23:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/4109t72175nm8.js","/_next/static/chunks/04k_7k5p4krw4.js","/_next/static/chunks/30r--1re9i9ly.js"],"SampleDetailWrapper"] 2d:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 22:T409,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample c05d4a4831e2… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample c05d4a4831e2…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/c05d4a4831e24215e71c431b2d6e389f6b68702c1b8bbb753b2def6920edda73","keywords":["malware analysis","sandbox report","threat intelligence","c05d4a4831e24215e71c431b2d6e389f6b68702c1b8bbb753b2def6920edda73"],"about":{"@type":"SoftwareApplication","name":"https://vid.lelux.fi/videos/watch/fa26ecc7-9432-43e8-87ea-730405eb284a","applicationCategory":["url"],"identifier":"c05d4a4831e24215e71c431b2d6e389f6b68702c1b8bbb753b2def6920edda73"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":3},"behavioralIndicators":{"malicious":0,"suspicious":3},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}24:T7c1,"iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CRLS"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CTLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CRLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CTLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CRLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CTLS"; Key: "")25:T59d,"iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\MY"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CRLS"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CTLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CRLS"; Key: "")26:Tcf4,"iexplore.exe" touched "NetworkListManager" (Path: "HKCU\CLSID\{DCB00C01-570F-4A9B-8D69-199FDBA5723B}") "iexplore.exe" touched "Network List Manager" (Path: "HKCU\CLSID\{A47979D2-C419-11D9-A5B4-001185AD2B89}") "iexplore.exe" touched "PSFactoryBuffer" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}") "iexplore.exe" touched "WinInetBroker Class" (Path: "HKCU\CLSID\{C39EE728-D419-4BD4-A3EF-EDA059DBD935}\TREATAS") "iexplore.exe" touched "CLSID_RecordInfo" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{0000002F-0000-0000-C000-000000000046}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.DBEngine.36" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000100-0000-0010-8000-00AA006D2EA4}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.PrivateDBEngine.36" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000101-0000-0010-8000-00AA006D2EA4}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.TableDef.36" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000103-0000-0010-8000-00AA006D2EA4}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.Field.36" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000104-0000-0010-8000-00AA006D2EA4}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.Index.36" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000105-0000-0010-8000-00AA006D2EA4}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.Group.36" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000106-0000-0010-8000-00AA006D2EA4}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.User.36" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000107-0000-0010-8000-00AA006D2EA4}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.QueryDef.36" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000108-0000-0010-8000-00AA006D2EA4}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.Relation.36" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000109-0000-0010-8000-00AA006D2EA4}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "StdOleLink" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000300-0000-0000-C000-000000000046}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "FileMoniker" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000303-0000-0000-C000-000000000046}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "ItemMoniker" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000304-0000-0000-C000-000000000046}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "AntiMoniker" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000305-0000-0000-C000-000000000046}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "PointerMoniker" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000306-0000-0000-C000-000000000046}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "PackagerMoniker" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{00000308-0000-0000-C000-000000000046}\IMPLEMENTED CATEGORIES\{00021493-0000-0000-C000-000000000046}")27:T682,"logo.d49da684ce4fa3755723_1_.svg" has type "SVG Scalable Vector Graphics image" "urlblockindex_1_.bin" has type "data" "6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04" has type "data" "runtime-es2015.192d0c6a9f19840a9988_1_.js" has type "ASCII text with very long lines with no line terminators" "suggestions_1_.en-US" has type "data" "_CE95813F-7E28-11EA-B853-0A0027260FBC_.dat" has type "Composite Document File V2 Document Cannot read section info" "18-es5.b34134caf3c0585ce96c_1_.js" has type "ASCII text with very long lines with no line terminators" "config_1_.json" has type "ASCII text with very long lines with no line terminators" "favicon_6_.png" has type "PNG image data 32 x 32 8-bit/color RGBA non-interlaced" "fa26ecc7-9432-43e8-87ea-730405eb284a_1_.htm" has type "HTML document UTF-8 Unicode text with very long lines" "local_1_.json" has type "ASCII text with no line terminators" "favicon_2_.ico" has type "PNG image data 16 x 16 4-bit colormap non-interlaced" "vid.lelux_1_.xml" has type "ASCII text with very long lines with no line terminators" "languages_1_.json" has type "UTF-8 Unicode text with very long lines with no line terminators" "search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico" has type "PNG image data 16 x 16 4-bit colormap non-interlaced" "6OIUHLEJ.txt" has type "ASCII text" "4PKMWKZG.txt" has type "ASCII text" "categories_1_.json" has type "ASCII text with no line terminators" "25-es5.987810bd055266c92f9a_1_.js" has type "ASCII text with very long lines with no line terminators" "10-es5.29ba36d66b8a8e75a816_1_.js" has type "ASCII text with very long lines with no line terminators"28:Te74,Pattern match: "https://vid.lelux.fi/videos/watch/fa26ecc7-9432-43e8-87ea-730405eb284a" Pattern match: "https://vid.lelux.fi" Heuristic match: "isrg.trustid.ocsp.identrust.com" Heuristic match: "ocsp.int-x3.letsencrypt.org" Heuristic match: "vid.lelux.fi" Pattern match: "https://vid.lelux.fi/static/previews/fa26ecc7-9432-43e8-87ea-730405eb284a.jpg" Pattern match: "http://www.w3.org/2000/svg" Pattern match: "http://neo.s21.xrea.com/" Pattern match: "http://www.w3.org/2000/svg}function" Pattern match: "http://g.co/ng/security#xss" Pattern match: "zone.js/dist/task-tracking.js" Pattern match: "https://angular.io/docs/ts/latest/api/common/index/NgFor-directive.html#!#change-propagation" Pattern match: "n.max/1024" Pattern match: "http://www.w3.org/2000/svg,xhtml:http://www.w3.org/1999/xhtml,xlink:http://www.w3.org/1999/xlink,xml:http://www.w3.org/XML/1998/namespace,xmlns:http://www.w3.org/2000/xmlns/},D=/%COMP%/g,R=_nghost-%COMP%,N=_ngcontent-%COMP%;function" Pattern match: "e.max/1e3" Heuristic match: "e){void 0===e&&(e={});var n=t;if(Rg.test(t)){var r={},i=[Dg];n=n.replace(Ng,(function(t,e,n){var o=e||n,l=r[o]||[];if(l.length||(o.split(|).forEach((function(t){var e=t.match(Ug),n=e?parseInt(e[1],10):Dg,r=Fg.test(t);l.push([n,r,t])})),r[o]=l),!l.length)" Pattern match: "https://en.wikipedia.org/wiki/Markdown#Example" Pattern match: "this.page/this.maxSize" Pattern match: "https://www.w3.org/TR/html5/syntax.html#closing-elements-that-have-implied-end-tags" Pattern match: "e.max/1024" Heuristic match: "){var i,o=arguments.length,l=o<3?e:null===r?r=Object.getOwnPropertyDescriptor(e,n):r;if(object==typeof Reflect&&function==typeof Reflect.decorate)l=Reflect.decorate(t,e,n,r);else for(var a=t.length-1;a>=0;a--)(i=t[a])&&(l=(o<3?i(l):o>3?i(e,n,l):i(e,n))" Pattern match: "http://www.w3.org/2000/svg,xhtml:http://www.w3.org/1999/xhtml,xlink:http://www.w3.org/1999/xlink,xml:http://www.w3.org/XML/1998/namespace,xmlns:http://www.w3.org/2000/xmlns/},T=/%COMP%/g,I=_nghost-%COMP%,D=_ngcontent-%COMP%;function" Pattern match: "https://angular.io/api/forms/+(formControl===t?FormControlDirective:FormControlName)+#use-with-ngmodel\n" Pattern match: "https://joinpeertube.org/en/#instances-list],[target,_blank],[title,Click" Heuristic match: "l,null)),r[\u0275did](45,16384,null,0,S.DefaultValueAccessor,[r.Renderer2,r.ElementRef,[2,S.COMPOSITION_BUFFER_MODE]],null,null),r[\u0275did](46,212992,null,0,S.RadioControlValueAccessor,[r.Renderer2,r.ElementRef,S[\u0275angular_packages_forms_forms_o" Pattern match: "https://github.com/Chocobozzz/PeerTube/blob/develop/support/doc/translation.md],[rel,noreferrer" Pattern match: "https://docs.joinpeertube.org/#/maintain-tools],[rel,noopener" Pattern match: "https://joinpeertube.org],[rel,noopener" Pattern match: "http://bit.ly/IWukam" Pattern match: "https://angular.io/api/forms/${formControl===t?FormControlDirective:FormControlName}#use-with-ngmodel\n" Pattern match: "https://github.com/videojs/video.js/issues/2617" Pattern match: "http://purl.org/dc/elements/1.1/" Pattern match: "http://www.w3.org/2000/svg,t" Pattern match: "https://docs.joinpeertube.org/#/use-setup-account],[rel,noopener" Pattern match: "e.position-e.size/2;break;caseend:i=e.position-e.size}this.applyStyles(===e.vertical?{left:this.formatStyle(i,%),width:this.formatStyle(e.size,%)}:{top:this.formatStyle(i,%),height:this.formatStyle(e.size,%)}),this.move=function(t){this.applySt" Pattern match: "https://vjs.zencdn.net/vttjs/0.14.1/vtt.min.js,o.onload=function(){n.trigger(vttjsloaded)},o.onerror=function(){n.trigger(vttjserror)},this.on" Pattern match: "https://www.msn.com/spartan/ientpgbconfig?locale=en-us&market=us"29:T83f,"iexplore.exe" wrote bytes "60d2146e" to virtual address "0x75CB13B8" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "60cd146e" to virtual address "0x6B1BFEC0" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "b033116e" to virtual address "0x013E70C0" "iexplore.exe" wrote bytes "a035116e" to virtual address "0x75ADB0CC" (part of module "IERTUTIL.DLL") "iexplore.exe" wrote bytes "60d2146e" to virtual address "0x6B1BFEC4" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "c03a116e" to virtual address "0x6B1BFE80" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "a035116e" to virtual address "0x75581298" (part of module "MSCTF.DLL") "iexplore.exe" wrote bytes "c03a116e" to virtual address "0x76171FB0" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "b033116e" to virtual address "0x757617CC" (part of module "ADVAPI32.DLL") "iexplore.exe" wrote bytes "b033116e" to virtual address "0x738E1250" (part of module "UXTHEME.DLL") "iexplore.exe" wrote bytes "b033116e" to virtual address "0x75E711BC" (part of module "GDI32.DLL") "iexplore.exe" wrote bytes "b033116e" to virtual address "0x75BB1164" (part of module "USP10.DLL") "iexplore.exe" wrote bytes "a035116e" to virtual address "0x7617202C" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "3030116e" to virtual address "0x6B1BFE90" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "b033116e" to virtual address "0x752314E0" (part of module "USER32.DLL") "iexplore.exe" wrote bytes "a035116e" to virtual address "0x738E139C" (part of module "UXTHEME.DLL") "iexplore.exe" wrote bytes "a035116e" to virtual address "0x77001144" (part of module "LPK.DLL") "iexplore.exe" wrote bytes "c0bf126e" to virtual address "0x76171F68" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "b033116e" to virtual address "0x74261038" (part of module "VERSION.DLL") "iexplore.exe" wrote bytes "80323e0170323e0100323e0160323e0150323e0140323e0130323e01000000002cc92776c0213e010000000090173e0150233e0100183e01601f3e0120363e010000000040363e0100000000" to virtual address "0x013E8000"2a:T3fc2,"emplate:"\n

\n \n

\n ",animations:[c.trigger("toastAnimation",[c.transition(":enter :leave",[c.query("@*",c.animateChild())])])]}),i("design:paramtypes",[u.MessageService])],t)}();e.Toast=p;var f=r([o.NgModule({imports:[l.CommonModule],exports:[p,s.SharedModule],declarations:[p,d]})],(function(){}));e.ToastModule=f},GLMf:function(t,e,n){"use strict";n.d(e,"a",(function(){return i}));var r=n("joIj"),i=function(t){this.byAccount=new r.a(t.byAccount),this.blockedAccount=new r.a(t.blockedAccount),this.createdAt=t.createdAt}},GQGV:function(t,e,n){t.exports=n("dhNx").default},GS7A:function(t,e,n){"use strict";n.r(e),n.d(e,"AnimationBuilder",(function(){return r})),n.d(e,"AnimationFactory",(function(){return i})),n.d(e,"AUTO_STYLE",(function(){return o})),n.d(e,"animate",(function(){return a})),n.d(e,"animateChild",(function(){return g})),n.d(e,"animation",(function(){return h})),n.d(e,"group",(function(){return s})),n.d(e,"keyframes",(function(){return p})),n.d(e,"query",(function(){return m})),n.d(e,"sequence",(function(){return u})),n.d(e,"stagger",(function(){return y})),n.d(e,"state",(function(){return d})),n.d(e,"style",(function(){return c})),n.d(e,"transition",(function(){return f})),n.d(e,"trigger",(function(){return l})),n.d(e,"useAnimation",(function(){return v})),n.d(e,"NoopAnimationPlayer",(function(){return _})),n.d(e,"\u0275AnimationGroupPlayer",(function(){return C})),n.d(e,"\u0275PRE_STYLE",(function(){return w}));var r=function(){},i=function(){},o="*";function l(t,e){return{type:7,name:t,definitions:e,options:{}}}function a(t,e){return void 0===e&&(e=null),{type:4,styles:e,timings:t}}function s(t,e){return void 0===e&&(e=null),{type:3,steps:t,options:e}}function u(t,e){return void 0===e&&(e=null),{type:2,steps:t,options:e}}function c(t){return{type:6,styles:t,offset:null}}function d(t,e,n){return{type:0,name:t,styles:e,options:n}}function p(t){return{type:5,steps:t}}function f(t,e,n){return void 0===n&&(n=null),{type:1,expr:t,animation:e,options:n}}function h(t,e){return void 0===e&&(e=null),{type:8,animation:t,options:e}}function g(t){return void 0===t&&(t=null),{type:9,options:t}}function v(t,e){return void 0===e&&(e=null),{type:10,animation:t,options:e}}function m(t,e,n){return void 0===n&&(n=null),{type:11,selector:t,animation:e,options:n}}function y(t,e){return{type:12,timings:t,animation:e}}function b(t){Promise.resolve(null).then(t)}var _=function(){function t(t,e){void 0===t&&(t=0),void 0===e&&(e=0),this._onDoneFns=[],this._onStartFns=[],this._onDestroyFns=[],this._started=!1,this._destroyed=!1,this._finished=!1,this.parentPlayer=null,this.totalTime=t+e}return t.prototype._onFinish=function(){this._finished||(this._finished=!0,this._onDoneFns.forEach((function(t){return t()})),this._onDoneFns=[])},t.prototype.onStart=function(t){this._onStartFns.push(t)},t.prototype.onDone=function(t){this._onDoneFns.push(t)},t.prototype.onDestroy=function(t){this._onDestroyFns.push(t)},t.prototype.hasStarted=function(){return this._started},t.prototype.init=function(){},t.prototype.play=function(){this.hasStarted()||(this._onStart(),this.triggerMicrotask()),this._started=!0},t.prototype.triggerMicrotask=function(){var t=this;b((function(){return t._onFinish()}))},t.prototype._onStart=function(){this._onStartFns.forEach((function(t){return t()})),this._onStartFns=[]},t.prototype.pause=function(){},t.prototype.restart=function(){},t.prototype.finish=function(){this._onFinish()},t.prototype.destroy=function(){this._destroyed||(this._destroyed=!0,this.hasStarted()||this._onStart(),this.finish(),this._onDestroyFns.forEach((function(t){return t()})),this._onDestroyFns=[])},t.prototype.reset=function(){},t.prototype.setPosition=function(t){},t.prototype.getPosition=function(){return 0},t.prototype.triggerCallback=function(t){var e="start"==t?this._onStartFns:this._onDoneFns;e.forEach((function(t){return t()})),e.length=0},t}(),C=function(){function t(t){var e=this;this._onDoneFns=[],this._onStartFns=[],this._finished=!1,this._started=!1,this._destroyed=!1,this._onDestroyFns=[],this.parentPlayer=null,this.totalTime=0,this.players=t;var n=0,r=0,i=0,o=this.players.length;0==o?b((function(){return e._onFinish()})):this.players.forEach((function(t){t.onDone((function(){++n==o&&e._onFinish()})),t.onDestroy((function(){++r==o&&e._onDestroy()})),t.onStart((function(){++i==o&&e._onStart()}))})),this.totalTime=this.players.reduce((function(t,e){return Math.max(t,e.totalTime)}),0)}return t.prototype._onFinish=function(){this._finished||(this._finished=!0,this._onDoneFns.forEach((function(t){return t()})),this._onDoneFns=[])},t.prototype.init=function(){this.players.forEach((function(t){return t.init()}))},t.prototype.onStart=function(t){this._onStartFns.push(t)},t.prototype._onStart=function(){this.hasStarted()||(this._started=!0,this._onStartFns.forEach((function(t){return t()})),this._onStartFns=[])},t.prototype.onDone=function(t){this._onDoneFns.push(t)},t.prototype.onDestroy=function(t){this._onDestroyFns.push(t)},t.prototype.hasStarted=function(){return this._started},t.prototype.play=function(){this.parentPlayer||this.init(),this._onStart(),this.players.forEach((function(t){return t.play()}))},t.prototype.pause=function(){this.players.forEach((function(t){return t.pause()}))},t.prototype.restart=function(){this.players.forEach((function(t){return t.restart()}))},t.prototype.finish=function(){this._onFinish(),this.players.forEach((function(t){return t.finish()}))},t.prototype.destroy=function(){this._onDestroy()},t.prototype._onDestroy=function(){this._destroyed||(this._destroyed=!0,this._onFinish(),this.players.forEach((function(t){return t.destroy()})),this._onDestroyFns.forEach((function(t){return t()})),this._onDestroyFns=[])},t.prototype.reset=function(){this.players.forEach((function(t){return t.reset()})),this._destroyed=!1,this._finished=!1,this._started=!1},t.prototype.setPosition=function(t){var e=t*this.totalTime;this.players.forEach((function(t){var n=t.totalTime?Math.min(1,e/t.totalTime):1;t.setPosition(n)}))},t.prototype.getPosition=function(){var t=0;return this.players.forEach((function(e){var n=e.getPosition();t=Math.min(n,t)})),t},t.prototype.beforeDestroy=function(){this.players.forEach((function(t){t.beforeDestroy&&t.beforeDestroy()}))},t.prototype.triggerCallback=function(t){var e="start"==t?this._onStartFns:this._onDoneFns;e.forEach((function(t){return t()})),e.length=0},t}(),w="!"},GiVz:function(t,e,n){"use strict";n.d(e,"a",(function(){return En})),n.d(e,"b",(function(){return On}));var r=n("SVse"),i=n("8Y7J"),o=function(){function t(t,e){this.value=t,this.sourceSpan=e}return t.prototype.visit=function(t,e){return t.visitText(this,e)},t}(),l=function(){function t(t,e,n,r,i){this.switchValue=t,this.type=e,this.cases=n,this.sourceSpan=r,this.switchValueSourceSpan=i}return t.prototype.visit=function(t,e){return t.visitExpansion(this,e)},t}(),a=function(){function t(t,e,n,r,i){this.value=t,this.expression=e,this.sourceSpan=n,this.valueSourceSpan=r,this.expSourceSpan=i}return t.prototype.visit=function(t,e){return t.visitExpansionCase(this,e)},t}(),s=function(){function t(t,e,n,r){this.name=t,this.value=e,this.sourceSpan=n,this.valueSpan=r}return t.prototype.visit=function(t,e){return t.visitAttribute(this,e)},t}(),u=function(){function t(t,e,n,r,i,o){void 0===i&&(i=null),void 0===o&&(o=null),this.name=t,this.attrs=e,this.children=n,this.sourceSpan=r,this.startSourceSpan=i,this.endSourceSpan=o}return t.prototype.visit=function(t,e){return t.visitElement(this,e)},t}(),c=function(){function t(t,e){this.value=t,this.sourceSpan=e}return t.prototype.visit=function(t,e){return t.visitComment(this,e)},t}();function d(t,e,n){void 0===n&&(n=null);var r=[],i=t.visit?function(e){return t.visit(e,n)||e.visit(t,n)}:function(e){return e.visit(t,n)};return e.forEach((function(t){var e=i(t);e&&r.push(e)})),r}var p=function(t,e,n,r,i,o){this.nodes=t,this.placeholders=e,this.placeholderToMessage=n,this.meaning=r,this.description=i,this.id=o,this.sources=t.length?[{filePath:t[0].sourceSpan.start.file.url,startLine:t[0].sourceSpan.start.line+1,startCol:t[0].sourceSpan.start.col+1,endLine:t[t.length-1].sourceSpan.end.line+1,endCol:t[0].sourceSpan.start.col+1}]:[]},f=function(){function t(t,e){this.value=t,this.sourceSpan=e}return t.prototype.visit=function(t,e){return t.visitText(this,e)},t}(),h=function(){function t(t,e){this.children=t,this.sourceSpan=e}return t.prototype.visit=function(t,e){return t.visitContainer(this,e)},t}(),g=function(){function t(t,e,n,r){this.expression=t,this.type=e,this.cases=n,this.sourceSpan=r}return t.prototype.visit=function(t,e){return t.visitIcu(this,e)},t}(),v=function(){function t(t,e,n,r,i,o,l){this.tag=t,this.attrs=e,this.startName=n,this.closeName=r,this.children=i,this.isVoid=o,this.sourceSpan=l}return t.prototype.visit=function(t,e){return t.visitTagPlaceholder(this,e)},t}(),m=function(){function t(t,e,n){this.value=t,this.name=e,this.sourceSpan=n}return t.prototype.visit=function(t,e){return t.visitPlaceholder(this,e)},t}(),y=function(){function t(t,e,n){this.value=t,this.name=e,this.sourceSpan=n}return t.prototype.visit=function(t,e){return t.visitIcuPlaceholder(this,e)},t}(),b=function(){function t(){}return t.prototype.visitText=function(t,e){},t.prototype.visitContainer=function(t,e){var n=this;t.children.forEach((function(t){return t.visit(n)}))},t.prototype.visitIcu=function(t,e){var n=this;Object.keys(t.cases).forEach((function(e){t.cases[e].visit(n)}))},t.prototype.visitTagPlaceholder=function(t,e){var n=this;t.children.forEach((function(t){return t.visit(n)}))},t.prototype.visitPlaceholder=function(t,e){},t.prototype.visitIcuPlaceholder=function(t,e){},t}(),_=function(){function t(t,e,n,r){this.file=t,this.offset=e,this.line=n,this.col=r}return t.prototype.toString=function(){return null!=this.offset?this.line+":"+this.col:""},t.prototype.getContext=function(t,e){var n=this.file.content,r=this.offset;if(null!=r){r>n.length-1&&(r=n.length-1);for(var i=r,o=0,l=0;o0&&(o++,"\n"!==n[--r]||++l!==e););for(o=0,l=0;o]"+t.after+'")':""},t.prototype.toString=function(){var t=this.span.details?" "+this.span.details:"";return""+this.msg+this.contextualMessage()+": "+this.span.start+t},t}(),S=function(t){function e(e,n){return t.call(this,e,n)||this}return __extends(e,t),e}(E);function x(t){return t.replace(/([.*+?^=!:${}()|[\]\/\\])/g,"\\$1")}var P=new function(t,e){this.start=t,this.end=e}("{{","}}"),k=0,M=9,A=10,T=11,I=12,D=13,R=32,N=34,L=36,j=39,V=43,F=45,U=47,B=59,H=61,z=62,q=48,G=57,K=65,W=70,Y=90,$=95,Z=97,Q=102,J=110,X=114,tt=116,et=118,nt=122,rt=123,it=160;function ot(t){return t>=M&&t<=R||t===it}function lt(t){return q<=t&&t<=G}function at(t){return t>=Z&&t<=nt||t>=K&&t<=Y}var st=function(){var t={RAW_TEXT:0,ESCAPABLE_RAW_TEXT:1,PARSABLE_DATA:2};return t[t.RAW_TEXT]="RAW_TEXT",t[t.ESCAPABLE_RAW_TEXT]="ESCAPABLE_RAW_TEXT",t[t.PARSABLE_DATA]="PARSABLE_DATA",t}();function ut(t){if(":"!==t[0])return[null,t];var e=t.indexOf(":",1);if(-1===e)throw new Error('Unsupported format "'+t+'" expecting ":namespace:name"');return[t.slice(1,e),t.slice(e+1)]}function ct(t){return null===t?null:ut(t)[0]}function dt(t,e){return t?":"+t+":"+e:e}var pt={Aacute:"\xc1",aacute:"\xe1",Acirc:"\xc2",acirc:"\xe2",acute:"\xb4",AElig:"\xc6",aelig:"\xe6",Agrave:"\xc0",agrave:"\xe0",alefsym:"\u2135",Alpha:"\u0391",alpha:"\u03b1",amp:"&",and:"\u2227",ang:"\u2220",apos:"'",Aring:"\xc5",aring:"\xe5",asymp:"\u2248",Atilde:"\xc3",atilde:"\xe3",Auml:"\xc4",auml:"\xe4",bdquo:"\u201e",Beta:"\u0392",beta:"\u03b2",brvbar:"\xa6",bull:"\u2022",cap:"\u2229",Ccedil:"\xc7",ccedil:"\xe7",cedil:"\xb8",cent:"\xa2",Chi:"\u03a7",chi:"\u03c7",circ:"\u02c6",clubs:"\u2663",cong:"\u2245",copy:"\xa9",crarr:"\u21b5",cup:"\u222a",curren:"\xa4",dagger:"\u2020",Dagger:"\u2021",darr:"\u2193",dArr:"\u21d3",deg:"\xb0",Delta:"\u0394",delta:"\u03b4",diams:"\u2666",divide:"\xf7",Eacute:"\xc9",eacute:"\xe9",Ecirc:"\xca",ecirc:"\xea",Egrave:"\xc8",egrave:"\xe8",empty:"\u2205",emsp:"\u2003",ensp:"\u2002",Epsilon:"\u0395",epsilon:"\u03b5",equiv:"\u2261",Eta:"\u0397",eta:"\u03b7",ETH:"\xd0",eth:"\xf0",Euml:"\xcb",euml:"\xeb",euro:"\u20ac",exist:"\u2203",fnof:"\u0192",forall:"\u2200",frac12:"\xbd",frac14:"\xbc",frac34:"\xbe",frasl:"\u2044",Gamma:"\u0393",gamma:"\u03b3",ge:"\u2265",gt:">",harr:"\u2194",hArr:"\u21d4",hearts:"\u2665",hellip:"\u2026",Iacute:"\xcd",iacute:"\xed",Icirc:"\xce",icirc:"\xee",iexcl:"\xa1",Igrave:"\xcc",igrave:"\xec",image:"\u2111",infin:"\u221e",int:"\u222b",Iota:"\u0399",iota:"\u03b9",iquest:"\xbf",isin:"\u2208",Iuml:"\xcf",iuml:"\xef",Kappa:"\u039a",kappa:"\u03ba",Lambda:"\u039b",lambda:"\u03bb",lang:"\u27e8",laquo:"\xab",larr:"\u2190",lArr:"\u21d0",lceil:"\u2308",ldquo:"\u201c",le:"\u2264",lfloor:"\u230a",lowast:"\u2217",loz:"\u25ca",lrm:"\u200e",lsaquo:"\u2039",lsquo:"\u2018",lt:"<",macr:"\xaf",mdash:"\u2014",micro:"\xb5",middot:"\xb7",minus:"\u2212",Mu:"\u039c",mu:"\u03bc",nabla:"\u2207",nbsp:"\xa0",ndash:"\u2013",ne:"\u2260",ni:"\u220b",not:"\xac",notin:"\u2209",nsub:"\u2284",Ntilde:"\xd1",ntilde:"\xf1",Nu:"\u039d",nu:"\u03bd",Oacute:"\xd3",oacute:"\xf3",Ocirc:"\xd4",ocirc:"\xf4",OElig:"\u0152",oelig:"\u0153",Ograve:"\xd2",ograve:"\xf2",oline:"\u203e",Omega:"\u03a9",omega:"\u03c9",Omicron:"\u039f",omicron:"\u03bf",oplus:"\u2295",or:"\u2228",ordf:"\xaa",ordm:"\xba",Oslash:"\xd8",oslash:"\xf8",Otilde:"\xd5",otilde:"\xf5",otimes:"\u2297",Ouml:"\xd6",ouml:"\xf6",para:"\xb6",permil:"\u2030",perp:"\u22a5",Phi:"\u03a6",phi:"\u03c6",Pi:"\u03a0",pi:"\u03c0",piv:"\u03d6",plusmn:"\xb1",pound:"\xa3",prime:"\u2032",Prime:"\u2033",prod:"\u220f",prop:"\u221d",Psi:"\u03a8",psi:"\u03c8",quot:'"',radic:"\u221a",rang:"\u27e9",raquo:"\xbb",rarr:"\u2192",rArr:"\u21d2",rceil:"\u2309",rdquo:"\u201d",real:"\u211c",reg:"\xae",rfloor:"\u230b",Rho:"\u03a1",rho:"\u03c1",rlm:"\u200f",rsaquo:"\u203a",rsquo:"\u2019",sbquo:"\u201a",Scaron:"\u0160",scaron:"\u0161",sdot:"\u22c5",sect:"\xa7",shy:"\xad",Sigma:"\u03a3",sigma:"\u03c3",sigmaf:"\u03c2",sim:"\u223c",spades:"\u2660",sub:"\u2282",sube:"\u2286",sum:"\u2211",sup:"\u2283",sup1:"\xb9",sup2:"\xb2",sup3:"\xb3",supe:"\u2287",szlig:"\xdf",Tau:"\u03a4",tau:"\u03c4",there4:"\u2234",Theta:"\u0398",theta:"\u03b8",thetasym:"\u03d1",thinsp:"\u2009",THORN:"\xde",thorn:"\xfe",tilde:"\u02dc",times:"\xd7",trade:"\u2122",Uacute:"\xda",uacute:"\xfa",uarr:"\u2191",uArr:"\u21d1",Ucirc:"\xdb",ucirc:"\xfb",Ugrave:"\xd9",ugrave:"\xf9",uml:"\xa8",upsih:"\u03d2",Upsilon:"\u03a5",upsilon:"\u03c5",Uuml:"\xdc",uuml:"\xfc",weierp:"\u2118",Xi:"\u039e",xi:"\u03be",Yacute:"\xdd",yacute:"\xfd",yen:"\xa5",yuml:"\xff",Yuml:"\u0178",Zeta:"2b:T7fce,"Count,i=e,o=t.options;if(o&&(o.params||o.delay)&&((i=e.createSubContext(o)).transformIntoNewTimeline(),null!=o.delay)){6==i.previousNode.type&&(i.currentTimeline.snapshotCurrentStyles(),i.previousNode=Xi);var l=vi(o.delay);i.delayNextStep(l)}t.steps.length&&(t.steps.forEach((function(t){return Ri(n,t,i)})),i.currentTimeline.applyStylesToKeyframe(),i.subContextCount>r&&i.transformIntoNewTimeline()),e.previousNode=t},t.prototype.visitGroup=function(t,e){var n=this,r=[],i=e.currentTimeline.currentTime,o=t.options&&t.options.delay?vi(t.options.delay):0;t.steps.forEach((function(l){var a=e.createSubContext(t.options);o&&a.delayNextStep(o),Ri(n,l,a),i=Math.max(i,a.currentTimeline.currentTime),r.push(a.currentTimeline)})),r.forEach((function(t){return e.currentTimeline.mergeTimelineCollectedStyles(t)})),e.transformIntoNewTimeline(i),e.previousNode=t},t.prototype._visitTiming=function(t,e){if(t.dynamic){var n=t.strValue;return yi(e.params?ki(n,e.params,e.errors):n,e.errors)}return{duration:t.duration,delay:t.delay,easing:t.easing}},t.prototype.visitAnimate=function(t,e){var n=e.currentAnimateTimings=this._visitTiming(t.timings,e),r=e.currentTimeline;n.delay&&(e.incrementTime(n.delay),r.snapshotCurrentStyles());var i=t.style;5==i.type?this.visitKeyframes(i,e):(e.incrementTime(n.duration),this.visitStyle(i,e),r.applyStylesToKeyframe()),e.currentAnimateTimings=null,e.previousNode=t},t.prototype.visitStyle=function(t,e){var n=e.currentTimeline,r=e.currentAnimateTimings;!r&&n.getCurrentStyleProperties().length&&n.forwardFrame();var i=r&&r.easing||t.easing;t.isEmptyStep?n.applyEmptyStep(i):n.setStyles(t.styles,i,e.errors,e.options),e.previousNode=t},t.prototype.visitKeyframes=function(t,e){var n=e.currentAnimateTimings,r=e.currentTimeline.duration,i=n.duration,o=e.createSubContext().currentTimeline;o.easing=n.easing,t.styles.forEach((function(t){o.forwardTime((t.offset||0)*i),o.setStyles(t.styles,t.easing,e.errors,e.options),o.applyStylesToKeyframe()})),e.currentTimeline.mergeTimelineCollectedStyles(o),e.transformIntoNewTimeline(r+i),e.previousNode=t},t.prototype.visitQuery=function(t,e){var n=this,r=e.currentTimeline.currentTime,i=t.options||{},o=i.delay?vi(i.delay):0;o&&(6===e.previousNode.type||0==r&&e.currentTimeline.getCurrentStyleProperties().length)&&(e.currentTimeline.snapshotCurrentStyles(),e.previousNode=Xi);var l=r,a=e.invokeQuery(t.selector,t.originalSelector,t.limit,t.includeSelf,!!i.optional,e.errors);e.currentQueryTotal=a.length;var s=null;a.forEach((function(r,i){e.currentQueryIndex=i;var a=e.createSubContext(t.options,r);o&&a.delayNextStep(o),r===e.element&&(s=a.currentTimeline),Ri(n,t.animation,a),a.currentTimeline.applyStylesToKeyframe(),l=Math.max(l,a.currentTimeline.currentTime)})),e.currentQueryIndex=0,e.currentQueryTotal=0,e.transformIntoNewTimeline(l),s&&(e.currentTimeline.mergeTimelineCollectedStyles(s),e.currentTimeline.snapshotCurrentStyles()),e.previousNode=t},t.prototype.visitStagger=function(t,e){var n=e.parentContext,r=e.currentTimeline,i=t.timings,o=Math.abs(i.duration),l=o*(e.currentQueryTotal-1),a=o*e.currentQueryIndex;switch(i.duration<0?"reverse":i.easing){case"reverse":a=l-a;break;case"full":a=n.currentStaggerTime}var s=e.currentTimeline;a&&s.delayNextStep(a);var u=s.currentTime;Ri(this,t.animation,e),e.previousNode=t,n.currentStaggerTime=r.currentTime-u+(r.startTime-n.currentTimeline.startTime)},t}(),Xi={},to=function(){function t(t,e,n,r,i,o,l,a){this._driver=t,this.element=e,this.subInstructions=n,this._enterClassName=r,this._leaveClassName=i,this.errors=o,this.timelines=l,this.parentContext=null,this.currentAnimateTimings=null,this.previousNode=Xi,this.subContextCount=0,this.options={},this.currentQueryIndex=0,this.currentQueryTotal=0,this.currentStaggerTime=0,this.currentTimeline=a||new eo(this._driver,e,0),l.push(this.currentTimeline)}return Object.defineProperty(t.prototype,"params",{get:function(){return this.options.params},enumerable:!0,configurable:!0}),t.prototype.updateOptions=function(t,e){var n=this;if(t){var r=t,i=this.options;null!=r.duration&&(i.duration=vi(r.duration)),null!=r.delay&&(i.delay=vi(r.delay));var o=r.params;if(o){var l=i.params;l||(l=this.options.params={}),Object.keys(o).forEach((function(t){e&&l.hasOwnProperty(t)||(l[t]=ki(o[t],l,n.errors))}))}}},t.prototype._copyOptions=function(){var t={};if(this.options){var e=this.options.params;if(e){var n=t.params={};Object.keys(e).forEach((function(t){n[t]=e[t]}))}}return t},t.prototype.createSubContext=function(e,n,r){void 0===e&&(e=null);var i=n||this.element,o=new t(this._driver,i,this.subInstructions,this._enterClassName,this._leaveClassName,this.errors,this.timelines,this.currentTimeline.fork(i,r||0));return o.previousNode=this.previousNode,o.currentAnimateTimings=this.currentAnimateTimings,o.options=this._copyOptions(),o.updateOptions(e),o.currentQueryIndex=this.currentQueryIndex,o.currentQueryTotal=this.currentQueryTotal,o.parentContext=this,this.subContextCount++,o},t.prototype.transformIntoNewTimeline=function(t){return this.previousNode=Xi,this.currentTimeline=this.currentTimeline.fork(this.element,t),this.timelines.push(this.currentTimeline),this.currentTimeline},t.prototype.appendInstructionToTimeline=function(t,e,n){var r={duration:null!=e?e:t.duration,delay:this.currentTimeline.currentTime+(null!=n?n:0)+t.delay,easing:""},i=new no(this._driver,t.element,t.keyframes,t.preStyleProps,t.postStyleProps,r,t.stretchStartingKeyframe);return this.timelines.push(i),r},t.prototype.incrementTime=function(t){this.currentTimeline.forwardTime(this.currentTimeline.duration+t)},t.prototype.delayNextStep=function(t){t>0&&this.currentTimeline.delayNextStep(t)},t.prototype.invokeQuery=function(t,e,n,r,i,o){var l=[];if(r&&l.push(this.element),t.length>0){t=(t=t.replace($i,"."+this._enterClassName)).replace(Zi,"."+this._leaveClassName);var a=this._driver.query(this.element,t,1!=n);0!==n&&(a=n<0?a.slice(a.length+n,a.length):a.slice(0,n)),l.push.apply(l,a)}return i||0!=l.length||o.push('`query("'+e+'")` returned zero elements. (Use `query("'+e+'", { optional: true })` if you wish to allow this.)'),l},t}(),eo=function(){function t(t,e,n,r){this._driver=t,this.element=e,this.startTime=n,this._elementTimelineStylesLookup=r,this.duration=0,this._previousKeyframe={},this._currentKeyframe={},this._keyframes=new Map,this._styleSummary={},this._pendingStyles={},this._backFill={},this._currentEmptyStepKeyframe=null,this._elementTimelineStylesLookup||(this._elementTimelineStylesLookup=new Map),this._localTimelineStyles=Object.create(this._backFill,{}),this._globalTimelineStyles=this._elementTimelineStylesLookup.get(e),this._globalTimelineStyles||(this._globalTimelineStyles=this._localTimelineStyles,this._elementTimelineStylesLookup.set(e,this._localTimelineStyles)),this._loadKeyframe()}return t.prototype.containsAnimation=function(){switch(this._keyframes.size){case 0:return!1;case 1:return this.getCurrentStyleProperties().length>0;default:return!0}},t.prototype.getCurrentStyleProperties=function(){return Object.keys(this._currentKeyframe)},Object.defineProperty(t.prototype,"currentTime",{get:function(){return this.startTime+this.duration},enumerable:!0,configurable:!0}),t.prototype.delayNextStep=function(t){var e=1==this._keyframes.size&&Object.keys(this._pendingStyles).length;this.duration||e?(this.forwardTime(this.currentTime+t),e&&this.snapshotCurrentStyles()):this.startTime+=t},t.prototype.fork=function(e,n){return this.applyStylesToKeyframe(),new t(this._driver,e,n||this.currentTime,this._elementTimelineStylesLookup)},t.prototype._loadKeyframe=function(){this._currentKeyframe&&(this._previousKeyframe=this._currentKeyframe),this._currentKeyframe=this._keyframes.get(this.duration),this._currentKeyframe||(this._currentKeyframe=Object.create(this._backFill,{}),this._keyframes.set(this.duration,this._currentKeyframe))},t.prototype.forwardFrame=function(){this.duration+=1,this._loadKeyframe()},t.prototype.forwardTime=function(t){this.applyStylesToKeyframe(),this.duration=t,this._loadKeyframe()},t.prototype._updateStyle=function(t,e){this._localTimelineStyles[t]=e,this._globalTimelineStyles[t]=e,this._styleSummary[t]={time:this.currentTime,value:e}},t.prototype.allowOnlyTimelineStyles=function(){return this._currentEmptyStepKeyframe!==this._currentKeyframe},t.prototype.applyEmptyStep=function(t){var e=this;t&&(this._previousKeyframe.easing=t),Object.keys(this._globalTimelineStyles).forEach((function(t){e._backFill[t]=e._globalTimelineStyles[t]||Wr.AUTO_STYLE,e._currentKeyframe[t]=Wr.AUTO_STYLE})),this._currentEmptyStepKeyframe=this._currentKeyframe},t.prototype.setStyles=function(t,e,n,r){var i=this;e&&(this._previousKeyframe.easing=e);var o=r&&r.params||{},l=function(t,e){var n,r={};return t.forEach((function(t){"*"===t?(n=n||Object.keys(e)).forEach((function(t){r[t]=Wr.AUTO_STYLE})):_i(t,!1,r)})),r}(t,this._globalTimelineStyles);Object.keys(l).forEach((function(t){var e=ki(l[t],o,n);i._pendingStyles[t]=e,i._localTimelineStyles.hasOwnProperty(t)||(i._backFill[t]=i._globalTimelineStyles.hasOwnProperty(t)?i._globalTimelineStyles[t]:Wr.AUTO_STYLE),i._updateStyle(t,e)}))},t.prototype.applyStylesToKeyframe=function(){var t=this,e=this._pendingStyles,n=Object.keys(e);0!=n.length&&(this._pendingStyles={},n.forEach((function(n){t._currentKeyframe[n]=e[n]})),Object.keys(this._localTimelineStyles).forEach((function(e){t._currentKeyframe.hasOwnProperty(e)||(t._currentKeyframe[e]=t._localTimelineStyles[e])})))},t.prototype.snapshotCurrentStyles=function(){var t=this;Object.keys(this._localTimelineStyles).forEach((function(e){var n=t._localTimelineStyles[e];t._pendingStyles[e]=n,t._updateStyle(e,n)}))},t.prototype.getFinalKeyframe=function(){return this._keyframes.get(this.duration)},Object.defineProperty(t.prototype,"properties",{get:function(){var t=[];for(var e in this._currentKeyframe)t.push(e);return t},enumerable:!0,configurable:!0}),t.prototype.mergeTimelineCollectedStyles=function(t){var e=this;Object.keys(t._styleSummary).forEach((function(n){var r=e._styleSummary[n],i=t._styleSummary[n];(!r||i.time>r.time)&&e._updateStyle(n,i.value)}))},t.prototype.buildKeyframes=function(){var t=this;this.applyStylesToKeyframe();var e=new Set,n=new Set,r=1===this._keyframes.size&&0===this.duration,i=[];this._keyframes.forEach((function(o,l){var a=_i(o,!0);Object.keys(a).forEach((function(t){var r=a[t];r==Wr["\u0275PRE_STYLE"]?e.add(t):r==Wr.AUTO_STYLE&&n.add(t)})),r||(a.offset=l/t.duration),i.push(a)}));var o=e.size?Mi(e.values()):[],l=n.size?Mi(n.values()):[];if(r){var a=i[0],s=bi(a);a.offset=0,s.offset=1,i=[a,s]}return Wi(this.element,i,o,l,this.duration,this.startTime,this.easing,!1)},t}(),no=function(t){function e(e,n,r,i,o,l,a){void 0===a&&(a=!1);var s=this;return(s=t.call(this,e,n,l.delay)||this).element=n,s.keyframes=r,s.preStyleProps=i,s.postStyleProps=o,s._stretchStartingKeyframe=a,s.timings={duration:l.duration,delay:l.delay,easing:l.easing},s}return __extends(e,t),e.prototype.containsAnimation=function(){return this.keyframes.length>1},e.prototype.buildKeyframes=function(){var t=this.keyframes,e=this.timings,n=e.delay,r=e.duration,i=e.easing;if(this._stretchStartingKeyframe&&n){var o=[],l=r+n,a=n/l,s=_i(t[0],!1);s.offset=0,o.push(s);var u=_i(t[0],!1);u.offset=ro(a),o.push(u);for(var c=t.length-1,d=1;d<=c;d++){var p=_i(t[d],!1);p.offset=ro((n+p.offset*r)/l),o.push(p)}r=l,n=0,i="",t=o}return Wi(this.element,t,this.preStyleProps,this.postStyleProps,r,n,i,!0)},e}(eo);function ro(t,e){void 0===e&&(e=3);var n=Math.pow(10,e-1);return Math.round(t*n)/n}var io=function(){},oo=function(t){function e(){return null!==t&&t.apply(this,arguments)||this}return __extends(e,t),e.prototype.normalizePropertyName=function(t,e){return Ti(t)},e.prototype.normalizeStyleValue=function(t,e,n,r){var i="",o=n.toString().trim();if(lo[e]&&0!==n&&"0"!==n)if("number"==typeof n)i="px";else{var l=n.match(/^[+-]?[\d\.]+([a-z]*)$/);l&&0==l[1].length&&r.push("Please provide a CSS unit value for "+t+":"+n)}return o+i},e}(io),lo=function(t){var e={};return t.forEach((function(t){return e[t]=!0})),e}("width height minWidth minHeight maxWidth maxHeight left top bottom right fontSize outlineWidth outlineOffset paddingTop paddingLeft paddingBottom paddingRight marginTop marginLeft marginBottom marginRight borderRadius borderWidth borderTopWidth borderLeftWidth borderRightWidth borderBottomWidth textIndent perspective".split(" "));function ao(t,e,n,r,i,o,l,a,s,u,c,d,p){return{type:0,element:t,triggerName:e,isRemovalTransition:i,fromState:n,fromStyles:o,toState:r,toStyles:l,timelines:a,queriedElements:s,preStyleProps:u,postStyleProps:c,totalTime:d,errors:p}}var so={},uo=function(){function t(t,e,n){this._triggerName=t,this.ast=e,this._stateStyles=n}return t.prototype.match=function(t,e,n,r){return function(t,e,n,r,i){return t.some((function(t){return t(e,n,r,i)}))}(this.ast.matchers,t,e,n,r)},t.prototype.buildStyles=function(t,e,n){var r=this._stateStyles["*"],i=this._stateStyles[t],o=r?r.buildStyles(e,n):{};return i?i.buildStyles(e,n):o},t.prototype.build=function(t,e,n,r,i,o,l,a,s,u){var c=[],d=this.ast.options&&this.ast.options.params||so,p=this.buildStyles(n,l&&l.params||so,c),f=a&&a.params||so,h=this.buildStyles(r,f,c),g=new Set,v=new Map,m=new Map,y="void"===r,b={params:Object.assign({},d,f)},_=u?[]:Qi(t,e,this.ast.animation,i,o,p,h,b,s,c),C=0;if(_.forEach((function(t){C=Math.max(t.duration+t.delay,C)})),c.length)return ao(e,this._triggerName,n,r,y,p,h,[],[],v,m,C,c);_.forEach((function(t){var n=t.element,r=ti(v,n,{});t.preStyleProps.forEach((function(t){return r[t]=!0}));var i=ti(m,n,{});t.postStyleProps.forEach((function(t){return i[t]=!0})),n!==e&&g.add(n)}));var w=Mi(g.values());return ao(e,this._triggerName,n,r,y,p,h,_,w,v,m,C)},t}(),co=function(){function t(t,e){this.styles=t,this.defaultParams=e}return t.prototype.buildStyles=function(t,e){var n={},r=bi(this.defaultParams);return Object.keys(t).forEach((function(e){var n=t[e];null!=n&&(r[e]=n)})),this.styles.styles.forEach((function(t){if("string"!=typeof t){var i=t;Object.keys(i).forEach((function(t){var o=i[t];o.length>1&&(o=ki(o,r,e)),n[t]=o}))}})),n},t}(),po=function(){function t(t,e){var n=this;this.name=t,this.ast=e,this.transitionFactories=[],this.states={},e.states.forEach((function(t){n.states[t.name]=new co(t.style,t.options&&t.options.params||{})})),fo(this.states,"true","1"),fo(this.states,"false","0"),e.transitions.forEach((function(e){n.transitionFactories.push(new uo(t,e,n.states))})),this.fallbackTransition=new uo(t,{type:1,animation:{type:2,steps:[],options:null},matchers:[function(t,e){return!0}],options:null,queryCount:0,depCount:0},this.states)}return Object.defineProperty(t.prototype,"containsQueries",{get:function(){return this.ast.queryCount>0},enumerable:!0,configurable:!0}),t.prototype.matchTransition=function(t,e,n,r){return this.transitionFactories.find((function(i){return i.match(t,e,n,r)}))||null},t.prototype.matchStyles=function(t,e,n){return this.fallbackTransition.buildStyles(t,e,n)},t}();function fo(t,e,n){t.hasOwnProperty(e)?t.hasOwnProperty(n)||(t[n]=t[e]):t.hasOwnProperty(n)&&(t[e]=t[n])}var ho=new Yi,go=function(){function t(t,e,n){this.bodyNode=t,this._driver=e,this._normalizer=n,this._animations={},this._playersById={},this.players=[]}return t.prototype.register=function(t,e){var n=[],r=Bi(this._driver,e,n);if(n.length)throw new Error("Unable to build the animation due to the following errors: "+n.join("\n"));this._animations[t]=r},t.prototype._buildPlayer=function(t,e,n){var r=t.element,i=Zr(0,this._normalizer,0,t.keyframes,e,n);return this._driver.animate(r,i,t.duration,t.delay,t.easing,[],!0)},t.prototype.create=function(t,e,n){var r=this;void 0===n&&(n={});var i,o=[],l=this._animations[t],a=new Map;if(l?(i=Qi(this._driver,e,l,"ng-enter","ng-leave",{},{},n,ho,o)).forEach((function(t){var e=ti(a,t.element,{});t.postStyleProps.forEach((function(t){return e[t]=null}))})):(o.push("The requested animation doesn't exist or has already been destroyed"),i=[]),o.length)throw new Error("Unable to create the animation due to the following errors: "+o.join("\n"));a.forEach((function(t,e){Object.keys(t).forEach((function(n){t[n]=r._driver.computeStyle(e,n,Wr.AUTO_STYLE)}))}));var s=$r(i.map((function(t){var e=a.get(t.element);return r._buildPlayer(t,{},e)})));return this._playersById[t]=s," (Indicator: "line.me"; File: "SSL") "makeStyleAst(t,e);let a=null!=n.offset?n.offset:function(t){if("string"==typeof t)return null;let e=null;if(Array.isArray(t))t.forEach(t=>{if(ho(t)&&t.hasOwnProperty("offset")){const n=t;e=parseFloat(n.offset),delete n.offset}});else if(ho(t)&&t.hasOwnProperty("offset")){const n=t;e=parseFloat(n.offset),delete n.offset}return e}(n.styles),u=0;return null!=a&&(i++,u=n.offset=a),s=s||u<0||u>1,o=o||u0&&i{const o=c>0?i==d?1:c*i:r[i],s=o*f;e.currentTime=h+p.delay+s,p.duration=s,this._validateStyleAst(t,e),t.offset=o,n.styles.push(t)}),n}visitReference(t,e){return{type:8,animation:Jr(this,$r(t.animation),e),options:po(t.options)}}visitAnimateChild(t,e){return e.depCount++,{type:9,options:po(t.options)}}visitAnimateRef(t,e){return{type:10,animation:this.visitReference(t.animation,e),options:po(t.options)}}visitQuery(t,e){const n=e.currentQuerySelector,i=t.options||{};e.queryCount++,e.currentQuery=t;const[r,o]=function(t){const e=!!t.split(/\s*,\s*/).find(t=>t==oo);return e&&(t=t.replace(so,"")),[t=t.replace(/@\*/g,Ar).replace(/@\w+/g,t=>Ar+"-"+t.substr(1)).replace(/:animating/g,Dr),e]}(t.selector);e.currentQuerySelector=n.length?n+" "+r:r,dr(e.collectedStyles,e.currentQuerySelector,{});const s=Jr(this,$r(t.animation),e);return e.currentQuery=null,e.currentQuerySelector=n,{type:11,selector:r,limit:i.limit||0,optional:!!i.optional,includeSelf:o,animation:s,originalSelector:t.selector,options:po(t.options)}}visitStagger(t,e){e.currentQuery||e.errors.push("stagger() can only be used inside of query()");const n="full"===t.timings?{duration:0,delay:0,easing:"full"}:Lr(t.timings,e.errors,!0);return{type:12,animation:Jr(this,$r(t.animation),e),timings:n,options:null}}}class co{constructor(t){this.errors=t,this.queryCount=0,this.depCount=0,this.currentTransition=null,this.currentQuery=null,this.currentQuerySelector=null,this.currentAnimateTimings=null,this.currentTime=0,this.collectedStyles={},this.options=null}}function ho(t){return!Array.isArray(t)&&"object"==typeof t}function po(t){var e;return t?(t=Vr(t)).params&&(t.params=(e=t.params)?Vr(e):null):t={},t}function fo(t,e,n){return{duration:t,delay:e,easing:n}}function go(t,e,n,i,r,o,s=null,l=!1){return{type:1,element:t,keyframes:e,preStyleProps:n,postStyleProps:i,duration:r,delay:o,totalTime:r+o,easing:s,subTimeline:l}}class mo{constructor(){this._map=new Map}consume(t){let e=this._map.get(t);return e?this._map.delete(t):e=[],e}append(t,e){let n=this._map.get(t);n||this._map.set(t,n=[]),n.push(...e)}has(t){return this._map.has(t)}clear(){this._map.clear()}}const vo=1,bo=new RegExp(":enter","g"),yo=new RegExp(":leave","g");function _o(t,e,n,i,r,o={},s={},l,a,u=[]){return(new Co).buildKeyframes(t,e,n,i,r,o,s,l,a,u)}class Co{buildKeyframes(t,e,n,i,r,o,s,l,a,u=[]){a=a||new mo;const c=new Oo(t,e,a,i,r,u,[]);c.options=l,c.currentTimeline.setStyles([o],null,c.errors,l),Jr(this,n,c);const d=c.timelines.filter(t=>t.containsAnimation());if(d.length&&Object.keys(s).length){const t=d[d.length-1];t.allowOnlyTimelineStyles()||t.setStyles([s],null,c.errors,l)}return d.length?d.map(t=>t.buildKeyframes()):[go(e,[],[],[],0,0,"",!1)]}visitTrigger(t,e){}visitState(t,e){}visitTransition(t,e){}visitAnimateChild(t,e){const n=e.subInstructions.consume(e.element);if(n){const i=e.createSubContext(t.options),r=e.currentTimeline.currentTime,o=this._visitSubInstructions(n,i,i.options);r!=o&&e.transformIntoNewTimeline(o)}e.previousNode=t}visitAnimateRef(t,e){const n=e.createSubContext(t.options);n.transformIntoNewTimeline(),this.visitReference(t.animation,n),e.transformIntoNewTimeline(n.currentTimeline.currentTime),e.previousNode=t}_visitSubInstructions(t,e,n){let i=e.currentTimeline.currentTime;const r=null!=n.duration?Rr(n.duration):null,o=null!=n.delay?Rr(n.delay):null;return 0!==r&&t.forEach(t=>{const n=e.appendInstructionToTimeline(t,r,o);i=Math.max(i,n.duration+n.delay)}),i}visitReference(t,e){e.updateOptions(t.options,!0),Jr(this,t.animation,e),e.previousNode=t}visitSequence(t,e){const n=e.subContextCount;let i=e;const r=t.options;if(r&&(r.params||r.delay)&&((i=e.createSubContext(r)).transformIntoNewTimeline(),null!=r.delay)){6==i.previousNode.type&&(i.currentTimeline.snapshotCurrentStyles(),i.previousNode=wo);const t=Rr(r.delay);i.delayNextStep(t)}t.steps.length&&(t.steps.forEach(t=>Jr(this,t,i)),i.currentTimeline.applyStylesToKeyframe(),i.subContextCount>n&&i.transformIntoNewTimeline()),e.previousNode=t}visitGroup(t,e){const n=[];let i=e.currentTimeline.currentTime;const r=t.options&&t.options.delay?Rr(t.options.delay):0;t.steps.forEach(o=>{const s=e.createSubContext(t.options);r&&s.delayNextStep(r),Jr(this,o,s),i=Math.max(i,s.currentTimeline.currentTime),n.push(s.currentTimeline)}),n.forEach(t=>e.currentTimeline.mergeTimelineCollectedStyles(t)),e.transformIntoNewTimeline(i),e.previousNode=t}_visitTiming(t,e){if(t.dynamic){const n=t.strValue;return Lr(e.params?Gr(n,e.params,e.errors):n,e.errors)}return{duration:t.duration,delay:t.delay,easing:t.easing}}visitAnimate(t,e){const n=e.currentAnimateTimings=this._visitTiming(t.timings,e),i=e.currentTimeline;n.delay&&(e.incrementTime(n.delay),i.snapshotCurrentStyles());const r=t.style;5==r.type?this.visitKeyframes(r,e):(e.incrementTime(n.duration),this.visitStyle(r,e),i.applyStylesToKeyframe()),e.currentAnimateTimings=null,e.previousNode=t}visitStyle(t,e){const n=e.currentTimeline,i=e.currentAnimateTimings;!i&&n.getCurrentStyleProperties().length&&n.forwardFrame();const r=i&&i.easing||t.easing;t.isEmptyStep?n.applyEmptyStep(r):n.setStyles(t.styles,r,e.errors,e.options),e.previousNode=t}visitKeyframes(t,e){const n=e.currentAnimateTimings,i=e.currentTimeline.duration,r=n.duration,o=e.createSubContext().currentTimeline;o.easing=n.easing,t.styles.forEach(t=>{o.forwardTime((t.offset||0)*r),o.setStyles(t.styles,t.easing,e.errors,e.options),o.applyStylesToKeyframe()}),e.currentTimeline.mergeTimelineCollectedStyles(o),e.transformIntoNewTimeline(i+r),e.previousNode=t}visitQuery(t,e){const n=e.currentTimeline.currentTime,i=t.options||{},r=i.delay?Rr(i.delay):0;r&&(6===e.previousNode.type||0==n&&e.currentTimeline.getCurrentStyleProperties().length)&&(e.currentTimeline.snapshotCurrentStyles(),e.previousNode=wo);let o=n;const s=e.invokeQuery(t.selector,t.originalSelector,t.limit,t.includeSelf,!!i.optional,e.errors);e.currentQueryTotal=s.length;let l=null;s.forEach((n,i)=>{e.currentQueryIndex=i;const s=e.createSubContext(t.options,n);r&&s.delayNextStep(r),n===e.element&&(l=s.currentTimeline),Jr(this,t.animation,s),s.currentTimeline.applyStylesToKeyframe(),o=Math.max(o,s.currentTimeline.currentTime)}),e.currentQueryIndex=0,e.currentQueryTotal=0,e.transformIntoNewTimeline(o),l&&(e.currentTimeline.mergeTimelineCollectedStyles(l),e.currentTimeline.snapshotCurrentStyles()),e.previousNode=t}visitStagger(t,e){const n=e.parentContext,i=e.currentTimeline,r=t.timings,o=Math.abs(r.duration),s=o*(e.currentQueryTotal-1);let l=o*e.currentQueryIndex;switch(r.duration<0?"reverse":r.easing){case"reverse":l=s-l;break;case"full":l=n.currentStaggerTime}const a=e.currentTimeline;l&&a.delayNextStep(l);const u=a.currentTime;Jr(this,t.animation,e),e.previousNode=t,n.currentStaggerTime=i.currentTime-u+(i.startTime-n.currentTimeline.startTime)}}const wo={};class Oo{constructor(t,e,n,i,r,o,s,l){this._driver=t,this.element=e,this.subInstructions=n,this._enterClassName=i,this._leaveClassName=r,this.errors=o,this.timelines=s,this.parentContext=null,this.currentAnimateTimings=null,this.previousNode=wo,this.subContextCount=0,this.options={},this.currentQueryIndex=0,this.currentQueryTotal=0,this.currentStaggerTime=0,this.currentTimeline=l||new Eo(this._driver,e,0),s.push(this.currentTimeline)}get params(){return this.options.params}updateOptions(t,e){if(!t)return;const n=t;let i=this.options;null!=n.duration&&(i.duration=Rr(n.duration)),null!=n.delay&&(i.delay=Rr(n.delay));const r=n.params;if(r){let t=i.params;t||(t=this.options.params={}),Object.keys(r).forEach(n=>{e&&t.hasOwnProperty(n)||(t[n]=Gr(r[n],t,this.errors))})}}_copyOptions(){const t={};if(this.options){const e=this.options.params;if(e){const n=t.params={};Object.keys(e).forEach(t=>{n[t]=e[t]})}}return t}createSubContext(t=null,e,n){const i=e||this.element,r=new Oo(this._driver,i,this.subInstructions,this._enterClassName,this._leaveClassName,this.errors,this.timelines,this.currentTimeline.fork(i,n||0));return r.previousNode=this.previousNode,r.currentAnimateTimings=this.currentAnimateTimings,r.options=this._copyOptions(),r.updateOptions(t),r.currentQueryIndex=this.currentQueryIndex,r.currentQueryTotal=this.currentQueryTotal,r.parentContext=this,this.subContextCount++,r}transformIntoNewTimeline(t){return this.previousNode=wo,this.currentTimeline=this.currentTimeline.fork(this.element,t),this.timelines.push(this.currentTimeline),this.currentTimeline}appendInstructionToTimeline(t,e,n){const i={duration:null!=e?e:t.duration,delay:this.currentTimeline.currentTime+(null!=n?n:0)+t.delay,easing:""},r=new So(this._driver,t.element,t.keyframes,t.preStyleProps,t.postStyleProps,i,t.stretchStartingKeyframe);return this.timelines.push(r),i}incrementTime(t){this.currentTimeline.forwardTime(this.currentTimeline.duration+t)}delayNextStep(t){t>0&&this.currentTimeline.delayNextStep(t)}invokeQuery(t,e,n,i,r,o){let s=[];if(i&&s.push(this.element),t.length>0){t=(t=t.replace(bo,"."+this._enterClassName)).replace(yo,"."+this._leaveClassName);let e=this._driver.query(this.element,t,1!=n);0!==n&&(e=n<0?e.slice(e.length+n,e.length):e.slice(0,n)),s.push(...e)}return r||0!=s.length||o.push(`\`query("${e}")\` returned zero elements. (Use \`query("${e}", { optional: true })\` if you wish to allow this.)`),s}}class Eo{constructor(t,e,n,i){this._driver=t,this.element=e,this.startTime=n,this._elementTimelineStylesLookup=i,this.duration=0,this._previousKeyframe={},this._currentKeyframe={},this._keyframes=new Map,this._styleSummary={},this._pendingStyles={},this._backFill={},this._currentEmptyStepKeyframe=null,this._elementTimelineStylesLookup||(this._elementTimelineStylesLookup=new Map),this._localTimelineStyles=Object.create(this._backFill,{}),this._globalTimelineStyles=this._elementTimelineStylesLookup.get(e),this._globalTimelineStyles||(this._globalTimelineStyles=this._localTimelineStyles,this._elementTimelineStylesLookup.set(e,this._localTimelineStyles)),this._loadKeyframe()}containsAnimation(){switch(this._keyframes.size){case 0:return!1;case 1:return this.getCurrentStyleProperties().length>0;default:return!0}}getCurrentStyleProperties(){return Object.keys(this._currentKeyframe)}get currentTime(){return this.startTime+this.duration}delayNextStep(t){const e=1==this._keyframes.size&&Object.keys(this._pendingStyles).length;this.duration||e?(this.forwardTime(this.currentTime+t),e&&this.snapshotCurrentStyles()):this.startTime+=t}fork(t,e){return this.applyStylesToKeyframe(),new Eo(this._driver,t,e||this.currentTime,this._elementTimelineStylesLookup)}_loadKeyframe(){this._currentKeyframe&&(this._previousKeyframe=this._currentKeyframe),this._currentKeyframe=this._keyframes.get(this.duration),this._currentKeyframe||(this._currentKeyframe=Object.create(this._backFill,{}),this._keyframes.set(this.duration,this._currentKeyframe))}forwardFrame(){this.duration+=vo,this._loadKeyframe()}forwardTime(t){this.applyStylesToKeyframe(),this.duration=t,this._loadKeyframe()}_updateStyle(t,e){this._localTimelineStyles[t]=e,this._globalTimelineStyles[t]=e,this._styleSummary[t]={time:this.currentTime,value:e}}allowOnlyTimelineStyles(){return this._currentEmptyStepKeyframe!==this._currentKeyframe}applyEmptyStep(t){t&&(this._previousKeyframe.easing=t),Object.keys(this._globalTimelineStyles).forEach(t=>{this._backFill[t]=this._globalTimelineStyles[t]||rr.AUTO_STYLE,this._currentKeyframe[t]=rr.AUTO_STYLE}),this._currentEmptyStepKeyframe=this._currentKeyframe}setStyles(t,e,n,i){e&&(this._previousKeyframe.easing=e);const r=i&&i.params||{},o=function(t,e){const n={};let i;return t.forEach(t=>{"*"===t?(i=i||Object.keys(e)).forEach(t=>{n[t]=rr.AUTO_STYLE}):jr(t,!1,n)}),n}(t,this._globalTimelineStyles);Object.keys(o).forEach(t=>{const e=Gr(o[t],r,n);this._pendingStyles[t]=e,this._localTimelineStyles.hasOwnProperty(t)||(this._backFill[t]=this._globalTimelineStyles.hasOwnProperty(t)?this._globalTimelineStyles[t]:rr.AUTO_STYLE),this._updateStyle(t,e)})}applyStylesToKeyframe(){const t=this._pendingStyles,e=Object.keys(t);0!=e.length&&(this._pendingStyles={},e.forEach(e=>{this._currentKeyframe[e]=t[e]}),Object.keys(this._localTimelineStyles).forEach(t=>{this._currentKeyframe.hasOwnProperty(t)||(this._currentKeyframe[t]=this._localTimelineStyles[t])}))}snapshotCurrentStyles(){Object.keys(this._localTimelineStyles).forEach(t=>{const e=this._localTimelineStyles[t];this._pendingStyles[t]=e,this._updateStyle(t,e)})}getFinalKeyframe(){return this._keyframes.get(this.duration)}get properties(){const t=[];for(let e in this._currentKeyframe)t.push(e);return t}mergeTimelineCollectedStyles(t){Object.keys(t._styleSummary).forEach(e=>{const n=this._styleSummary[e],i=t._styleSummary[e];(!n||i.time>n.time)&&this._updateStyle(e,i.value)})}buildKeyframes(){this.applyStylesToKeyframe();const t=new Set,e=new Set,n=1===this._keyframes.size&&0===this.duration;let i=[];this._keyframes.forEach((r,o)=>{const s=jr(r,!0);Object.keys(s).forEach(n=>{const i=s[n];i==rr["\u0275PRE_STYLE"]?t.add(n):i==rr.AUTO_STYLE&&e.add(n)}),n||(s.offset=o/this.duration),i.push(s)});const r=t.size?Kr(t.values()):[],o=e.size?Kr(e.values()):[];if(n){const t=i[0],e=Vr(t);t.offset=0,e.offset=1,i=[t,e]}return go(this.element,i,r,o,this.duration,this.startTime,this.easing,!1)}}class So extends Eo{constructor(t,e,n,i,r,o,s=!1){super(t,e,o.delay),this.element=e,this.keyframes=n,this.preStyleProps=i,this.postStyleProps=r,this._stretchStartingKeyframe=s,this.timings={duration:o.duration,delay:o.delay,easing:o.easing}}containsAnimation(){return this.keyframes.length>1}buildKeyframes(){let t=this.keyframes,{delay:e,duration:n,easing:i}=this.timings;if(this._stretchStartingKeyframe&&e){const r=[],o=n+e,s=e/o,l=jr(t[0],!1);l.offset=0,r.push(l);const a=jr(t[0],!1);a.offset=xo(s),r.push(a);const u=t.length-1;for(let i=1;i<=u;i++){let s=jr(t[i],!1);s.offset=xo((e+s.offset*n)/o),r.push(s)}n=o,e=0,i="",t=r}return go(this.element,t,this.preStyleProps,this.postStyleProps,n,e,i,!0)}}function xo(t,e=3){const n=Math.pow(10,e-1);return Math.round(t*n)/n}class ko{}class Po extends ko{normalizePropertyName(t,e){return Yr(t)}normalizeStyleValue(t,e,n,i){let r="";const o=n.toString().trim();if(Mo[e]&&0!==n&&"0"!==n)if("number"==typeof n)r="px";else{const e=n.match(/^[+-]?[\d\.]+([a-z]*)$/);e&&0==e[1].length&&i.push(`Please provide a CSS unit value for ${t}:${n}`)}return o+r}}const Mo=(()=>(function(t){const e={};return t.forEach(t=>e[t]=!0),e})("width height minWidth minHeight maxWidth maxHeight left top bottom right fontSize outlineWidth outlineOffset paddingTop paddingLeft paddingBottom paddingRight marginTop marginLeft marginBottom marginRight borderRadius borderWidth borderTopWidth borderLeftWidth borderRightWidth borderBottomWidth textIndent perspective".split(" ")))();function To(t,e,n,i,r,o,s,l,a,u,c,d,h){return{type:0,element:t,triggerName:e,isRemovalTransition:r,fromState:n,fromStyles:o,toState:i,toStyles:s,timelines:l,queriedElements:a,preStyleProps:u,postStyleProps:c,totalTime:d,errors:h}}const Ao={};class Io{constructor(t,e,n){this._triggerName=t,this.ast=e,this._stateStyles=n}match(t,e,n,i){return function(t,e,n,i,r){return t.some(t=>t(e,n,i,r))}(this.ast.matchers,t,e,n,i)}buildStyles(t,e,n){const i=this._stateStyles["*"],r=this._stateStyles[t],o=i?i.buildStyles(e,n):{};return r?r.buildStyles(e,n):o}build(t,e,n,i,r,o,s,l,a,u){const c=[],d=this.ast.options&&this.ast.options.params||Ao,h=this.buildStyles(n,s&&s.params||Ao,c),p=l&&l.params||Ao,f=this.buildStyles(i,p,c),g=new Set,m=new Map,v=new Map,b="void"===i,y={params:Object.assign({},d,p)},_=u?[]:_o(t,e,this.ast" (Indicator: "line.me"; File: "SSL")2c:Ta2c,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:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$22"}}],["$","$L23",null,{"initialData":{"schema_version":"1.0.15","sha256":"c05d4a4831e24215e71c431b2d6e389f6b68702c1b8bbb753b2def6920edda73","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1790301160432,"unified_at":"2026-09-25T01:52:40.432Z","metadata":{"hashes":{"sha256":"c05d4a4831e24215e71c431b2d6e389f6b68702c1b8bbb753b2def6920edda73","sha1":"8b9a5802fd9cb2595a1e4d4a0321806cb2a1b38c","md5":"c945f32c99a6d32d371d6db5039e4771","sha512":"b3158d0398737a9ad51146d2afb7c1131ef5a7f47d064a8e2fa29257e1382a2a516bd5fa125d1d4f33943963089e8c7ab0e662ce50826b31de281317a268b976","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://vid.lelux.fi/videos/watch/fa26ecc7-9432-43e8-87ea-730405eb284a","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1586859556000,"last_seen":1678057830000,"last_multi_scan":1678057830000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":3},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":6},"sandbox_signatures":{"informative_count":17,"suspicious_count":3,"malicious_count":0,"total":20},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"cleandns":{"name":"CleanDNS","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"CleanDNS","permalink":"https://www.cleandns.com/","extra_fields":[{"name":"domain","value":"vid.lelux.fi"},{"name":"percent","value":0},{"name":"reports_count","value":0}]},"scamadviser":{"name":"ScamAdviser","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"ScamAdviser","permalink":"https://www.scamadviser.com/?utm_source=hybridanalysis"},"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-classification","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/","report_link":"https://urlscan.io/result/fda6de0a-6808-47ce-bc3f-4a55101701ad/","extra_fields":[{"name":"percent","value":0}]}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Execution","technique":"Service Execution","attack_id":"T1035","attack_id_wiki":"https://attack.mitre.org/techniques/T1035","identifiers":[{"type":"informative","value":"Opened the service control manager"}],"sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"tactic":"Persistence","technique":"Hooking","attack_id":"T1179","attack_id_wiki":"https://attack.mitre.org/techniques/T1179","identifiers":[{"type":"informative","value":"Installs hooks/patches the running process"}],"sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"tactic":"Defense Evasion","technique":"Modify Registry","attack_id":"T1112","attack_id_wiki":"https://attack.mitre.org/techniques/T1112","identifiers":[{"type":"informative","value":"Accesses System Certificates Settings"}],"sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"tactic":"Defense Evasion","technique":"Deobfuscate/Decode Files or Information","attack_id":"T1140","attack_id_wiki":"https://attack.mitre.org/techniques/T1140","identifiers":[{"type":"suspicious","value":"Contains escaped byte string (often part of obfuscated shellcode)"}],"sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/techniques/T1012","identifiers":[{"type":"informative","value":"Reads the registry for installed applications"},{"type":"informative","value":"Accesses Software Policy Settings"},{"type":"informative","value":"Reads the Equation Editor Class Identifier (CLSID)"}],"sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"tactic":"Command and Control","technique":"Commonly Used Port","attack_id":"T1043","attack_id_wiki":"https://attack.mitre.org/techniques/T1043","identifiers":[{"type":"suspicious","value":"Sends traffic on typical HTTP outbound port, but without HTTP header"}],"sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]}],"sandbox_signatures":[{"level":"informative","category":"Environment Awareness","name":"Reads the registry for installed applications","description":"\"iexplore.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\IEXPLORE.EXE\")\n \"iexplore.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\IEXPLORE.EXE\")\n \"iexplore.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\OUTLOOK.EXE\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":10,"id":"registry-55","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"Exploit/Shellcode","name":"Reads the Equation Editor Class Identifier (CLSID)","description":"\"iexplore.exe\" (Path: \"HKCR\\SOFTWARE\\CLASSES\\CLSID\\{00021700-0000-0000-C000-000000000046}\\IMPLEMENTED CATEGORIES\\{00021493-0000-0000-C000-000000000046}\")\n \"iexplore.exe\" (Path: \"HKCR\\SOFTWARE\\CLASSES\\CLSID\\{0002CE02-0000-0000-C000-000000000046}\\IMPLEMENTED CATEGORIES\\{00021493-0000-0000-C000-000000000046}\")\n \"iexplore.exe\" (Path: \"HKCR\\SOFTWARE\\CLASSES\\CLSID\\{0003000B-0000-0000-C000-000000000046}\\IMPLEMENTED CATEGORIES\\{00021493-0000-0000-C000-000000000046}\")\n \"iexplore.exe\" (Path: \"HKCR\\SOFTWARE\\CLASSES\\CLSID\\{00021700-0000-0000-C000-000000000046}\\IMPLEMENTED CATEGORIES\\{00021494-0000-0000-C000-000000000046}\")\n \"iexplore.exe\" (Path: \"HKCR\\SOFTWARE\\CLASSES\\CLSID\\{0002CE02-0000-0000-C000-000000000046}\\IMPLEMENTED CATEGORIES\\{00021494-0000-0000-C000-000000000046}\")\n \"iexplore.exe\" (Path: \"HKCR\\SOFTWARE\\CLASSES\\CLSID\\{0003000B-0000-0000-C000-000000000046}\\IMPLEMENTED CATEGORIES\\{00021494-0000-0000-C000-000000000046}\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":10,"id":"registry-65","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"General","name":"Accesses Software Policy Settings","description":"$24","origin":"Registry Access","mitre_attack_id":"T1012","relevance":10,"id":"registry-18","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"General","name":"Accesses System Certificates Settings","description":"$25","origin":"Registry Access","mitre_attack_id":"T1112","relevance":10,"id":"registry-17","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"General","name":"Contacts domains","description":"\"isrg.trustid.ocsp.identrust.com\"\n \"ocsp.int-x3.letsencrypt.org\"\n \"vid.lelux.fi\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"51.158.147.50:443\"\n \"23.36.85.183:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\IsoScope_398_IESQMMUTEX_0_519\"\n \"Local\\InternetShortcutMutex\"\n \"IsoScope_398_IESQMMUTEX_0_519\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"IsoScope_398_IESQMMUTEX_0_331\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"Local\\ZonesCacheCounterMutex\"\n \"IsoScope_398_IESQMMUTEX_0_303\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_920\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"IsoScope_398_IE_EarlyTabStart_0xc90_Mutex\"\n \"UpdatingNewTabPageData\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"IsoScope_398_ConnHashTable<920>_HashTable_Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_920\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"General","name":"Opened the service control manager","description":"\"iexplore.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)\n \"iexplore.exe\" called \"OpenSCManager\" requesting access rights \"0XE0000000L\"","origin":"API Call","mitre_attack_id":"T1035","relevance":10,"id":"api-77","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"General","name":"Overview of unique CLSIDs touched in registry","description":"$26","origin":"Registry Access","relevance":3,"id":"registry-72","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"iexplore.exe\" (UID: 00047472-00000920) was launched with new environment variables: \"PATH=\"%PROGRAMFILES%\\Internet Explorer;\"\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"iexplore.exe\" with commandline \"https://vid.lelux.fi/videos/watch/fa26ecc7-9432-43e8-87ea-730405 ...\" (UID: 00047472-00000920)\n Spawned process \"iexplore.exe\" with commandline \"SCODEF:920 CREDAT:275457 /prefetch:2\" (UID: 00047511-00002540)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"General","name":"Spawns new processes that are not known child processes","description":"Spawned process \"iexplore.exe\" with commandline \"https://vid.lelux.fi/videos/watch/fa26ecc7-9432-43e8-87ea-730405 ...\" (UID: 00047472-00000920)\n Spawned process \"iexplore.exe\" with commandline \"SCODEF:920 CREDAT:275457 /prefetch:2\" (UID: 00047511-00002540)","origin":"Monitored Target","relevance":3,"id":"target-103","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"Installation/Persistance","name":"Creates new processes","description":"\"iexplore.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe\", Handle: 896)","origin":"API Call","relevance":8,"id":"api-2","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"$27","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$28","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"informative","category":"Unusual Characteristics","name":"Installs hooks/patches the running process","description":"$29","origin":"Hook Detection","mitre_attack_id":"T1179","relevance":10,"id":"hooks-8","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"suspicious","category":"Exploit/Shellcode","name":"Contains escaped byte string (often part of obfuscated shellcode)","description":"$2a","origin":"File/Memory","mitre_attack_id":"T1140","relevance":10,"id":"string-15","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 51.158.147.50 on port 443 is sent without HTTP header\n TCP traffic to 23.36.85.183 on port 443 is sent without HTTP header","origin":"Network Traffic","mitre_attack_id":"T1043","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"level":"suspicious","category":"Spyware/Information Retrieval","name":"Found an instant messenger related domain","description":"$2b","origin":"File/Memory","relevance":10,"id":"string-61","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 3 domains and 3 hosts"}],"sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":29,"imported_dlls_count":131,"dropped_files_count":0,"extracted_files_count":50,"files_written_count":160,"files_deleted_count":0,"registry_keys_created_count":9,"registry_keys_modified_count":0,"registry_keys_deleted_count":4,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":13,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":2,"dns_resolutions_count":3,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"5e958e24db5dd700253095eb","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["FRA","USA"],"submit_name":"c05d4a4831e24215e71c431b2d6e389f6b68702c1b8bbb753b2def6920edda73.url","analysis_start_time":"2020-04-14T10:19:20+00:00","indicators_count":{"informative":17,"suspicious":3,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"51.158.147.50","port":443,"protocol":"TCP","country":"France","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"address":"23.36.85.183","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]}],"dns_resolutions":[{"domain":"isrg.trustid.ocsp.identrust.com","address":"23.63.253.73","ttl":17,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"domain":"ocsp.int-x3.letsencrypt.org","address":"23.63.253.48","ttl":4343,"country":"United States","registrar_name":"eNom, Inc.","registrar_organization":"Internet Security Research Group","registrar_name_servers":"A9-67.AKAM.NET","registrar_creation_date":"2014-07-07T19:54:04+00:00","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"domain":"vid.lelux.fi","address":"51.158.147.50","ttl":199,"country":"France","registrar_name_servers":"ns1.lelux.fi","registrar_creation_date":"2018-03-12T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}],"processes":[{"pid":1132,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\c05d4a4831e24215e71c431b2d6e389f6b68702c1b8bbb753b2def6920edda73.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00047320-00001132","icon":"$2c"},{"pid":920,"ppid":1132,"name":"iexplore.exe","command_line":"https://vid.lelux.fi/videos/watch/fa26ecc7-9432-43e8-87ea-730405eb284a","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00047320-00001132","uid":"00047472-00000920"},{"pid":2540,"ppid":920,"name":"iexplore.exe","command_line":"SCODEF:920 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00047472-00000920","uid":"00047511-00002540"}],"all_imported_dlls":["sechost.dll","uxtheme.dll","bcryptprimitives.dll","UIAnimation.dll","mfplat.dll","mf.dll","userenv.dll","dwmapi.dll","ncrypt.dll","wintrust.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","propsys.dll","rpcrt4.dll","shlwapi.dll","rpcss.dll","credssp.dll","winhttp.dll","msvcr90.dll","atl.dll","nlaapi.dll","setupapi.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","lpk.dll","oleaut32.dll","crypt32.dll","dhcpcsvc.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","rsaenh.dll","RpcRtRemote.dll","gdi32.dll","bcrypt.dll","winmm.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","winnsi.dll","wkscli.dll","ieproxy.dll","DWrite.dll","SensApi.dll","mscoree.dll","api-ms-win-downlevel-user32-l1-1-0.dll","ole32.dll","netutils.dll","webio.dll","mshtml.dll","secur32.dll","advapi32.dll","kernel32.dll","api-ms-win-downlevel-version-l1-1-0.dll","imm32.dll","netprofm.dll","dnsapi.dll","FWPUCLNT.DLL","MSOHEV.DLL","jsIntl.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","msasn1.dll","dhcpcsvc6.dll","mscorwks.dll","comctl32.dll","wininet.dll","msvcr100.dll","WSHTCPIP.DLL","version.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","netapi32.dll","wshqos.dll","ksuser.dll","sspicli.dll","ExplorerFrame.dll","comdlg32.dll","IPHLPAPI.DLL","api-ms-win-core-synch-l1-2-0.dll","normaliz.dll","cryptsp.dll","msimg32.dll","ws2_32.dll","Wldap32.dll","deploy.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","URLREDIR.DLL","usp10.dll","wship6.dll","powrprof.dll","urlmon.dll","duser.dll","KernelBase.dll","srvcli.dll","jp2ssv.dll","profapi.dll","WindowsCodecs.dll","oleaccrc.dll","mlang.dll","msimtf.dll","dui70.dll","ntmarta.dll","ssv.dll","t2embed.dll","cfgmgr32.dll","user32.dll","msctf.dll","cryptbase.dll","nsi.dll","apphelp.dll","mscoreei.dll","imagehlp.dll","npmproxy.dll","shell32.dll","avrt.dll","actxprxy.dll","msvcrt.dll","mswsock.dll","rasadhlp.dll","mshtmlmedia.dll","xmllite.dll","sqmapi.dll","dxgi.dll","gpapi.dll","sxs.dll","d3d10warp.dll","d3d11.dll","devobj.dll","IEShims.dll","clbcatq.dll","ieframe.dll","ieui.dll","schannel.dll","cryptnet.dll","iertutil.dll","oleacc.dll","d2d1.dll","jscript9.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"en-US.2","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"0JU0GRVK.txt","sha256":"f8809ca63cacceacaf12ff7efa840c219e670fa0ae85dc4b925d29f4951a4988","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"4PKMWKZG.txt","sha256":"281d1abd3a2b11a3a7dd395373a7829baf843ee08d12ddfd5099a0064e8b590f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"6OIUHLEJ.txt","sha256":"a10d9c5c1e6ee71220399aad76481868d7244e2316d453918a4bb4063c161642","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"6Y0AUCME.txt","sha256":"32e183b1b164266ba860bffd2d9b84de0c5842f48643548efaa6875c9da2aecc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"8F9H8F98.txt","sha256":"54cef95c00c3b022f98e6270b94ec44782255f6af2f21b5f1eae4ad5c1ef9b0f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"VZ6W7ZPU.txt","sha256":"cd3d2509456018ddb357a63c17ecc5f9b45b3791dbf9f1d3797fc095d7501c99","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"ver99BA.tmp","sha256":"8684403da59628039e9b4b0d245c5b7e1fac1242a087ded44eaf3b792e4a231e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"ver99C9.tmp","sha256":"8684403da59628039e9b4b0d245c5b7e1fac1242a087ded44eaf3b792e4a231e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"imagestore.dat","sha256":"efd27e5a63d3aa9e3f8a2efd248ec057f881209bdcd770ab37e80b8e0e8f2780","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"5492136EE58BFA1670441356607A2E20","sha256":"adbc51129afec4ec77709a567d20842bb13bf21cd50cac804b6b72060d68947c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"405ba1b35df3e41e6afe3a157450d33007e776c960821d3d9c0f1de36740c6f0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sha256":"8d3665d049d39ca46203cdc9ec5eabefedd5c751c3f29d60acad87fb9fdb3890","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sha256":"2c2da4e0336b043338049ac913533cd47381c0b4b5b6a81bb99f68f004d504b6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"E49827401028F7A0F97B5576C77A26CB_7CE95D8DCA26FE957E7BD7D76F353B08","sha256":"41107ba9ec1f6833968d69f138418ce8f7e0b3ade0e1c0b9764bf26ff5048b8a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"~DF62473955D719EB16.TMP","sha256":"0690b0c617c7a47b8f2388fb48ebd7eeb4fe029ce83777d1314ee7315c51817f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"~DFAD58FDF7C1732779.TMP","sha256":"44eacbe5054c29e45dc7b7f672dd1aa8ce0a56f43d2067812b88b33c0dd16423","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"~DFD0CD107C58F1B6DE.TMP","sha256":"dd726091a33d5063902b6a98713b9e7dd9761a26e7e7562d7e2fa79b2ec94838","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"logo.d49da684ce4fa3755723_1_.svg","sha256":"20bc7559b25fe71aef542d972e8cc32339a6e2d6ef51b4a5410c2a46659ddc7d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"runtime-es2015.192d0c6a9f19840a9988_1_.js","sha256":"c7a226e96490ad4f15d6993dd8b355e257e52766ce00afc1457c05825f9912bb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"suggestions_1_.en-US","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"_CE95813F-7E28-11EA-B853-0A0027260FBC_.dat","sha256":"41f5da31b1327a101b6d9b2191ca68b526ae48193aec7c23c9f7127b5e5348f0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"18-es5.b34134caf3c0585ce96c_1_.js","sha256":"2301b7c94305ba677a72da3290905ed7775fd3c0080241bd3b30fb7c712752b9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"config_1_.json","sha256":"229df39998f741eb7a4cab76aa071bf13ed42d983bc2ce3f4293c4b70d4cbc94","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"favicon_6_.png","sha256":"6ce82de1d9de9f610685b5904d2071fbf1e55ee03bd0b080ccbf2fe697654c03","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"fa26ecc7-9432-43e8-87ea-730405eb284a_1_.htm","sha256":"6203648280f8ff180ce4f72b6a729a724a649f5cad786a33e393f059eeefb4a6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"local_1_.json","sha256":"cda5b5167a50da91b81375d208805cedeb92ba4317704e9c9595efd4993c74f9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"favicon_2_.ico","sha256":"6d8a01dc7647bc218d003b58fe04049e24a9359900b7e0cebae76edf85b8b914","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"vid.lelux_1_.xml","sha256":"3084c90df5d585f65cb832832a4c180c0cab5f4bd433595b37639b5a6a4f6d17","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"languages_1_.json","sha256":"04074fbcd89693d6e40e4361158668470fb5adc76f13ac4b9d780f5cd4e185ae","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"6d8a01dc7647bc218d003b58fe04049e24a9359900b7e0cebae76edf85b8b914","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"categories_1_.json","sha256":"6ef2a4adebd189543aa68839103216998d63bd15d1243518f7cc63cf7545b00b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"25-es5.987810bd055266c92f9a_1_.js","sha256":"97be0bf911160647e7ac02acd0595538d81e93b839be13e69ad326bc98d831e5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"10-es5.29ba36d66b8a8e75a816_1_.js","sha256":"ef99e41d3948bf29034cad820d0be798cc2377cee99e85f73d8ede763474b9bc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"main-es5.7c0f808f1ecdb81fa0dd_1_.js","sha256":"27e1d121caf68674a36a5c53dff4c78c3c55628b557fe07ef192281cb69a362f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"open-sans-v15-latin-regular.9dce7f01715340861bdb_1_.eot","sha256":"ee6885417a5772a42be3280cf34581001cafd5548d12b66b5466e53f05dabf96","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"open-sans-v15-latin-700.148a6749baa5f658a451_1_.eot","sha256":"625d0421d949907ca40db04a28c30ae187e5b4ec71dae68c28524a3b9f5ea5ac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"favicon_3_.ico","sha256":"6d8a01dc7647bc218d003b58fe04049e24a9359900b7e0cebae76edf85b8b914","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"open-sans-v15-latin-300.76b56857ebbae3a5a689_1_.eot","sha256":"d91bcb7ae5ecabef0459a6b71960c3226ba15e423da1b9f3a8e3921ba35e96ab","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"polyfills-es2015.65ea6e6f4e37ff0c4ef4_1_.js","sha256":"e6d939ed0b424f2101b3fb7140a78e669b553b8bea80899bfa3b586d1127d22a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"_D688684B-7E28-11EA-B853-0A0027260FBC_.dat","sha256":"d5ec04dae44547ec18bf45171872803bd4b38fc93e05577546e4f55d8fc7cb53","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"polyfills-es5.c936b7f507c23a646a9c_1_.js","sha256":"8e38de854b0dfe261f9e9d78a0e83e9a27808cf49dc8c2686201e021f5f6dcd5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"main-es2015.7c0f808f1ecdb81fa0dd_1_.js","sha256":"45e085863ce9f20f4b9256f5db2ab2e0701405fcdde200cbc94025a65b196806","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"privacies_1_.json","sha256":"162089bad5d68d0d6357721ebc5c52439c3aeb7dcd24eea7c5794d1af09f577c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"runtime-es5.192d0c6a9f19840a9988_1_.js","sha256":"f386cb9150fb6924edeb9a5b06ad09ac528e278e1690435c0812846fdba140d9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"licences_1_.json","sha256":"1d5030bc9df7a68ed54b1189a4cddfbd1f32a88b183b431479eaa1674ba66249","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"captions_1_.json","sha256":"64715fd619934768704d109dde30ca2751ed7c630008d7c804935bcbbfa68690","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"RecoveryStore._CE95813D-7E28-11EA-B853-0A0027260FBC_.dat","sha256":"1738155e2e16010e28f6bdbd2d9812033dc3d66708d59487f5c4ea4437c56653","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"common-es5.f44087a81ffc82d87215_1_.js","sha256":"79082da781ae5f336978871f000efe5de7962923313a10e47b9b80f42b354b28","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]}],"files_written":[{"path":"%WINDIR%\\System32\\rundll32.exe","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\AppPatch\\AcLayers.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\System32\\en-US\\rundll32.exe.mui","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"C:\\c05d4a4831e24215e71c431b2d6e389f6b68702c1b8bbb753b2def6920edda73.url","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\UrlBlockManager\\urlblocklist.bin","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Low","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\Low","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%TEMP%\\~DFAD58FDF7C1732779.TMP","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{CE95813F-7E28-11EA-B853-0A0027260FBC}.dat","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%TEMP%\\~DFD0CD107C58F1B6DE.TMP","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%PROGRAMFILES%\\MICROS~3\\Office14\\URLREDIR.DLL","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\plugin.jar","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\bin\\javaws.exe","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\System32\\ieframe.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\System32\\stdole2.tlb","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01}","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\E49827401028F7A0F97B5576C77A26CB_7CE95D8DCA26FE957E7BD7D76F353B08","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\E49827401028F7A0F97B5576C77A26CB_C95AFE779A09B6B8C03D47AD8998ACC3","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\644B8874112055B5E195ECB0E8F243A4","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\runtime-es2015.192d0c6a9f19840a9988[1].js","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\runtime-es5.192d0c6a9f19840a9988[1].js","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\polyfills-es5.c936b7f507c23a646a9c[1].js","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\main-es2015.7c0f808f1ecdb81fa0dd[1].js","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\polyfills-es2015.65ea6e6f4e37ff0c4ef4[1].js","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\main-es5.7c0f808f1ecdb81fa0dd[1].js","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{CE95813D-7E28-11EA-B853-0A0027260FBC}.dat","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_A7A8E86FCB076C144BD04C40841E7074","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\82CB34DD3343FE727DF8890D352E0D8F","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001d.db","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"C:\\Users","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%USERPROFILE%\\AppData","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"C:\\share","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\System32\\en-US\\shell32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[1].png","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[2].png","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[3].png","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[4].png","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[5].png","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[6].png","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\categories[1].json","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\languages[1].json","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\licences[1].json","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\local[1].json","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\config[1].json","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\privacies[1].json","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\privacies[2].json","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\open-sans-v15-latin-300.76b56857ebbae3a5a689[1].eot","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\open-sans-v15-latin-700.148a6749baa5f658a451[1].eot","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\10-es5.29ba36d66b8a8e75a816[1].js","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\25-es5.987810bd055266c92f9a[1].js","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{D688684B-7E28-11EA-B853-0A0027260FBC}.dat","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\VersionManager\\ver99BA.tmp","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\VersionManager\\ver99C9.tmp","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4PKMWKZG.txt","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.2","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VG8BU31O.txt","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\4F7NV88N.txt","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\I88H097X.txt","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6OIUHLEJ.txt","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\search[1].json","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0JU0GRVK.txt","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8F9H8F98.txt","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\suggestions[1].en-US","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_49FC544F04082FD9F64F9EFB226AF8B5","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VZ6W7ZPU.txt","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\6Y0AUCME.txt","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"C:\\https:\\vid.lelux.fi\\videos\\watch\\fa26ecc7-9432-43e8-87ea-730405eb284a","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Low","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Internet Explorer\\UserData\\Low","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Tracking Protection","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Feeds","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\TabRoaming","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\PlayReady","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE\\Low","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException\\Low","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache\\Low","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache\\Low","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%TEMP%\\Low","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\en\\iexplore.exe.mui","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%USERPROFILE%\\Favorites\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\System32\\Macromed\\Flash\\Flash32_27_0_0_187.ocx","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\System32\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\E49827401028F7A0F97B5576C77A26CB_7CE95D8DCA26FE957E7BD7D76F353B08","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\21811A8DE52EDC7D5CB28AC221514666","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\5492136EE58BFA1670441356607A2E20","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\5492136EE58BFA1670441356607A2E20","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\fa26ecc7-9432-43e8-87ea-730405eb284a[1].htm","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%TEMP%\\~qryibto.tmp","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\styles.8fd8ea453597655d7634[1].css","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\Fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ERV9N2EC.txt","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\L8DC4A47.txt","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\System32\\en-US\\jscript9.dll.mui","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DOMStore\\HVI1ZDNF\\vid.lelux[1].xml","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[3].ico","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\favicon[1].png","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\favicon[2].png","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\System32\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\Fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\imagestore\\3mt7jhv\\imagestore.dat","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\open-sans-v15-latin-regular.9dce7f01715340861bdb[1].eot","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\logo.d49da684ce4fa3755723[1].svg","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\common-es5.f44087a81ffc82d87215[1].js","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\18-es5.b34134caf3c0585ce96c[1].js","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\captions[1].json","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%TEMP%\\~DF62473955D719EB16.TMP","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\ZN1CVVJS.txt","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe.config","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{DBC80044-A445-435B-BC74-9C25C1C588A9}\\IEXPLORE\\","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"key":"HKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\TCPIP\\PARAMETERS\\","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TOOLBAR\\","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_398_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"IsoScope_398_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"IsoScope_398_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"IsoScope_398_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_920","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"IsoScope_398_IE_EarlyTabStart_0xc90_Mutex","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"IsoScope_398_ConnHashTable<920>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_920","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"IsoScope_398_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"Local\\https://vid.lelux.fi/","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_398_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5e958e24db5dd700253095eb"}]}]}},"report_ids":{"sandbox_job_ids":["5e958e24db5dd700253095eb"]}}}]]}] 1d:null 21:[["$","title","0",{"children":"Sample c05d4a4831e2… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample c05d4a4831e2…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/c05d4a4831e24215e71c431b2d6e389f6b68702c1b8bbb753b2def6920edda73"}],["$","meta","4",{"property":"og:title","content":"Sample c05d4a4831e2… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample c05d4a4831e2…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/c05d4a4831e24215e71c431b2d6e389f6b68702c1b8bbb753b2def6920edda73"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample c05d4a4831e2… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample c05d4a4831e2…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2d","11",{}]]