819268272c95f345c208728dd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"~DFD3A40970B2285CD1.TMP","sha256":"0de866c3ecada677c26e567283eb2956d380b2caf94738604577c01eadbe2be4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"~DFFB3D8CE49ADF70A1.TMP","sha256":"652f277efef2e8345441878b429c6bb383dbeea98e3fc972eae313f498bdf37b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Chat~Governance~Reddit.45778f1c41267603a894_1_.js","sha256":"dd91294657700b346f87dba4c59f60a7a122b4ad952adf94cc4a6fa096ffccfe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"vendors~Subreddit~SubredditWiki.c17b16c26feb8de5d65f_1_.js","sha256":"da3a0164094ec74f5729cf7786254cd8fcc2539748d152a71f00515b8718782c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"vendors~Chat~Governance~Reddit.6921f706c26009a1fbb3_1_.js","sha256":"878abad968fa3c1104fd96554f3e365b8e62ee018b870bc86a2ad23814c2c675","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"ufc288dazntv_1_.htm","sha256":"397dea347df893d664a0cd2935133760609d51b38183545d5a6671dc0a67d690","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"urlref_httpswww.reddit.comrufc288dazntv","sha256":"94d9fd0a217b7b5eb2142b127c0a7a12fe3d69a363538bb99319dbdc3895d0b1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Subreddit.de6b61655dc2fa342b10_1_.js","sha256":"0a21c913863fb01ac2560ddb0cc67e28d7a304c9beae2c97250f47704e42b07e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Reddit.9de9676689e5de844a0e_1_.js","sha256":"bc39f3245c581c80e4c8df48511e40e596f6784ac6f5b80ecd431fc935c34844","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Governance~Reddit.52bc17c0519857f08c36_1_.js","sha256":"d24e037e636c367a96c1327b2cd15f9dad42f4e514a17cf0336eb5d7a0a1d861","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"vendors~CommentsPage~Governance~ModListing~ModerationPages~Reddit~Subreddit.f468f4fbfe44aa5cfabf_1_.js","sha256":"94d515b2d956e00e15efe3c1302338a3c0c01fb1ced43fc404a1b4ec45e97f45","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.9c583b1365fc99ea5772_1_.js","sha256":"404f22ed89e45d8ca9a42be8fb5a1cfa5014abbf111d5799277bc88b4c340862","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"IdCard.63add95c40abadb6678e_1_.js","sha256":"64d897e7bdf207134f18f000ba3117d333b4f1a715bb607cf99bcb234a174c5e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"redesignFont2020.2b6489253c61d19d62f0f59ea19dcc12_1_.eot","sha256":"fe7a8f22c9452bccbf9ca37a4f61378ed9efbd4ed42fef63b47c9ba2f7aec82b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"tags-slim_1_.js","sha256":"25c84f75cf8d9385acb585fc382232112c795e4c70766583ec672140cd753daa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Governance~Reddit~Subreddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compo~bd4baca2.2ec8c25078e54ff3c7c0_1_.js","sha256":"17d5454ddf798a95149a1972d1c56aca9c361946c763b74d57b24146f89069cb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"runtime~Reddit.084a3d355f18c8804ed4_1_.js","sha256":"7a048b01c376ceb245c167ae9c81213345e8e9bee7060a8acbc72dc311c50ee1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compone~9b425435.cd4be39ebca1216b2ef6_1_.js","sha256":"ce2ba96f1fc880e1746709e24fb72c6acc3df67305c491ac03654ff89d85437f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~FramedGild~GildModal~GovernanceReleaseNotesModal~Hap~a5d6a3b8.3954822edbc7ef3550e6_1_.js","sha256":"2128bab36b8ca03f37bab66bbf712ceea31cb56c0d4f49c6e48f84a1abee9539","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Governance~ModListing~Reddit.da944f8cf05892532e39_1_.js","sha256":"a26a32b78198e5126c84784805cc5b5f3efdbda1d3e56c79b53e3e32c715cf1b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~Frontpage~GovernanceReleaseNotesModal~ModListing~Mod~e3d63e32.37201feab44ade8dcf12_1_.js","sha256":"2eb61f89360556d53ee611b2aa456dafdaf1ed3c636d6f9cfe393c4acda815e0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Governance~Reddit~SubredditForkingCTA.dd2791e1a63b3555974f_1_.js","sha256":"f499e520a873285494b47682cff05865b4617c1b60e73675f945bb4f448a1841","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"CountryPage~Frontpage~ModListing~Multireddit~ProfileComments~ProfileOverview~ProfilePosts~Subreddit.07a792dfb6a59f7caef3_1_.js","sha256":"eff190a212b94a05bc75e7fa58dc191c17ecb9b57fdced974eff5bb2982340b4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Governance~ModListing~Reddit~ReportFlow.b3eebe720685de18a3c7_1_.js","sha256":"a9b41698ac7b44f38ad573bab781581eb6d90a45bf52a61e134be62f17c0df52","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"ModListing~Reddit~StandalonePostPage.bd37319a4f78703e6421_1_.js","sha256":"a6910cbe91b224561995a56dc5ae7e53b35307aa76c88bafcba4aaac8b259dc4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~GovernanceReleaseNotesModal~ModerationPages~Multired~4b0513d5.819a0de66bac2fd40596_1_.js","sha256":"8ae4ecc789a60f8960752155809879635a6177ba45273dd18437024d066fc37f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Reddit~RichTextEditor~reddit-components-MediumPost~reddit-components-NotificationUnit-Button~removal~87f825ba.ee913686f849d34fe9c4_1_.js","sha256":"70c5f889a0134590fadc659ae86bc62fae33df6adf44ac8b846be01a1e7ff347","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"vendors~CommentsPage~ModerationPages~Reddit~reddit-components-ClassicPost~reddit-components-CompactP~d737df3e.31f8d07ab88edabff736_1_.js","sha256":"e51f532d694ab3e0e4692bea409137ab47c14a4a537b1d0265bf1f500cb0b6c6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"vendors~Reddit.dc91fa7b0b3c8db569d9_1_.js","sha256":"8ed4330a9bc2ba7bb1ae3e655534b77059180878d053237070124370deb100a7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"vendors~PostCreation~Subreddit.e1c74d9c118cc2abc046_1_.js","sha256":"73ca220fb4c19c8770074872caa730bc3a6f316d86c68ee52809eea33003fb0e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"21a7b5429fdf99531118d923f2f200eae8fb5a592d835a05bf43269f7fd4870d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"android-icon-192x192_1_.png","sha256":"38f250a84aeda6e0235ad20a22c846520fe976c3137c3c5fc9c5a2690b206156","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"_41D6E7C5-EB7B-11ED-8454-080027388387_.dat","sha256":"0fb1a15f8dee71f8765b36db5096f74ad991b3f62df36e0740334cd09348f486","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]}],"files_written":[{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{41D6E7C3-EB7B-11ED-8454-080027388387}.dat","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%TEMP%\\~DF01C2178E43220695.TMP","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%TEMP%\\~DFD3A40970B2285CD1.TMP","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\ufc288dazntv[1].htm","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\android-icon-192x192[1].png","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\E0968A1E3A40D2582E7FD463BAEB59CD","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"\\FileSystem\\Filters\\FltMgrMsg","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{4AF2F1B6-EB7B-11ED-8454-080027388387}.dat","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%TEMP%\\~DFFB3D8CE49ADF70A1.TMP","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{41D6E7C5-EB7B-11ED-8454-080027388387}.dat","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\URLBLOCKMANAGER\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\DOMAINSUGGESTION\\FILENAMES\\\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\DOMAINSUGGESTION\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TABBEDBROWSING\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\DOWNLOADMANAGER\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\P3P\\HISTORY\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\D89E3BD43D5D909B47A18977AA9D5CE36CEE184C\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\VERSIONMANAGER\\","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\D89E3BD43D5D909B47A18977AA9D5CE36CEE184C\\D89E3BD43D5D909B47A18977AA9D5CE36CEE184C","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"IsoScope_c30_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"IsoScope_c30_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"IsoScope_c30_ConnHashTable<3120>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"IsoScope_c30_IE_EarlyTabStart_0x114_Mutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"IsoScope_c30_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3120","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c30_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3120","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c30_IE_EarlyTabStart_0x114_Mutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c30_ConnHashTable<3120>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c30_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c30_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c30_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\https://www.reddit.com/","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"IsoScope_c30_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]},{"name":"Local\\https://www.reddit.com/","sources":[{"report_type":"sandbox","report_id":"645574c59591c9ec7807f39b"}]}]}},"report_ids":{"sandbox_job_ids":["645574c59591c9ec7807f39b"]}}}]]}] 2c:[["$","title","0",{"children":"Sample 98df272dd262… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 98df272dd262…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/98df272dd2628593cbe6d24ab71c36750e9d2d861e453fc79438c057e7556f9b"}],["$","meta","4",{"property":"og:title","content":"Sample 98df272dd262… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 98df272dd262…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/98df272dd2628593cbe6d24ab71c36750e9d2d861e453fc79438c057e7556f9b"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 98df272dd262… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 98df272dd262…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L3b","11",{}]] 32:null