25:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 29:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 26:Td1a,"~DF12784AD0C8462832.TMP" has type "data"- Location: [%TEMP%\~DF12784AD0C8462832.TMP]- [targetUID: 00000000-00003900] "80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53]- [targetUID: 00000000-00003900] "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776]- [targetUID: 00000000-00003180] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 4817 bytes 1 file"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00003180] "B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04]- [targetUID: 00000000-00003180] "0IMK21NZ.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\0IMK21NZ.txt]- [targetUID: 00000000-00003900] "GACSNX0F.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\GACSNX0F.txt]- [targetUID: 00000000-00003180] "~DFA41EE467C1AB230C.TMP" has type "data"- Location: [%TEMP%\~DFA41EE467C1AB230C.TMP]- [targetUID: 00000000-00003900] "FKF14JH5.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\FKF14JH5.txt]- [targetUID: 00000000-00003900] "~DF8BE9189D83A355EC.TMP" has type "data"- Location: [%TEMP%\~DF8BE9189D83A355EC.TMP]- [targetUID: 00000000-00003900] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00003900] "en-US.4" has type "Unknown"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\DomainSuggestions\en-US.4]- [targetUID: 00000000-00003900] "B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04]- [targetUID: 00000000-00003180] "imagestore.dat" has type "Unknown"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\imagestore\3mt7jhv\imagestore.dat]- [targetUID: 00000000-00003180] "WQ9ZSBG3.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\WQ9ZSBG3.txt]- [targetUID: 00000000-00003180] "~DF4342B829580B8801.TMP" has type "Unknown"- Location: [%TEMP%\~DF4342B829580B8801.TMP]- [targetUID: 00000000-00003900] "AVCIBJ0X.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\AVCIBJ0X.txt]- [targetUID: 00000000-00003180] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00003180] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00003900]27:T25fa,"GET /r/nflstreamshdq/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.reddit.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "1ffa"- [Source: SSL_151.101.1.140] "ks60=;)?26M:OqfvRdRqVS[*v7ZbD5;$[rKK7ps?}?vOgN/9y-68m^;oo.~oW?~|TwU}7i;8OM^_F|}3K EptOcK4wE?VM]oOq9,//b]3<<9gFgzm#t~yq^E[&D%ms> O|>8%YCOlA^-|M/-nP;~plwn{/mUTm{mnKP]Zb]q/|/n=zQE[Ueb4/js?'|>oKg_sv8bl/x7g]m]8!/p(Qpsxn_8W'D,65:]57e7oSFjK[minQ\=ny._1hni0Fjk/[B'<^Dmx-?6WKW~ p 7jV_?4bKos<-CEY~iW@:P;g:R$3'*V>10 { w!q*_CyY\ybOI9tuuu!{D@5IS;dK=2{+<__.)Jk|Owq16$\1t~ok1c2U=.bt?R} B<`;Te7?\XVMZuhS9Y{jA/DOP[,"tC^Q!_;>7!UA(v^Fz/-a^9pmoeUO.pJHn0(lV`2U{.J\@zehW"- [Source: SSL_151.101.1.140] , "d;lr-o3m"?TmLCxt<>D1{YUpyWjsu_~-?!2+UP%X[+sOO=S"h,) g4#~?t7(\S:.13Fwww~y@|H)m >5b{qY82(Mhhv99>ve1 'xLnV?gFbzie~1J^uz J7wL0_gaMQ=xp#oL&Ze%Q;~Mu-KipdO d-/GU\Df=|AsL%*0R/=v{h8 j_c6-Sj7#2eB7wbxw.Er l3|cK*o"RW.CkRsNS6Q?{%!bdYmYMChTy9K7eaLF60%gi-\8=[eJW*sd!.PjOm;2K9>i[e][ITnvln>ndN=mVe6MYZl3ex dqp\]UT`n!ku#1rrlJFL3wXZG5>^3+&["- [Source: SSL_151.101.1.140] , "Fzt=e;xDUXCgl'{ n0VqVO\15ZX_XtdN/J;))AHd;u-95fmim'5a,6n6E>C9n3,WSt_ :sc8ece~W%UN8dn^^rD?Wl ]96.)D&I+k*+/,}Fi8Gyf{)!e*mVah$~a)N?K!OLssraHQQ`]e#HQ?}F?Oy>7!J,!_7Vs&cQr)b_zE1D47YgC2ECdtl`pIPiLdOK,z.%Cgt}gu}%=WS+t[c>#PA6M"Sd8>k@D$>6_\::60XUo3v]&Bm0UwajCdz##ingOp_rBP`4Ui{(bQ+$'toF@xbb$vzj8Qgn?R!])S_ N/|[ow6:.TB(s94aMC94aMCChBYxG't/VZ$/mk+Te]l-(O]C2./sEaOQzDy84ab.J\PS7sd"- [Source: SSL_151.101.1.140] , "E)Js`Adc(_3z@DmW>1}Drd"6]7IL]KrA%5HjH <~RVpVI*SeipX,]oORFvCHKnmc"opfififif 0AqHHM(F%T,d@8K/>V@6QLWinJH.I8%kES;ci)_1 < P.+..8q[f K=(v3#p_&UEZD6 r^h;9x_=?t}N?n>!]ET-GtS!CA.1!agmkMHu0e_^O>~%*cd\=%1J~pDa1##t;n#cfH0ynQ"_ +CUbIr2sQC,&w0=zqSmrn{V6\,d` Ntc} 7Qf{3=|<,Hcg)E qv`]1s#O8}T>%s6qa4H>b 8'kpHt:7{S5%ZN)tmi_J9GClXDc`tuDz7wP@5hL'yl!@9f}oz;-9Q%vaNc4?]8oAJ=?M:3e| xzD`SeHpTLsb^^4CO(2t[$o(@hqnvko?!.B!_qK9id? ][m8OEp iu]Bk;j8xulM1)f63bfSn*4`rNd-o FpJHMD#Hr+lECG1z>[\:d$.3xm0Hrbj'V{}b:+FV_1NXZCqBA4%8uOiTT XWe_I"- [Source: SSL_151.101.1.140] , " #0,6TjbQ["," "," NDRs2um[GP.]'1E9999pzX9=2kbQ7^vw[Q}3E|y%````~&Ymq8wO=ZX9/_w:XV7+d Lz,b?vt7f9$e!3?Qr'Sn-Imd(Qq''@ G5nX_nPB':0HK$h,"jK\ok D(F)s^SntmEx}rqx$>S#$ -Yk|EHPm+~.4YsUcn "hGI[a&0K1Z2M2b]i##[n'fYY)E+KR_m."- [Source: SSL_151.101.1.140] "gU;GwWy<@9/YM{X8C$~_4cux`~5R ` >!'d9z7audI==]I3:doaeKjqsWV'\ @H0Qzjk]-'5oL-- YX7,+#0 )0|*^"' fdN0-1'3sSm=c XLEXJzJ|' K^\v25_}_v{"rRo{wrHcg1U%%P|]0/#"L7$I[gRb' .m9]$UT 0JaGxEGT01c8pC&Oz{k}S/L>8>N- BvbBW|mJ2$2u\]M5L LSZZGh{@[JE5 Mc"_2gtY,:SIn6 X0U2 6M"tEvV1?k@D$>6::603VmvDwHnTn i>}}7b(kq7>`wwgwZ5j !^|7jAk:H"_L* lu>[H==u]XY'(dD@V_~Z]}V9DyQC9DyQC?W(iQV$^Pqy))}amU(h_^1p~;7|9%o`VXa'*(\^ ]I1}_AUy"- [Source: SSL_151.101.1.140] , "2006"- [Source: SSL_151.101.1.140] , "exLEOqd;ljFK%MYE}~TW[OU1l5EXH5uQD:3nmqC^q}DDKB~\DFAjZ}iSh/I^<70n R1N-$.L~>h#|-A`v|;X^;L"U&.(">] H9D?7,TDc\l S:hTALtjIY&i!wAhU}=s6%LVd"m^N"PKa2hr4iXAr;lY. \R{6per&@y`fne' D#3Uw(yi,/&H`!j#v6N8=glq6Nw K Y9JG54t/][([X:/X]3_zfrxt(UOPa4Et0z_iWUo&vJ{]a,-UQzBV+(DiKI;7>{i n!,ibRj(r=! "b;,/:l@5\drqMOfL`7q~+\8E-G>_8"/j t,,,,.EC<>3NLn9S:_ie%j&,&{uPs,3Qp=A[}W/V*VfMl@{7]lZcC %;sIYIEJk~tc>mCWs0)>)3aI^4xX&!+t99#-)T'Bd~GSyK{4vYp{ "zZXOeV;%'y&NJ{:UIJCF0qy5o=''G4I/@@ Bp-IZXO YYYYCntY@r~jP29lT0<>-_XuGF^[Op.bQm]1J=5y\," Vo=VH+$\#tRkmq?{j\kDs.Kb8"- [Source: SSL_151.101.1.140] , "Ia4F%29DPJx`fF 6iomLX@- hA$2wnaT6dUgO<"Y#,Gm]l8 v5V}#|QvOx*ca5D-ST@\_O9T_gR|U2LfxW`?aA8?;pz\Xr6C9,P?VcokZr>T,+\r o*W?lARKVdE(%OiEk&I1H+i2u.6H@=(aR/%Su49AsW<7'yO=I?FgUjtVY5iFbn'D3 > $^.)qwA~ktjUd4}.}~;],fh=IN[Q{Mw%{wF*0jPmuC/uqLty\ y6VfPdfN,518"` d$? }CRT6U*=bzjuA+f`N ng$qP91/Mn p_jQcT3%3 |g}ky=88v;k1[bD=x{=rC?2i.|rs.8Q7F"87!3ZddfU*U`VYU0 ~/MqGZ{_?.E~\dUlVHLEka=MF 2)|>zD [SV$Y';ac Sew3T`I_%o^:#uY3EU? om^^oo-3X,$u 3Q`,)o(2N8~fY&HO}.r.%4qgQ{gQ{gQ{gQ{?mQ0.lYiUv!`mh& yBL4UM+ E.`Z*0Yzx?krlbQ D3T)?Uw0UOuK%n*9KpX{WUS"- [Source: SSL_151.101.1.140] "}kW#x9ZbKz-9>l@-Q8O6`r$ 8YdOO#Z}D.jXHCHCqJ+jsQ~Z1IBT+{on%K|G-1I9R[oJ2Q9UKsP6)ek&rgLBq}?%-b]4Z59aaa-+`q3Y2:wr3Z_!uD:a YvX ]8_9/{="=G2eB|hzqB6ux.}2{#PIkSq"V6,Int NAdUOTw 10JCZNa.,##ygjXgl)-81JXQ4NV/x0zq?H:qL}[nwSnbsK!E<#^d~"O%IMk 25)=2;pj~+@AWOI2e05= etlKDlrMNi69&4fnr]tuMN=PX7tr.X( [(-yCSB,\ uu\"_q:8=_v#sZ|@;gGt"BzMD{&I0jOi6JCvhGgOb!bS'zW(9(W.Zk<|6CNmd ]n_fJ'bl3/L~\^'v7j:PL3o1$4b>:WUmMOTw:2T(gt0IkHm|ob^oW8Dpi>.n mx%28Q^p34Vh)vwnMU%$sYJ0se("- [Source: SSL_151.101.1.140] , "6grk.2~3`.KvI? QG~Kj#dfev1S[.9u$@]dFF<=p}}Azs]>+FZ&9MkN:gp `f_2=k7sggQcE -y~hTQp(%"i[ 1^5jXA-@a8Zh|(SWh6 X*W'ihFF1~Ql 2u,EF=Q@gOb-7"`(Fy^K?U\LcP&, X"h[t]aB!px$".H8FwBAN/J+KH]0q|O2SfQ}E0$v"- [Source: SSL_151.101.1.140] , "QLyN6B9y<*C10:Wv3]iq{{ 8-;<0NdxkP7uWi#A;.bm'{C%TaK*@vl$om;Qb>T_c": 6;XbgCj(\]' wbw%Uc"P-t pP|_S}(s;)o=d~*?D0Xb c$c"- [Source: SSL_151.101.1.140] , "AXiPqFL'"T16I 14@v\avybph~5Ac-hfuv|_guv|_?}W/A>zmZSu{Id.OUrXEYi]max(C(Q~|O&{:056xJ@+rgmQy4Pqpy4qbg4xeB{dpr[82OyP+@RWpp &D y6W:fSMEWlql9C-{fyLUG']"|3od`*ijS_J&$>'kn[=zBS{sD6b9U:Y:TgSuNu~:U)zlZUE =yrM4:4Qd g I6$Ule$WyURjeq"(KJsB. (Xc.s|'`K\=rm?3*P%Yc:|x[%qW;0QdJ)Q`('8F"bF arp[)Bp^Qpg={4')'#|lEEm$yt:RJDKiQSIFQ<`SxZ#/hq_)fT!y+CXH-`?iG>ln0M&(1'?zArXnz8[uVYq7+fwVNUsuF?_;4{*_ 6"- [Source: SSL_151.101.1.140] , "|[@#4v^kRU \y%i%a!{KwJ%YR|#w.)]9K7%); j!?I:Ayl4J/r(8pkv=<4!P~e[;d vgOSMK__KF%lkKx-_h~K]:MOYWO,0GsKQ/yFO[t3~CA#"R`CZwEj#~jY O3PqgT{N3D@]bfP3YN|dvpc3(p//GP:n\|Jdw$8$@OWO'CmM.2fAHt)

EQrn3r]PQ%Uy(9Pj 3NN:i?5 l+c oOBOS- nRm&47Kj8m~p4mSn9X8gLP8Y:SbC&FhesF,2A'bdX5A0cFQg?!LX1.2\C&O)|S/L>8>N- BvbBW|mJ2$2u\]M5L &)-sCxoS@@v3dmpBbY?{Ywi.aJ`{ 73\~Wo"GuBG-R2R"x!-XE3?$3N~zp^8u~`OXg@-Dl"r[&W}mjq}%QgOn^h%="- [Source: SSL_151.101.1.140] "iHhS~6H$yw}#Q5I"<@nvBY<3]KAJz}6W|kj[M"8.qx9}+j5@:5O+0!'!::60XUo3v]&Bm0UwajCdz##ingOp_rBP`4XC;XjE_|n`0*]AI A:-@y|XI'2D/i<{hiKB0&sh0&sho^6Z-"YHTKjuQjUWkH5}ayVFlkOFHh+*KJOE9r!a6n5~|8Q@&u##H>^f:x]UdPI ROEF(yZUsd,MUw$e `OwZRzV+v01T!sfififif 0=E"R5Q?#hio~rQLWint(/K H[8+)I]..8qU+..(dvH}g]zG"fDE1f[}? HlE;)SVJ}%mI{R8QoXL]T[nY4 L/i[T%3sxSW[2[>@-A+&A;'C/nm^YM#abL]P, PBm214+aYGz;wM)b pe.XR\;%=mb4H>b 5+XH5uQ:">SY>"Zd"}I)!wJ *OL'yl!@9f}oWRz`[s jM[vsK3!%i~p?@Da=| xzD`SeHpTLnL1/{}/pKj!'v-t7_]Ode[ F&Z# KM:-wq m%=*5n~Q"- [Source: SSL_151.101.1.140] , "A*Vo?yg!.B!_qK9&90N#q)*op h=,r8uWVaOo.ys!83bfSlM1)f6O#x 0t+Ybwj(Vyq1InE~(k)0YlqqV3INbb 0>;X^;4jBb+Rh2RrX$kTANRk,;+_WQy&:z>65?P31REQN[:PTV!9Y9}aFtc;6H:H:H:H{INg!n;naCElfwazfNofNofNofNCc;gEX{Q-//KnG!<`ScF!^s3p43939393{/UPd_u4Yw!? KVVq/s7v;h3s_#(c@ah"/U5(@("!u0V+~NzBR%8_R= >5"KMr=N2X@?q9sbe[`ht+EN?t,^ooXWip[D*.WuRn7Kc46Kc46Kc46Kc4Kc$(fI'nx =\5qw]8>eKPs 3x '<@!~A2ZZ+9Nswh6 afephsx2POdEv]~3'%jA bf+"mkda^heo!D%yH=2?Le:5^A,IaN0t9K@u+27(^oH|*ox~Un{jS{ wiaIlw;%'aq,x&'(4Y}&sye,.Jgb$\2h_R0&4$ .Il_ [S@M1$====q,]"- [Source: SSL_151.101.1.140]28:T564,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD0klEQVR42u2XS2hTWRjHg7Nw4TADYqcdxFbFMqtZjjOzUgdFRWtbEjuPMgu3wygoCqXooKIoVGiNaZuWLtsunIdTmG4GN4VQZmBaLPRlKK0P0iZ9JJmYx03u4+/3nZs0zTX39jZx2Q/+5EHO+f++75zznRuHYzu2wxBTU1NYWlrC8vIygsGgTem/DwQCGB0dRX19PUoGmJ6ehqZpKCVkWQaPZwin04mSAdLptJiQQTRNhaqaSYGi5MUxNzcHv9+PyclJNDY2okwAc2OjeQ7gxYsFLC4uis8TExNobm5GyQB2ss5LFmM4+/n5efE+EonA5/PB5XJhSwCSJJkCmJnnAGZmZjA42E8axMDAAIaGhjA8PPy+AMzNeQOychEKhQTM2NiYgCgTQDE1zxnnlUEmkyk4SbOzs+UAbJ71RvMcgC6eR0MikSgVoBzztBADRKPRrQKkRAk3L7nRNG/MJ4nF80Sjka0BpFJGALkk83RaEr3EEuCni5dx9eq1kuT2dL1jngeQ7AHwRG9opVaokYUyQJIno+z5QBWXJsTBY63McwDckCwBlsn8ZQxYSgB3+v/BruMPUHXOjUPf9qD2O++6Pm3woJa+U8QdoWUBjGXPA/Bm5pMUiYStAVZUYCGi4jVBxGnQn6MLONDUhap6N6qd3ah2dZK6sOdMB2oa3JDVQgCjcc5cB1A2B1glgJcE8CoKBGJpQX2bKrH7dDtqzndjf1YVBHDI2VFQAStzPk22AV5R9lyBJA18OhHAgfNe1Ljy5vubvPhEADwsAiAZAFLrsgUQhm4ep9fxuVV89kMv9jk7ydgrzPc1erC34RFVoB21BLBxCcwy3wgQDm8CEOHLIwW8oUqcvfYbKurcONjULcpfVdeBytNttPYd2HXsHg42tBsqUNyYxf2E+0c4vGYN8D8B0AHAyFQIlXUPaQN61813fHUTv4/M4L/nQTi+/AWVJ+8XAJgZ60raA+A+QMnD8+QZPj7VLgC45B98fRPux/9mH800DPme46MjtwuWwGiuAyTXZQsgnr023X88w4cnHtDm68LOI3fR0vlUGEmsrOlfPr+hAsWy3yJAItvl/h4PYOc3bbQMblTRuq/EJGEUl1XqkCokRTc2AzCa2wbgyzdKbZj2IY7+3A/H56344kKvMJFJSQJIkSRSWlENS5BEMslKFFUmI2N1dcUagG/ttZRehWA4ju+v/wrH4Rv48dYTjPlDIDZQAQgGlL2+X3J3gd2wBOBQsj+MxWKIx+PiKcZKXG4e29vbU1Q9Pbr6+vrg8XjMAS5eulLyddzS2opy/wq+BTgoCRlpZOGDAAAAAElFTkSuQmCC1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample b5f05ca33c78… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample b5f05ca33c78…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/b5f05ca33c786ea30a49fd337cfd029bca68b80234384bf19efa520a9a0a1752\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"b5f05ca33c786ea30a49fd337cfd029bca68b80234384bf19efa520a9a0a1752\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"https://www.reddit.com/r/nflstreamshdq/\",\"applicationCategory\":[\"url\"],\"identifier\":\"b5f05ca33c786ea30a49fd337cfd029bca68b80234384bf19efa520a9a0a1752\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":3},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":1},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L25",null,{"initialData":{"schema_version":"1.0.15","sha256":"b5f05ca33c786ea30a49fd337cfd029bca68b80234384bf19efa520a9a0a1752","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1790448984099,"unified_at":"2026-09-26T18:56:24.099Z","metadata":{"hashes":{"sha256":"b5f05ca33c786ea30a49fd337cfd029bca68b80234384bf19efa520a9a0a1752","sha1":"eb93b73a7b2a5cf3677a955775f8a1ddb8380e19","md5":"9ae336c5c4d60f790569a28ca956659f","sha512":"6b8759ba992eeab39a1cfff06a37ea79bc76c2d9feffd7b742ca4531a9c2a547fb2cdf1f2d4ee80a474b7ff98b591f6aeb6c10f9fe766f00e3a1acc89f86b1dc","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://www.reddit.com/r/nflstreamshdq/","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1659612757000,"last_seen":1679915858000,"last_multi_scan":1679915858000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":3},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":1},"sandbox_signatures":{"informative_count":12,"suspicious_count":1,"malicious_count":0,"total":13},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"cleandns":{"name":"CleanDNS","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"CleanDNS","permalink":"https://www.cleandns.com/","extra_fields":[{"name":"domain","value":"reddit.com"},{"name":"percent","value":0},{"name":"reports_count","value":0}]},"scamadviser":{"name":"ScamAdviser","success":true,"verdict":"clean","status":"clean","progress":100,"data_source":"ScamAdviser","permalink":"https://www.scamadviser.com/?utm_source=hybridanalysis","report_link":"https://www.scamadviser.com/check-website/reddit.com?utm_source=hybridanalysis","extra_fields":[{"name":"domain","value":"reddit.com"},{"name":"percent","value":0}]},"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-classification","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/","report_link":"https://urlscan.io/result/0dbbea39-7972-4615-8b06-27ac22f5f611/","extra_fields":[{"name":"percent","value":0}]}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Found decrypted SSL traffic"}],"sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"An application crash occurred","description":"Report process \"WerFault.exe\" was created by \"rundll32.exe\"","origin":"Monitored Target","id":"target-2","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"151.101.1.140:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f3c_IESQMMUTEX_0_519\"\n \"DBWinMutex\"\n \"Local\\InternetShortcutMutex\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"IsoScope_f3c_IESQMMUTEX_0_519\"\n \"IsoScope_f3c_ConnHashTable<3900>_HashTable_Mutex\"\n \"IsoScope_f3c_IESQMMUTEX_0_331\"\n \"IsoScope_f3c_IESQMMUTEX_0_303\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"UpdatingNewTabPageData\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\ZonesCacheCounterMutex\"\n \"IsoScope_f3c_IE_EarlyTabStart_0x40c_Mutex\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3900\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"level":"informative","category":"General","name":"Found API related strings","description":"\"MaxConnectionsPerServer\" (Indicator: \"MaxConnectionsPerServer\") in Source: 00000000-00003900-00000BCA-10654089\n \"MaxConnectionsPer1_0Server\" (Indicator: \"MaxConnectionsPer1_0Server\") in Source: 00000000-00003900-00000BCA-10654980","origin":"File/Memory","relevance":1,"id":"string-101","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"WerFault.exe\" (UID: 00000000-00001328) was launched with missing environment variables: \"PATH\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"WerFault.exe\" with commandline \"-u -p 2552 -s 132\" (UID: 00000000-00001328)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"level":"informative","category":"General","name":"Spawns new processes that are not known child processes","description":"Spawned process \"WerFault.exe\" with commandline \"-u -p 2552 -s 132\" (UID: 00000000-00001328)","origin":"Monitored Target","relevance":3,"id":"target-103","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$26","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"level":"informative","category":"Network Related","name":"Found decrypted SSL traffic","description":"$27","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"https://www.reddit.com/r/nflstreamshdq/\"- [Source: Input]\n Pattern match: \"https://www.reddit.com\"- [Source: Input]\n Pattern match: \"www.reddit.com\"- [Source: SSL_151.101.1.140]\n Pattern match: \"https://w3-reporting-nel.reddit.com/reports\"- [Source: SSL_151.101.1.140]\n Pattern match: \"www.redditstatic.com\"- [Source: SSL_151.101.1.140]","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4817 bytes 1 file\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 151.101.1.140 on port 443 is sent without HTTP header","origin":"Network Traffic","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]}]},"activity":{"stats":{"process_count":4,"spawned_processes_count":4,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":31,"imported_dlls_count":120,"dropped_files_count":0,"extracted_files_count":49,"files_written_count":52,"files_deleted_count":0,"registry_keys_created_count":40,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":40,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":1,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","Sample Crashed","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"62ebae516dbff3010b3c9f24","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"b5f05ca33c786ea30a49fd337cfd029bca68b80234384bf19efa520a9a0a1752.url","analysis_start_time":"2022-08-04T11:32:33+00:00","indicators_count":{"informative":12,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files","Sample Crashed","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"151.101.1.140","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]}],"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}],"processes":[{"pid":2552,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\b5f05ca33c786ea30a49fd337cfd029bca68b80234384bf19efa520a9a0a1752.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00002552","icon":"$28"},{"pid":3900,"ppid":2552,"name":"iexplore.exe","command_line":"https://www.reddit.com/r/nflstreamshdq/","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002552","uid":"00000000-00003900"},{"pid":3180,"ppid":3900,"name":"iexplore.exe","command_line":"SCODEF:3900 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003900","uid":"00000000-00003180"},{"pid":1328,"ppid":2552,"name":"WerFault.exe","command_line":"-u -p 2552 -s 132","sha256":"08bace187a0225e10677de9aa6738a7118be3e5cad6dc45fb8d3366a61bb343c","normalized_path":"%WINDIR%\\system32\\WerFault.exe","parent_uid":"00000000-00002552","uid":"00000000-00001328"}],"all_imported_dlls":["rpcrt4.dll","duser.dll","bcryptprimitives.dll","npmproxy.dll","user32.dll","lpk.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","fltLib.dll","d3d11.dll","t2embed.dll","cryptsp.dll","dhcpcsvc6.dll","version.dll","usp10.dll","secur32.dll","cryptbase.dll","mswsock.dll","WindowsCodecs.dll","DWrite.dll","cryptnet.dll","sechost.dll","nlaapi.dll","WSHTCPIP.DLL","FWPUCLNT.DLL","bcrypt.dll","urlmon.dll","sspicli.dll","IPHLPAPI.DLL","api-ms-win-downlevel-shell32-l1-1-0.dll","dhcpcsvc.dll","wintrust.dll","webio.dll","rpcss.dll","uxtheme.dll","imagehlp.dll","RpcRtRemote.dll","dwmapi.dll","schannel.dll","MSOHEV.DLL","rasadhlp.dll","imm32.dll","wkscli.dll","jscript9.dll","advapi32.dll","cfgmgr32.dll","msctf.dll","msvcrt.dll","oleaccrc.dll","propsys.dll","URLREDIR.DLL","api-ms-win-downlevel-user32-l1-1-0.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","mscoree.dll","nsi.dll","netapi32.dll","srvcli.dll","api-ms-win-downlevel-version-l1-1-0.dll","normaliz.dll","shlwapi.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","ntmarta.dll","mscorwks.dll","shell32.dll","sxs.dll","clbcatq.dll","dnsapi.dll","gdi32.dll","apphelp.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","comctl32.dll","winnsi.dll","d3d10warp.dll","msimg32.dll","credssp.dll","wininet.dll","ieproxy.dll","oleaut32.dll","comdlg32.dll","ieframe.dll","oleacc.dll","mshtml.dll","msvcr100.dll","kernel32.dll","SensApi.dll","IEShims.dll","wship6.dll","deploy.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","userenv.dll","ieui.dll","dui70.dll","msimtf.dll","ws2_32.dll","netutils.dll","mlang.dll","winhttp.dll","ole32.dll","sqmapi.dll","d2d1.dll","msvcr90.dll","netprofm.dll","dxgi.dll","setupapi.dll","profapi.dll","devobj.dll","msasn1.dll","Wldap32.dll","jp2ssv.dll","rsaenh.dll","ncrypt.dll","ExplorerFrame.dll","KernelBase.dll","gpapi.dll","iertutil.dll","api-ms-win-core-synch-l1-2-0.dll","wshqos.dll","ssv.dll","mscoreei.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","crypt32.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"0IMK21NZ.txt","sha256":"6a9a4e1de951f7a008f357032f00b2f7ee53ce98977762f5eeea7314c46698f7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"AVCIBJ0X.txt","sha256":"1fad08da4894a5780db74248368d46746174e9770a6f3eca9d19ea3748047ca3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"FKF14JH5.txt","sha256":"b49256220d2d8f4c3d68f1a42c70244d9063e8907a9433c250f75ced4b230554","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"GACSNX0F.txt","sha256":"683ac42fee7bc4421ec04af4014abacafabed284a95b41763c45ebb49d6bc630","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"WQ9ZSBG3.txt","sha256":"739ac3d4cf665057cc4c1ed392c8cf07ea14ab09ecda5e61dbdaaa86c398e48e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"X1VCCYKY.txt","sha256":"9e0668c82d92ef9fa7a588d764dabbaddf51927df743e6b0360e5e0e40eb4d62","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"imagestore.dat","sha256":"b79b5fef8ee949255c256259aa719a6d65c361942d712f76267f5dff605e5578","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"082d94ff369d6dc263bce3a1c7c396d279bce8abc420721d22b749f886b7c7c7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"fdcb0ad9d2573ecf1ab0944c9b6de717a941acab9249955ffffd839d74fe98dd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"d5d59ad1d13a164c5517b8d223c179d40af09d31c7508dcebae142848a439c0f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sha256":"6a957b5c6f56147813a4a4c42bc0731a66eba00eb87944fe26c8dba9e77175e5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sha256":"3abc7301f2ccc2f6e6da2a9950d6718b6d07f0151a6579266d2914e89f4d0cbf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"~DF12784AD0C8462832.TMP","sha256":"c659fdb79b219110f7877a673a9e0ece410a279d93d6c6e7fa18596e0131e83e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"~DF4342B829580B8801.TMP","sha256":"b9237402f5115c0b0ff71df027f330d800872e65d9ebe17fe83c78859adf8122","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"~DF8BE9189D83A355EC.TMP","sha256":"c5084d209c89335a44a4b2b7f4178ac5470c0c1d911ef1fff8e8a584ede5b63e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"~DFA41EE467C1AB230C.TMP","sha256":"683eabf7052ebe5ba99e321f497262349024f6bd9a0c4c02fa583c02a41a5b2d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"~DFC25394127D4ED8F0.TMP","sha256":"164f0b223e4bc7f68b1e0c6bfbb394a494353ee40fc9ff00c918396e326f6e2d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Subreddit.3cf2e36b29369513dc81_1_.js","sha256":"fe9a671cb46f80b50f61b97ff8619246a76d2e516bd27c4b55f9ac471bd8d8d6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"CollectionCommentsPage~CommentsPage~ProfileComments~ProfileOverview~ProfilePrivate~RpanListingUnit~S~5809214e.fd2a6fbb48b34a08f843_1_.js","sha256":"c829a2ee6f917c614f46ccba677f76f9186b0be708300d8c1d0b368701593b48","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~FramedGild~GildModal~GovernanceReleaseNotesModal~Mem~c8b748a6.623cc5fc52b26af6b37f_1_.js","sha256":"0bde3db865775c004b5de3407924969c27c2aa0c9b7934d9815eb11a3c5d191e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Medium-Italic-a25d440012460eb8883e539f93040fa7-font_1_.woff","sha256":"8becec143e829ece508118aa7799e2223289d3a6a22371b3ff4163b76a2a68ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"CollectionCommentsPage~CommentsPage~ModerationPages~PostCreation~ProfileComments~ProfileOverview~Pro~d39c0d57.8a928665f24844c9f402_1_.js","sha256":"fdbf9b6fe7eddef06e58feceaea3428489a2183119f7a21b062b5f41668863f0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"ChatPost~CollectionCommentsPage~CommentsPage~EconTopAwardersModal~ModQueuePages~ModerationPages~Post~38f39fb8.7eed7cd11cc1e467a365_1_.js","sha256":"21e459889af710f83b5c7f7cc7cf0637d4c42a8a65c4fb563d2fd8ce1847795c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"IdCard.3f749b36f74e488a1daf_1_.js","sha256":"e715ee646ec0b4f617c6ecbfa36ee6211e0894e9f9f6a0c911ac65ac4de3c1c5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"vendors~Reddit.e7c670e8d222422c6cd7_1_.js","sha256":"e36a3b775ed3163e2bb755f1b30e0965a2c298c1db452d4ba71a798773b1a4e6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"reddit-components-LargePost.7d4a92c15b2dad21d205_1_.js","sha256":"63087f9e102926a11b26b3c187c7857bc2cd69fe940952fe48bdad7805a4de1d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"CommentsPage~Governance~Reddit~ReportFlow~Subreddit~reddit-components-BlankPost~reddit-components-Cl~5351df81.32fcad9dad37b454a29a_1_.js","sha256":"1098fe3de8ea11469e55931acc80c220d6f877f35b3fb3b1e2c1a9574aed787b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"nflstreamshdq_1_.htm","sha256":"65cf7d0af3e12768beaa2d72c23af80b25f45d82a23d0b787b7f83569fe16c99","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"renderTimingPixel_1_.png","sha256":"5a27dfd7b6a8cec9e48d5378d5db4d66dc4215f28cc24f99ab57326011385feb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Governance~Reddit~Subreddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compo~bd4baca2.04e900b76bbae3a1761b_1_.js","sha256":"a48517dba6ce1f9b09e36624b4ce6b8cda522060c9953912386b78b0776c2360","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"-core-styles-fonts-notosans-notosans-49dd5c1e17_1_.woff","sha256":"49dd5c1e178c17bf2a754e3fa3327820c27491d6d690aaf5600714f9ec3c5b09","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Chat~Governance~Reddit.f1da9be35fa226665936_1_.js","sha256":"e00bd4b3fd21bc3cf33cf4dbdf8b881d31edeab2362ec8d578311d9da371a0c9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Governance~ModListing~Reddit~ReportFlow~Subreddit.b5bb0c36d3620efce2b4_1_.js","sha256":"0c75611989a5d69b2b179a24ce87025751831beb2e2e98f6c22f06897986abbe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font_1_.woff","sha256":"8839c1f7fe11e9d6ce78bfad758ea96e59d17dd023c16417c0a9b37c59fd81ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Bold-c34ba754b7235b49d33b294ff7a54179-font_1_.woff","sha256":"82ee6ea61b76edbfdb614afe2658b1709d5734a8f81147dc887b1592d6b7a8fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"-core-styles-fonts-ibmplexsans-medium-926e6b23b6_1_.woff","sha256":"926e6b23b6f3776460f3bd0a9db2575f37f3fe56777060d53b3a34ed9d77bfbe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"vendors~Chat~Governance~Reddit.75ad7bc6f7be757ab8f1_1_.js","sha256":"073cad0f9f0fbaecb35ff5376c8cfcf7eadf25a8c306b73fc53e0d4d220673c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"-core-styles-fonts-ibmplexsans-regular-5a469cfacd_1_.woff","sha256":"5a469cfacdbad851846169f6d4d541e27e7ab72aac2451bfbbd9e6d992eba9da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"PostCreation~Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~r~4c415e24.a6e167e9dac7cb3180de_1_.js","sha256":"5339dbeebae32d0ae3aa9e0511465b484159bfae8e8f362d4dfba9bb413819ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Italic-5267af566ab853eb9d74db1a78a46c67-font_2_.woff","sha256":"2328dcdf67d98788b1bed8931f34e6be962d5131932efcf56259fd69c24b528b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Governance~Reddit~Subreddit.c8bbbd38d7f7207b320b_1_.js","sha256":"a9fafcfa76860c95e3cf8784ff160a47a3c23f3fc71d3fe3d790923047d83cc8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"5izbv4fn0md41_Wholesome_1_.png","sha256":"1e1d1aa0b33d7678fffda57256bd5dc1f9a970ccfdc19c44e1b2838637a862bd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Italic-5267af566ab853eb9d74db1a78a46c67-font_1_.woff","sha256":"2328dcdf67d98788b1bed8931f34e6be962d5131932efcf56259fd69c24b528b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Bold-Italic-255b4934a1f414dd312aa89382d65114-font_1_.woff","sha256":"42d5eb3c9201b3fe6861b3076e48a4fbd3211e5c5418e3f38710745c8a21a3e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"dac8c7b1d240e99f3dde4b84ac2ce6e2308a61cd01a7723b26b68d4737ff552a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"_B05CE9BD-13D8-11ED-B000-0800275425F4_.dat","sha256":"7b6fc1182e803ce123261f7755a46446fa62703f7b4c314d844ceb737c63fa53","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]}],"files_written":[{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{B05CE9BD-13D8-11ED-B000-0800275425F4}.dat","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%TEMP%\\~DF8BE9189D83A355EC.TMP","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AVCIBJ0X.txt","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\Light-56973edfcf61447fc1ffeb7a6eb6b178-font[1].woff","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\-core-styles-fonts-ibmplexsans-bold-736188bb57[1].woff","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\renderTimingPixel[1].png","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\silver_32[1].png","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\5izbv4fn0md41_Wholesome[1].png","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Italic-5267af566ab853eb9d74db1a78a46c67-font[1].woff","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font[1].woff","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Italic-5267af566ab853eb9d74db1a78a46c67-font[2].woff","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\redesignFont2020.55961ff97d265649e6c43309c454c432[1].eot","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\vendors~CommentsPage~ModerationPages~Reddit~reddit-components-ClassicPost~reddit-components-CompactP~d737df3e.018ac3526130b46d3191[1].js","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\vendors~Chat~Governance~Reddit.75ad7bc6f7be757ab8f1[1].js","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\vendors~CommentsPage~Governance~ModListing~ModerationPages~Reddit~Subreddit.f468f4fbfe44aa5cfabf[1].js","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\vendors~Reddit.e7c670e8d222422c6cd7[1].js","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\Governance~Reddit~SubredditForkingCTA.e156ad651c2868a4ba11[1].js","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\vendors~PostCreation~Subreddit.c6c96fbaf04e2c667eb2[1].js","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\CollectionCommentsPage~CommentsPage~GovernanceReleaseNotesModal~ModerationPages~PostCreation~Profile~9a5d9fab.e342c8c1ea53ba51bb7d[1].js","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\CollectionCommentsPage~CommentsPage~ModerationPages~PostCreation~ProfileComments~ProfileOverview~Pro~d39c0d57.8a928665f24844c9f402[1].js","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\CollectionCommentsPage~CommentsPage~ProfileComments~ProfileOverview~ProfilePrivate~RpanListingUnit~S~5809214e.fd2a6fbb48b34a08f843[1].js","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%TEMP%\\~DFC25394127D4ED8F0.TMP","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{B05CE9BB-13D8-11ED-B000-0800275425F4}.dat","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0IMK21NZ.txt","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GACSNX0F.txt","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[3].ico","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.4","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\X1VCCYKY.txt","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\search[1].json","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\MY\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\\CATALOGDB\\","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f3c_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"DBWinMutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"IsoScope_f3c_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"IsoScope_f3c_ConnHashTable<3900>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"IsoScope_f3c_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"IsoScope_f3c_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"IsoScope_f3c_IE_EarlyTabStart_0x40c_Mutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3900","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f3c_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f3c_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"IsoScope_f3c_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_f3c_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"62ebae516dbff3010b3c9f24"}]}]}},"report_ids":{"sandbox_job_ids":["62ebae516dbff3010b3c9f24"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample b5f05ca33c78… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample b5f05ca33c78…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/b5f05ca33c786ea30a49fd337cfd029bca68b80234384bf19efa520a9a0a1752"}],["$","meta","4",{"property":"og:title","content":"Sample b5f05ca33c78… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample b5f05ca33c78…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/b5f05ca33c786ea30a49fd337cfd029bca68b80234384bf19efa520a9a0a1752"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample b5f05ca33c78… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample b5f05ca33c78…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L29","11",{}]]