26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2d:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T41f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample a63c1a44d273… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample a63c1a44d273…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/a63c1a44d27387fa5031766d0790121ac80212cb1774af7949f4502960037ba2","keywords":["malware analysis","sandbox report","threat intelligence","a63c1a44d27387fa5031766d0790121ac80212cb1774af7949f4502960037ba2"],"about":{"@type":"SoftwareApplication","name":"https://sepa.host.dartmouth.edu/forum/profile/full-watch-after-we-collided-2020-online-free/","applicationCategory":["url"],"identifier":"a63c1a44d27387fa5031766d0790121ac80212cb1774af7949f4502960037ba2"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":1},"behavioralIndicators":{"malicious":0,"suspicious":3},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T63d,"urlblockindex_1_.bin" has type "data" "1f642_1_.svg" has type "ASCII text with very long lines with no line terminators" "jquery-migrate.min_1_.js" has type "ASCII text with very long lines" "5080DC7A65DB6A5960ECD874088F3328_862BA1770B2FEE013603D2FF9ABEAFDA" has type "data" "CC197601BE0898B7B0FCC91FA15D8A69_8712D49A882F47F256339120DED5786E" has type "data" "fa-brands-400_1_.eot" has type "Embedded OpenType (EOT)" "6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442" has type "data" "Dartmouth_College_1558120765-150x150_1_.jpg" has type "JPEG image data JFIF standard 1.01 aspect ratio density 1x1 segment length 16 baseline precision 8 150x150 frames 3" "6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04" has type "data" "07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D" has type "data" "style.min_1_.css" has type "ASCII text with very long lines" "tribe-common.min_1_.js" has type "ASCII text with very long lines with no line terminators" "National2Web-Regular_1_.woff" has type "Web Open Font Format flavor 65536 length 47478 version 0.0" "widgets_1_.css" has type "ASCII text with very long lines with CRLF line terminators" "~DF29DD4B6A0C301B4B.TMP" has type "data" "colors_1_.css" has type "ASCII text with very long lines with CRLF line terminators" "en-US.3" has type "data" "wp-emoji-release.min_1_.js" has type "ASCII text with very long lines" "widget-events-list-full.min_1_.css" has type "ASCII text with very long lines with no line terminators" "ajax_1_.js" has type "ASCII text with CRLF line terminators"28:Tac0,Pattern match: "https://sepa.host.dartmouth.edu/forum/profile/full-watch-after-we-collided-2020-online-free/" Pattern match: "https://sepa.host.dartmouth.edu" Heuristic match: "connect.facebook.net" Heuristic match: "fonts.googleapis.com" Heuristic match: "fonts.gstatic.com" Heuristic match: "platform.twitter.com" Heuristic match: "s.w.org" Heuristic match: "secure.gravatar.com" Heuristic match: "sepa.host.dartmouth.edu" Pattern match: "https://fontawesome.com" Pattern match: "http://www.w3.org/2000/svg" Pattern match: "http://mtomas.com/1/" Pattern match: "https://tech.dartmouth.edu/its/services-support/people-groups/web-services" Pattern match: "http://justintadlock.com/archives/2013/08/14/social-nav-menus-part-2" Pattern match: "http://getbootstrap.com/components/#alerts" Pattern match: "http://www.w3.org/2000/svg'%3E%3Cpath" Pattern match: "jquery.org/license" Pattern match: "https://sepa.host.dartmouth.edu/wp-json/" Pattern match: "https://fonts.googleapis.com/css?family=Open+Sans%3A400italic%2C700italic%2C400%2C700&subset=latin%2Clatin-ext" Pattern match: "http://gmpg.org/xfn/11" Pattern match: "https://home.dartmouth.edu/life-community/explore-green" Pattern match: "https://sepa.host.dartmouth.edu/grad-mentor-profiles/" Pattern match: "https://platform.twitter.com/widgets.js" Pattern match: "youtube.com/watch?v=UyW0jXYe7i8" Pattern match: "https://twitter.com/intent/tweet?text=&url=https%3A%2F%2Fsepa.host.dartmouth.edu%2Fforum%2Fprofil" Pattern match: "https://web.whatsapp.com/send?text=Dartmouth+Rural+STEM+Educator+Partnership+Forum" Pattern match: "https://schema.org/WPSideBar" Pattern match: "https://sepa.host.dartmouth.edu/wp-content/uploads/2019/05/Dartmouth_College_1558120765.jpg" Pattern match: "https://sepa.host.dartmouth.edu/wp-content/plugins/the-events-calendar/src/resources/css/widget-events-list-skeleton.min.css?ver=5.3.0" Pattern match: "http://site-address.com" Pattern match: "https://wordpress.org/plugins/regenerate-thumbnails/" Pattern match: "https://stackoverflow.com/questions/8448978/wordpress-how-do-i-know-if-a-menu-item-has-children" Pattern match: "http://wpforo.com" Pattern match: "http://fontawesome.io" Pattern match: "https://stackoverflow.com/questions/18562580/possible-to-add-mime-type-to-web-config-without-possibly-breaking-the-site" Pattern match: "https://git.io/vWdr2" Pattern match: "https://twemoji.maxcdn.com/v/13.0.1/,ext:.png,size:72x72,className:emoji,convert:{fromCodePoint:function(d){var" Pattern match: "https://fontawesome.comhttps://fontawesome.comFont" Pattern match: "=http://www.w3.org/1999/02/22-rdf-syntax-n" Pattern match: "https://www.gravatar.com/avatar/ae8776cfdb2b9d7bb506b00cec92e184?s=150&d=monsterid&r=g"29:T7ee,"iexplore.exe" wrote bytes "70cc896f" to virtual address "0x75921310" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "c03a866f" to virtual address "0x6D43FE80" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "60cd896f" to virtual address "0x6D43FEC0" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "60cd896f" to virtual address "0x75D21E14" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "60d2896f" to virtual address "0x6D43FEC4" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "b033866f" to virtual address "0x76F6917C" (part of module "IERTUTIL.DLL") "iexplore.exe" wrote bytes "a035866f" to virtual address "0x7592131C" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "3030866f" to virtual address "0x75921380" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "3030866f" to virtual address "0x6D43FE90" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "a035866f" to virtual address "0x75BC1064" (part of module "IMM32.DLL") "iexplore.exe" wrote bytes "a035866f" to virtual address "0x771E1144" (part of module "LPK.DLL") "iexplore.exe" wrote bytes "b033866f" to virtual address "0x769717CC" (part of module "ADVAPI32.DLL") "iexplore.exe" wrote bytes "60cd896f" to virtual address "0x7592130C" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "c03a866f" to virtual address "0x75D21FB0" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "b033866f" to virtual address "0x771F11BC" (part of module "GDI32.DLL") "iexplore.exe" wrote bytes "b033866f" to virtual address "0x6D43F6A0" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "a035866f" to virtual address "0x73B8139C" (part of module "UXTHEME.DLL") "iexplore.exe" wrote bytes "a035866f" to virtual address "0x76BC1298" (part of module "MSCTF.DLL") "iexplore.exe" wrote bytes "b033866f" to virtual address "0x73B81250" (part of module "UXTHEME.DLL") "iexplore.exe" wrote bytes "b033866f" to virtual address "0x74501038" (part of module "VERSION.DLL")2a:T88f,Found malicious artifacts related to "157.240.18.19": ... URL: https://static.xx.fbcdn.net/rsrc.php/v3iKR44/yU/l/bn_IN/nwNKTm6BHLTJdAXj-H3tM7mbTlPravT1SD0kQ7HMxKaTm8oJD1MzLKTf1DFy-tEYfkXjyIGLCRnAgSeKb9CGQsE1UgSkV6gYp4q.js (AV positives: 1/82 scanned on 12/10/2020 06:30:44) URL: https://static.xx.fbcdn.net/rsrc.php/v3iDnN4/yf/l/en_US/9SbO2wE8wS8x-73zfV00KTAbEcUx-j2aTkRm773Nz42U.js (AV positives: 1/82 scanned on 12/09/2020 06:30:36) URL: https://static.xx.fbcdn.net/rsrc.php/v3ii5r4/yk/l/en_GB/5q0pxPMzJqJP68WNHYht4Hjbi-Osvk59PSoFPMm_g5_CYT5zlBPZfzeT2tjX-Jv5ktGK4favgQVIRhMO4HNOaSXg.js (AV positives: 1/82 scanned on 12/07/2020 06:30:18) URL: https://static.xx.fbcdn.net/rsrc.php/v3io9i4/yc/l/ml_IN/f1ZlbC2Xynr.js (AV positives: 1/82 scanned on 12/04/2020 06:30:37) URL: https://static.xx.fbcdn.net/rsrc.php/v3iDnN4/yf/l/en_US/2fTyAYHvvwiJ3FaL8V3AfgQyCcNgaYjKSvpMQqs1cPKKlLgTRm8wGrbXPHgsoHeVstFGkOza0ZGEnlMeFkSUHeo6W-Mf9hzzA5nHTkYG0uCmg2.js (AV positives: 1/82 scanned on 12/01/2020 06:30:48) File SHA256: ee3b50720573779114ceda423523dbb28b76932185dea6dc14b5001586841848 (AV positives: 1/75 scanned on 09/25/2020 01:07:11) File SHA256: b37bfb4d108d034564c9e2cc43d5cb6f88b6cc3ffdccd7c3a0fcd352f3b402bf (AV positives: 31/75 scanned on 04/14/2020 23:33:40) File SHA256: 1d092ecb03e4ac04fd94e64c674f81a5ab750ecb80fdb796ca9842ff9b3f6d10 (AV positives: 1/74 scanned on 04/06/2020 08:58:14) File SHA256: f1c700535f1a95baede90bb608b23086f88c85d5c0635c78a3d7ddab59ef195c (Date: 03/30/2020 16:56:34) File SHA256: 965560dd2a97db041ede506160f8bce5966d1c5f31ee297993d57f974a89c03c (Date: 03/30/2020 15:25:12) File SHA256: 5e4f14e16e95779134b8a9293d1540b36c21490e087229f5438aac13e559fc8c (Date: 03/30/2020 15:22:23) File SHA256: b4f30faef23326b433727176be0ea817c9d3138a53979662153b368184b3e7e4 (Date: 03/30/2020 15:19:56) File SHA256: 795b8a23c4c3b6130b6a81759011eeae6be52e2743186f5efe7e8c1d85d5b23a (Date: 03/30/2020 15:19:52) File SHA256: bfba6dc2c9179a8f6d76960cac950b750191577487d7d7e742d7f5c9f3fee9b5 (AV positives: 1/69 scanned on 02/19/2020 13:34:21) File SHA256: 47d82a2bd1405d3ea60c02712cdaf63d827ad82bccf5985d5a352299a8a707fd (AV positives: 1/73 scanned on 01/22/2020 17:37:46)2b:T9647,"oration { -webkit-appearance: none; } .site-header .search-form [type="search"], .site-header .search-form [type="text"] { background-image: url(images/icon-search-white.png); background-color: transparent; border: none; cursor: pointer; height: 28px; margin: 3px 0; margin: 0.1875rem 0; padding: 0 0 0 34px; padding: 0 0 0 2.125rem; position: relative; -webkit-transition: width 400ms ease, background 400ms ease; transition: width 400ms ease, background 400ms ease; width: 0; } .site-header .search-form [type="search"]:focus, .site-header .search-form [type="text"]:focus { background-image: url(images/icon-search.png); background-color: #f5f5f5; border: 1px solid #bbb; cursor: text; outline: 0; width: 230px; width: 16.428571429rem; -webkit-box-shadow: none; -moz-box-shadow: none; box-shadow: none; } .site-header .search-form [type="submit"] { display: none; } /* Hide top menu search in child themes for the mobile menu */ .menu-item.menu-item-search { display: none; } /* Search form for mobile menu */ .site-header .search-container-mobile .search-form [type="search"], .site-header .search-container-mobile .search-form [type="text"] { float: right; margin-right: 5px; width: 0; background-image: url(images/icon-search-white.png); background-color: transparent; } .site-header .search-container-mobile .search-form [type="search"]:focus, .site-header .search-container-mobile .search-form [type="text"]:focus { background-color: #f5f5f5; background-image: url(images/icon-search.png); border: 0; width: 50%; } /* Tip85 - Add Social Media Menu. Read more: http://justintadlock.com/archives/2013/08/14/social-nav-menus-part-2 */ /* change icon color to white and smaller size */ #menu-social li a:before { content: "\f1e0"; /* mark unsupported links with generic "share" icon */ color: #fff; font-size: 28px; font-size: 1.75rem; line-height: 1.1; padding: 12px 14px; /*@@@ added */ } .social-navigation a:hover:before, .social-navigation a:focus:before { opacity: initial;/*@@@ added*/ } #menu-social li a[href*="mailto:"]:before { content: "\f003"; } #menu-social li a[href*="behance.net"]:before { content: "\f1b4"; } #menu-social li a[href*="codepen.io"]:before { content: "\f1cb"; } #menu-social li a[href*="digg.com"]:before { content: "\f1a6"; } #menu-social li a[href*="dribbble.com"]:before { content: "\f17d"; } #menu-social li a[href*="dropbox.com"]:before { content: "\f16b"; } #menu-social li a[href*="facebook.com"]:before { content: "\f082"; } #menu-social li a[href*="flickr.com"]:before { content: "\f16e"; } #menu-social li a[href*="foursquare.com"]:before { content: "\f180"; } #menu-social li a[href*="plus.google.com"]:before { content: "\f0d4"; } #menu-social li a[href*="github.com"]:before { content: "\f09b"; } #menu-social li a[href*="instagram.com"]:before { content: "\f16d"; } #menu-social li a[href*="last.fm"]:before { content: "\f202"; } #menu-social li a[href*="linkedin.com"]:before { content: "\f08c"; } #menu-social li a[href*="pinterest.com"]:before { content: "\f0d2"; } /* #menu-social li a[href*="polldaddy.com"]:before { content: "\f"; } */ /* #menu-social li a[href*="getpocket.com"]:before { content: "\f"; } */ #menu-social li a[href*="reddit.com"]:before { content: "\f1a1"; } #menu-social li a[href*="skype.com"]:before, #menu-social li a[href*="skype:"]:before { content: "\f17e"; } #menu-social li a[href*="soundcloud.com"]:before { content: "\f1be"; } #menu-social li a[href*="spotify.com"]:before { content: "\f1bc"; } #menu-social li a[href*="stumbleupon.com"]:before { content: "\f1a4"; } #menu-social li a[href*="tumblr.com"]:before { content: "\f173"; } #menu-social li a[href*="twitch.tv"]:before { content: "\f1e8"; } #menu-social li a[href*="twitter.com"]:before { content: "\f099"; } #menu-social li a[href*="vimeo.com"]:before { content: "\f194"; } #menu-social li a[href*="vk.com"]:before { content: "\f189"; } #menu-social li a[href*="wordpress.org"]:before, #menu-social li a[href*="wordpress.com"]:before { content: "\f19a"; } #menu-social li a[href*="xing.com"]:before { content: "\f168"; } #menu-social li a[href*="youtube.com"]:before { content: "\f167"; } #menu-social li a[href$="/feed/"]:before { content: "\f143"; } /* change the hover color to match the official icon color */ #menu-social li a:hover:before { background-color: #00341e; } /* default dark green */ #menu-social li a:hover[href*="dribbble.com"]:before { background-color: #ea4c89; } #menu-social li a:hover[href*="dropbox.com"]:before { background-color: #007ee5; } #menu-social li a:hover[href*="facebook.com"]:before { background-color: #3e7bd7; } #menu-social li a:hover[href*="flickr.com"]:before { background-color: #ff0084; } #menu-social li a:hover[href*="foursquare.com"]:before { background-color: #f84777; } #menu-social li a:hover[href*="plus.google.com"]:before { background-color: #dd4b39; } #menu-social li a:hover[href*="github.com"]:before { background-color: #4183c4; } #menu-social li a:hover[href*="instagram.com"]:before { background-color: #3f729b; } #menu-social li a:hover[href*="last.fm"]:before { background-color: #d51007; } #menu-social li a:hover[href*="linkedin.com"]:before { background-color: #0e76a8; } #menu-social li a:hover[href*="pinterest.com"]:before { background-color: #c8232c; } /* #menu-social li a:hover[href*="polldaddy.com"]:before { color: #bc0b0b; } */ /* #menu-social li a:hover[href*="getpocket.com"]:before { color: #ee4056; } */ #menu-social li a:hover[href*="reddit.com"]:before { background-color: #336699; } #menu-social li a:hover[href*="skype.com"]:before, #menu-social li a:hover[href*="skype:"]:before { background-color: #00aff0; } #menu-social li a:hover[href*="soundcloud.com"]:before { background-color: #ff4700; } #menu-social li a:hover[href*="spotify.com"]:before { background-color: #a9d03f; } #menu-social li a:hover[href*="stumbleupon.com"]:before { background-color: #ff2618; } #menu-social li a:hover[href*="tumblr.com"]:before { background-color: #34526f; } #menu-social li a:hover[href*="twitch.tv"]:before { background-color: #6542a6; } #menu-social li a:hover[href*="twitter.com"]:before { background-color: #33ccff; } #menu-social li a:hover[href*="vimeo.com"]:before { background-color: #1ab7ea; } #menu-social li a:hover[href*="vk.com"]:before { background-color: #4c75a3; } #menu-social li a:hover[href*="wordpress.org"]:before, #menu-social li a:hover[href*="wordpress.com"]:before { background-color: #21759b; } #menu-social li a:hover[href*="xing.com"]:before { background-color: #015a60; } #menu-social li a:hover[href*="youtube.com"]:before { background-color: #cc181e; } #menu-social li a:hover[href$="/feed/"]:before { background-color: #fb9f3b; } /* Tip86 - Style social icons manualy added in the sidebar. Check also media queries for additional styles. */ .widget-area .widget .social-link { font-size: 30px; font-size: 1.875rem; /* Increasing spacing for tap targets */ line-height: 1.2; margin: 0 24px 24px 0; margin: 0 1.5rem 1.5rem 0; vertical-align: middle; } .widget-area .widget a.social-link, .widget-area .widget a .social-link, .widget-area .widget a:visited.social-link, .widget-area .widget a:visited .social-link { color: #777; } .widget-area .widget a:hover.social-link, .widget-area .widget a:hover .social-link, .widget-area .widget a:active.social-link, .widget-area .widget a:active .social-link, .widget-area .widget a:focus.social-link, .widget-area .widget a:focus .social-link { color: #00713a; } nav#social-navigation { float: right; margin-right: 0px; /*@@@ was 15px; */ margin-top: 0px; /*@@@ was 15px; */ } ul#menu-social-items { margin-bottom: 0px; } .social-navigation a[href*="facebook.com"]:before { color: #ffffff; } /* 5.3 Post, archive navigation */ /* Tip27 - Uncomment next code line to disable "previous article - next article" navigation below the content of a post */ /* .post-navigation { display: none; } */ /* Tip88 - Customize color scheme: Navigation links for archive and single views (Previous, Next page of articles and article) */ .mav-links { font-size: 1rem; } .nav-links a, .nav-links a:visited { color: #00693e; -webkit-tap-highlight-color: rgba(0, 105, 62, 1); font-weight: normal; } .nav-links a:focus { color: #fff !important; background-color: #00693e; } /* 6.0 Accessibility -------------------------------------------------------------- */ /* Text meant only for screen readers */ /* 7.0 Alignments -------------------------------------------------------------- */ /* 8.0 Clearings -------------------------------------------------------------- */ /* 9.0 Widgets -------------------------------------------------------------- */ /* 9.1 General widget styles */ .widget-area .widget { padding: 20px; padding: 1.25rem; /*background: #E2E2E2; */ border-bottom: 1px solid #aaaaaa; margin-bottom: 8px; margin-bottom: 0.5rem; } .widget-area .widget a:hover, .widget-area .widget a:active, .widget-area .widget a:focus { color: #00713a; text-decoration: underline; } .der-title { font-weight:bold; } .widget-title { font-family: National2WebBold,"Arial Black",sans-serif; font-size: 20px; font-size: 1.25rem; font-weight: normal; line-height: 1.15rem; text-transform: none; color: #333333; } /* 9.2 Specific widget styles */ /* Tip53 - Change vertical spacing between lines in Recent Posts widget. If your post titles are rather short, 12px will be a good choice */ .widget_rss .widget-title a, .widget_rss .widget-title a:visited { color: #00713a; } .widget-area .textwidget a:hover, .widget-area .textwidget a:active, .widget-area .textwidget a:focus { color: #00713a; text-decoration: underline; } .widget-area .widget_categories ul li, .widget-area .widget_nav_menu ul li { /* font-size: 16px; */ font-size: 0.9rem; text-transform: none; } .widget-area .widget li { /* font-size: 16px; */ font-size: 0.9rem; } .widget-area .widget p { font-size: 16px; font-size: 1rem; } .widget-area .widget .textwidget { font-size: 16px; font-size: 1rem; } .widget-area .widget_categories a:hover, .widget-area .widget_categories a:focus, .widget-area .widget_nav_menu a:hover, .widget-area .widget_nav_menu a:focus, .widget-area .widget .children li.cat-item a:hover, .widget-area .widget .children li.cat-item a:focus, .widget-area .widget .children li.page_item a:hover, .widget-area .widget .children li.page_item a:focus, .widget-area .widget .current-cat-parent a, .widget-area .widget .current-cat-parent a:visited, .widget-area .widget .current_page_parent a, .widget-area .widget .current_page_parent a:visited { color: #00713a; } .widget-area .widget .current-cat-parent .current-cat, .widget-area .widget .current-cat-parent .current-cat a, .widget-area .widget .current-cat-parent .current-cat a:visited, .widget-area .widget .current_page_parent .current_page_item, .widget-area .widget .current_page_parent .current_page_item a, .widget-area .widget .current_page_parent .current_page_item a:visited, .widget-area .widget .current-cat, .widget-area .widget .current-cat a, .widget-area .widget .current-cat a:visited, .widget-area .widget .current_page_item, .widget-area .widget .current_page_item a, .widget-area .widget .current_page_item a:visited { color: #00713a; } /* .widget_recent_entries li { margin-bottom: 12px; margin-bottom: 0.75rem; } */ /* Styles for Categories and Pages widgets */ /* 9.3 Footer widget styles */ #footer-widgets a:hover, #footer-widgets a:active, #footer-widgets a:focus { color: #00713a; text-decoration: underline; } /* Four footer widget areas. Additional styles at 15.0 Media queries */ #footer-widgets .textwidget, #footer-widgets.textwidget li,#footer-widgets.textwidget p { color: #424242 !important; font-size: 0.9375rem !important; line-height: 1.3rem; font-family: National2WebMedium, Arial, sans-serif; padding: 16px 0; /* text-transform: uppercase; */ font-weight: normal; } #footer-widgets .textwidget p { padding-bottom:16px; border-bottom: 1px solid #999 !important; } .textwidget a, .textwidget li a { color: #00693e !important; font-size: 0.9375rem !important; line-height: 1.3rem; font-family: National2WebMedium, Arial, sans-serif; padding: 16px 0; font-weight: normal; } /* 10.0 Header -------------------------------------------------------------- */ /* 10.1 Site Header */ /* Tip88 - Customize color scheme: Site Title and Description - can also be changed via Admin > Appearance > Customizer */ .site-header .site-title { font-weight: normal; } .site-header .site-title a, .site-header .site-description a { color: #ffffff; } /*.site-header .site-title a:hover, .site-header .site-description a:hover { color: #ffffff; }*/ .site-header .site-title a:hover, .site-header .site-title a:focus, .site-header .site-description a:hover, .site-header .site-description a:focus { color: #ffffff; text-decoration: none; } .nav-links a:visited { color: #00693e; -webkit-tap-highlight-color: rgba(0, 105, 62, 1); text-decoration: none; } .site-header .site-title { color: #ffffff; font-size: 2.8rem; line-height: 1.375; font-family: DartmouthRuzicka, Georgia, serif; } .site-header .site-description { font-weight: normal; font-size: 14px; font-size: 0.875rem; color: #ffffff; font-family: National2WebMedium, Arial, sans-serif; } /* Tip14 - Custom logo feature support. Check: inc/template-tags.php for more details. */ /* Enable custom logo in mobile view */ /* .site-branding { margin-top: 12px; margin-top: 0.75rem; } .site-logo-link, .custom-logo-link { display: block; float: left; margin: 5px 24px 0 0; margin: 0.3125rem 1.5rem 0 0; } #site-title-wrapper { padding: 12px 0 12px 12px; padding: 0.75rem 0 0.75rem 0.75rem; } .site-header .site-title, .site-header .site-title a { clear: none; display: inline; } .site-header .site-description, .site-header .site-title { text-align: left; } */ .site-header .site-title, .site-header .site-description { text-align: center; } .site-branding { background: #005338; min-height: 90px; min-height: 5.625rem; padding: 60px 0px 60px; /* was 34 0 20 */ margin-top: 0; overflow: visible; } /* Tip06 - Custom headers for posts and pages. Uncomment following CSS rules to disable border and shadow on main header: */ img.header-image, .site-header img.wp-post-image { border-radius: 0; box-shadow: none; margin-top: 0; } /* Tip12 - Uncomment following CSS rules to have classic Twenty Twelve front page look - disable header image for the Front Page Templ.: */ /* .template-front-page img.header-image, .template-front-page .site-header img.wp-post-image { display: none; } */ /* 11.0 Content -------------------------------------------------------------- */ body { margin-top: 0px; font-family: National2Web, Arial, sans-serif; } .site { padding: 0; margin-bottom: 0; box-shadow: none; } /* 11.1 Posts and pages */ /* Tip25b - Disable special icons, that marks the links that will open in a new window */ .entry-content .fa-external-link { display: none; } /* Tip26b - Uncomment next CSS rule to Print HTML bellow post title with meta information (date/time and author) * for the index/archive views in MOBILE view. */ .entry-content .more-link:after, .entry-summary .more-link:after { content: "\f178"; /* fa-long-arrow-right */ } .entry-content a.more-link, .entry-summary a.more-link { text-decoration: none; } .entry-content a:hover.more" (Indicator: "skype.com"; File: "SSL") "%2Ffull-watch-after-we-collided-2020-online-free%2F">

Forum Statistics

1 Forums

38 Topics

48 Posts

1 Online

1 832 Members

Latest Post: Moderating the Forum Our newest member: lavellaujy Recent Posts Unread Posts Tags

Forum Icons: Forum contains no unread posts Forum contains unread posts Mark all read

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed

wpforo-footer -->

wpforo-wrap --> " (Indicator: "whatsapp.com"; File: "SSL"), "enu-toggle:focus .site-header .menu-toggle:hover { background: #474747; } .site-header .menu-toggle:before { content: "\2261"; font-size: 20px; font-size: 1.25rem; margin-right: 7px; margin-right: 0.4375rem; vertical-align: baseline; } .main-navigation > ul { display: none; } .main-navigation ul ul { display: block; } /* Tip10 - Add Twenty Thirteen search form to WordPress nav menu */ .menu-item.menu-item-search { float: right; margin: 4px 0 0 0; margin: 0.25rem 0 0 0; } .site-header input[type="search"] { padding-right: 2px; /* Don't cut off the webkit search cancel button */ padding-right: 0.125rem; width: 270px; width: 19.285714286rem; } .site-header input[type="search"]:-webkit-search-decoration { -webkit-appearance: none; } .site-header .search-form [type="search"], .site-header .search-form [type="text"] { background-color: transparent; background-image: url(images/icon-search.png); background-position: 5px center; background-repeat: no-repeat; background-size: 24px 24px; border: none; cursor: pointer; height: 30px; margin: 3px 0; margin: 0.1875rem 0; padding: 0 0 0 34px; padding: 0 0 0 2.125rem; position: relative; -webkit-transition: width 400ms ease, background 400ms ease; transition: width 400ms ease, background 400ms ease; width: 0; } .site-header .search-form [type="search"]:focus, .site-header .search-form [type="text"]:focus { background-color: #f5f5f5; border: 1px solid #bbb; box-shadow: none; cursor: text; outline: 0; width: 230px; width: 16.428571429rem; } .site-header .search-form [type="submit"] { display: none; } /* Search form for mobile menu */ .site-header .search-container-mobile .search-form [type="search"], .site-header .search-container-mobile .search-form [type="text"] { background-color: #d0d0d0; background-image: url(images/icon-search.png); float: left; margin: 6px 0 0 6px; margin: 0.375rem 0 0 0.375rem; width: 130px; width: 9.285714286rem; } .site-header .search-container-mobile .search-form [type="search"]:focus, .site-header .search-container-mobile .search-form [type="text"]:focus { background-color: #f5f5f5; border: 0; width: 50%; } /* Tip85 - Add Social Media Menu. Read more: http://justintadlock.com/archives/2013/08/14/social-nav-menus-part-2 */ .social-navigation ul { list-style: none; text-align: center; text-align: right; } .social-navigation ul li { display: inline; margin: 0 0 0 16px; margin: 0 0 0 1rem; } .social-navigation ul li:first-child { margin: 0; } .social-navigation a { position: relative; text-decoration: none; } .social-navigation a:focus:before, .social-navigation a:hover:before { opacity: 0.75; } .social-navigation a:before { color: #000; content: "\f1e0"; /* mark unsupported links with generic "share" icon */ font-size: 36px; font-size: 2.25rem; line-height: 1.1; } .social-navigation a[href^="mailto:"]:before { content: "\f003"; color: #000; } .social-navigation a[href*="behance.net"]:before { content: "\f1b4"; color: #000; } .social-navigation a[href*="codepen.io"]:before { content: "\f1cb"; color: #000; } .social-navigation a[href*="digg.com"]:before { content: "\f1a6"; color: #000; } .social-navigation a[href*="dribbble.com"]:before { content: "\f17d"; color: #ea4c89; } .social-navigation a[href*="dropbox.com"]:before { content: "\f16b"; color: #007ee5; } .social-navigation a[href*="facebook.com"]:before { content: "\f082"; color: #3b5998; } .social-navigation a[href*="flickr.com"]:before { content: "\f16e"; color: #ff0084; } .social-navigation a[href*="foursquare.com"]:before { content: "\f180"; color: #f84777; } .social-navigation a[href*="plus.google.com"]:before { content: "\f0d4"; color: #dd4b39; } .social-navigation a[href*="github.com"]:before { content: "\f09b"; color: #4183c4; } .social-navigation a[href*="instagram.com"]:before { content: "\f16d"; color: #3f729b; } .social-navigation a[href*="last.fm"]:before { content: "\f202"; color: #d51007; } .social-navigation a[href*="linkedin.com"]:before { content: "\f08c"; color: #0e76a8; } .social-navigation a[href*="ok.ru"]:before { content: "\f263"; color: #f58220; } .social-navigation a[href*="odnoklassniki.ru"]:before { content: "\f263"; color: #f58220; } .social-navigation a[href*="pinterest.com"]:before { content: "\f0d2"; color: #c8232c; } /* .social-navigation a[href*="polldaddy.com"]:before { content: "\f"; color: #bc0b0b; } */ .social-navigation a[href*="getpocket.com"]:before { content: "\f265"; color: #ee4056; } .social-navigation a[href*="reddit.com"]:before { content: "\f1a1"; color: #336699; } .social-navigation a[href*="skype.com"]:before, .social-navigation a[href*="skype:"]:before { content: "\f17e"; color: #00aff0; } .social-navigation a[href*="soundcloud.com"]:before { content: "\f1be"; color: #ff4700; } .social-navigation a[href*="spotify.com"]:before { content: "\f1bc"; color: #a9d03f; } .social-navigation a[href*="stumbleupon.com"]:before { content: "\f1a4"; color: #ff2618; } .social-navigation a[href*="tumblr.com"]:before { content: "\f173"; color: #34526f; } .social-navigation a[href*="twitch.tv"]:before { content: "\f1e8"; color: #6542a6; } .social-navigation a[href*="twitter.com"]:before { content: "\f099"; color: #33ccff; } .social-navigation a[href*="vimeo.com"]:before { content: "\f194"; color: #1ab7ea; } .social-navigation a[href*="vk.com"]:before { content: "\f189"; color: #4c75a3; } .social-navigation a[href*="wordpress.org"]:before, .social-navigation a[href*="wordpress.com"]:before { content: "\f19a"; color: #21759b; } .social-navigation a[href*="xing.com"]:before { content: "\f168"; color: #015a60; } .social-navigation a[href*="youtube.com"]:before { content: "\f167"; color: #c4302b; } .social-navigation a[href$="/feed/"]:before { content: "\f143"; color: #fb9f3b; } /* Tip86 - Style social icons manualy added in the sidebar. Check also media queries for additional styles. */ .widget-area .widget .social-link { font-size: 30px; font-size: 1.875rem; /* Increasing spacing for tap targets */ line-height: 1.2; margin: 0 24px 24px 0; margin: 0 1.5rem 1.5rem 0; vertical-align: middle; } .widget-area .widget a.social-link, .widget-area .widget a .social-link, .widget-area .widget a:visited.social-link, .widget-area .widget a:visited .social-link { color: #777; } .widget-area .widget a:active.social-link, .widget-area .widget a:active .social-link, .widget-area .widget a:focus.social-link, .widget-area .widget a:focus .social-link, .widget-area .widget a:hover.social-link, .widget-area .widget a:hover .social-link { color: #ff6111; } /* 5.3 Post, archive navigation */ /* .post-navigation, .nav-previous and .nav-next - prev/next post navigation * .pagination and .page-numbers - prev/next posts page (archive) navigation * .nav-links is for post, archive and comment navigations. */ .pagination, .post-navigation { margin-bottom: 44px; /* Equal bottom margin matching top margin would be 48px, but adjusting to make it visually appear equal */ margin-bottom: 2.75rem; } .pagination { position: relative; text-align: center; } /* Tip27 - Uncomment next code line to disable "previous article - next article" navigation below the content of a post */ /* .post-navigation { display: none; } */ /* Do not display archive navigation page numbers in mobile view */ .pagination .page-numbers { display: none; } .pagination .next, .pagination .prev { display: inline-block; position: absolute; width: auto; } .pagination .next { right: 0; text-align: right; } .pagination .prev { left: 0; text-align: left; } .nav-links { font-size: 18px; font-size: 1.125rem; line-height: 28px; line-height: 1.75rem; overflow: hidden; /* It can hide some focus outlines, but for now it's not too bad */ } .nav-next { float: right; text-align: right; width: 48%; } .nav-previous { float: left; width: 48%; } /* Tip88 - Customize color scheme: Navigation links for archive and single views (Previous, Next page of articles and article) */ .nav-links a .nav-links a:visited { -webkit-tap-highlight-color: rgba(255, 97, 17, 1); color: #ff6111; font-weight: bold; text-decoration: none; } .nav-links a:active .nav-links a:hover { text-decoration: underline; } .nav-links a:focus { background-color: #ff6111; color: #fff; text-decoration: none; } .nav-links a:after .nav-links a:before .pagination .next:after .pagination .prev:before { font-size: inherit; font-weight: bold; text-decoration: none; } .nav-previous a:before .pagination .prev:before { content: "\f100"; /* fa-angle-double-left */ padding-right: 5px; padding-right: 0.3125rem; } .nav-next a:after .pagination .next:after { content: "\f101"; /* fa-angle-double-right */ padding-left: 5px; padding-left: 0.3125rem; } #comment-nav-above .post-navigation + .comments-area { margin: 48px 0; margin: 3rem 0; } .entry-content .page-links { clear: both; margin-bottom: 24px; margin-bottom: 1.5rem; } .entry-content .page-links > .page-links-title { border: 0; color: #222; font-size: 16px; font-size: 1rem; height: auto; margin: 0; padding-right: 0.5rem; width: auto; } .single .entry-content .page-links > .page-links-title { /* font-size: ; */ } .entry-content .page-links a .entry-content .page-links > span { border: 1px solid #eaeaea; border: 1px solid rgba(51, 51, 51, 0.1); display: inline-block; font-size: 13px; font-size: 0.8125rem; height: 1.75rem; line-height: 2; margin: 0 14px 5px 0; margin: 0 0.875rem 0.3125rem 0; text-align: center; width: 1.75rem; } .entry-content .page-links a .entry-content .page-links a:visited { -webkit-tap-highlight-color: rgba(255, 255, 255, 0.3); background-color: #333; border-color: #333; color: #fff; text-decoration: none; } .entry-content .page-links a:focus .entry-content .page-links a:hover { background-color: #707070; background-color: rgba(51, 51, 51, 0.7); border-color: transparent; color: #fff; } /* 6.0 Accessibility -------------------------------------------------------------- */ /* Text meant only for screen readers */ .screen-reader-text { clip: rect(1px, 1px, 1px, 1px); height: 1px; overflow: hidden; position: absolute !important; width: 1px; /* Many screen reader and browser combinations announce broken words as they would appear visually */ word-wrap: normal !important; } .screen-reader-text:focus { background-color: #f1f1f1; border-radius: 3px; box-shadow: 0 0 2px 2px rgba(0, 0, 0, 0.6); clip: auto !important; color: #21759b; display: block; font-size: 13px; font-size: 0.8125rem; font-weight: bold; height: auto; left: 5px; line-height: normal; padding: 15px 23px 14px; padding: 0.9375rem 1.4375rem 0.875rem; position: absolute; text-decoration: none; top: 5px; width: auto; z-index: 100000; /* Above WP toolbar */ } .skiplink .screen-reader-text:focus { background: #fff; border: 2px solid #333; border-radius: 3px; clip: auto !important; color: #000; display: block; font-size: 13px; font-size: 0.8125rem; left: 5px; padding: 12px; padding: 0.75rem; position: absolute; top: 5px; z-index: 100000; /* Above WP toolbar */ } .skiplink .screen-reader-text:hover { text-decoration: underline; } /* Do not show the outline on the skip link target. */ #content[tabindex="-1"]:focus { outline: 0; } /* 7.0 Alignments -------------------------------------------------------------- */ .aligncenter { display: block; margin-left: auto; margin-right: auto; } .alignleft { float: left; } .alignright { float: right; } img.aligncenter .wp-caption.aligncenter { clear: both; margin: 24px auto 24px auto; margin: 1.5rem auto 1.5rem auto; } img.alignleft figure.wp-caption.alignleft .wp-caption.alignleft { margin: 12px 24px 12px 0; margin: 0.75rem 1.5rem 0.75rem 0; } img.alignright figure.wp-caption.alignright .wp-caption.alignright { margin: 12px 0 12px 24px; margin: 0.75rem 0 0.75rem 1.5rem; } /* Prevent very large image with a caption and without alignment overflowing the content */ img.alignnone figure.wp-caption.alignnone { margin: 24px auto 24px auto; margin: 1.5rem auto 1.5rem auto; } /* Do not add top margin if image is at the top of the post */ .entry-content figure.aligncenter:first-child .entry-content figure.alignnone:first-child .entry-content img.aligncenter:first-child .entry-content img.alignnone:first-child { margin-top: 0; } div.wp-caption.alignright img[class*="wp-image-"] div.wp-caption.alignright .wp-caption-text figure.alignright .wp-caption-text figure.alignright img[class*="wp-image-"] { padding-left: 0; padding-right: 0; } /* 8.0 Clearings -------------------------------------------------------------- */ .clear { *zoom: 1; } .clear:after .comment-content:after .comment-navigation:after .content-area nav:after .entry-content:after .entry-meta .entry-meta:after .entry-summary:after .format-status .entry-header:after .gallery:after .main-navigation:after .site:after .site-content:after .site-footer:after .site-header:after .textwidget:after { clear: both; } .clear:after .clear:before .comment-content:after .comment-content:before .comment-navigation:after .comment-navigation:before .content-area nav:after .content-area nav:before .entry-content:after .entry-content:before .entry-summary:after .entry-summary:before .format-status .entry-header:after .format-status .entry-header:before .gallery:after .gallery:before .site:after .site:before .site-content:after .site-content:before .site-footer:after .site-footer:before .site-header:after .site-header:before .textwidget:after .textwidget:before { content: ""; display: table; line-height: 0; table-layout: fixed; } /* 9.0 Widgets -------------------------------------------------------------- */ /* Sidebar and Front Page template widgets get top border in mobile view */ #secondary { border-top: 1px solid #ededed; margin: 72px auto 48px auto; margin: 4.5rem auto 3rem auto; padding: 24px 0 0 0; padding: 1.5rem 0 0 0; } #secondary { background: #fff; /* Old browsers */ /* IE10 Consumer Preview */ background-image: -ms-radial-gradient(center top, circle closest-corner, #fbfbfb 0%, #ffffff 100%); /* Mozilla Firefox */ background-image: -moz-radial-gradient(center top, circle closest-corner, #fbfbfb 0%, #ffffff 100%); /* Opera */ background-image: -o-radial-gradient(center top, circle closest-corner, #fbfbfb 0%, #ffffff 100%); /* Webkit (Safari/Chrome 10) */ background-image: -webkit-gradient(radial, center top, 0, center top, 487, color-stop(0, #fbfbfb) color-stop(1, #ffffff)); /* Webkit (Chrome 11+) */ background-image: -webkit-radial-gradient(center top, circle closest-corner, #fbfbfb 0%, #ffffff 100%); /* W3C Markup IE10 Release Preview */ background-image: radial-gradient(circle closest-corner at center top, #fbfbfb 0%, #ffffff 100%); } .site-footer .widget-area { margin: 12px 0 0; margin: 0.75rem 0 0; } /* 9.1 General widget styles */ .widget-title { color: #ff6111; font-size: 27px; font-size: 1.6875rem; font-weight: normal; line-height: 1.4; text-transform: uppercase; /* Experimenting with text outline for better accessibility in text of light color */ /* text-shadow: 1px 0 0 #000 0 -1px 0 #000 0 1px 0 #000 -1px 0 0 #000; */ } .widget-area .widget { color: #555; -webkit-hyphens: auto; -moz-hyphens: auto; -ms-hyphens: auto; hyphens: auto; margin-bottom: 24px; margin-bottom: 1.5rem; } .widget-area .widget p:first-child { margin-top: 0; /* remove top margin of the first paragraph when "Automatically add paragraphs" is selected for the Text widget */ } .widget-area .widget a .widget-area .widget a:visited { color: #555; text-decoration: none; } .widget-area .widget a:active .widget-area .widget a:focus .widget-area .widget a:hover { color: #dd3811; text-decoration: underline; } /* Protecting select field from overflow */ .widget-area .widget option .widget-area .widget select { max-width: 100%; overflow: hidden; width: auto; } .widget-area .widget h3 { margin-bottom: 24px; margin-bottom: 1.5rem; } ." (Indicator: "skype.com"; File: "SSL")2c:T564,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD0klEQVR42u2XS2hTWRjHg7Nw4TADYqcdxFbFMqtZjjOzUgdFRWtbEjuPMgu3wygoCqXooKIoVGiNaZuWLtsunIdTmG4GN4VQZmBaLPRlKK0P0iZ9JJmYx03u4+/3nZs0zTX39jZx2Q/+5EHO+f++75zznRuHYzu2wxBTU1NYWlrC8vIygsGgTem/DwQCGB0dRX19PUoGmJ6ehqZpKCVkWQaPZwin04mSAdLptJiQQTRNhaqaSYGi5MUxNzcHv9+PyclJNDY2okwAc2OjeQ7gxYsFLC4uis8TExNobm5GyQB2ss5LFmM4+/n5efE+EonA5/PB5XJhSwCSJJkCmJnnAGZmZjA42E8axMDAAIaGhjA8PPy+AMzNeQOychEKhQTM2NiYgCgTQDE1zxnnlUEmkyk4SbOzs+UAbJ71RvMcgC6eR0MikSgVoBzztBADRKPRrQKkRAk3L7nRNG/MJ4nF80Sjka0BpFJGALkk83RaEr3EEuCni5dx9eq1kuT2dL1jngeQ7AHwRG9opVaokYUyQJIno+z5QBWXJsTBY63McwDckCwBlsn8ZQxYSgB3+v/BruMPUHXOjUPf9qD2O++6Pm3woJa+U8QdoWUBjGXPA/Bm5pMUiYStAVZUYCGi4jVBxGnQn6MLONDUhap6N6qd3ah2dZK6sOdMB2oa3JDVQgCjcc5cB1A2B1glgJcE8CoKBGJpQX2bKrH7dDtqzndjf1YVBHDI2VFQAStzPk22AV5R9lyBJA18OhHAgfNe1Ljy5vubvPhEADwsAiAZAFLrsgUQhm4ep9fxuVV89kMv9jk7ydgrzPc1erC34RFVoB21BLBxCcwy3wgQDm8CEOHLIwW8oUqcvfYbKurcONjULcpfVdeBytNttPYd2HXsHg42tBsqUNyYxf2E+0c4vGYN8D8B0AHAyFQIlXUPaQN61813fHUTv4/M4L/nQTi+/AWVJ+8XAJgZ60raA+A+QMnD8+QZPj7VLgC45B98fRPux/9mH800DPme46MjtwuWwGiuAyTXZQsgnr023X88w4cnHtDm68LOI3fR0vlUGEmsrOlfPr+hAsWy3yJAItvl/h4PYOc3bbQMblTRuq/EJGEUl1XqkCokRTc2AzCa2wbgyzdKbZj2IY7+3A/H56344kKvMJFJSQJIkSRSWlENS5BEMslKFFUmI2N1dcUagG/ttZRehWA4ju+v/wrH4Rv48dYTjPlDIDZQAQgGlL2+X3J3gd2wBOBQsj+MxWKIx+PiKcZKXG4e29vbU1Q9Pbr6+vrg8XjMAS5eulLyddzS2opy/wq+BTgoCRlpZOGDAAAAAElFTkSuQmCC1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"a63c1a44d27387fa5031766d0790121ac80212cb1774af7949f4502960037ba2","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1790424091603,"unified_at":"2026-09-26T12:01:31.603Z","metadata":{"hashes":{"sha256":"a63c1a44d27387fa5031766d0790121ac80212cb1774af7949f4502960037ba2","sha1":"32c5d6d510f7a3af95c59cbdf302fed06a6f8249","md5":"5c5e7354ac11d12b75231fb89cc09e3e","sha512":"dc8f2ebd21f05587fe0f2def4869edb2592b22db8a2f98fa2cea776992fdc868aaf80f9e2c0f75c5b6ef11f374ef9e9f8cc1a34483e0fc8702f9ad18e78ad43e","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://sepa.host.dartmouth.edu/forum/profile/full-watch-after-we-collided-2020-online-free/","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1607646000000,"last_seen":1611558188000,"last_multi_scan":1611558188000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":1},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":2},"sandbox_signatures":{"informative_count":14,"suspicious_count":3,"malicious_count":0,"total":17},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Persistence","technique":"Hooking","attack_id":"T1179","attack_id_wiki":"https://attack.mitre.org/techniques/T1179","identifiers":[{"type":"informative","value":"Installs hooks/patches the running process"}],"sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"tactic":"Command and Control","technique":"Commonly Used Port","attack_id":"T1043","attack_id_wiki":"https://attack.mitre.org/techniques/T1043","identifiers":[{"type":"suspicious","value":"Sends traffic on typical HTTP outbound port, but without HTTP header"}],"sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]}],"sandbox_signatures":[{"level":"informative","category":"Anti-Reverse Engineering","name":"Creates guarded memory regions (anti-debugging trick to avoid memory dumping)","description":"\"iexplore.exe\" is protecting 8192 bytes with PAGE_GUARD access rights","origin":"API Call","relevance":10,"id":"api-1","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"General","name":"Contacts domains","description":"\"ocsp.pki.goog\"\n \"connect.facebook.net\"\n \"fonts.googleapis.com\"\n \"fonts.gstatic.com\"\n \"platform.twitter.com\"\n \"s.w.org\"\n \"secure.gravatar.com\"\n \"sepa.host.dartmouth.edu\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"64.225.8.25:443\"\n \"172.217.4.234:443\"\n \"192.0.73.2:443\"\n \"216.58.192.131:80\"\n \"172.217.4.67:443\"\n \"157.240.18.19:443\"\n \"192.0.77.48:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\IsoScope_fbc_IESQMMUTEX_0_519\"\n \"Local\\InternetShortcutMutex\"\n \"IsoScope_fbc_IESQMMUTEX_0_331\"\n \"IsoScope_fbc_IESQMMUTEX_0_519\"\n \"IsoScope_fbc_IESQMMUTEX_0_303\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"IsoScope_fbc_ConnHashTable<4028>_HashTable_Mutex\"\n \"IsoScope_fbc_IE_EarlyTabStart_0xe0c_Mutex\"\n \"Local\\ZonesCacheCounterMutex\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"UpdatingNewTabPageData\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_4028\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_4028\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")\n Antivirus vendors marked dropped file \"1f642_1_.svg\" as clean (type is \"ASCII text with very long lines with no line terminators\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"iexplore.exe\" (UID: 00065844-00004028) was launched with new environment variables: \"PATH=\"%PROGRAMFILES%\\Internet Explorer;\"\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"iexplore.exe\" with commandline \"https://sepa.host.dartmouth.edu/forum/profile/full-watch-after-w ...\" (UID: 00065844-00004028)\n Spawned process \"iexplore.exe\" with commandline \"SCODEF:4028 CREDAT:275457 /prefetch:2\" (UID: 00065871-00001912)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"General","name":"Spawns new processes that are not known child processes","description":"Spawned process \"iexplore.exe\" with commandline \"https://sepa.host.dartmouth.edu/forum/profile/full-watch-after-w ...\" (UID: 00065844-00004028)\n Spawned process \"iexplore.exe\" with commandline \"SCODEF:4028 CREDAT:275457 /prefetch:2\" (UID: 00065871-00001912)","origin":"Monitored Target","relevance":3,"id":"target-103","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"Installation/Persistence","name":"Creates new processes","description":"\"iexplore.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe\", Handle: 876)","origin":"API Call","relevance":8,"id":"api-2","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$27","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$28","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found a reference to a known community page","description":"\"platform.twitter.com\" (Indicator: \"twitter\")","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4776 bytes 1 file\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"informative","category":"Unusual Characteristics","name":"Installs hooks/patches the running process","description":"$29","origin":"Hook Detection","mitre_attack_id":"T1179","relevance":10,"id":"hooks-8","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"suspicious","category":"Network Related","name":"Malicious artifacts seen in the context of a contacted host","description":"$2a","origin":"Network Traffic","relevance":10,"id":"network-21","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 64.225.8.25 on port 443 is sent without HTTP header\n TCP traffic to 172.217.4.234 on port 443 is sent without HTTP header\n TCP traffic to 192.0.73.2 on port 443 is sent without HTTP header\n TCP traffic to 216.58.192.131 on port 80 is sent without HTTP header\n TCP traffic to 172.217.4.67 on port 443 is sent without HTTP header\n TCP traffic to 157.240.18.19 on port 443 is sent without HTTP header\n TCP traffic to 192.0.77.48 on port 443 is sent without HTTP header","origin":"Network Traffic","mitre_attack_id":"T1043","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"level":"suspicious","category":"Spyware/Information Retrieval","name":"Found an instant messenger related domain","description":"$2b","origin":"File/Memory","relevance":10,"id":"string-61","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 8 domains and 8 hosts"}],"sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":32,"imported_dlls_count":132,"dropped_files_count":0,"extracted_files_count":50,"files_written_count":227,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":15,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":15,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":7,"dns_resolutions_count":8,"contacted_urls_count":3,"http_requests_count":3},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"5fd2bb2f3a6cf417c55ac2bd","environment_id":110,"environment_description":"Windows 7 32 bit (HWP Support)","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["CAN","IRL","USA"],"submit_name":"a63c1a44d27387fa5031766d0790121ac80212cb1774af7949f4502960037ba2.url","analysis_start_time":"2020-12-11T00:20:01+00:00","indicators_count":{"informative":14,"suspicious":3,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"64.225.8.25","port":443,"protocol":"TCP","country":"Canada","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"address":"172.217.4.234","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"address":"192.0.73.2","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"address":"216.58.192.131","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"address":"172.217.4.67","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"address":"157.240.18.19","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"address":"192.0.77.48","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]}],"dns_resolutions":[{"domain":"connect.facebook.net","address":"31.13.70.7","ttl":1318,"country":"Ireland","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Facebook, Inc.","registrar_name_servers":"A.NS.FACEBOOK.COM","registrar_creation_date":"2004-04-01T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"domain":"fonts.googleapis.com","address":"172.217.4.74","ttl":299,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_name_servers":"NS1.GOOGLE.COM","registrar_creation_date":"2005-01-25T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"domain":"fonts.gstatic.com","address":"172.217.8.163","ttl":109,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_name_servers":"NS1.GOOGLE.COM","registrar_creation_date":"2008-02-11T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"domain":"ocsp.pki.goog","address":"216.58.192.131","ttl":160,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"domain":"platform.twitter.com","address":"192.229.163.25","ttl":24,"country":"United States","registrar_name":"CSC CORPORATE DOMAINS, INC.","registrar_name_servers":"D01-01.NS.TWTRDNS.NET","registrar_creation_date":"2000-01-21T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"domain":"s.w.org","address":"192.0.77.48","ttl":63,"country":"United States","registrar_name":"GoDaddy.com, LLC","registrar_name_servers":"NS1.WORDPRESS.ORG","registrar_creation_date":"1993-12-01T05:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"domain":"secure.gravatar.com","address":"192.0.73.2","ttl":139,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Automattic, Inc.","registrar_name_servers":"NS1.AUTOMATTIC.COM","registrar_creation_date":"2004-07-15T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"domain":"sepa.host.dartmouth.edu","address":"64.225.8.25","ttl":21599,"country":"Canada","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]}],"http_requests":[{"host":"ocsp.pki.goog","host_ip":"216.58.192.131:80","url":"/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D","method":"GET","header":"GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"host":"ocsp.pki.goog","host_ip":"216.58.192.131:80","url":"/gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQDYLJWXOOilPwUAAAAAfozF","method":"GET","header":"GET /gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQDYLJWXOOilPwUAAAAAfozF HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"host":"ocsp.pki.goog","host_ip":"216.58.192.131:80","url":"/gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQDcESu58tA7KQMAAAAAutv8","method":"GET","header":"GET /gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQDcESu58tA7KQMAAAAAutv8 HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}],"processes":[{"pid":2348,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\a63c1a44d27387fa5031766d0790121ac80212cb1774af7949f4502960037ba2.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00065606-00002348","icon":"$2c"},{"pid":4028,"ppid":2348,"name":"iexplore.exe","command_line":"https://sepa.host.dartmouth.edu/forum/profile/full-watch-after-we-collided-2020-online-free/","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00065606-00002348","uid":"00065844-00004028"},{"pid":1912,"ppid":4028,"name":"iexplore.exe","command_line":"SCODEF:4028 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00065844-00004028","uid":"00065871-00001912"}],"all_imported_dlls":["linkinfo.dll","kernel32.dll","ole32.dll","winhttp.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","sqmapi.dll","imagehlp.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","user32.dll","secur32.dll","duser.dll","wship6.dll","apphelp.dll","rpcrt4.dll","RpcRtRemote.dll","msasn1.dll","ieui.dll","mswsock.dll","mscorwks.dll","msctf.dll","api-ms-win-core-synch-l1-2-0.dll","ieproxy.dll","comdlg32.dll","rsaenh.dll","wshqos.dll","ncrypt.dll","shell32.dll","winmm.dll","imm32.dll","cryptbase.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","clbcatq.dll","cryptsp.dll","msvcr90.dll","t2embed.dll","jp2ssv.dll","cryptnet.dll","netapi32.dll","d3d10warp.dll","propsys.dll","credssp.dll","oleaut32.dll","netutils.dll","ntshrui.dll","slc.dll","version.dll","normaliz.dll","shlwapi.dll","profapi.dll","bcrypt.dll","bcryptprimitives.dll","iertutil.dll","gpapi.dll","mscoreei.dll","msvcrt.dll","uxtheme.dll","dhcpcsvc.dll","DWrite.dll","api-ms-win-downlevel-user32-l1-1-0.dll","UIAnimation.dll","npmproxy.dll","wintrust.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","setupapi.dll","powrprof.dll","gdi32.dll","WindowsCodecs.dll","msimg32.dll","sxs.dll","msvcr100.dll","dwmapi.dll","ExplorerFrame.dll","dnsapi.dll","MSOHEV.DLL","urlmon.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","samcli.dll","wininet.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","api-ms-win-downlevel-version-l1-1-0.dll","comctl32.dll","d2d1.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","cscapi.dll","sechost.dll","SensApi.dll","Wpc.dll","wevtapi.dll","dhcpcsvc6.dll","rpcss.dll","nsi.dll","srvcli.dll","winnsi.dll","wkscli.dll","devobj.dll","sspicli.dll","ws2_32.dll","schannel.dll","xmllite.dll","d3d11.dll","userenv.dll","oleacc.dll","mlang.dll","cfgmgr32.dll","netprofm.dll","oleaccrc.dll","ssv.dll","lpk.dll","usp10.dll","Wldap32.dll","KernelBase.dll","mscoree.dll","jscript9.dll","msimtf.dll","crypt32.dll","ieframe.dll","FWPUCLNT.DLL","mshtml.dll","dxgi.dll","advapi32.dll","dui70.dll","ntmarta.dll","IPHLPAPI.DLL","WSHTCPIP.DLL","webio.dll","deploy.dll","URLREDIR.DLL","IEShims.dll","nlaapi.dll","rasadhlp.dll","samlib.dll","elshyph.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"1f642_1_.svg","sha256":"943c44a0f3dc1aba84f5fbe8465baadbb90af66cd7be9f37ca07a39260357ad2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"3RJWA8WG.txt","sha256":"2f6ab1ee420df2d0a990d9913243f0ab345c1574c8b10beb252bb8f48b9479d9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"8EXSFELQ.txt","sha256":"01da5520dc537210e341d082cc56d4d3e3704e360d63fa3800397b4d6552fa85","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"CRO5C7CF.txt","sha256":"17b1124e2a33cd71a34a93e4d17447dcf2bbe47b0a76b4b53217b9089b29ed75","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"K3YC1CIW.txt","sha256":"03faac0475310bbf220432144c15c39d32fe93506b06afc6fe4c698b745701ca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"GZTPD79AC381EFIK825B.temp","sha256":"faf464279376e1abb3731de85f6e87dda3be8cf2b0984eee9316ca9d69ee0104","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"en-US.3","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"imagestore.dat","sha256":"bde1deecee81a97bff8e32192898e4a5143bea865a9996ab9fa132dca9627f3f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"35DDEDF268117918D1D277A171D8DF7B_D121E73B2021A9A6BEEE335C1F76A2B2","sha256":"d9ba75d8a7b18680ea6fbfe921db3d89ed9e4eea26d88c03c4c6615feff018fc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"39327455015a52a23cbeea080535c88bbd78b8e77ceafa8ab5bdd35e9a3e2595","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442","sha256":"1b3ceedaebee3451e8e857e973be1b427cbcc40522e8b82e521578ba2e7e2f62","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_29022263B141B834888A4915008D196C","sha256":"f4e570a5f520ef7fd6768e56d537905d3d85d3c797501b78cd40f4aa57f38302","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_8712D49A882F47F256339120DED5786E","sha256":"84122d1be0c46581b4b81ac85c31bd2bffa11f0016fca48d7d070ba11b62f314","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"CFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B","sha256":"04b1dcf72b70a5330196432201660aff4e612b67c8b20fae5c7764c5359ec04c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB","sha256":"36777ae0570b3c83c6bc7e4ca9e6d4e18c0d41358f4ada79f2ad41e498af587d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D","sha256":"6c81ca724aa6c9745f687ccc88fbbd7a595d7734c8dcd88d66a066f4043cde03","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"5080DC7A65DB6A5960ECD874088F3328_862BA1770B2FEE013603D2FF9ABEAFDA","sha256":"13f0e349652d0a100fead4f9206037010e5f2cab6dfe3bb0175d837c745db4e7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sha256":"babe74945e0d587ae7611ae4a2309a428bcf1ca9ffa725ec1ff6e307cc4c4143","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_A30EA9B4E1BC5DBF09A8EF399E086D27","sha256":"d0bdf51599f8140191f54d9de28596dddfaaa6df5c33b18888b67abe02ec0378","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"90f5dd9dd44bfcf0e8238c47b3fd4e0ba3aca19e27eedb95fa19662820937716","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"B2FAF7692FD9FFBD64EDE317E42334BA_2DBE917624E9880FE0C7C5570D56E691","sha256":"ecee965fd12a864ba367b0301d8570c618c033db9fdab5edb0de4352f9cde2df","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E","sha256":"3762d5141f299aa6d5bb5197aa8459d1741a4602c875a14531b77ebc861c7bbb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"JavaDeployReg.log","sha256":"8a4b1a6400802a6275f5b9899c1a40d57dcbb082e7c641653473b867df0c65d9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"~DF29DD4B6A0C301B4B.TMP","sha256":"a9170feb06f8ed2c30254d8a2c2aed2f94259ad04147809da84ca445b7ec1399","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"~DF41F6A5DBE0DBDD24.TMP","sha256":"de9a6c6e64c920945d661b29ccda8e9f6ebac327988dd053d1729db4bee8c8d0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"~DF75DC5DD06F76FAEA.TMP","sha256":"351998307349a22899d36e1374870118df6c38c131e43aa2cddff8759686ed94","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"~DF85CE9D93E6056158.TMP","sha256":"0d4dbc96a22744b15fe84a5d2d653bc196dd0c2cd0449ac756c968cba227c176","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"~DFFA318EB7DB4ADC68.TMP","sha256":"95ca34ffa32cc57513f5ef1a267be324df1592f1d6aa65dc40c10fb9b59c7612","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"jquery-migrate.min_1_.js","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"fa-brands-400_1_.eot","sha256":"60fb2d28d2f1dbd2bc1a7a3b44701fec1cb7f630bee439d926c024c3212c1a9c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"Dartmouth_College_1558120765-150x150_1_.jpg","sha256":"193dad253e363f416ac9906585ecf279b82dcb4f7466b5d03d6eb988c3f614e5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"style.min_1_.css","sha256":"5c2288ca7b324881faae5e368eb4d69457e2784e042e868de335d3827bb90981","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"tribe-common.min_1_.js","sha256":"cf7a610c11489bfce177c3c71c5c7aec7101b1ba754d3d2aacc9636fc046c3b6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"National2Web-Regular_1_.woff","sha256":"c02ebc0efe127d2d70cc451cc8813858f6f77124e1929d1f213b75648a8fffb9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"widgets_1_.css","sha256":"1b81e141b5c06e711c279f7bed065e62a91992cdc894600a9c7708eaea2cff72","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"colors_1_.css","sha256":"9ec36559bf2e5e603dcbdc3cf4dc564df1cfcc797febcecc8d4fd002757355e1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"wp-emoji-release.min_1_.js","sha256":"3685c3818240f5f390073c7d04f944a5cb5d848093224f3a7888034e8c050eb4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"widget-events-list-full.min_1_.css","sha256":"5ef250fff65cff3b3988d883a39348f7742785543882703a95d21cdaa53ca023","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"ajax_1_.js","sha256":"76e17d66c094eb80a5de044f534002c39f331dbb7660c26759800e52c3920cc6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"skip-link-focus-fix_1_.js","sha256":"f6f1e5a2978bcca53250abca2230c1a062683220b04d8a2fa3ead2dafd6be253","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"global-header-embed_1_.js","sha256":"97d993dd6051d1d2d3c925edc0c3e1a340e607387da433c585c8ae5f84a97040","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"fa-solid-900_1_.eot","sha256":"5ef4c7be9577dde004048607cc872221de00db893f29baa809c378b01370a370","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"6d8a01dc7647bc218d003b58fe04049e24a9359900b7e0cebae76edf85b8b914","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"underscore.min_1_.js","sha256":"7b5fc275c98a58b1073a713920cefa54fab60ad9d85a67cf6907aaf8fbb3c474","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"mem6YaGs126MiZpBA-UFUK0Xdcs_1_.woff","sha256":"d9cb6d7a378582398161b5593d6e5a0e12093f1c996c68c596a3a37ddbe00d24","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"tiny-logo_SEPA_NIGMS_LOGO_FNL_OL-copy-e1568230583750_1_.jpg","sha256":"a5fcaf0bcad68f348b532e2e9340577159f6f11b6df4d645bb0b1eee142e169e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"common-full.min_1_.css","sha256":"f07fc3198103cd4678b3c25234c6dfd0b07bc57b895e202fc7ca0ad40eb166c9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"universal_header_1_.css","sha256":"e74b42c307ee2678672d30cec511d61e25803dd2487bfe83755af73d6edc3925","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"underscore-before_1_.js","sha256":"ae6de183ae9a339fddbc7ca40bbccc092582999e99089fbe7a5b31e0b075445a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]}],"files_written":[{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Low","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Low","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\Low","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Internet Explorer\\UserData\\Low","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Tracking Protection","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Feeds","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\TabRoaming","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\PlayReady","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE\\Low","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException\\Low","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache\\Low","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\en\\iexplore.exe.mui","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\en-US\\user32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%USERPROFILE%\\Favorites\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\B2FAF7692FD9FFBD64EDE317E42334BA_2DBE917624E9880FE0C7C5570D56E691","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\B2FAF7692FD9FFBD64EDE317E42334BA_F4789A74F171F87D2A6760DE9B9F7537","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\572BF21E454637C9F000BE1AF9B1E1A9","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\B2FAF7692FD9FFBD64EDE317E42334BA_2DBE917624E9880FE0C7C5570D56E691","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_862BA1770B2FEE013603D2FF9ABEAFDA","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_54F622E3E14833C841BD658EA54F7A65","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC42971B7939A9CA55C44CFC893D7C1D","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\full-watch-after-we-collided-2020-online-free[1].htm","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\common-skeleton.min[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\tooltip.min[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\fontawesome-all.min[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\style.min[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\fonts[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\universal_header[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\en-US\\rundll32.exe.mui","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\font-awesome.min[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\colors[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\widget-events-list-skeleton.min[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\phrases[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\jquery-migrate.min[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\breakpoints[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\underscore-before[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\underscore.min[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\manager[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\global-footer-embed[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\frontend[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\wpforo-info[1].png","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\tiny-logo_SEPA_NIGMS_LOGO_FNL_OL-copy-e1568230583750[1].jpg","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3RJWA8WG.txt","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\css[1].gif","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_29022263B141B834888A4915008D196C","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_29022263B141B834888A4915008D196C","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3S9Q96YC.txt","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\fa-regular-400[1].eot","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\fa-brands-400[1].eot","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{7AEC5C77-3B3E-11EB-A0A3-080027EFE57C}.dat","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CI1NEHIQ.txt","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\mem5YaGs126MiZpBA-UN7rgOXOhv[1].woff","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_A30EA9B4E1BC5DBF09A8EF399E086D27","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\35DDEDF268117918D1D277A171D8DF7B_565C1EC38DE55023DE9DF1FC54B3568E","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\BEC6224B02D155A396218A2504F3EE0B","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\739F2FF4259CDC6CBE7B90F1A95601EF","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_8FB29C35032AE1827A2754ED35D7F2E8","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\82CB34DD3343FE727DF8890D352E0D8F","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\icon-search-white[1].png","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\35DDEDF268117918D1D277A171D8DF7B_D121E73B2021A9A6BEEE335C1F76A2B2","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\35DDEDF268117918D1D277A171D8DF7B_D121E73B2021A9A6BEEE335C1F76A2B2","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[3].ico","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[1].png","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[5].png","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[6].png","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[7].png","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\imagestore\\3mt7jhv\\imagestore.dat","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{832E89B5-3B3E-11EB-A0A3-080027EFE57C}.dat","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%TEMP%\\~DFFA318EB7DB4ADC68.TMP","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NIFFDOLS.txt","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\suggestions[1].en-US","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.3","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.2","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_49FC544F04082FD9F64F9EFB226AF8B5","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8EXSFELQ.txt","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VG8BU31O.txt","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IYXGE11F.txt","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HGEILYKK.txt","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\K3YC1CIW.txt","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CRO5C7CF.txt","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\search[1].json","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active\\RecoveryStore.{88B090C0-D917-11E7-B67B-080027A49DD6}.dat","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%TEMP%\\~DF85CE9D93E6056158.TMP","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active\\{73AFC075-3B3F-11EB-A0A3-080027EFE57C}.dat","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%TEMP%\\~DF41F6A5DBE0DBDD24.TMP","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\en-US\\oleaccrc.dll.mui","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\CustomDestinations","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\CustomDestinations\\GZTPD79AC381EFIK825B.temp","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms~RF126a99.TMP","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\UrlBlockManager\\urlblocklist.bin","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache\\Low","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%TEMP%\\Low","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%TEMP%\\~DF29DD4B6A0C301B4B.TMP","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%PROGRAMFILES%\\MICROS~3\\Office14\\URLREDIR.DLL","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\plugin.jar","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\bin\\javaws.exe","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\ieframe.dll","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\stdole2.tlb","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{7AEC5C79-3B3E-11EB-A0A3-080027EFE57C}.dat","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%TEMP%\\~DF75DC5DD06F76FAEA.TMP","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01}","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\Macromed\\Flash\\Flash32_27_0_0_187.ocx","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_862BA1770B2FEE013603D2FF9ABEAFDA","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\B2FAF7692FD9FFBD64EDE317E42334BA_6F8900FF5837CB8DFA61275648785329","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CFE86DBBE02D859DC92F1E17E0574EE8_5FA8E5E800867BF860DF5E533E701BAF","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\85B3F147E3624A14E6A20DB4F6C2C5D9","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%TEMP%\\~kbwksju.tmp","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\widgets[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\style[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\style[2].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\universal_footer[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\style[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\common-full.min[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\widget-events-list-full.min[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\07CEF2F654E3ED6050FFC9B6EB844250_649D3C9717A1D0B02735FC14F09C533D","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\3538626A1FCCCA43C7E18F220BDD9B02","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\jquery.min[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\ajax[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\global-header-embed[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\suggest.min[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\functions[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\skip-link-focus-fix[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\wp-embed.min[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\tribe-common.min[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\viewport[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\query-string[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\underscore-after[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_481F8A39663A9CAB91F20F2006514951","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC4FEA46495CA161D470CD085EDBAADE","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\navigation[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\rundll32.exe","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\AppPatch\\AcLayers.dll","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\Dartmouth_College_1558120765-150x150[1].jpg","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\20181012_campus_eb_092-150x150[1].jpg","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\ae8776cfdb2b9d7bb506b00cec92e184[1].png","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"C:\\a63c1a44d27387fa5031766d0790121ac80212cb1774af7949f4502960037ba2.url","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Fonts\\simsun.ttc","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Fonts\\seguisym.ttf","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\css[1].css","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\wp-emoji-release.min[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\1F2HR9E2\\widgets[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\National2Web-Regular[1].woff","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HOI17G02.txt","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\National2Web-Medium[1].woff","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\SLD1THWF\\sdk[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_AAFDC9223C8D151DE1536A697A335D36","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Fonts\\georgia.ttf","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_A30EA9B4E1BC5DBF09A8EF399E086D27","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_E6173300210FD2F26D16696E2E1E9640","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\69C6F6EC64E114822DF688DC12CDD86C","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6DB145CFEEC544B1582FED1ADA3370DD","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\sprite[1].png","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Campus-in-Fall-wide[1].jpg","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\DartmouthRuzicka-Regular[1].woff","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\fa-solid-900[1].eot","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Fonts\\verdana.ttf","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\National2Web-Bold[1].woff","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_A7467B47637944C1E4B4025C763E391F","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\0270780F846F08BEFE0DD8112D932FEF","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_8712D49A882F47F256339120DED5786E","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_8712D49A882F47F256339120DED5786E","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\Globalization\\ELS\\HyphenationDictionaries\\MsHy7en.lex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\memnYaGs126MiZpBA-UFUKWiUNhlIqU[1].woff","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\mem8YaGs126MiZpBA-UFW50d[1].woff","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\mem6YaGs126MiZpBA-UFUK0Xdcs[1].woff","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\fontawesome-webfont[1].eot","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\widgets[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\logo[1].png","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\sdk[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[2].png","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[3].png","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[4].png","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\sdk[1].js","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"path":"%WINDIR%\\System32\\en-US\\jscript9.dll.mui","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]}],"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\ADMINACTIVE\\{00000000-0000-0000-0000-000000000000}\\{00000000-0000-0000-0000-000000000000}","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TABBEDBROWSING\\NEWTABPAGE\\MFV\\MFV","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\CERTIFICATES\\D1EB23A46D17D68FD92564C2F1F1601764D8E349\\D1EB23A46D17D68FD92564C2F1F1601764D8E349","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\LOWREGISTRY\\ADDTOFAVORITESINITIALSELECTION\\ADDTOFAVORITESINITIALSELECTION","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\LOWREGISTRY\\ADDTOFEEDSINITIALSELECTION\\ADDTOFEEDSINITIALSELECTION","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_fbc_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"IsoScope_fbc_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"IsoScope_fbc_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"IsoScope_fbc_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"IsoScope_fbc_ConnHashTable<4028>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"IsoScope_fbc_IE_EarlyTabStart_0xe0c_Mutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_4028","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_4028","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_fbc_IE_EarlyTabStart_0xe0c_Mutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_fbc_ConnHashTable<4028>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_fbc_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_fbc_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"IsoScope_fbc_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"5fd2bb2f3a6cf417c55ac2bd"}]}]}},"report_ids":{"sandbox_job_ids":["5fd2bb2f3a6cf417c55ac2bd"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample a63c1a44d273… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample a63c1a44d273…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/a63c1a44d27387fa5031766d0790121ac80212cb1774af7949f4502960037ba2"}],["$","meta","4",{"property":"og:title","content":"Sample a63c1a44d273… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample a63c1a44d273…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/a63c1a44d27387fa5031766d0790121ac80212cb1774af7949f4502960037ba2"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample a63c1a44d273… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample a63c1a44d273…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2d","11",{}]]