26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2a:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T40a,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample ae56b595e55f… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample ae56b595e55f…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/ae56b595e55fbce746918ad2682ffc35a1ff92601b37ab1d345e870403b33f55","keywords":["malware analysis","sandbox report","threat intelligence","ae56b595e55fbce746918ad2682ffc35a1ff92601b37ab1d345e870403b33f55"],"about":{"@type":"SoftwareApplication","name":"http://www.google.com/travel/trips/s/Ugw4poU852e3AaFgQWR4AaABLKgB26nABg","applicationCategory":["url"],"identifier":"ae56b595e55fbce746918ad2682ffc35a1ff92601b37ab1d345e870403b33f55"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":1},"behavioralIndicators":{"malicious":0,"suspicious":0},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Tb6e,"urlblockindex_1_.bin" has type "data"- [targetUID: N/A] "4UaGrENHsxJlGDuGo1OIlL3Owpg_1_.woff" has type "Web Open Font Format TrueType length 26180 version 1.1"- [targetUID: N/A] "CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA]- [targetUID: 00000000-00003080] "K42YE526.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\K42YE526.txt]- [targetUID: 00000000-00003080] "KFOlCnqEu92Fr1MmEU9fBBc-_1_.woff" has type "Web Open Font Format TrueType length 20012 version 1.1"- [targetUID: N/A] "unsupported_1_.htm" has type "HTML document UTF-8 Unicode text with very long lines"- [targetUID: N/A] "PLTNKOC1.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\PLTNKOC1.txt]- [targetUID: 00000000-00003080] "_7DAFD9F3-249F-11ED-A5DF-0800277CC541_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "travel_logo_32_1_.png" has type "PNG image data 32 x 32 8-bit/color RGBA non-interlaced"- [targetUID: N/A] "search_2_.json" has type "ASCII text with no line terminators"- [targetUID: N/A] "F2DDCD2B5F37625B82E81F4976CEE400_C41EDA93256487D15B8DBF29BEA794CD" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\F2DDCD2B5F37625B82E81F4976CEE400_C41EDA93256487D15B8DBF29BEA794CD]- [targetUID: 00000000-00003080] "KFOlCnqEu92Fr1MmWUlfBBc-_1_.woff" has type "Web Open Font Format TrueType length 20408 version 1.1"- [targetUID: N/A] "A4YGLJF4.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\A4YGLJF4.txt]- [targetUID: 00000000-00003048] "80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53]- [targetUID: 00000000-00003048] "~DFEDC68ECD9E93C2D6.TMP" has type "data"- Location: [%TEMP%\~DFEDC68ECD9E93C2D6.TMP]- [targetUID: 00000000-00003048] "css_2_.css" has type "ASCII text"- [targetUID: N/A] "search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776]- [targetUID: 00000000-00003080] "KFOlCnqEu92Fr1MmWUlfBBc-_1_.woff" has type "Web Open Font Format TrueType length 19888 version 1.1"- [targetUID: N/A] "265C0DEB29181DD1891051371C5F863A_C4045BC9180A7EB5617FD6C414A03F45" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\265C0DEB29181DD1891051371C5F863A_C4045BC9180A7EB5617FD6C414A03F45]- [targetUID: 00000000-00003080]28:T2878,"GET /images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://www.google.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.gstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_142.251.163.94] "q|h]}{EY}H|u2bo?46Q22j]c)6p{)6uC>-MnWZ#G4m;dKLy)^UP Q.hhl-JL5a4*|"- [Source: SSL_142.251.163.94] "n~9;|{wprYYg4XKnNHHLL:2yP$LHi|)$,`I:s:9R n*O!`"?iFDjT!"S/uHA@5 =kR>b*>V25d ]^}K<*y"no-:<2'vHQhSPRvk* 9JWJSU({X~_~Q z~[vqzV'+V~VrPHp~T@Srx*pjupfOdKiaCE*Wy?K39$4N94X6M|dZO@?DNhNAzR|q5m/gnZ?Lm%UpZ58pMJAh)A#=]s%==WZuyVEv0X-DZO#o.&Q`Prs^sh^o30-]X}=;t-nqb|y1m/+ LNJR]xJ&--C:s[x4s/.=Fft0e6uXUn >+?7W=8wgxz`}s[b%aC+5^A(9s j"KxnTH*%;g? JOV7cMf4&:I?A_2MoKgCJLwo~A1I4(1+]Sd5Ze$A&Yx7J)**7vK\ jMxX |#v'{z"`N=+?09={X`Z8Q:G_!D YN6PL:*.JO~OR]DWwhhF%3 B{wB> @`[[|4@L;"JkQb@}326o =bCxQ= 5`u5|YS/,A;SChaJOcBc,B"$e&Jv^m4otWsn"- [Source: SSL_142.251.163.94] , "XLS=>:@84)Rn!0En~a2}.d^-Uh !SOy%s/qL`+/u&;h8yLR1chjR@Kq1}1x5R~kgM;L~Sm%;Zpeh{=eS ]TKv<`2gYT9bz6M#W'`oeP_"H [ f_})V.\]^Lg<~mK5'(XooUm:mc6X+^\?eawPLqCv\pE@*'(X^/CXknKoX\F` :T7>Hzd&!%Ij1D1w+LLD8dp\|r5#T5TrP %i)^})j`*hVzDDgY2"P-r>@)PpJzG\0V TGedsvV`-QmJxw5t%+<|jn[3\Pg0Urg?adDE&p9 f5AYsl2(r lrGG(p0}{k|/]_S^N+6btS$e[-E]Ew1& T.NV_q6anT/y*mE1:Zw34SJZOWl-9BD9&U%a/f"~[l(7eVt"- [Source: SSL_142.251.163.94] , "(N$_ <(o*!5NGuG|`rBZQK?DNi&5u$FuNrrTpt5lW}Iv=Sk @T^qHF YTA?s1syhtZ0QxDr%.Gb`s'Q:YPG!7VtP::0># Fp%\FhA? $tws3,:`1D+_Rw E!^g5&{zM}2"If'u%C/+(ONQ#()$9)%X`? (WT!1Od:/E3!cfu!#,LeN RB[%F F%$5FZ4vrEf^>,;L)?UH-BRt !?\MF Pr#T3sO4%h B^rFAxj;\n7p5lz<6+`F (2d@47@qZuR ,jk1$0?9M[MCAU&V1Ag\P8+K{T}k -aKV)-AhCQdAZ c1ullm(j7wt S Jp@CEz.[zHh?f(SVEzu#N=iTu1"- [Source: SSL_142.251.163.94] , ": Mj_1keCL7mwFPdNjpp^LNKT53LJwwGZM>JM!S~'#1A2V_/Jt07$G pJU-(Y]fh[ ^ =^F\pyCr4!]6CF]6z?Y!h4&n460#F}>9JPYJyVA"296r?b'2TAg0C#I6:iL#/;-tv>eh^h.jT#^o{RjW&t-A!F?.W46wov0*5( zaiG__6](kP F:)UXB?~t}@_'+?G~+Z%'WO3sBp_\J-b1#yN< `16He:H2;f4glkh:'+Gbn Kg*hs(ZSs@:f1lgE\9Z>!jB<3lKQT6hbdOB8Gptyf>a>|~l-'69I{ff{E6A/Nn:6 qe%CRG,*}v7D}1aKCc8}E":Hvd$NW^:Y\{^,?4m4n!FfjVg'J@XI/qVb;[|+zWDx;nx[]Ll id[_n~]A+l_!gij:n=/4d2_k:nNQ;-Dn#'\/0c7 KF~8ow1scq+ wa/s}WDQySziO~J8)Y3@>p@Jn!G0sN91RW6 6'8$e]NT66}Q>{w_)sn"- [Source: SSL_142.251.163.94] "8ni_y6|U Ntv_Uk\Q-VER^OV)\] nwzugZO)1n]DcG'qe/cxk\r 0mP5yKQH/#n~3^eK=?;o~Q FrMvUAVJnB|"54xGk2/*HS'B65pOi0!v6]=l=mWP%F_AB'5v4Uywg@7sk%D9 _qo^W}R :E4lS: d[Ia_GK@ucipn1&cExfkk-s7-M}KUh@^//6Mc36^+;Gre:W&{-*RTxx1JK5GU2=Q`r$(@rIKHP8*^A-]ymUZ;Bt&7g')L tyC7He!nFv~+'6-rpaLyydH!s53E"%X]+N?Bv87Q1{c$)h,31z$s_UheTE3'[J (mioT*?zx=`B_4agtj;q8[2Z$-%:!#h9*TxY (G]5@FU T=u"- [Source: SSL_142.251.163.94] , "~%ZY7 _x'(-'`Sj&IKRY=m;*I(/vc2A| 0PW7|H$66VcAjMm[ZR}.zm|fDE&FF&,_;%5A#?lE^kO=^jK>YF"['\l[=6F#faevM3 KX"HSm=q7F _\VB4[UN4jW*\t.W+RpjX0.4A@%e=9u|Qzr"Nb8ibB(+.\pM VAvo\vku YrHZ{m%tSTn62OnEO!@qB`#Kio`IDZOH @e2gRV64vF4L' =>n qkQqvAB;O| ;W>}(A $*Wy 0)O^KTG>9+<%~XU 8qc`mCc%Grnx7#At_&c_b1CC|_23v>PJpw9mHn6M*Q>d{#D; D1r@}P[/EMNotQ>:JL W`[#Cn!G4{%MGB%jP0BBA( i@aC%pBQ6){w6A3SYgmGRQh]v\Eteu6DX^ hr#Wf|_)HM87nher@",M4V3l4}M .O|gVP%E7JhoFP6 ]57%\{,])`]OD]z~+<3l:LFx%MI<_@)56Hbj ]^LU;Y:go[ZOerIvb=w~9<>x||\jOz'STtKO:s,/41pcdyCeI;)r./;K$&ELdY#TBl =G ~a:O)1i)T+Vsw"%RKA*q@[F;ZR:pOxh-HM&g>XG:xPla1SBT*.]I@3?E"hDvi80 zzdTjCmo#0`o]*V-`8D$S%t7)SejntQ' Zj$zo?+t\%T r\=[9F{SvW$XBv+H?^UbF2$Bor0{*Df0,To]wI &4>)~Me@H'Zfn:U*L $~M_MXuvLtobV=gsS%$@:7OLgFHrwb]qc$]l6\;3zuv~b'Ow(3\qH;pReDE3Ob/&'LX+B9$!?;OJQBab2<',b,fR'~v@DRz+u!\i.EC(:=\juysJ=Z|v MB@Omx]ez[YPhz $z4H"[o@XN"$<`m^J E*^zga@\nO|4Ng'q\XXnXV9_tXY1ddeV-J?,7p\>i?m()QWuq.;[6%Mo:.[|Q/Fc)T{x\{T7Fln$p %rqkb17*m# FaJHeE4|U0v.gZf^H6^z~Q,Fjz9UWMWua`#{k||/wk`dD.QVp'Mk 'v4J(7,$\'~{y-eRw[Z7f\^|)EIn'N3B QSxdHlRt`p,_ ~.,uW>v x(6rORvx GOU93j?L >"tV~|8R$F9>igg}c%|yXH.a6rp(=3 lvtqozwi1;z9$;d;$+:SU}2_bie;NayXn1X8 qTq07mnuKWCBzuISj6;Y38o&fQX4!Ipe`V0O4ktzj2JsmfNV $R@ 4^Bgd{c|\ZI4-wu$6ON-h4$6I#B2 '%YjobHf:x9z=182$C kO^J_U_xHU`/(a`AE^Eb`i[A]4AsY/$Rpm<-b'{*6\laH+k/">M*1N4i$TJ qmM' mC(R7*U"Z?{u1\"\5k\}^p}+\zjkk7pp}\Akz\:Op6WL9\]v[N~^!\u \p6e[g!<=kM/EJNiEFg#~4N ?gY%&x`FRY^FhOK:l[031n^zsf6NN^6Ta?v .0m4P%49A2 W>Xlj, 6 /rWV";Ze.pBC'r(_UB>)XVMFq;Z7j(ab0bX@NbPdt(:O:d+&R6Xl|DLP( /gOT9JgBH)n0EhU* z/Gutw{+'2O%ZZ8\BzWp: Gfc9\Wi8h,ilt# YWS5`TSs2nen8'U7X<\ $YH$`#Gybbs$VaSFQ9+! 6T^}'Bf!K9%-t Rynj*Ha;N)>?uc*a|V%LVDj37PC5 Dwx\0>VvQ05:wW(Oo'm'S`vk3x! 4+UQM: e?GV=f;}4^z h/0JoF^\kXuRsd+W92a4G 'RMn< ^"- [Source: SSL_142.251.163.94] , "X|`! kh'HwqboG2X8"f\DD`C9ggB(?66HJ`1GWxpRD7BlE*V$FLx+6"W(~4N\0Y%"HITnQL;[t@m&&CyHLsXrdb0iw&BRzkL|9Pp)R2m v]x$Q e%.RyWU+,a*]NNXw@E]x_=-Ib~ql/;8D,pAK{(&nJj!?9:nfsal&fp7SEMjf;+OW7*n(qSr]#2'IN@iP$A f-Pm6Fio0h{= @&[ecu=^9}hV(U "6jJ{e`1/=L:'*Ko'W)@HOi6Ht]H~xX~U_/5Ej}f&_OS31&vp2p5tftfnzcD!$[E_>~99Hh2N)b;ur2+^,nW9G<8U4\2 7oA4!y>P#VJR))5.~s(^}**o9v,:29?aPzqgplu!/EN2av~&Pa4P6[lI$2F=rD,{t-p0_d!5y.tEgy#`Hc;BAbvB;c\]>~6**QiZ(I+d/E}C-+b$P+8,skVArTe/%GTr%3'0_\3@`ItKU%:Ka("- [Source: SSL_142.251.163.94] "aa{@ `q8w6W'^^6`C9>@t( 'g"R'n"EdJD"Zdq0.w,'s"NSJOsMKKXb ,V dYO`CLr,t%RZb(>"5vCDB)Au vk]t>*AG+a%o9.pE3XJ7=(l^"{%d=#s'a7Dbhd=R*Jc6?\Tmsd@\:oN`XT 3MI:ypppKEutOpo2(L*_;(~~5`:06p8.}9,KE- ,.r^+@2)g=M^_o@#$TYtMI8sC{H2:i(1)"3 k4e!n6V nm0my'/xx-i`# q 8 =@nBAs`uoB|w$lW_J(N_Cg/9@\\2b-A$~:>pS(mikH7"C NYA:5uhmpi_HXGiRN^eHbSOIhA^:D% m"6(g_$K_%Jf,YzlieB2&G35^mR;T[$d*o~]*..{= HjF6oR/i1`>zwF@=[W<^,dW9r% d>;`9&,Usi#k[toZ+*czcQd7G@>4"(,no+48~Fr`^tvAYw $q#E&9AN6P$Wu6A{B=uQKU$$S/vG=g:PwaWBb,$IF?pN~oE86-);K\X>G'aWaSZZurJE~#(!_VVjOhKwtLR>1(^-*o7} TNvif26pDUl*(MZ5OVWQC&:*)2gR=\fDCg{@J3R-2:EW2fxiT{F{cV(a:^,Q@Rx%iOzj2?ptXfv]kbV QT%+f?e5`1+$_q4nHmtr!_If:IL!L~UUR)er&g+{@MfI4b7*}>}_{z*GTk'[Ps$A~u%y9:+f_n>/6A mjBPNzsNul.w@4V7 yVo-`\u~ol<%xhyG$C}rpW>~;T=WwjOh,d`X_J@SNTr'M?6Z)RRJU]4;ycDDo0nX&;WpPMQ?_)*GCx`S"Y{\w5 zX-RUSY[tg>7.c7=i|m z%V&n[6p+?|9P4Imt^oorAI(6@*?wWMnGx@QYW;g_wh~t i=)? QB<"Cu NmkPWP_rd1wmpSH}s5wJ@?p@cv%A*7VOum\6oi2-]6mOw60e#hC&*Ag;Z;D m>l3glwI]a6O_,`F!"P;6Kjb[C8}2hc $6(3Ie=]F-*J!?.9%"- [Source: SSL_142.251.163.94] , "er`f&u +,t@v?wMZZiWw1r@/'SlbM''3qPJneOx_Jf88WrT;cE2xy`B:(5lB90FMU+@1|I2U4 =y|U+U]q5H]xGV@:>ovE4Dgr1+3`4'/76$i\D<>>8w%a8 ;@B,)zi(yh^]>YKPCf*|cL- -/hLP{B^^++n*S66Zu'|\T]{'Uh6*=]Le~%8Hc!M7pSPh;$i<+xS \B>"W-=U(9nPR@Q2CsaE\slzVQ)(M$!$uyua%V6jU*a*fg=)h?"- [Source: SSL_142.251.163.94]29:T564,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:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"ae56b595e55fbce746918ad2682ffc35a1ff92601b37ab1d345e870403b33f55","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1790519854301,"unified_at":"2026-09-27T14:37:34.301Z","metadata":{"hashes":{"sha256":"ae56b595e55fbce746918ad2682ffc35a1ff92601b37ab1d345e870403b33f55","sha1":"a21f2f38e5ad62b43ab36bf09363bf175b10c54e","md5":"74a90675750a15f34255a0986c2664b4","sha512":"1a230a1b48b006d12a726b703d1eb7d50e7a90f6d88ab117ab5e0972d568b75aed50605900913ef165cbc115b57a282d864f2de2ed28a5f74209bd000a6fa540","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"http://www.google.com/travel/trips/s/Ugw4poU852e3AaFgQWR4AaABLKgB26nABg","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1661457356000,"last_seen":1665020572000,"last_multi_scan":1665020572000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":1},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":1},"sandbox_signatures":{"informative_count":8,"suspicious_count":0,"malicious_count":0,"total":8},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Found decrypted SSL traffic"}],"sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts domains","description":"\"ocsp.pki.goog\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"142.251.111.94:80\"\n \"142.251.163.94:443\"\n \"142.250.31.95:443\"\n \"172.217.0.35:443\"\n \"142.251.16.101:443\"\n \"172.253.63.94:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be8_IESQMMUTEX_0_519\"\n \"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData\"\n \"Local\\InternetShortcutMutex\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"IsoScope_be8_IESQMMUTEX_0_519\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"IsoScope_be8_IE_EarlyTabStart_0xfd4_Mutex\"\n \"IsoScope_be8_IESQMMUTEX_0_303\"\n \"IsoScope_be8_IESQMMUTEX_0_331\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"IsoScope_be8_ConnHashTable<3048>_HashTable_Mutex\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3048\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"Local\\ZonesCacheCounterMutex\"\n \"UpdatingNewTabPageData\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$27","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"level":"informative","category":"Network Related","name":"Found decrypted SSL traffic","description":"$28","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"http://www.google.com/travel/trips/s/Ugw4poU852e3AaFgQWR4AaABLKgB26nABg\"- [Source: Input]\n Pattern match: \"http://www.google.com\"- [Source: Input]\n Pattern match: \"https://www.google.com/\"- [Source: SSL_142.251.163.94]","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4817 bytes 1 file\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 1 domain and 1 host"}],"sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":35,"imported_dlls_count":125,"dropped_files_count":0,"extracted_files_count":46,"files_written_count":44,"files_deleted_count":0,"registry_keys_created_count":4,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":4,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":6,"dns_resolutions_count":1,"contacted_urls_count":6,"http_requests_count":6},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"6307d3c82eef6936d471c3e2","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"ae56b595e55fbce746918ad2682ffc35a1ff92601b37ab1d345e870403b33f55.url","analysis_start_time":"2022-08-25T19:55:52+00:00","indicators_count":{"informative":8,"suspicious":0,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"142.251.111.94","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"address":"142.251.163.94","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"address":"142.250.31.95","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"address":"172.217.0.35","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"address":"142.251.16.101","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"address":"172.253.63.94","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]}],"dns_resolutions":[{"domain":"ocsp.pki.goog","address":"142.251.111.94","ttl":96,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]}],"http_requests":[{"host":"ocsp.pki.goog","host_ip":"142.251.111.94:80","url":"/gsr1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS3V7W2nAf4FiMTjpDJKg6%2BMgGqMQQUYHtmGkUNl8qJUC99BM00qP%2F8%2FUsCEHe9DWzbNvka6iEPxPBY0w0%3D","method":"GET","header":"GET /gsr1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS3V7W2nAf4FiMTjpDJKg6%2BMgGqMQQUYHtmGkUNl8qJUC99BM00qP%2F8%2FUsCEHe9DWzbNvka6iEPxPBY0w0%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"host":"ocsp.pki.goog","host_ip":"142.251.111.94:80","url":"/gtsr1/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBQwkcLWD4LqGJ7bE7B1XZsEbmfwUAQU5K8rJnEaK0gnhS9SZizv8IkTcT4CDQIDvFNZazTHGPUBUGY%3D","method":"GET","header":"GET /gtsr1/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBQwkcLWD4LqGJ7bE7B1XZsEbmfwUAQU5K8rJnEaK0gnhS9SZizv8IkTcT4CDQIDvFNZazTHGPUBUGY%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"host":"ocsp.pki.goog","host_ip":"142.251.111.94:80","url":"/gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQCRHm86eDu9KRJ57xiTEtM3","method":"GET","header":"GET /gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQCRHm86eDu9KRJ57xiTEtM3 HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"host":"ocsp.pki.goog","host_ip":"142.251.111.94:80","url":"/gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEFKcfavRn0HBEvz%2F2Lm7E5k%3D","method":"GET","header":"GET /gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEFKcfavRn0HBEvz%2F2Lm7E5k%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"host":"ocsp.pki.goog","host_ip":"142.251.111.94:80","url":"/gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQC5lAfDeRFyEgrJ2zX2DMGz","method":"GET","header":"GET /gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQC5lAfDeRFyEgrJ2zX2DMGz HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"host":"ocsp.pki.goog","host_ip":"142.251.111.94:80","url":"/gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEFE2A8AcANl5CokbnV68cdg%3D","method":"GET","header":"GET /gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEFE2A8AcANl5CokbnV68cdg%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}],"processes":[{"pid":3256,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\ae56b595e55fbce746918ad2682ffc35a1ff92601b37ab1d345e870403b33f55.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00003256","icon":"$29"},{"pid":3048,"ppid":3256,"name":"iexplore.exe","command_line":"http://www.google.com/travel/trips/s/Ugw4poU852e3AaFgQWR4AaABLKgB26nABg","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003256","uid":"00000000-00003048"},{"pid":3080,"ppid":3048,"name":"iexplore.exe","command_line":"SCODEF:3048 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003048","uid":"00000000-00003080"}],"all_imported_dlls":["lpk.dll","profapi.dll","srvcli.dll","DWrite.dll","KernelBase.dll","sechost.dll","version.dll","ole32.dll","msvcr100.dll","setupapi.dll","ieframe.dll","duser.dll","dui70.dll","credssp.dll","mscorwks.dll","api-ms-win-downlevel-user32-l1-1-0.dll","wintrust.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","oleacc.dll","user32.dll","rsaenh.dll","wship6.dll","powrprof.dll","imagehlp.dll","npmproxy.dll","rpcss.dll","uxtheme.dll","msvcr90.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","userenv.dll","winnsi.dll","WindowsCodecs.dll","d2d1.dll","imm32.dll","msvcrt.dll","advapi32.dll","comctl32.dll","netapi32.dll","mlang.dll","shlwapi.dll","dwmapi.dll","msasn1.dll","oleaccrc.dll","sxs.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","api-ms-win-core-synch-l1-2-0.dll","wkscli.dll","crypt32.dll","winmm.dll","sspicli.dll","wininet.dll","schannel.dll","oleaut32.dll","nlaapi.dll","gpapi.dll","SensApi.dll","bcryptprimitives.dll","jscript9.dll","kernel32.dll","nsi.dll","urlmon.dll","mswsock.dll","rasadhlp.dll","msimg32.dll","ssv.dll","RpcRtRemote.dll","ws2_32.dll","cryptnet.dll","secur32.dll","d3d10warp.dll","Wldap32.dll","ncrypt.dll","dnsapi.dll","winhttp.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","iertutil.dll","ExplorerFrame.dll","msimtf.dll","xmllite.dll","MSOHEV.DLL","msctf.dll","sqmapi.dll","clbcatq.dll","devobj.dll","apphelp.dll","ieui.dll","dhcpcsvc.dll","gdi32.dll","ieproxy.dll","propsys.dll","mscoreei.dll","api-ms-win-core-timezone-l1-1-0.dll","jp2ssv.dll","netprofm.dll","dhcpcsvc6.dll","wshqos.dll","UIAnimation.dll","cryptbase.dll","ntmarta.dll","URLREDIR.DLL","d3d11.dll","normaliz.dll","fltLib.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","bcrypt.dll","webio.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","WSHTCPIP.DLL","IPHLPAPI.DLL","deploy.dll","tzres.dll","IEShims.dll","comdlg32.dll","FWPUCLNT.DLL","rpcrt4.dll","api-ms-win-downlevel-version-l1-1-0.dll","netutils.dll","mshtml.dll","usp10.dll","cfgmgr32.dll","dxgi.dll","cryptsp.dll","shell32.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","mscoree.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"favicon_3_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"favicon_2_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"A4YGLJF4.txt","sha256":"b49256220d2d8f4c3d68f1a42c70244d9063e8907a9433c250f75ced4b230554","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"B7TVN4MY.txt","sha256":"44a2180152e1709aa0ed5d0d0b4f601bab42776cf5fc0d7b3e09dac2e86f8e52","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"DPPGLKYJ.txt","sha256":"4d0249753cb02c7eed6cea60dd9af3b58eb86dc0f250396771ec245d8b330a66","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"H1LEOWKP.txt","sha256":"5883314c006b4527d437e50d34596af0388db35ad3d8f08006d152462105bffe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"K40JHQHJ.txt","sha256":"b104a1c6f8d5987d784873ef53243dbf1002e174f5c9ed4a9d1dd6dbe2dabc48","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"K42YE526.txt","sha256":"7240056ec6183688c12f430d143163623306cee2ec617aaa68620577570c2dfa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"KDC1TJVJ.txt","sha256":"d410a863d53d50e158e1787247c532c2e7776828bec80ade127507b8a368e4e1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"PLTNKOC1.txt","sha256":"d54ebd4e1c8ffa5e577abafb202e67d9e4f2124d92df065bfb7e220a76504fe6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"T3WUVZFO.txt","sha256":"b98c93b7ecae1ba508ac67ff4f098caff944f4e14309abebc2087f39c5d4d3ea","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"VJV6H9C4.txt","sha256":"2a0740bb8f54a3094aaf0f4e42c48fe625b1c5476a6b7e8770383de1642c08d2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"imagestore.dat","sha256":"735cda308938ded2e0629629f3863fb818ec3b5d7f42dc1e0ae5c5654381410c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"e2901792f85f69a55b4ce8fc3c7bbc5d56271f73cb8c83ff3495e00d59e7e3f5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sha256":"27906b4d7632156f296a69494c728af435cf42d75020412497829d61e6fd0fe4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA","sha256":"fc221aad4e282fcf43ce797b274f3fabd721676d1c316b8deec000b508912f89","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"265C0DEB29181DD1891051371C5F863A_C4045BC9180A7EB5617FD6C414A03F45","sha256":"4ed31a8b6e0fcc07b893f0cbdd95bd9062bcf30f699575e85638140eaa9b47bf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"24a86fe7ff3dbc26b8de370edb746b1a4ad5911a586f89326cc53b3f7dcae5a3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"979e7090177fde7395b25ca9c3b480f71ab9425de7930fe569e499ef948f8ae2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA","sha256":"91291a5edc4e10a225d3c23265d236ecc74473d9893be5bd07e202d95b3fb172","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"E87CE99F124623F95572A696C80EFCAF_D4D4A313701C8AC658E698A47EC081A5","sha256":"f0c96f616f0c7c30247d5189b57ab2843b238b1101f47f8396e9f8b3cc0a7132","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"F2DDCD2B5F37625B82E81F4976CEE400_C41EDA93256487D15B8DBF29BEA794CD","sha256":"35a15c522044836a7b6f242cbe426c5e3f9d91d3fcf4127d74c22283ae28ff9a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"F2DDCD2B5F37625B82E81F4976CEE400_EA5E90ED0075911E4948631828E71FE0","sha256":"907edaa69892069a5abc4930ac358d7910fe86f0a653ada2aa7acc8236630535","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"~DF49F329B4884DD7AB.TMP","sha256":"e264df0883c4bc5f410beed6436d178eb698f8eb41c0a2e2b0626141451395eb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"~DFDEE94782122236BB.TMP","sha256":"2e653bc30e885b6a138af2e6ded39170e56c3c99fd01d9e7ee8cb62a7dc840fc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"~DFECB4DD5DED05625D.TMP","sha256":"6785a86738850e47a302aec0059542216c7d30920ecee2d90b8cc10effade603","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"~DFEDC68ECD9E93C2D6.TMP","sha256":"06f93c8b0be0f6bc410da151df9da6c59843d01d03a943402e44281541e562f7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"4UaGrENHsxJlGDuGo1OIlL3Owpg_1_.woff","sha256":"1f75065dfb36706ba3dc0019397fca1a3a435c9a0437db038daaadd3459335d7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"KFOlCnqEu92Fr1MmEU9fBBc-_1_.woff","sha256":"3bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"unsupported_1_.htm","sha256":"370eac1c577acda4487fb07de700b019c66f9b48ff6980f478633bfd213bde1e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"_7DAFD9F3-249F-11ED-A5DF-0800277CC541_.dat","sha256":"e973f602fa62db8f4cfca954c24abd06f29a63fd58796fcd5463264fd30226bf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"travel_logo_32_1_.png","sha256":"f5ea98480959de03877595db12d620936eb21cda08ee830840f2605fe3146477","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"search_2_.json","sha256":"19170bd75edc0b5183a2f9fcc3001d9d222deff61e5915ad1127b65ab581a2a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"KFOlCnqEu92Fr1MmWUlfBBc-_1_.woff","sha256":"468e579fe1210fa55525b1c470ed2d1958404512a2dd4fb972cac5ce0ff00b1f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"css_2_.css","sha256":"e099396211b95c522e01012bb18e823f990d3615c46aaac4a57f7baf5408942d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"cb_gapi_1_.js","sha256":"ca7f9c5900e62d8ded9ad872ac304175e7fc57bb3998fc4a6b6ced590667c6de","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"4UabrENHsxJlGDuGo1OIlLU94YtzCwA_1_.woff","sha256":"f8f2046a2847f22383616cf8a53620e6cecdd29cf2b6044a72688c11370b2ff8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"6188f0181b63bb395ef9e680d0d81baf03e21fd16fe2b365cb59cdf905136af3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"select_your_country_510x350_1_.png","sha256":"f0daccd9617c5d89d5da3082f53d41b2fd390006f5b584549b2a6b626410adc8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"RecoveryStore._7DAFD9F1-249F-11ED-A5DF-0800277CC541_.dat","sha256":"08d88cb19b0f554bbcc1b07912a94cedcdf295693c8565f0aabeac2ed5da4720","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"KFOlCnqEu92Fr1MmSU5fBBc-_1_.woff","sha256":"3ab30e780c8b0bcc4998b838a5b30c3bfe28edead312906dc3c12271fae0699a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"KFOmCnqEu92Fr1Mu4mxM_2_.woff","sha256":"f2abf7fbabe298e5823d257e48f5dc2138c6d5e0c210066f76b0067e8eda194f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"_88C2A5F2-249F-11ED-A5DF-0800277CC541_.dat","sha256":"07dcb65952972dbc444b2d8bd33d7e5084664016bfd81a94bf7ac06ed218e083","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]}],"files_written":[{"path":"%TEMP%\\~DFDEE94782122236BB.TMP","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{7DAFD9F3-249F-11ED-A5DF-0800277CC541}.dat","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\K42YE526.txt","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\unsupported[1].htm","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\F2DDCD2B5F37625B82E81F4976CEE400_EA5E90ED0075911E4948631828E71FE0","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\F2DDCD2B5F37625B82E81F4976CEE400_C41EDA93256487D15B8DBF29BEA794CD","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\css[1].css","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\css[2].css","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\4UabrENHsxJlGDuGo1OIlLU94YtzCwA[1].woff","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\E87CE99F124623F95572A696C80EFCAF_D4D4A313701C8AC658E698A47EC081A5","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{7DAFD9F1-249F-11ED-A5DF-0800277CC541}.dat","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DPPGLKYJ.txt","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\K40JHQHJ.txt","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%TEMP%\\~DF49F329B4884DD7AB.TMP","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\265C0DEB29181DD1891051371C5F863A_C4045BC9180A7EB5617FD6C414A03F45","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\265C0DEB29181DD1891051371C5F863A_C4045BC9180A7EB5617FD6C414A03F45","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VJV6H9C4.txt","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\H1LEOWKP.txt","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\search[1].json","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\search[2].json","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\\\","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\DOWNLOADMANAGER\\","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be8_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"IsoScope_be8_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"IsoScope_be8_IE_EarlyTabStart_0xfd4_Mutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"IsoScope_be8_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"IsoScope_be8_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"IsoScope_be8_ConnHashTable<3048>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3048","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3048","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be8_IE_EarlyTabStart_0xfd4_Mutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be8_ConnHashTable<3048>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be8_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be8_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be8_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]},{"name":"IsoScope_be8_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6307d3c82eef6936d471c3e2"}]}]}},"report_ids":{"sandbox_job_ids":["6307d3c82eef6936d471c3e2"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample ae56b595e55f… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample ae56b595e55f…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/ae56b595e55fbce746918ad2682ffc35a1ff92601b37ab1d345e870403b33f55"}],["$","meta","4",{"property":"og:title","content":"Sample ae56b595e55f… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample ae56b595e55f…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/ae56b595e55fbce746918ad2682ffc35a1ff92601b37ab1d345e870403b33f55"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample ae56b595e55f… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample ae56b595e55f…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2a","11",{}]]