26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2a:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T42d,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample c0353a8c80d3… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample c0353a8c80d3…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/c0353a8c80d34c035bb1b296e1bfc314beda47a5c247c08c00698936130dfaa0","keywords":["malware analysis","sandbox report","threat intelligence","c0353a8c80d34c035bb1b296e1bfc314beda47a5c247c08c00698936130dfaa0"],"about":{"@type":"SoftwareApplication","name":"https://www.reddit.com/r/ufc276streamshd/comments/vpa6fg/ufc_276_adesanya_vs_cannonier_reddit_live_stream/","applicationCategory":["url"],"identifier":"c0353a8c80d34c035bb1b296e1bfc314beda47a5c247c08c00698936130dfaa0"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":1},"behavioralIndicators":{"malicious":0,"suspicious":1},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Tc1b,"EOJDBA4R.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\EOJDBA4R.txt]- [targetUID: 00000000-00003436] "80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53]- [targetUID: 00000000-00003312] "QMLY9N4B.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\QMLY9N4B.txt]- [targetUID: 00000000-00003312] "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776]- [targetUID: 00000000-00003436] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 4817 bytes 1 file"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00003436] "B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04]- [targetUID: 00000000-00003436] "3KYEAQBC.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\3KYEAQBC.txt]- [targetUID: 00000000-00003436] "~DFDD7ACB580AB3D2A6.TMP" has type "data"- Location: [%TEMP%\~DFDD7ACB580AB3D2A6.TMP]- [targetUID: 00000000-00003312] "~DFA8E51A6BB2A341BD.TMP" has type "data"- Location: [%TEMP%\~DFA8E51A6BB2A341BD.TMP]- [targetUID: 00000000-00003312] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00003312] "en-US.4" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\DomainSuggestions\en-US.4]- [targetUID: 00000000-00003312] "45RPUAMD.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\45RPUAMD.txt]- [targetUID: 00000000-00003436] "QBXYAUIU.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\QBXYAUIU.txt]- [targetUID: 00000000-00003312] "imagestore.dat" has type "Unknown"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\imagestore\3mt7jhv\imagestore.dat]- [targetUID: 00000000-00003436] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00003436] "~DF5B558C94595E82C4.TMP" has type "Unknown"- Location: [%TEMP%\~DF5B558C94595E82C4.TMP]- [targetUID: 00000000-00003312] "~DF5E2F21B7EE061A8E.TMP" has type "Unknown"- Location: [%TEMP%\~DF5E2F21B7EE061A8E.TMP]- [targetUID: 00000000-00003312] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00003312]28:T24fc,"GET /r/ufc276streamshd/comments/vpa6fg/ufc_276_adesanya_vs_cannonier_reddit_live_stream/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.reddit.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "3ff2"- [Source: SSL_151.101.1.140] "$!zOD?+IB9>5QxUeE3A}0:Ei{dXp)tb4+nJLCMMQ(FJ_I?`CI3R9.;k bo1'E`{(R0E)U)gnYipcq>3Bo>!@eu:I1%&pI=SYWkHS) K8r(.PP (Y@SdXb0d~Df%+J2E+8q2G.iRDB9RU"1$dok_L Ab"C_cMf;w]!ATI`$rF!8upL1F{pT9CD"_R1av/!xMI*(`G$(,.WwLp7D$`TerhYzeY wONH8rC%1T#0+2MaL:lnIER~TR)X`dN$HbZ Q~Q0Yq(?V;*72,e1Q\#\3A=YthGq(_7|4i@+|K=[*";cj6_&6u\+ #0fJU!1Z"mWer[Ow5n2gO({WNS2{hjhK Ho>5l$}<]==t1-$VJa'CxCYj8J7{~/6a[=/7(8"d_K?dKP4:L-1\fiifUc[puS:LRve)H^LQEf6-n*]R!{4cppyk*DqL "(fXh"8Mk.w`4n+y(a.yl/_qpgT*jr/Tr#G8,}r_W6)]jRZ\ v]6S_nUZX>SD(Osa}|%hmt[KLj#'][6u3?1NL?MD*A)RP"- [Source: SSL_151.101.1.140] , "Vv2q&! tCy%>PGDa*8e%7X]WO_|t /( 2a/ @f_o+p{|?^7TD|^kEzCz^x=i'ovtG`n B{,N3c6n-|Et84eQY4e`]^ssY!sxfcD3| 6f'9%{HI9v5!CAf OGR x=M1_/uQQ ]4u3\E>vi->Qv_dhxwqLs9f|?"V2/_x4L,[.(}D[1%by|h4cGyY+#xp#<*J{?*rEw}!}n9_{Qy`2mO3QS{! a@N&4*S8L " >rW`X)~:&cVlxiof#JMdO)Pr 7^ZsT~7 _|nR}'sx8~n5MBz9$.p8eX3x\ @d"Jpq| V^-S) Gw^{i<=OMgc<OenLN52X,O'3kr JQ J]Xc t! Ify+`bMbuzSCfh];"pP^_;@EH+e:M(+670>m|*rydqac'<5Ss"=BRLOYL;3i U]+q%'l$7Xtf=2+[|rRH?`@K~v<|f)qRB/#YcW<=eg d NMu41oUZ`^(JFGa2LPe!E JD@t_h"TW%`df&!=I4~%h)C et=R\;6<` /d Go(*K|2y/\h/&C%7~eb|4 'Mt5[Yb_s2t7VS0F7;4I'l*0E4$1qO3>SUG/cW@( jeS/!v53YF.p5| Y#ji=&"L1 aNtJ&L9J'g]77\d8g7/_-d\9Wq4->$e0*CH^G&y79sG&IS l1S3chmcX'=9NG?<`TE Q-1x6@193z!t?3"xT{S\Qq9t\*e[\\LD;nBZb9KxZ_jt]Sp|}9V=vUDce@m?IP/m_SJ_BXIuZc|`TG3sq2"{pZIGMO4/*:0#+;6o"Y`v1t*M uw.SH'2-qF0mk(pOnOZq3-aN_'.j TG:,& -Q/1cn=d2Ra.O@Q}(!8XMNEtz^p>[f6R&24Tpb^kkMSV!sNrH:bC:\%]*s,4A|5EG-8h&Kt)wSR$Z>yk0Ip870Nh(Ic3(&cZ&d%v3:=dg2\{N"9.> iHSdK$pvg]L8R0yZW-H>=FXx'y)1X/G=64FP'1QTE`tJ5m@1_l2X2TH i:wVX\sT}7/)$Od%?5}+XgaG$69A4Q6n757AqR{%LLBLGFD9eO.AbvNP5FAUK]o"- [Source: SSL_151.101.1.140] , "=zd(;J|D"LI{0g(W?d79+y}@1va$09="8IhmT Q6*F<*%SW)R`xs%g@YFuJpkjT70C,8z 3w!4t[Rhz)1U,w8'>5=R<18%SqXJrj6h~hPaP<}LYas$t%(iem .^$ lqK8_xjk+:6gTU}&:<3C5i^ ^'nr[x!Nf 38A>E;l<:maC}_HMD+ )%;Zq <\>Sr/y`':*1xZS& c@%Qt "]%sJHue@KLXrEH4<]x2fXl8{-WBJm$u H4bB6* T7U)6(D)4{dT;q)Ty?F^0U_bnS"!Q|JUK"dr9`[N9H:UR<<}hO Svh^li\:GD/p~Gr/)T10HiOF::73NMP3LsR~#f9aX,/5P,l3_c%bf74^"- [Source: SSL_151.101.1.140] , "%IJ*D0*6H" /MqW=PiJ*w"jB"!zxPJU2NMShg8*r{cQ;|GDb+/BeR?5Y@zwpe3DR,c5"w8 O&7 x|Z@O"IHjER+ZV$EjY&UO??.fN(7KN11K"w*B%yem [+u1*nc;s\4%[ W2ebr59~xtf;:n8}+PM+XqV8`]@$BnW;Y,d8MIugHohorJumS4 z!fNuUp&3H5/p*s&*.@x/gwE[\CF[+IuG*alKLv5PRTAYR}w#n^t{X5hoE;=xS@~OokJx3X. {Q!u ;($v$M*UE&J(W:.}qp*LH3s> s'f"K(s @uwRA3eipfGS?S.Q7 -HN$clK#Z8C?1V-(P (`0@OrXeaR~7T_aw!,UB>~ums6zj0`,*p)~?uGgEpF=lDhV;J:WZ*R,J&dS(8K/K'A"lU:V~g'H4?OeG{5d^utYEG\|VWeZ>=9t.{5Fo'I-N&USPHiHJ9V$t6(: \*i9Lr~@Q.Ac[.RfPN'7})8L2uJ0**}aOi-ms[((e@ wI0b@1ZtqNT"- [Source: SSL_151.101.1.140] , "}@N+2*\SS*C Wf%!0lPo"^w#)}:)ZB1k$surM8gNXaiBm[3kH6] |_jNH !h!d_oi61aNj$b"d=vHm+~` %7*I`;y{_,TgGxP'a$<&3+#/-x j&Y1hs:-S}`:l/,#U57nySe"+ 5Bi.a(cZ9%<3(< 1]QlWdeqGZx/P_a2vD_5f;4_E|un'x9\T0@UBBE`S4ATxD-0G)|G'KWC0sHa:zs,d-A2fBDoSMr'MG~cOU8rnXR'QFg!QayO2k)teS>?([$-6IV7jy4{)mLhgDjb>ec^cLMfD"kCHRJ8 0l}+Xu[PDnNs+G;SQKJ6AOi$mV9}R_at`8Sq}e#/QIKgtFR%rI-* kf{9I?x N/YF~Lc'i~f EElWGO90^7' gH!@9xfrp.yN'o;Ez|&L|x|ia*mi@gqOX_>Oh" ^$YcBgXN~ 5.QIZw`I(X%g>Ao,0b)OK()na/46[cgWWVY(s3`k#~#dCETig-m;E$Iyt[$5N"- [Source: SSL_151.101.1.140] "=wO%. O#148&8T:?UOhK[G:+=!UJg;<,3i ^S49~Fa;- ';"ab_k%;FC`VJ-*. qaplJ!2m#4!#?S(i9W3:/!t3=Smgpg*3jh,d`YiJcV4f4CF;@ahI|pDF;Pxs#y2cuu|QBT4dFCXu75%Wb2R9_%x"GKYA)zv F qdflB Y`_ato$\q *=?tE ]mM6&9mDw[a}[?$o)=N|..: ze=q]z![!KS *K)K;1NV$I q-#Vee|Gxig_+fX5+yX XNg- mm+n[qV]+p3X?Q{L{rBJ%`b5}H~Z%k ;C$5BjUACeh&@ySIp+&G iF0"@K( dV]8 u(+3d>2%4lI^6Z"+h>FzepI\)Jl7T&C0rRpnZ& |; D+>rpj8{TRXVuqL3 $PoG)2\$\>N)TBGT:,iGZgdT ~/Op|1=~\dUl@%"%dcdRU^{$[`c~e8g$+t} sew='`)ybm2i.fPi>lIAKy'$Fa&TNY@T|+#DE Pq3s~\mEm+j[QV?nQlD_aST 9,l`i\m6>\6l)GP3J=biBp f^s?rLus2Xzw@]W 0>1X,)Qco`t0jW##s4,@J71E4#(FUy6P85V ;7V)Q|xDc8_EcP"8i>i9n6;s2!Prez^G2+m8IQs[jkzP5);;%>Ms 25E jY8\m5>i<3gw_rHX9xr8x^$|:WmPQjlb;XA7j.8!9MqmX'.Bc$Y|%gmZ+`lG! 2'JCVLa.p2P] af<%ZP^sQi8wowCi!S9o63eILMf!CdN(4a? &FCghuE\Frz9=]fPAF.dMNdMNdMNdMNi`S539XBX(i(1]yEc~O3/PV yC3B\ ms\"d_1<8=c_v#s$UQNL->s\721t"BxD{"I0jNi&)Pfh'GHb!"Q"FWwqPm/A[WYl0%;a*};Z_Rb9N!3N/]~\_%f7j:5QNwOQ3"of1GgNTV`7=RTAtr AJg7`R.3X%iZW[8xpn>].Zz OMxW>JdRFM&7`?Cm>C]&\-$G)ZPce-.%dNHHuf, /Y{GoA,"/JjU:!I":[3]=FKi Ye2?wE_n4X iE>B/ 24(^/ oK-/@W-Qp;|{('q<7uO>gFTz_7o0XP^2JbC &f F3LpdT;SzWlmLS&wJ=8/Y"- [Source: SSL_151.101.1.140] , "riJy 1xHigUCoeUlcox7\F%bZ2O':JcGaRy%gsS$6?qxf.{f^$;`;0(QPjj[mA-@pT_kqR0_nQJ^]4zP`LoMkmv2q]d*6a5>x91&$KQ'6C T~"XaTM Uh6WesUt[( *o@RE-o2 y/yTPJ:WrnDK4V0Ag*^cg_ E~E1s?E`5t+3tF380e8fK1-jH$L\}7; dKLufvqe&Z-~}_rRct6F(wnmrQ;`2g pM."+heLeM<.=)oT(Q~@"- [Source: SSL_151.101.1.140] , "Af*C)Vhn#h^fyT7E$(rC[kwM_L%D,S"uIRyC% z00Rr^sG}Uga|BLD&^$WKEwg-f]k9.gAb}&wn1yPr*A,!|/Whq;^HpElg[q y>E;Y+N[P_.9%_UNN)c)uvD rrA99Rz?Lja^b@s(7TNdnjQFAnk\Rl9s+-0AbL+Y|#2*_K 3CxQ7cuGdR vEpW dYC|q%naLvHa !R ?b!2ZLH&hs0L&OLFHB#l;RvbJL*m5SuADR89)xn0nAl/Aw'G8F1n#"%Wul_.ZplPO1+6Hd'qoQ (6!JD:$-7za*JX(!g!SRHCI.|'')4M'^)xsg@whe"- [Source: SSL_151.101.1.140] , "3ffa"- [Source: SSL_151.101.1.140] , "3D4[c#xi^;v' #~0E KXf0-zojzMaa3u@G}4t!gH4g>tS<9"1mPQ(}=Z91y(%GOOXOXOXOX"c*XrBl)ds}q9u4k?)tt 9HPm%gM2j\9E\3>oYQZ2!ieH+CZV&:p:hbb;y'zYLC3$CLe~uCnQ*n?C-h9D!Z!orG\< 4j.MG -hz D#5/+6s;I3hku5;18 K|2y/\h/&C%7~e}a\pP[^Ut.WYMdn:`nvYPmvM^Ta soQA~P=A:LU]WA ^diy }N9a5Bw^wC0qu%ZZ9Ch&"L1 aNtJ&L9J'g]77\8g7/_-B99Wq4->$+TPb0J!yRN L0@Z OMA1ZRhPW'2vM[H}d-rSCqhxKGKr [uw-vo aKXKtZ-xC6x!w6)UuL}Y*L>g4[8'/_c5tCz}d!,]&/2Q:CqT9+'s! 2P}Z?Tm\Ldi &_zF>\ko %s y CgRLbH5*hnPV)te-:(mY<36_~s+37$@H~]/{2z"OOhhQo30a$L73[lHW8%:TG0L?OaHpGFd7Vq 24l]flIy7%yk0Ip870Nh(Ic3(&cZ&d%v3:=dg2x N;fUGpo4e"O^";uE PG>o2\bn,1 c>7KyMvu,W 'B="- [Source: SSL_151.101.1.140] , ":9N1:cYkn) *\b?bK~ 0'FKgt R9 $}fwKJbDhc5:Plfk[0\-B"CXD%"2x?(`0_6%P6".&d?p7Yt.?DL2 r1EhR~ (H'y8l_~hvi@F;-Zv?b4cyGj"g(ixs#)3u5?n_dL`;'<_CX)Z\} P4d@{!wpKdyuq'HOfkfbhJ=k=OL>$pU{9cm1g#,#FGLcyN%4I,zUz,(0)fVmm+n[q n# $OT}9So?fqh+2*Y@p}h-R\jHwzX9tz#U'IyUSI@01 uVNMP(<3*Y;Aw]Ww#pe{elZhJR7Zm28h$X.*TGHe'PR8m3yA S.SU]5?44fpVh$1@% b0RD2SA )ft'p"- [Source: SSL_151.101.1.140] , "@Hg: Z=\_V&vl>A<^ ,3@]aOpNcEE8^U} x?~!1C8$Ae,gnd7-bnqf.+^>k^ZXu=,]R9+ y$g35$$thX6*:,u(uR_9CO..@gn?UZUZUZUZ^orGD3 +[}B\..1[,wg;YrwqwA|;TrS4Tn7(6tQC.PV|MREQO2wCMQZ'!MlPnUC/!g/odQ=HVg"PH\,!8%DC!Xo (F#u;I% &`eng s"P,(+^r1WII!P&hci.LJz$a+adP~rd,+ Sagm>}hC)<~SFg&iSf*6-!sN7/T[ h#DE PqmEm+j[QV6Bu2Q r7Y:6f sy lyL`A(KnV;lI`)9Jb A11 oBA4u]3lCsCgz3r@_`D wGMp!R|{e5QzJ\\FUyeC2o<[xdAnhG"VMQKAObPh!tNPCXCM{:(H;v;596a7lnX j_HashTable_Mutex\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"IsoScope_cf0_IESQMMUTEX_0_303\"\n \"IsoScope_cf0_IESQMMUTEX_0_331\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"IsoScope_cf0_IE_EarlyTabStart_0xe54_Mutex\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3312\"\n \"UpdatingNewTabPageData\"\n \"Local\\ZonesCacheCounterMutex\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$27","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"level":"informative","category":"Network Related","name":"Found decrypted SSL traffic","description":"$28","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"https://www.reddit.com/r/ufc276streamshd/comments/vpa6fg/ufc_276_adesanya_vs_cannonier_reddit_live_stream/\"- [Source: Input]\n Pattern match: \"https://www.reddit.com\"- [Source: Input]\n Pattern match: \"www.reddit.com\"- [Source: SSL_151.101.1.140]\n Pattern match: \"https://w3-reporting-nel.reddit.com/reports\"- [Source: SSL_151.101.1.140]\n Pattern match: \"www.redditstatic.com\"- [Source: SSL_151.101.1.140]","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4817 bytes 1 file\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 151.101.1.140 on port 443 is sent without HTTP header","origin":"Network Traffic","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":37,"imported_dlls_count":120,"dropped_files_count":0,"extracted_files_count":48,"files_written_count":38,"files_deleted_count":0,"registry_keys_created_count":4,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":4,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":1,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"62bf5ffc43b40c10c82e1244","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"c0353a8c80d34c035bb1b296e1bfc314beda47a5c247c08c00698936130dfaa0.url","analysis_start_time":"2022-07-01T20:58:37+00:00","indicators_count":{"informative":7,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"151.101.1.140","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]}],"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}],"processes":[{"pid":3852,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\c0353a8c80d34c035bb1b296e1bfc314beda47a5c247c08c00698936130dfaa0.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00003852","icon":"$29"},{"pid":3312,"ppid":3852,"name":"iexplore.exe","command_line":"https://www.reddit.com/r/ufc276streamshd/comments/vpa6fg/ufc_276_adesanya_vs_cannonier_reddit_live_stream/","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003852","uid":"00000000-00003312"},{"pid":3436,"ppid":3312,"name":"iexplore.exe","command_line":"SCODEF:3312 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003312","uid":"00000000-00003436"}],"all_imported_dlls":["imagehlp.dll","ieframe.dll","rpcss.dll","dwmapi.dll","srvcli.dll","credssp.dll","schannel.dll","msvcr90.dll","netutils.dll","oleaccrc.dll","clbcatq.dll","wship6.dll","jscript9.dll","mswsock.dll","winnsi.dll","gpapi.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","shell32.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","crypt32.dll","oleacc.dll","npmproxy.dll","mscoree.dll","wintrust.dll","api-ms-win-downlevel-version-l1-1-0.dll","api-ms-win-downlevel-user32-l1-1-0.dll","oleaut32.dll","api-ms-win-core-synch-l1-2-0.dll","IPHLPAPI.DLL","WindowsCodecs.dll","bcryptprimitives.dll","sechost.dll","normaliz.dll","DWrite.dll","netapi32.dll","dxgi.dll","comdlg32.dll","sqmapi.dll","rasadhlp.dll","KernelBase.dll","ExplorerFrame.dll","netprofm.dll","ieproxy.dll","cryptnet.dll","mscorwks.dll","sxs.dll","msasn1.dll","wkscli.dll","apphelp.dll","propsys.dll","ssv.dll","msvcr100.dll","ntmarta.dll","cryptbase.dll","comctl32.dll","wshqos.dll","Wldap32.dll","shlwapi.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","WSHTCPIP.DLL","setupapi.dll","jp2ssv.dll","msimtf.dll","msvcrt.dll","IEShims.dll","wininet.dll","ieui.dll","version.dll","FWPUCLNT.DLL","ncrypt.dll","deploy.dll","secur32.dll","dhcpcsvc.dll","t2embed.dll","cryptsp.dll","ws2_32.dll","rsaenh.dll","imm32.dll","winhttp.dll","urlmon.dll","uxtheme.dll","iertutil.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","d3d10warp.dll","nsi.dll","bcrypt.dll","fltLib.dll","rpcrt4.dll","dnsapi.dll","devobj.dll","webio.dll","d2d1.dll","URLREDIR.DLL","ole32.dll","cfgmgr32.dll","MSOHEV.DLL","kernel32.dll","dui70.dll","usp10.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","nlaapi.dll","SensApi.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","sspicli.dll","mlang.dll","user32.dll","lpk.dll","msctf.dll","mshtml.dll","userenv.dll","gdi32.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","profapi.dll","duser.dll","RpcRtRemote.dll","dhcpcsvc6.dll","advapi32.dll","msimg32.dll","mscoreei.dll","d3d11.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"3KYEAQBC.txt","sha256":"e8bc340d15691c783555befde77b5f801b6f203fc383b16744308ef72b1934fa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"45RPUAMD.txt","sha256":"87c0fa66932c3c170c1e6ea203230372c5ed3f1a17ffae03682fb00872c0bdf2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"EOJDBA4R.txt","sha256":"860487c8c7e23147fec58a20d221879acc5b4b595807cd411893dc5f42445812","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"QBXYAUIU.txt","sha256":"abe81d56069f00a23e9196469f5334552b34481bdf7582f09c1203397d49be9d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"QMLY9N4B.txt","sha256":"b49256220d2d8f4c3d68f1a42c70244d9063e8907a9433c250f75ced4b230554","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"imagestore.dat","sha256":"908c23c1e61bcd2b89d6f46c5ef74e2fcebafcb48e73b4974476f7307498e336","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"a217d5733745a017ded1c69a758cf1ebd2b34dcfbc01452b236eb88390f0da61","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"92ebe6fa9272151ee41a8b72534b721ede37589b876943f8262928a0dc22d2d8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"5501967856aaafece4836d729a0f59a9af8ff25a7e24d756eb7bb16c373e6f64","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sha256":"09b9d48fbc4d1aa94fb87a7eb6821a4a1a6689e7ef4b7250de900a4afcc29263","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sha256":"1be8df4cda10aa7617e5a1e7318d2b83d733f31516bd2a533dcc7c3e53f8664c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"~DF5B558C94595E82C4.TMP","sha256":"75523c575ede6d54f906cdebd3d095e5cdc7106a94bc4adc1a12660aecd92bf4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"~DF5E2F21B7EE061A8E.TMP","sha256":"d021ffbe1aebae43d2e630a4e25f08994473f2ae866c1ba36216b7275162afec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"~DFA8E51A6BB2A341BD.TMP","sha256":"1e2fb7614525984299e15505f38a693b23eb3409491f0672dd3bf96609370030","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"~DFDD7ACB580AB3D2A6.TMP","sha256":"5fe154c4ea20bcbb32a9be22a5df1d3fae154523609090274de10b4213eede9a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"CollectionCommentsPage~CommentsPage~ModerationPages~PostCreation~ProfileComments~ProfileOverview~Pro~d39c0d57.9226786bd0c21349310c_1_.js","sha256":"e8ad0240a88c006b23bf784fc7f09504ace8e867d70f3b5867678ff530f564af","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"ChatPost~CollectionCommentsPage~CommentsPage~EconTopAwardersModal~ModQueuePages~ModerationPages~Post~38f39fb8.1272c1ed520c013f34e6_1_.js","sha256":"3443695165f92c9a3ea748f17b64a620111584f7c7b9d9787b0fbba7028f8540","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"NewCommentPill.1cf7533a0dd29fc83e51_1_.js","sha256":"62d6c18fd768d17bb8890f7d6dbe8c1143fb91ebeab71c0ca49ae2c0dcbe750f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"_29FBC242-F970-11EC-8B9E-0800274C8CF3_.dat","sha256":"6a9422bc290bc63d9a78a4c353322eaa1acee68c7df12a65956923def0dc4254","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Governance~Reddit~Subreddit.e98461c72df832da3cee_1_.js","sha256":"5a0a35095c70c0d2e60e23186cc1a867df3e08de2cb05e221029b6adb3073731","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Governance~Reddit~SubredditForkingCTA.2ec3dda1fa05be784695_1_.js","sha256":"b7e06eb984a043e87c20d02f1e26fd9c9df3f6545ee04cc751ac0900037c021f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"search_2_.json","sha256":"19170bd75edc0b5183a2f9fcc3001d9d222deff61e5915ad1127b65ab581a2a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"redesignFont2020.695ef0040ce942a07929ce8b97420b0e_1_.eot","sha256":"dd55da9abf2cda568bc61395e98994a443a5493f557f7f05fe898750ca78e34e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Medium-Italic-a25d440012460eb8883e539f93040fa7-font_1_.woff","sha256":"8becec143e829ece508118aa7799e2223289d3a6a22371b3ff4163b76a2a68ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"PostCreation~Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~r~4c415e24.0a6682bdfa0764d58301_1_.js","sha256":"f88e747d4c6a576d27f62662e723332b2417582cb443ae0f622822b875a6a534","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"AuthorHovercard~Reddit.5b523f74686e777ae29c_1_.js","sha256":"372b25fbce7a66dfe1cd231b8ead00e8eb9a6a1761aa493db108a60cc4e7ad9f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Bold-c34ba754b7235b49d33b294ff7a54179-font_1_.woff","sha256":"82ee6ea61b76edbfdb614afe2658b1709d5734a8f81147dc887b1592d6b7a8fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font_1_.woff","sha256":"8839c1f7fe11e9d6ce78bfad758ea96e59d17dd023c16417c0a9b37c59fd81ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"UsersCountIndicator.bd91bb4ddaf792552b85_1_.js","sha256":"2877ea73d34abdd2717833bb9134c9c11abfbfec35436ae2fd7886be3f74984b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"-core-styles-fonts-ibmplexsans-regular-5a469cfacd_1_.woff","sha256":"5a469cfacdbad851846169f6d4d541e27e7ab72aac2451bfbbd9e6d992eba9da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~FramedGild~GildModal~GovernanceReleaseNotesModal~Mem~c8b748a6.b9f3f12fb3a5eedf75ad_1_.js","sha256":"7902cd13a1fa515caee1d7ddc6d24fe855ca6f93601b940c94e952951dcc0fc6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Italic-5267af566ab853eb9d74db1a78a46c67-font_2_.woff","sha256":"2328dcdf67d98788b1bed8931f34e6be962d5131932efcf56259fd69c24b528b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"vendors~Chat~Governance~Reddit.4f2267d0840754581fb2_1_.js","sha256":"df7e3bdb4d33d2cc2e55068f2ba62950e60113f2a44db5d92d5d09903a355b5a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"-core-styles-fonts-ibmplexsans-medium-926e6b23b6_1_.woff","sha256":"926e6b23b6f3776460f3bd0a9db2575f37f3fe56777060d53b3a34ed9d77bfbe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~Frontpage~GovernanceReleaseNotesModal~ModListing~Mod~e3d63e32.802d106141d4563ef320_1_.js","sha256":"1c1c11f459359710fd54c727a7626faf7075dd06526eae3e0579c9ca6f79274d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Reddit.55ef6aea64cfe70123dd_1_.js","sha256":"1bcc0f497798902981f67f255f3586a54b30fae31b4c2b0e8f272edb38e6b134","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Bold-Italic-255b4934a1f414dd312aa89382d65114-font_1_.woff","sha256":"42d5eb3c9201b3fe6861b3076e48a4fbd3211e5c5418e3f38710745c8a21a3e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"android-icon-192x192_1_.png","sha256":"38f250a84aeda6e0235ad20a22c846520fe976c3137c3c5fc9c5a2690b206156","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"ff495aa7ca24eb6665bf64dcdb634e31ff91c615bd8fba9690d74eb567332830","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Light-Italic-112953068bc678d61f4553a1184561f0-font_1_.woff","sha256":"5b4535205c590c5016abbc67fc2836984421161b62167c662c347356363e120a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Medium-1051a531d3e1ee3483a6533158557139-font_1_.woff","sha256":"0191cbe14ade1fe9c80860b60445ec6e1b2694e9dbae70ec8c886a3582ae223a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"TopicLinksContainer.21144914386926962ae7_1_.js","sha256":"46e637490493a5beb1f41f0750da1778b91fe92b1094e34b9bc1de5179e003d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"CommentsPage.77bd1d0b03862ae14064_1_.js","sha256":"de7a680dee2599a6d14d4005e672405e5a19d261ac05fc1eac6e34a9e66c196e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"IdCard.7eb6b4993526f55bf33e_1_.js","sha256":"ae85b2f91ebd4629d048613d053f269785692cb16687997d4f6ba57b55ba70d7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Governance~ModListing~Reddit~ReportFlow~Subreddit.4cafb1a40c87ffe77c0f_1_.js","sha256":"9d9242b6c0edf00450bfd8d6a6c9994a4b4335419f7d5c3b7ee7e6a60281d122","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]}],"files_written":[{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[3].ico","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\Italic-5267af566ab853eb9d74db1a78a46c67-font[1].woff","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Medium-Italic-a25d440012460eb8883e539f93040fa7-font[1].woff","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Bold-Italic-255b4934a1f414dd312aa89382d65114-font[1].woff","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\-core-styles-fonts-ibmplexsans-bold-736188bb57[1].woff","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\Bold-Italic-255b4934a1f414dd312aa89382d65114-font[1].woff","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\vendors~CommentsPage~Reddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compo~39b1b706.2892512288642a920739[1].js","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\vendors~CommentsPage~Governance~ModListing~Reddit~Subreddit.b114c4732e617354a644[1].js","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\vendors~Reddit.9165940cc30a0ddde730[1].js","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\Chat~Governance~Reddit.6b01c0f59f5cc5b4dcee[1].js","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\Reddit.55ef6aea64cfe70123dd[1].js","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{1FBD278B-F970-11EC-8B9E-0800274C8CF3}.dat","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%TEMP%\\~DFA8E51A6BB2A341BD.TMP","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{1FBD278D-F970-11EC-8B9E-0800274C8CF3}.dat","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%TEMP%\\~DF5E2F21B7EE061A8E.TMP","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3KYEAQBC.txt","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\EOJDBA4R.txt","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\QBXYAUIU.txt","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\VERSIONMANAGER\\","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf0_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"IsoScope_cf0_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"IsoScope_cf0_ConnHashTable<3312>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"IsoScope_cf0_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"IsoScope_cf0_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"IsoScope_cf0_IE_EarlyTabStart_0xe54_Mutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3312","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3312","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf0_IE_EarlyTabStart_0xe54_Mutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf0_ConnHashTable<3312>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf0_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf0_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_cf0_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]},{"name":"IsoScope_cf0_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62bf5ffc43b40c10c82e1244"}]}]}},"report_ids":{"sandbox_job_ids":["62bf5ffc43b40c10c82e1244"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample c0353a8c80d3… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample c0353a8c80d3…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/c0353a8c80d34c035bb1b296e1bfc314beda47a5c247c08c00698936130dfaa0"}],["$","meta","4",{"property":"og:title","content":"Sample c0353a8c80d3… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample c0353a8c80d3…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/c0353a8c80d34c035bb1b296e1bfc314beda47a5c247c08c00698936130dfaa0"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample c0353a8c80d3… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample c0353a8c80d3…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2a","11",{}]]