25:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 28:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 26:T406,"Nullsoft Install System v2.46.5-Unicode" (Indicator: "requestedExecutionLevel level="highestAvailable"")27:T2efe,Found reference to API (Indicator: "AdjustTokenPrivileges"; Source: "sample.bin"), Found reference to API (Indicator: "MulDiv"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteFileW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileAttributesW"; Source: "sample.bin"), Found reference to API (Indicator: "SetForegroundWindow"; Source: "sample.bin"), Found reference to API (Indicator: "SeShutdownPrivilege"; Source: "sample.bin"), Found reference to API (Indicator: "GetExitCodeProcess"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "Process32FirstW"; Source: "sample.bin"), Found reference to API (Indicator: "IsWindowEnabled"; Source: "sample.bin"), Found reference to API (Indicator: "CreateDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetPathFromIDListW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateWindowExW"; Source: "sample.bin"), Found reference to API (Indicator: "DefWindowProcW"; Source: "sample.bin"), Found reference to API (Indicator: "RegDeleteKeyW"; Source: "sample.bin"), Found reference to API (Indicator: "LoadLibraryW"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalFree"; Source: "sample.bin"), Found reference to API (Indicator: "LoadLibraryA"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileSize"; Source: "sample.bin"), Found reference to API (Indicator: "Module32FirstW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileVersionInfoSizeW"; Source: "sample.bin"), Found reference to API (Indicator: "SystemParametersInfoW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateThread"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleA"; Source: "sample.bin"), Found reference to API (Indicator: "RegQueryValueExW"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleW"; Source: "sample.bin"), Found reference to API (Indicator: "RegSetValueExW"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileAttributesW"; Source: "sample.bin"), Found reference to API (Indicator: "RegOpenKeyExW"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcatW"; Source: "sample.bin"), Found reference to API (Indicator: "CharNextW"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetFolderPathW"; Source: "sample.bin"), Found reference to API (Indicator: "CharNextA"; Source: "sample.bin"), Found reference to API (Indicator: "SetWindowPos"; Source: "sample.bin"), Found reference to API (Indicator: "RegDeleteKeyExW"; Source: "sample.bin"), Found reference to API (Indicator: "ShowWindow"; Source: "sample.bin"), Found reference to API (Indicator: "SetClipboardData"; Source: "sample.bin"), Found reference to API (Indicator: "DispatchMessageW"; Source: "sample.bin"), Found reference to API (Indicator: "VerQueryValueW"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteObject"; Source: "sample.bin"), Found reference to API (Indicator: "RegEnumValueW"; Source: "sample.bin"), Found reference to API (Indicator: "IsWindowVisible"; Source: "sample.bin"), Found reference to API (Indicator: "LookupPrivilegeValueW"; Source: "sample.bin"), Found reference to API (Indicator: "FindFirstFileW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateToolhelp32Snapshot"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcAddress"; Source: "sample.bin"), Found reference to API (Indicator: "CreateFileW"; Source: "sample.bin"), Found reference to API (Indicator: "wsprintfA"; Source: "sample.bin"), Found reference to API (Indicator: "EnumProcesses"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "GetAsyncKeyState"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "wsprintfW"; Source: "sample.bin"), Found reference to API (Indicator: "GetTempPathW"; Source: "sample.bin"), Found reference to API (Indicator: "EnableMenuItem"; Source: "sample.bin"), Found reference to API (Indicator: "RegCloseKey"; Source: "sample.bin"), Found reference to API (Indicator: "CompareFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "RemoveDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "WideCharToMultiByte"; Source: "sample.bin"), Found reference to API (Indicator: "LoadCursorW"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalLock"; Source: "sample.bin"), Found reference to API (Indicator: "FindClose"; Source: "sample.bin"), Found reference to API (Indicator: "CloseClipboard"; Source: "sample.bin"), Found reference to API (Indicator: "IsWindow"; Source: "sample.bin"), Found reference to API (Indicator: "wvsprintfW"; Source: "sample.bin"), Found reference to API (Indicator: "RegisterClassW"; Source: "sample.bin"), Found reference to API (Indicator: "SetCurrentDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "GetTickCount"; Source: "sample.bin"), Found reference to API (Indicator: "GetDC"; Source: "sample.bin"), Found reference to API (Indicator: "AppendMenuW"; Source: "sample.bin"), Found reference to API (Indicator: "lstrlenA"; Source: "sample.bin"), Found reference to API (Indicator: "lstrlenW"; Source: "sample.bin"), Found reference to API (Indicator: "SHFileOperationW"; Source: "sample.bin"), Found reference to API (Indicator: "SetFilePointer"; Source: "sample.bin"), Found reference to API (Indicator: "CoTaskMemFree"; Source: "sample.bin"), Found reference to API (Indicator: "GetDiskFreeSpaceExW"; Source: "sample.bin"), Found reference to API (Indicator: "GetShortPathNameW"; Source: "sample.bin"), Found reference to API (Indicator: "GetSysColor"; Source: "sample.bin"), Found reference to API (Indicator: "GetPrivateProfileStringW"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemMenu"; Source: "sample.bin"), Found reference to API (Indicator: "DestroyWindow"; Source: "sample.bin"), Found reference to API (Indicator: "SelectObject"; Source: "sample.bin"), Found reference to API (Indicator: "InvalidateRect"; Source: "sample.bin"), Found reference to API (Indicator: "SHBrowseForFolderW"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcmpW"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcmpA"; Source: "sample.bin"), Found reference to API (Indicator: "ExitProcess"; Source: "sample.bin"), Found reference to API (Indicator: "OleInitialize"; Source: "sample.bin"), Found reference to API (Indicator: "CharUpperW"; Source: "sample.bin"), Found reference to API (Indicator: "WritePrivateProfileStringW"; Source: "sample.bin"), Found reference to API (Indicator: "LoadImageW"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleFileNameW"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentProcess"; Source: "sample.bin"), Found reference to API (Indicator: "GetClientRect"; Source: "sample.bin"), Found reference to API (Indicator: "LoadLibraryExW"; Source: "sample.bin"), Found reference to API (Indicator: "CopyFileW"; Source: "sample.bin"), Found reference to API (Indicator: "PostQuitMessage"; Source: "sample.bin"), Found reference to API (Indicator: "BeginPaint"; Source: "sample.bin"), Found reference to API (Indicator: "GetWindowRect"; Source: "sample.bin"), Found reference to API (Indicator: "RegDeleteValueW"; Source: "sample.bin"), Found reference to API (Indicator: "CharPrevW"; Source: "sample.bin"), Found reference to API (Indicator: "SetCursor"; Source: "sample.bin"), Found reference to API (Indicator: "OpenProcess"; Source: "sample.bin"), Found reference to API (Indicator: "ShellExecuteW"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcmpiA"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcmpiW"; Source: "sample.bin"), Found reference to API (Indicator: "Module32NextW"; Source: "sample.bin"), Found reference to API (Indicator: "FillRect"; Source: "sample.bin"), Found reference to API (Indicator: "GetDeviceCaps"; Source: "sample.bin"), Found reference to API (Indicator: "GetFullPathNameW"; Source: "sample.bin"), Found reference to API (Indicator: "GetUserDefaultUILanguage"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcpynA"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcpynW"; Source: "sample.bin"), Found reference to API (Indicator: "CoCreateInstance"; Source: "sample.bin"), Found reference to API (Indicator: "ExpandEnvironmentStringsW"; Source: "sample.bin"), Found reference to API (Indicator: "SetWindowTextW"; Source: "sample.bin"), Found reference to API (Indicator: "OleUninitialize"; Source: "sample.bin"), Found reference to API (Indicator: "EnableWindow"; Source: "sample.bin"), Found reference to API (Indicator: "GetVersionExW"; Source: "sample.bin"), Found reference to API (Indicator: "EmptyClipboard"; Source: "sample.bin"), Found reference to API (Indicator: "PeekMessageW"; Source: "sample.bin"), Found reference to API (Indicator: "SetErrorMode"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetFileInfoW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileVersionInfoW"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalUnlock"; Source: "sample.bin"), Found reference to API (Indicator: "SearchPathW"; Source: "sample.bin"), Found reference to API (Indicator: "GetCommandLineW"; Source: "sample.bin"), Found reference to API (Indicator: "MoveFileExW"; Source: "sample.bin"), Found reference to API (Indicator: "WriteFile"; Source: "sample.bin"), Found reference to API (Indicator: "CreateProcessW"; Source: "sample.bin"), Found reference to API (Indicator: "Sleep"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetSpecialFolderLocation"; Source: "sample.bin"), Found reference to API (Indicator: "EnumProcessModules"; Source: "sample.bin"), Found reference to API (Indicator: "RegCreateKeyExW"; Source: "sample.bin"), Found reference to API (Indicator: "SetTimer"; Source: "sample.bin"), Found reference to API (Indicator: "FreeLibrary"; Source: "sample.bin"), Found reference to API (Indicator: "TrackPopupMenu"; Source: "sample.bin"), Found reference to API (Indicator: "ReadFile"; Source: "sample.bin"), Found reference to API (Indicator: "FindNextFileW"; Source: "sample.bin"), Found reference to API (Indicator: "OpenProcessToken"; Source: "sample.bin"), Found reference to API (Indicator: "ExitWindowsEx"; Source: "sample.bin"), Found reference to API (Indicator: "Process32NextW"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcpyA"; Source: "sample.bin"), Found reference to API (Indicator: "RegEnumKeyW"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcpyW"; Source: "sample.bin"), Found reference to API (Indicator: "MoveFileW"; Source: "sample.bin"), Found reference to API (Indicator: "GetVersion"; Source: "sample.bin"), Found reference to API (Indicator: "ScreenToClient"; Source: "sample.bin"), Found reference to API (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "CreateFontIndirectW"; Source: "sample.bin"), Found reference to API (Indicator: "MultiByteToWideChar"; Source: "sample.bin"), Found reference to API (Indicator: "GetDiskFreeSpaceW"; Source: "sample.bin"), Found reference to API (Indicator: "GetWindowsDirectoryW"; Source: "sample.bin"), Found reference to API (Indicator: "CreatePopupMenu"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemMetrics"; Source: "sample.bin"), Found reference to API (Indicator: "GetTempFileNameW"; Source: "sample.bin"), Found reference to API (Indicator: "WaitForSingleObject"; Source: "sample.bin"), Found reference to API (Indicator: "OpenClipboard"; Source: "sample.bin"), Found reference to API (Indicator: "CloseHandle"; Source: "sample.bin")1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample c3f5a4ae601f… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample c3f5a4ae601f…. Threat score 0/100. 0/26 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"Au_.exe\",\"applicationCategory\":[\"compressed\",\"7zip\"],\"identifier\":\"c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":26},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":1},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L25",null,{"initialData":{"schema_version":"1.0.15","sha256":"c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1792822957338,"unified_at":"2026-10-24T06:22:37.338Z","metadata":{"hashes":{"sha256":"c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","sha1":"7d29b84ebcc3b31bd71f2ca7d9143c48d52a5c49","md5":"d16759f15248e9cbc3711625d49cc7ec","imphash":"be41bf7b8cc010b614bd36bbca606973","pehash":"06b2a8a9edd9ee2ea7207bb8595e0516d06441c7"},"file_info":{"file_name":"Au_.exe","file_type":["compressed","7zip"],"file_type_id":"7zip nsis","file_size":6016976,"entropy":8,"compile_timestamp":"2012-02-24T19:20:04","is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1792822923000,"last_seen":1792822923000,"last_multi_scan":1792822923000},"pe_metadata":{"is_dll":false,"is_packed":false,"section_count":6,"import_count":0,"export_count":0,"embedded_file_count":5,"sections":[{"name":".text","virtual_address":"0x1000","virtual_size":29324,"raw_size":29696},{"name":".rdata","virtual_address":"0x9000","virtual_size":11118,"raw_size":11264},{"name":".data","virtual_address":"0xc000","virtual_size":469916,"raw_size":512},{"name":".ndata","virtual_address":"0x7f000","virtual_size":675840},{"name":".rsrc","virtual_address":"0x124000","virtual_size":15408,"raw_size":15872},{"name":".reloc","virtual_address":"0x128000","virtual_size":4054,"raw_size":4096}],"section_names":[".text",".rdata",".data",".ndata",".rsrc",".reloc"],"imported_dlls":null,"imported_functions":null},"additional_metadata":[{"name":"package_manager","type":"str","values":["nsis"]}]},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":26},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":48},"sandbox_signatures":{"informative_count":56,"suspicious_count":1,"malicious_count":0,"total":57},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Discovery","technique":"System Owner/User Discovery","attack_id":"T1033","attack_id_wiki":"https://attack.mitre.org/techniques/T1033","identifiers":[{"type":"informative","value":"Able to retrieve usernames and/or user information (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Process Discovery","attack_id":"T1057","attack_id_wiki":"https://attack.mitre.org/techniques/T1057","identifiers":[{"type":"informative","value":"Contains ability to enumerate process and/or its information (API string)"},{"type":"informative","value":"Able to retrieve/open a process (API string)"},{"type":"informative","value":"Able to enumerate system processes using native API"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Create or Modify System Process","attack_id":"T1543","attack_id_wiki":"https://attack.mitre.org/techniques/T1543","identifiers":[{"type":"informative","value":"Contains ability to retrieve the contents of the STARTUPINFO structure (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Hidden Window","attack_id":"T1564.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1564/003","identifiers":[{"type":"informative","value":"Contains ability to pass information to a window procedure (API string)"},{"type":"informative","value":"Contains ability to show a graphical window (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Account Manipulation","attack_id":"T1098","attack_id_wiki":"https://attack.mitre.org/techniques/T1098","identifiers":[{"type":"informative","value":"Contains ability to modify the user configuration/privilege (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Exfiltration","technique":"Scheduled Transfer","attack_id":"T1029","attack_id_wiki":"https://attack.mitre.org/techniques/T1029","identifiers":[{"type":"informative","value":"Able to perform scheduled transfer (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Time Based Checks","attack_id":"T1497.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1497/003","identifiers":[{"type":"informative","value":"Contains ability to retrieve the time elapsed since the system was started (API string)"},{"type":"informative","value":"Contains ability to delay execution by waiting for signal/timeout (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"System Checks","attack_id":"T1497.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1497/001","identifiers":[{"type":"informative","value":"Able to identify virtual environment by using API string"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains reference to licensed c/c++ library"},{"type":"informative","value":"Contains key cryptographic functions (API string)"},{"type":"informative","value":"Contains ability to perform AES/RC4 encryption (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/techniques/T1012","identifiers":[{"type":"informative","value":"Contains registry location strings"},{"type":"informative","value":"Able to query registry keys (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Dynamic-link Library Injection","attack_id":"T1055.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1055/001","identifiers":[{"type":"informative","value":"Contains ability to load/free library (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"User Activity Based Checks","attack_id":"T1497.002","attack_id_wiki":"https://attack.mitre.org/techniques/T1497/002","identifiers":[{"type":"informative","value":"Able to identify virtual environment by using user activity (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Mail Protocols","attack_id":"T1071.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/003","identifiers":[{"type":"informative","value":"Found mail related domain names"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/techniques/T1083","identifiers":[{"type":"informative","value":"Contains ability to retrieve file and directory information (API string)"},{"type":"informative","value":"Contains ability to retrieve path in which Windows is installed (API string)"},{"type":"informative","value":"Contains ability to enumerate files on disk (API string)"},{"type":"informative","value":"Contains ability to read files (API string)"},{"type":"informative","value":"Able to rename or move file/directory (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Native API","attack_id":"T1106","attack_id_wiki":"https://attack.mitre.org/techniques/T1106","identifiers":[{"type":"informative","value":"Contains ability to load modules (API string)"},{"type":"informative","value":"Contains ability to retrieve/modify process thread (API string)"},{"type":"informative","value":"Contains ability to retrieve the fully qualified path of module (API string)"},{"type":"informative","value":"Contains ability to create/open files (API string)"},{"type":"informative","value":"Contains ability to set/get the last-error code for a calling thread (API string)"},{"type":"informative","value":"Contains ability to execute an application (API string)"},{"type":"informative","value":"Contains ability to find and load resources of specific modules (API string)"},{"type":"informative","value":"Contains ability to retrieve address of exported function from a DLL (API string)"},{"type":"informative","value":"Contains ability to execute Windows APIs"},{"type":"informative","value":"Contains ability to create a new process (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Keylogging","attack_id":"T1056.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1056/001","identifiers":[{"type":"informative","value":"Able to retrieve information about pressed keystrokes (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"System Information Discovery","attack_id":"T1082","attack_id_wiki":"https://attack.mitre.org/techniques/T1082","identifiers":[{"type":"informative","value":"Contains ability to retrieve the OS information (API string)"},{"type":"informative","value":"Able to retrieve information about the current system (API string)"},{"type":"informative","value":"Contains ability to retrieve data about the local computer (API string)"},{"type":"informative","value":"Contains ability to retrieve a module handle (API string)"},{"type":"informative","value":"Able to discover operating system information (API string)"},{"type":"informative","value":"Contains ability to retrieve the specified system metric or system configuration setting (API string)"},{"type":"informative","value":"Able to query volume/memory size (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Debugger Evasion","attack_id":"T1622","attack_id_wiki":"https://attack.mitre.org/techniques/T1622","identifiers":[{"type":"informative","value":"Contains ability to check debugger is running (API string)"},{"type":"informative","value":"Contains ability to register a top-level exception handler (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Access Token Manipulation","attack_id":"T1134","attack_id_wiki":"https://attack.mitre.org/techniques/T1134","identifiers":[{"type":"informative","value":"Contains ability to modify access token privileges (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"System Language Discovery","attack_id":"T1614.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1614/001","identifiers":[{"type":"informative","value":"Able to retrieve system language (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Screen Capture","attack_id":"T1113","attack_id_wiki":"https://attack.mitre.org/techniques/T1113","identifiers":[{"type":"informative","value":"Able to capture screen (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Local Data Staging","attack_id":"T1074.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1074/001","identifiers":[{"type":"informative","value":"Contains ability to create directories (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Windows Command Shell","attack_id":"T1059.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/003","identifiers":[{"type":"informative","value":"Contains ability to retrieve the command-line string for the current process (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"informative","value":"Contains ability to write files (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Defense Impairment","technique":"File and Directory Permissions Modification","attack_id":"T1222","attack_id_wiki":"https://attack.mitre.org/techniques/T1222","identifiers":[{"type":"informative","value":"Contains ability to modify file attributes (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Persistence","technique":"Modify Registry","attack_id":"T1112","attack_id_wiki":"https://attack.mitre.org/techniques/T1112","identifiers":[{"type":"informative","value":"Contains ability to modify registry key/value (API string)"},{"type":"informative","value":"Contains ability to disable/close registry key (API string)"},{"type":"informative","value":"Able to create/load registry keys (API string)"},{"type":"informative","value":"Able to delete registry key/value (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Impact","technique":"Service Stop","attack_id":"T1489","attack_id_wiki":"https://attack.mitre.org/techniques/T1489","identifiers":[{"type":"informative","value":"Contains ability to terminate a process (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"File Deletion","attack_id":"T1070.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1070/004","identifiers":[{"type":"informative","value":"Contains ability to delete files/directories (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Hide Artifacts","attack_id":"T1564","attack_id_wiki":"https://attack.mitre.org/techniques/T1564","identifiers":[{"type":"informative","value":"Contains reference to method used by Windows shell items (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"ListPlanting","attack_id":"T1055.015","attack_id_wiki":"https://attack.mitre.org/techniques/T1055/015","identifiers":[{"type":"informative","value":"Able to visualize and control listed components (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Clipboard Data","attack_id":"T1115","attack_id_wiki":"https://attack.mitre.org/techniques/T1115","identifiers":[{"type":"informative","value":"Able to capture drag-drop file operations"},{"type":"informative","value":"Contains ability to access clipboard data (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/techniques/T1055","identifiers":[{"type":"informative","value":"Able to inject code into another process (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Impact","technique":"Data Encrypted for Impact","attack_id":"T1486","attack_id_wiki":"https://attack.mitre.org/techniques/T1486","identifiers":[{"type":"informative","value":"Contains ability to perform encryption (API string)"},{"type":"informative","value":"Able to access crypto-related API (String)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"System Time Discovery","attack_id":"T1124","attack_id_wiki":"https://attack.mitre.org/techniques/T1124","identifiers":[{"type":"informative","value":"Able to retrieve machine time (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Impact","technique":"System Shutdown/Reboot","attack_id":"T1529","attack_id_wiki":"https://attack.mitre.org/techniques/T1529","identifiers":[{"type":"informative","value":"Contains ability to reboot/shutdown the operating system (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Able to use Microsoft's Enhanced Cryptographic Provider"},{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Application Window Discovery","attack_id":"T1010","attack_id_wiki":"https://attack.mitre.org/techniques/T1010","identifiers":[{"type":"informative","value":"Contains ability to retrieve open application windows (API string)"},{"type":"informative","value":"Contains ability to find open windows (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Token Impersonation/Theft","attack_id":"T1134.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1134/001","identifiers":[{"type":"informative","value":"Contains ability to impersonate access tokens (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"},{"type":"informative","value":"Found potential IP address in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attack_id":"T1555","attack_id_wiki":"https://attack.mitre.org/techniques/T1555","identifiers":[{"type":"informative","value":"Contains string like password/secret"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"System Location Discovery","attack_id":"T1614","attack_id_wiki":"https://attack.mitre.org/techniques/T1614","identifiers":[{"type":"informative","value":"Able to query system locale information (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Data Encoding","attack_id":"T1132","attack_id_wiki":"https://attack.mitre.org/techniques/T1132","identifiers":[{"type":"informative","value":"Contains ability to perform Base64 encoding/decoding"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Resource Development","technique":"Email Accounts","attack_id":"T1585.002","attack_id_wiki":"https://attack.mitre.org/techniques/T1585/002","identifiers":[{"type":"informative","value":"Found email domains (string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Timestomp","attack_id":"T1070.006","attack_id_wiki":"https://attack.mitre.org/techniques/T1070/006","identifiers":[{"type":"informative","value":"Contains ability to retrieve file time (API string)"},{"type":"informative","value":"Contains ability to set file time (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Lateral Movement","technique":"Lateral Tool Transfer","attack_id":"T1570","attack_id_wiki":"https://attack.mitre.org/techniques/T1570","identifiers":[{"type":"informative","value":"Contains ability to move file or directory (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Bypass User Account Control","attack_id":"T1548.002","attack_id_wiki":"https://attack.mitre.org/techniques/T1548/002","identifiers":[{"type":"suspicious","value":"Tries to obtain the highest possible privilege level without UAC dialog"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Deobfuscate/Decode Files or Information","attack_id":"T1140","attack_id_wiki":"https://attack.mitre.org/techniques/T1140","identifiers":[{"type":"informative","value":"Contains ability to perform decryption (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Email Collection","attack_id":"T1114","attack_id_wiki":"https://attack.mitre.org/techniques/T1114","identifiers":[{"type":"informative","value":"Found E-Mail address in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"informative","category":"System Security","name":"Contains ability to modify access token privileges (API string)","description":"Found reference to API \"AdjustTokenPrivileges\" (Indicator: \"AdjustTokenPrivileges\"; Source: \"sample.bin\"), Found reference to API \"SeShutdownPrivilege\" (Indicator: \"SeShutdownPrivilege\"; Source: \"sample.bin\"), Found reference to API \"LookupPrivilegeValueW\" (Indicator: \"LookupPrivilegeValue\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1134","id":"string-77","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to delete files/directories (API string)","description":"Found reference to API \"DeleteFileW\" (Indicator: \"DeleteFile\"; Source: \"sample.bin\"), Found reference to API \"RMDir: RemoveDirectory(\"%s\")\" (Indicator: \"RemoveDirectory\"; Source: \"sample.bin\"), Found reference to API \"Delete: DeleteFile on Reboot(\"%s\")\" (Indicator: \"DeleteFile\"; Source: \"sample.bin\"), Found reference to API \"Delete: DeleteFile failed(\"%s\")\" (Indicator: \"DeleteFile\"; Source: \"sample.bin\"), Found reference to API \"RemoveDirectoryW\" (Indicator: \"RemoveDirectory\"; Source: \"sample.bin\"), Found reference to API \"RMDir: RemoveDirectory invalid input(\"%s\")\" (Indicator: \"RemoveDirectory\"; Source: \"sample.bin\"), Found reference to API \"RMDir: RemoveDirectory failed(\"%s\")\" (Indicator: \"RemoveDirectory\"; Source: \"sample.bin\"), Found reference to API \"RMDir: RemoveDirectory on Reboot(\"%s\")\" (Indicator: \"RemoveDirectory\"; Source: \"sample.bin\"), Found reference to API \"Delete: DeleteFile(\"%s\")\" (Indicator: \"DeleteFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1070.004","id":"string-308","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Able to delete registry key/value (API string)","description":"Found registry deletion API: \"RegDeleteKeyW\" in \"sample.bin\", Found registry deletion API: \"RegDeleteKeyExW\" in \"sample.bin\", Found registry deletion API: \"RegDeleteValueW\" in \"sample.bin\"","origin":"sample.bin","mitre_attack_id":"T1112","id":"string-230","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to modify the user configuration/privilege (API string)","description":"Found reference to API \"SystemParametersInfoW\" (Indicator: \"SystemParametersInfo\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1098","id":"string-132","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to modify file attributes (API string)","description":"Found reference to API \"SetFileAttributes failed.\" (Indicator: \"SetFileAttributes\"; Source: \"sample.bin\"), Found reference to API \"SetFileAttributesW\" (Indicator: \"SetFileAttributes\"; Source: \"sample.bin\"), Found reference to API \"SetFileAttributes: \"%s\":%08X\" (Indicator: \"SetFileAttributes\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1222","id":"string-426","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to terminate a process (API string)","description":"Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1489","id":"string-316","sources":[{"report_type":"qsp","report_id":""}]},{"level":"suspicious","category":"System Security","name":"Tries to obtain the highest possible privilege level without UAC dialog","description":"$26","origin":"sample.bin","mitre_attack_id":"T1548.002","id":"string-31","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to write files (API string)","description":"Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1105","id":"string-535","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to execute Windows APIs","description":"$27","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-101","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to create directories (API string)","description":"Found reference to API \"CreateDirectoryW\" (Indicator: \"CreateDirectory\"; Source: \"sample.bin\"), Found reference to API \"CreateDirectory: \"%s\" created\" (Indicator: \"CreateDirectory\"; Source: \"sample.bin\"), Found reference to API \"CreateDirectory: can't create \"%s\" - a file already exists\" (Indicator: \"CreateDirectory\"; Source: \"sample.bin\"), Found reference to API \"CreateDirectory: can't create \"%s\" (err=%d)\" (Indicator: \"CreateDirectory\"; Source: \"sample.bin\"), Found reference to API \"CreateDirectory: \"%s\" (%d)\" (Indicator: \"CreateDirectory\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1074.001","id":"string-423","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to retrieve/modify process thread (API string)","description":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-161","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to show a graphical window (API string)","description":"Found reference to API \"ShowWindow\" (Indicator: \"ShowWindow\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1564.003","id":"string-208","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to create/open files (API string)","description":"Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-315","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to disable/close registry key (API string)","description":"Found reference to API \"RegCloseKey\" (Indicator: \"RegCloseKey\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1112","id":"string-345","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains reference to method used by Windows shell items (API string)","description":"Found reference to API \"SHFileOperationW\" (Indicator: \"SHFileOperation\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1564","id":"string-269","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains registry location strings","description":"\"Software\\Microsoft\\Windows\\CurrentVersion\" in Source: sample.bin","origin":"sample.bin","mitre_attack_id":"T1012","id":"string-120","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Able to retrieve/open a process (API string)","description":"Found reference to API \"OpenProcess\" (Indicator: \"OpenProcess\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1057","id":"string-272","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to execute an application (API string)","description":"Found reference to API \"ShellExecuteW\" (Indicator: \"ShellExecute\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-240","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to retrieve the command-line string for the current process (API string)","description":"Found reference to API \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1059.003","id":"string-206","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to move file or directory (API string)","description":"Found reference to API \"MoveFileExW\" (Indicator: \"MoveFile\"; Source: \"sample.bin\"), Found reference to API \"MoveFileW\" (Indicator: \"MoveFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1570","id":"string-322","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Able to rename or move file/directory (API string)","description":"Found string \"MoveFileExW\" (Indicator: \"MoveFileExW\"; Source: \"sample.bin\"), Found string \"MoveFileW\" (Indicator: \"MoveFileW\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-884","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to create a new process (API string)","description":"Found reference to API \"CreateProcessW\" (Indicator: \"CreateProcess\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-204","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Able to create/load registry keys (API string)","description":"Found registry modification API: \"RegCreateKeyExW\" in \"sample.bin\"","origin":"sample.bin","mitre_attack_id":"T1112","id":"string-307","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to set/get the last-error code for a calling thread (API string)","description":"Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-319","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve file and directory information (API string)","description":"Found reference to API \"GetFileAttributesW\" (Indicator: \"GetFileAttributes\"; Source: \"sample.bin\"), Found reference to API \"GetSystemDirectoryW\" (Indicator: \"GetSystemDirectory\"; Source: \"sample.bin\"), Found reference to API \"GetFileSize\" (Indicator: \"GetFileSize\"; Source: \"sample.bin\"), Found reference to API \"GetFileVersionInfoSizeW\" (Indicator: \"GetFileVersionInfo\"; Source: \"sample.bin\"), Found reference to API \"GetFileVersionInfoSizeW\" (Indicator: \"GetFileVersionInfoSize\"; Source: \"sample.bin\"), Found reference to API \"GetTempPathW\" (Indicator: \"GetTempPath\"; Source: \"sample.bin\"), Found reference to API \"GetFileVersionInfoW\" (Indicator: \"GetFileVersionInfo\"; Source: \"sample.bin\"), Found reference to API \"SHGetSpecialFolderLocation\" (Indicator: \"SHGetSpecialFolderLocation\"; Source: \"sample.bin\"), Found reference to API \"GetTempFileNameW\" (Indicator: \"GetTempFileName\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-207","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to enumerate process and/or its information (API string)","description":"Found reference to API \"Process32FirstW\" (Indicator: \"Process32First\"; Source: \"sample.bin\"), Found reference to API \"Module32FirstW\" (Indicator: \"Module32First\"; Source: \"sample.bin\"), Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; Source: \"sample.bin\"), Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"sample.bin\"), Found reference to API \"CreateToolhelp32Snapshot\" (Indicator: \"CreateToolhelp32Snapshot\"; Source: \"sample.bin\"), Found reference to API \"EnumProcesses\" (Indicator: \"EnumProcesses\"; Source: \"sample.bin\"), Found reference to API \"GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; Source: \"sample.bin\"), Found reference to API \"Module32NextW\" (Indicator: \"Module32Next\"; Source: \"sample.bin\"), Found reference to API \"EnumProcessModules\" (Indicator: \"EnumProcessModules\"; Source: \"sample.bin\"), Found reference to API \"Process32NextW\" (Indicator: \"Process32Next\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1057","id":"string-85","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve a module handle (API string)","description":"Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; Source: \"sample.bin\"), Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-427","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Able to query registry keys (API string)","description":"Found registry query API: \"RegQueryValueExW\" in \"sample.bin\", Found registry query API: \"RegOpenKeyExW\" in \"sample.bin\", Found registry query API: \"RegEnumValueW\" in \"sample.bin\", Found registry query API: \"RegEnumKeyW\" in \"sample.bin\"","origin":"sample.bin","mitre_attack_id":"T1012","id":"string-229","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to enumerate files on disk (API string)","description":"Found reference to API \"FindFirstFileW\" (Indicator: \"FindFirstFile\"; Source: \"sample.bin\"), Found reference to API \"FindNextFileW\" (Indicator: \"FindNextFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-83","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve address of exported function from a DLL (API string)","description":"Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-317","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Able to retrieve information about pressed keystrokes (API string)","description":"Found reference to API \"GetAsyncKeyState\" (Indicator: \"GetAsyncKeyState\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1056.001","id":"string-88","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve the time elapsed since the system was started (API string)","description":"Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1497.003","id":"string-205","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Able to capture screen (API string)","description":"Found reference to API \"GetDC\" (Indicator: \"GetDC\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1113","id":"string-78","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve the fully qualified path of module (API string)","description":"Found reference to API \"GetModuleFileNameW\" (Indicator: \"GetModuleFileName\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-164","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to read files (API string)","description":"Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-534","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve the specified system metric or system configuration setting (API string)","description":"Found reference to API \"GetSystemMetrics\" (Indicator: \"GetSystemMetrics\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-131","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to access clipboard data (API string)","description":"Found reference to API \"OpenClipboard\" (Indicator: \"OpenClipboard\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1115","id":"string-188","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to visualize and control listed components (API string)","description":"Found reference to API \"SendMessageTimeoutW\" (Indicator: \"sendmessage\"; Source: \"sample.bin\"), Found reference to API \"SendMessageW\" (Indicator: \"sendmessage\"; Source: \"sample.bin\"), Found reference to API \"FindWindowExW\" (Indicator: \"findwindow\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1055.015","id":"string-721","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to query volume/memory size (API string)","description":"Found reference to API \"GetDiskFreeSpaceExW\" (Indicator: \"GetDiskFreeSpace\"; Source: \"sample.bin\"), Found reference to API \"GetDiskFreeSpaceExW\" (Indicator: \"GetDiskFreeSpaceEx\"; Source: \"sample.bin\"), Found reference to API \"GetDiskFreeSpaceW\" (Indicator: \"GetDiskFreeSpace\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-193","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to retrieve system language (API string)","description":"Found reference to API \"GetUserDefaultUILanguage\" (Indicator: \"GetUserDefaultUILanguage\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1614.001","id":"string-143","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to retrieve information about the current system (API string)","description":"Found system information discovery API: \"ExpandEnvironmentStringsW\" in \"sample.bin\"","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-89","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to retrieve the OS information (API string)","description":"Found reference to API \"GetVersionExW\" (Indicator: \"GetVersionExW\"; Source: \"sample.bin\"), Found reference to API \"GetVersionExW\" (Indicator: \"GetVersion\"; Source: \"sample.bin\"), Found reference to API \"GetVersion\" (Indicator: \"GetVersion\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-171","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to identify virtual environment by using user activity (API string)","description":"Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1497.002","id":"string-661","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to retrieve open application windows (API string)","description":"Found reference to API \"FindWindowExW\" (Indicator: \"FindWindow\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1010","id":"string-141","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to find open windows (API string)","description":"Found reference to API \"FindWindowExW\" (Indicator: \"FindWindowExW\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1010","id":"string-413","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to retrieve path in which Windows is installed (API string)","description":"Found reference to API \"GetWindowsDirectoryW\" (Indicator: \"GetWindowsDirectory\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-312","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Heuristic match: \"dzu8.ca\", Heuristic match: \"y?0.km\", Pattern match: \"http://nsis.sf.net/nsis_error\", Heuristic match: \"e-.be\"","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Installation/Persistence","name":"Contains ability to load modules (API string)","description":"Found reference to API \"LoadLibraryW\" (Indicator: \"LoadLibrary\"; Source: \"sample.bin\"), Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; Source: \"sample.bin\"), Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-310","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to load/free library (API string)","description":"Found reference to API \"LoadLibraryW\" (Indicator: \"LoadLibrary\"; Source: \"sample.bin\"), Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; Source: \"sample.bin\"), Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"sample.bin\"), Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1055.001","id":"string-318","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Able to inject code into another process (API string)","description":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1055","id":"string-92","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to modify registry key/value (API string)","description":"Found reference to API \"RegSetValueExW\" (Indicator: \"RegSetValue\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1112","id":"string-304","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to set file time (API string)","description":"Found reference to API \"SetFileTime\" (Indicator: \"SetFileTime\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1070.006","id":"string-409","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to delay execution by waiting for signal/timeout (API string)","description":"Found reference to API \"SetTimer\" (Indicator: \"SetTimer\"; Source: \"sample.bin\"), Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1497.003","id":"string-226","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to pass information to a window procedure (API string)","description":"Found reference to API \"CallWindowProcW\" (Indicator: \"CallWindowProc\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1564.003","id":"string-320","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to impersonate access tokens (API string)","description":"Found reference to API \"OpenProcessToken\" (Indicator: \"OpenProcessToken\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1134.001","id":"string-306","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Reverse Engineering","name":"Contains ability to check debugger is running (API string)","description":"Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1622","id":"string-183","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Unusual Characteristics","name":"Contains ability to reboot/shutdown the operating system (API string)","description":"Found reference to API \"ExitWindowsEx\" (Indicator: \"ExitWindows\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1529","id":"string-189","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{"File:01882218591a9105127125c3b46ed5fb0929974bae359e64ff1c6786c7cc88e9":{"type":"File","value":"01882218591a9105127125c3b46ed5fb0929974bae359e64ff1c6786c7cc88e9","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 124 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:02272c8f727baa91242a002bc42f3ab0371f4d18d5eb2afefe3f28b53afab7ee":{"type":"File","value":"02272c8f727baa91242a002bc42f3ab0371f4d18d5eb2afefe3f28b53afab7ee","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 80 x 32, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:03903cb2902b5a84393e06acf643c7a8255cccbe83e2499c42b4943515191784":{"type":"File","value":"03903cb2902b5a84393e06acf643c7a8255cccbe83e2499c42b4943515191784","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 94 x 36, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:070c9ec443714cec24c75d8108a321c3cce4bd39d329fdb7e2877235cdc67067":{"type":"File","value":"070c9ec443714cec24c75d8108a321c3cce4bd39d329fdb7e2877235cdc67067","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 80 x 30, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:08bd115fa025f39003219779f8cf92da906247c4b53f1de06cd9ea691ec0a5d9":{"type":"File","value":"08bd115fa025f39003219779f8cf92da906247c4b53f1de06cd9ea691ec0a5d9","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 1340 x 896, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:09439f7e09535e1af4029be64f79ce5928010931192ac25f692df8b0e6672720":{"type":"File","value":"09439f7e09535e1af4029be64f79ce5928010931192ac25f692df8b0e6672720","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 80 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:0a74cd2180baa6e114c06de10bd573f7fb7aea12b64462d6e95175840f58b7f3":{"type":"File","value":"0a74cd2180baa6e114c06de10bd573f7fb7aea12b64462d6e95175840f58b7f3","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 240 x 60, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:0a7e18cf994e0e32bff37734e77ad6b9c9b05035b52db4914b7d07b525056715":{"type":"File","value":"0a7e18cf994e0e32bff37734e77ad6b9c9b05035b52db4914b7d07b525056715","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 210 x 100, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:0ce5bbe9a7d1bd270a1ba09f3227be4d848132755dad345ae714b1b9451c1b44":{"type":"File","value":"0ce5bbe9a7d1bd270a1ba09f3227be4d848132755dad345ae714b1b9451c1b44","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 194 x 100, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:0f6f5d73ba9d529d109b8572f3fae0f4e7bad965a5d8caff32cf6675b11fbd29":{"type":"File","value":"0f6f5d73ba9d529d109b8572f3fae0f4e7bad965a5d8caff32cf6675b11fbd29","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 68 x 68, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:11e921e44004ed9495e0abaed751529d0e2f9f9121c9c8f1b7f84ac7d84c6b25":{"type":"File","value":"11e921e44004ed9495e0abaed751529d0e2f9f9121c9c8f1b7f84ac7d84c6b25","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 94 x 36, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:183f3fe29a1cdfc8fe49643e7b112b9d7f3c9448891bb9565a712fd6bbf98e83":{"type":"File","value":"183f3fe29a1cdfc8fe49643e7b112b9d7f3c9448891bb9565a712fd6bbf98e83","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 510 x 312, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:18bfc240f3f5577e2d6c68d7af32bc3e33c9bb6905246e0122cd670b02063177":{"type":"File","value":"18bfc240f3f5577e2d6c68d7af32bc3e33c9bb6905246e0122cd670b02063177","filetype":"XML 1.0 document, Unicode text, UTF-8 (with BOM) text","filetype_short":"XML","mime_type":"text/xml"},"File:1e12d629ccd7e3c0dfdf8d8f50481e77f930e189dc05fb020811fdea1d2450db":{"type":"File","value":"1e12d629ccd7e3c0dfdf8d8f50481e77f930e189dc05fb020811fdea1d2450db","filetype":"XML 1.0 document, Unicode text, UTF-8 (with BOM) text","filetype_short":"XML","mime_type":"text/xml"},"File:1e45535bd71b9bc7f5020bd2c794dd874abc1668ce08337b9a8eb3b564d5324a":{"type":"File","value":"1e45535bd71b9bc7f5020bd2c794dd874abc1668ce08337b9a8eb3b564d5324a","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 124 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:21ddac2389e538182d8c084c6e6a29b988dbed11003d972c440c3fd6f30f7a87":{"type":"File","value":"21ddac2389e538182d8c084c6e6a29b988dbed11003d972c440c3fd6f30f7a87","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 94 x 36, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:23bb13dacc122df333f3ccf39dce5adb0c165cf90d47a94e51379ebe7acb5f8a":{"type":"File","value":"23bb13dacc122df333f3ccf39dce5adb0c165cf90d47a94e51379ebe7acb5f8a","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:25030450ef30ed5cdfa69d9aadcee94525b0414185d7b2fe3d8bfce502a62367":{"type":"File","value":"25030450ef30ed5cdfa69d9aadcee94525b0414185d7b2fe3d8bfce502a62367","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 200 x 48, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:26fb0685025335680f48bc0f0adf6e93c272cdd061a9c2f5eacc405b9872a5f5":{"type":"File","value":"26fb0685025335680f48bc0f0adf6e93c272cdd061a9c2f5eacc405b9872a5f5","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 1340 x 896, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:2a6c03cc0f91079134572bd0f0f35412e99fc5c548c7af74bf9964d905856593":{"type":"File","value":"2a6c03cc0f91079134572bd0f0f35412e99fc5c548c7af74bf9964d905856593","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:2f6ae442d7805ee796bc85eecec63a1ced9dba9fc6794805d429ef35e33d41a2":{"type":"File","value":"2f6ae442d7805ee796bc85eecec63a1ced9dba9fc6794805d429ef35e33d41a2","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 290 x 30, 8-bit/color RGB, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:31a968d58a5b6f41f5c011cfb32eb3360fb1e3bac8fbe50ceb068bd97ec42686":{"type":"File","value":"31a968d58a5b6f41f5c011cfb32eb3360fb1e3bac8fbe50ceb068bd97ec42686","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 200 x 48, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:3284c978aa8f8c9606646bdb46f0e14f4324188c2b4405a9649ba17e39ed0e20":{"type":"File","value":"3284c978aa8f8c9606646bdb46f0e14f4324188c2b4405a9649ba17e39ed0e20","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 300 x 120, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:32dc387244fdcac48af5b5ee2f1b6c2ec830fa4800b0f79ed6ad5780dda1ca37":{"type":"File","value":"32dc387244fdcac48af5b5ee2f1b6c2ec830fa4800b0f79ed6ad5780dda1ca37","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 200 x 48, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:34bc095d5835293606c2d7d3e3fdcb763f99896a0627e68cdf7818d64483ecf1":{"type":"File","value":"34bc095d5835293606c2d7d3e3fdcb763f99896a0627e68cdf7818d64483ecf1","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 58 x 27, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:398e0e7e346b80c2ead5f5461346d01f5d212eca8e572568bf47c7c87c8343de":{"type":"File","value":"398e0e7e346b80c2ead5f5461346d01f5d212eca8e572568bf47c7c87c8343de","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 300 x 124, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:3d077f297915ea4534759c33c773d5914b043a363e2094447841d021ba7a114c":{"type":"File","value":"3d077f297915ea4534759c33c773d5914b043a363e2094447841d021ba7a114c","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:41c22d153740a16bcc646842dd5c18639f41b7c46cf6db7e7cfb82d2da2f4c12":{"type":"File","value":"41c22d153740a16bcc646842dd5c18639f41b7c46cf6db7e7cfb82d2da2f4c12","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 94 x 36, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:41e72314a1648a4cadeb08c0ebcaf3eb55a2deff304aa07aad486d7aa7ee7bd0":{"type":"File","value":"41e72314a1648a4cadeb08c0ebcaf3eb55a2deff304aa07aad486d7aa7ee7bd0","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 290 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:42b1174097e50bfdf5462905b0465c17b0531b80733c639895b068f7e132b878":{"type":"File","value":"42b1174097e50bfdf5462905b0465c17b0531b80733c639895b068f7e132b878","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 210 x 100, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:4399e07a5314b003c10b13276f91633ea4ff7b67dca7623e7d06809fb98bd487":{"type":"File","value":"4399e07a5314b003c10b13276f91633ea4ff7b67dca7623e7d06809fb98bd487","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 290 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:446a49391303534ce6d313cd297f8c2fad952ddfd2f476c50a3089653a6b283f":{"type":"File","value":"446a49391303534ce6d313cd297f8c2fad952ddfd2f476c50a3089653a6b283f","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:4726489bb5e7bba9a9a661a72870bd4aeab006caf6d7015c080657368c97740d":{"type":"File","value":"4726489bb5e7bba9a9a661a72870bd4aeab006caf6d7015c080657368c97740d","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 210 x 100, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:4caf560e217b31a1a765305712c9019ce54347d600b3fcda6e989a2b03198824":{"type":"File","value":"4caf560e217b31a1a765305712c9019ce54347d600b3fcda6e989a2b03198824","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 58 x 27, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:4ce8eea47cc60f71d3677e0e6c8fd9328c319fd0abcd4127a3f616cbc9abf956":{"type":"File","value":"4ce8eea47cc60f71d3677e0e6c8fd9328c319fd0abcd4127a3f616cbc9abf956","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 1340 x 894, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:4dd798905e9f151b9a12e77dea05a3a99787f5765bf83a52d795d1c98e0395ef":{"type":"File","value":"4dd798905e9f151b9a12e77dea05a3a99787f5765bf83a52d795d1c98e0395ef","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:4f8c6a76c6643daffdce65a4a63f0a7e32e59c5df4b651072407d4740d9a936b":{"type":"File","value":"4f8c6a76c6643daffdce65a4a63f0a7e32e59c5df4b651072407d4740d9a936b","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 194 x 100, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be":{"type":"File","value":"50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be","filetype":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 2 sections","filetype_short":"PE32","mime_type":"application/x-dosexec"},"File:5155bc6c93aeda2aeebd36850f896d9b9fee3f0ce3e4d7250459626e589cac11":{"type":"File","value":"5155bc6c93aeda2aeebd36850f896d9b9fee3f0ce3e4d7250459626e589cac11","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 300 x 124, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:51da07da18a5486b11e0d51ebff77a3f2fcbb4d66b5665d212cc6bda480c4257":{"type":"File","value":"51da07da18a5486b11e0d51ebff77a3f2fcbb4d66b5665d212cc6bda480c4257","filetype":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 4 sections","filetype_short":"PE32","mime_type":"application/x-dosexec"},"File:548b7113ae115d936a790760a46c3a50ddbae6ddaf163e6510007d1c280a5488":{"type":"File","value":"548b7113ae115d936a790760a46c3a50ddbae6ddaf163e6510007d1c280a5488","verdict":{"verdict":"likely_benign","verdict_source":"observed prevalence","reasons":["File has very high prevalence"]},"filetype":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","filetype_short":"PE32","mime_type":"application/x-dosexec"},"File:58c03aaac2a7c976a15e5c82f240b13f59efb77fc6ec6e647465cfa64e55efc5":{"type":"File","value":"58c03aaac2a7c976a15e5c82f240b13f59efb77fc6ec6e647465cfa64e55efc5","filetype":"XML 1.0 document, Unicode text, UTF-8 (with BOM) text","filetype_short":"XML","mime_type":"text/xml"},"File:5a12b3ea332bcb7ce75d0dc9bbe9b47b815902740c52fce56a365378cc59fc15":{"type":"File","value":"5a12b3ea332bcb7ce75d0dc9bbe9b47b815902740c52fce56a365378cc59fc15","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 80 x 30, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:5bff282c8070f31151dedbe27487cb6f68a0ae070ec1b191d41614ee169106ad":{"type":"File","value":"5bff282c8070f31151dedbe27487cb6f68a0ae070ec1b191d41614ee169106ad","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 666 x 3, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:620ac2f6ac59dedbb449297c8d63c992ac4eed3a52de320f014f1ae1517c0384":{"type":"File","value":"620ac2f6ac59dedbb449297c8d63c992ac4eed3a52de320f014f1ae1517c0384","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 240 x 60, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:636737fbf89f428ea77a716439c45a418e922c434c6ad08d81551e6f7e4ae8c8":{"type":"File","value":"636737fbf89f428ea77a716439c45a418e922c434c6ad08d81551e6f7e4ae8c8","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 300 x 124, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:655f76283c134fab748c6edbfce4a2d98e4e9d2389865eeb1e87c40fc92b214b":{"type":"File","value":"655f76283c134fab748c6edbfce4a2d98e4e9d2389865eeb1e87c40fc92b214b","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:6636a15f7e86ec6823e0b1f9cf1f7daaa0f4a1cca5c7bb5a61a3bcc464a31dad":{"type":"File","value":"6636a15f7e86ec6823e0b1f9cf1f7daaa0f4a1cca5c7bb5a61a3bcc464a31dad","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 75 x 14, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:68fdc02da6aa057b9f4ec97af9744ba39608cec8cc382ffb1ba579b8faf4b63d":{"type":"File","value":"68fdc02da6aa057b9f4ec97af9744ba39608cec8cc382ffb1ba579b8faf4b63d","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 80 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:6c9a8ed75134946de2798add91fe28ec772ad72a0a95bcbfa23091d2ce505fa2":{"type":"File","value":"6c9a8ed75134946de2798add91fe28ec772ad72a0a95bcbfa23091d2ce505fa2","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 300 x 124, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:6f001578f300b01b56c6c84bf6e59cdbd2c396f9c5ff6d416a65bd1f701b00dd":{"type":"File","value":"6f001578f300b01b56c6c84bf6e59cdbd2c396f9c5ff6d416a65bd1f701b00dd","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 240 x 60, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:7188a7fa064c698f03f57eacc54fdcf0f220d700387f9cb230187f08da8ca291":{"type":"File","value":"7188a7fa064c698f03f57eacc54fdcf0f220d700387f9cb230187f08da8ca291","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 210 x 100, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:71c290d67488ec163c90854d3acce8fc521fb1114e8d1d6f1dad7d47cfcea87d":{"type":"File","value":"71c290d67488ec163c90854d3acce8fc521fb1114e8d1d6f1dad7d47cfcea87d","filetype":"DER Encoded PKCS#7 Signed Data","filetype_short":"PKCS7","mime_type":"application/octet-stream"},"File:7208fa88213bc9efa2ddf1cf7aa1f2e25f3b4ebabc79563bf2e39edd61809997":{"type":"File","value":"7208fa88213bc9efa2ddf1cf7aa1f2e25f3b4ebabc79563bf2e39edd61809997","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 98 x 17, 8-bit colormap, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:722eed4e266d4126a7c876340ea00c3aaffbf490ddcdab7b12e79bda4405bd28":{"type":"File","value":"722eed4e266d4126a7c876340ea00c3aaffbf490ddcdab7b12e79bda4405bd28","filetype":"XML 1.0 document, Unicode text, UTF-8 text","filetype_short":"XML","mime_type":"text/xml"},"File:7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af":{"type":"File","value":"7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af","filetype":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 4 sections","filetype_short":"PE32","mime_type":"application/x-dosexec"},"File:7de4cc8f37cb57f957315087c1bbe41f671a137d846d3ca20f94144feaf1e3f7":{"type":"File","value":"7de4cc8f37cb57f957315087c1bbe41f671a137d846d3ca20f94144feaf1e3f7","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 210 x 100, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:830d2bfb53afcc98ddbf2f20731a37dde207c2ed67eede37b3d70b166abb97c1":{"type":"File","value":"830d2bfb53afcc98ddbf2f20731a37dde207c2ed67eede37b3d70b166abb97c1","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 58 x 27, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:84c1c2011ad5bde8b2c8f6edb588f289fd0715481465300e8c88672118555885":{"type":"File","value":"84c1c2011ad5bde8b2c8f6edb588f289fd0715481465300e8c88672118555885","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 300 x 124, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:87843c94d8f77eb595bdec55fbbf01f531a978d39be352731955720466637f1e":{"type":"File","value":"87843c94d8f77eb595bdec55fbbf01f531a978d39be352731955720466637f1e","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 200 x 48, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:8903e94a3e992c837c37306a22fabd74577e46b6dadbf08a28cdb9c28fa41e95":{"type":"File","value":"8903e94a3e992c837c37306a22fabd74577e46b6dadbf08a28cdb9c28fa41e95","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","filetype_short":"ICO","mime_type":"image/vnd.microsoft.icon"},"File:89749b5d815248a7220d4899b93d0408a1bf565a020383854502e1bf41476e46":{"type":"File","value":"89749b5d815248a7220d4899b93d0408a1bf565a020383854502e1bf41476e46","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 300 x 120, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:8c4152aeae52949a11f120d5524e808e706a8df1148115b0855da32b5f149883":{"type":"File","value":"8c4152aeae52949a11f120d5524e808e706a8df1148115b0855da32b5f149883","filetype":"DER Encoded PKCS#7 Signed Data","filetype_short":"PKCS7","mime_type":"application/octet-stream"},"File:8d8213ea1dc4525a427f7a7268f9eb3ba625f400b68794626e90a7d5b2900e43":{"type":"File","value":"8d8213ea1dc4525a427f7a7268f9eb3ba625f400b68794626e90a7d5b2900e43","filetype":"XML 1.0 document, Unicode text, UTF-8 (with BOM) text","filetype_short":"XML","mime_type":"text/xml"},"File:90393186bf2f335eb8afde01199958a8dba84fd3b479fcce0615453df9764cdd":{"type":"File","value":"90393186bf2f335eb8afde01199958a8dba84fd3b479fcce0615453df9764cdd","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 80 x 30, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8":{"type":"File","value":"942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","filetype":"Zip archive data, at least v2.0 to extract, compression method=store","filetype_short":"ZIP","mime_type":"application/zip"},"File:95d0431e4e540ab62ae1a205678b032bb5d9849b5d21029a48110c87508b4fc6":{"type":"File","value":"95d0431e4e540ab62ae1a205678b032bb5d9849b5d21029a48110c87508b4fc6","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:960828a0d7e2ab9155d5291f93702792c4722d97b8f418cb3d5bc43d8b2ff294":{"type":"File","value":"960828a0d7e2ab9155d5291f93702792c4722d97b8f418cb3d5bc43d8b2ff294","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 200 x 48, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:9cf294c8ffb8e394ab911da8583618a60ef99cf38c982bb2bd2b31143efac84f":{"type":"File","value":"9cf294c8ffb8e394ab911da8583618a60ef99cf38c982bb2bd2b31143efac84f","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 75 x 14, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:a05402a0e3c4655da587e6928696cfeb9f26b2077a54c674f98b6cfc7eb7a3eb":{"type":"File","value":"a05402a0e3c4655da587e6928696cfeb9f26b2077a54c674f98b6cfc7eb7a3eb","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 420 x 3, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:a11c2bc5dd49a44a8c95cba68f6cccf9eb4813c687f18874ee664280a8a74604":{"type":"File","value":"a11c2bc5dd49a44a8c95cba68f6cccf9eb4813c687f18874ee664280a8a74604","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 124 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:a2d0844db92f8f2f55138f9930ceee28cb4e93c62c5aa67f0bc08dd165aca618":{"type":"File","value":"a2d0844db92f8f2f55138f9930ceee28cb4e93c62c5aa67f0bc08dd165aca618","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 300 x 120, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:a4475af7e88290888934f62bff76f95c4cb18fd8bcde800b33e6ec6886593a5c":{"type":"File","value":"a4475af7e88290888934f62bff76f95c4cb18fd8bcde800b33e6ec6886593a5c","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 194 x 100, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:a5a57635483c6a20af08d2fb2aec9fe7be143e1c3a26bba4f32532dfade1ebd9":{"type":"File","value":"a5a57635483c6a20af08d2fb2aec9fe7be143e1c3a26bba4f32532dfade1ebd9","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 75 x 14, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:ac4db970cc6994b6194975538762392e20e87939fdf44ddee2d436da24624797":{"type":"File","value":"ac4db970cc6994b6194975538762392e20e87939fdf44ddee2d436da24624797","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 240 x 60, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:ae8e042df54c3fa33ce0ca8803c1ac744994bae7e8369c4de91fdc23e5338e32":{"type":"File","value":"ae8e042df54c3fa33ce0ca8803c1ac744994bae7e8369c4de91fdc23e5338e32","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 98 x 17, 8-bit colormap, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:aead67dd22a27d1f6d3a584cb45f6c33b3b5de2ad93cd91530960f5435d84040":{"type":"File","value":"aead67dd22a27d1f6d3a584cb45f6c33b3b5de2ad93cd91530960f5435d84040","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 124 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:b49f5146d5d4dbf99a19b684eb70e4dd39555b1a4ce4f0f9c94b584763af939d":{"type":"File","value":"b49f5146d5d4dbf99a19b684eb70e4dd39555b1a4ce4f0f9c94b584763af939d","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:b621e351e7e31a06c781db66921affa78bfe51db93f3262353688877d18360eb":{"type":"File","value":"b621e351e7e31a06c781db66921affa78bfe51db93f3262353688877d18360eb","filetype":"XML 1.0 document, ASCII text, with very long lines (997)","filetype_short":"XML","mime_type":"text/xml"},"File:b703bffc80c4f82263c6936619b64937d50eaafb033cdfc1c10a46c66be6d052":{"type":"File","value":"b703bffc80c4f82263c6936619b64937d50eaafb033cdfc1c10a46c66be6d052","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 98 x 17, 8-bit colormap, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e":{"type":"File","value":"b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e","filetype":"PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections","filetype_short":"PE32","mime_type":"application/x-dosexec"},"File:b78986f3b6457f4e7ee914e1812c167bc5ad70243885161cb6d32421f82bbc17":{"type":"File","value":"b78986f3b6457f4e7ee914e1812c167bc5ad70243885161cb6d32421f82bbc17","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 200 x 48, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:bb9cf01e65ca71df4e7e903b0b3345cbc4625cb526807f3f42e2156639f6a62d":{"type":"File","value":"bb9cf01e65ca71df4e7e903b0b3345cbc4625cb526807f3f42e2156639f6a62d","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 300 x 124, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:bbf9cce6b5c1e63b79490bbad9008b3bf5f15e41588f000bb33dc55eb6aa1d64":{"type":"File","value":"bbf9cce6b5c1e63b79490bbad9008b3bf5f15e41588f000bb33dc55eb6aa1d64","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 300 x 120, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:bc22a4b6d430cbbdd53146a75de429149e8605b06508d2d14b9df735ac7043cf":{"type":"File","value":"bc22a4b6d430cbbdd53146a75de429149e8605b06508d2d14b9df735ac7043cf","filetype":"XML 1.0 document, ASCII text","filetype_short":"XML","mime_type":"text/xml"},"File:c07e0c44e8a253bf4a22f89e161adddfe30ba9fcf59c9dc21fb3fd5f6854f1bb":{"type":"File","value":"c07e0c44e8a253bf4a22f89e161adddfe30ba9fcf59c9dc21fb3fd5f6854f1bb","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 94 x 36, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:c3615c51dab0004d844f2e6caa549a4c7dff6ec591a7fe6830fba9f0b19f0e04":{"type":"File","value":"c3615c51dab0004d844f2e6caa549a4c7dff6ec591a7fe6830fba9f0b19f0e04","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 8 x 50, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770":{"type":"File","value":"c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","filetype":"PE32 executable for MS Windows 5.00 (GUI), Intel i386, 6 sections","filetype_short":"PE32","mime_type":"application/x-dosexec"},"File:c4c55173ca86d866b9b71d36b0c2c93d43d09c688328b90a40efb90ad4b06dd7":{"type":"File","value":"c4c55173ca86d866b9b71d36b0c2c93d43d09c688328b90a40efb90ad4b06dd7","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:c60507759d37d44a4023000a3d4ff4ead68778afeb702ecbb0dcc98bf96cab9b":{"type":"File","value":"c60507759d37d44a4023000a3d4ff4ead68778afeb702ecbb0dcc98bf96cab9b","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 210 x 100, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:c75a6049edcb7d9d1609a77ac8ec33855b75429d76093d35f38d576d30db69a0":{"type":"File","value":"c75a6049edcb7d9d1609a77ac8ec33855b75429d76093d35f38d576d30db69a0","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 200 x 48, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:cd24e53d5cd0f32e2164ce30a05350380ab6ffe66fe9f65c9e19a600d12fac4f":{"type":"File","value":"cd24e53d5cd0f32e2164ce30a05350380ab6ffe66fe9f65c9e19a600d12fac4f","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 300 x 124, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:cda6ed43d7cf9d3a795b0d5a799cf8ce44fee032d9efb037cf61127296232a6b":{"type":"File","value":"cda6ed43d7cf9d3a795b0d5a799cf8ce44fee032d9efb037cf61127296232a6b","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 300 x 124, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:ce021b2b046f7a3729560e94fd816c4838233e1b08a5f5f4a5e2cf9ded59129f":{"type":"File","value":"ce021b2b046f7a3729560e94fd816c4838233e1b08a5f5f4a5e2cf9ded59129f","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 94 x 36, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:d256aeab74f87d5b910cc421dac9e777415e6dff72ec674d1b68ddbee9446aa4":{"type":"File","value":"d256aeab74f87d5b910cc421dac9e777415e6dff72ec674d1b68ddbee9446aa4","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 210 x 100, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:d5f6892baa762e4769a31e623ce9749c4d00712d0433d91e5d69896baeaacec5":{"type":"File","value":"d5f6892baa762e4769a31e623ce9749c4d00712d0433d91e5d69896baeaacec5","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 94 x 36, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:d9fe94653fe64c043ed6c338160e6c0dc3a37792118a77bfee7237e6cf2d4ca1":{"type":"File","value":"d9fe94653fe64c043ed6c338160e6c0dc3a37792118a77bfee7237e6cf2d4ca1","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 210 x 100, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:de6736e8f091febfdbc4c137f9c547bc9c66c80a047919a7130ace44479b2fa5":{"type":"File","value":"de6736e8f091febfdbc4c137f9c547bc9c66c80a047919a7130ace44479b2fa5","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 290 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:e0c04ca28bc8ce1c8e406e47fa4ea4fcc3ba23277220ffe7d314ce4327838121":{"type":"File","value":"e0c04ca28bc8ce1c8e406e47fa4ea4fcc3ba23277220ffe7d314ce4327838121","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 420 x 3, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:e1b93bccf58f92171d577ee63753d2c5a22153c2c720b2a7a8900996f9ca3389":{"type":"File","value":"e1b93bccf58f92171d577ee63753d2c5a22153c2c720b2a7a8900996f9ca3389","filetype":"XML 1.0 document, Unicode text, UTF-8 (with BOM) text","filetype_short":"XML","mime_type":"text/xml"},"File:e2cec514651098095c0e4bbbc86cc8900e830ce5ad1773bd4277e42509a191d2":{"type":"File","value":"e2cec514651098095c0e4bbbc86cc8900e830ce5ad1773bd4277e42509a191d2","filetype":"XML 1.0 document, Unicode text, UTF-8 (with BOM) text","filetype_short":"XML","mime_type":"text/xml"},"File:e52c698632a59598087d9b23f01f00d58e7f69163d7bee4ba80baf728b0c1c3c":{"type":"File","value":"e52c698632a59598087d9b23f01f00d58e7f69163d7bee4ba80baf728b0c1c3c","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 194 x 100, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:ea110f59d2e9ee698cec341313ba852ee3cc01c02d24ae4663a442efbdadd1c7":{"type":"File","value":"ea110f59d2e9ee698cec341313ba852ee3cc01c02d24ae4663a442efbdadd1c7","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 80 x 32, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:ec721032b7b272a987b7f7e307dbf8e7161e1c23a9b8046a8649e77d80a32db7":{"type":"File","value":"ec721032b7b272a987b7f7e307dbf8e7161e1c23a9b8046a8649e77d80a32db7","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 290 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:eca3999b30b1f6f9e7167413af5002afab7050db88edb70628894ec499075415":{"type":"File","value":"eca3999b30b1f6f9e7167413af5002afab7050db88edb70628894ec499075415","filetype":"XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (335)","filetype_short":"XML","mime_type":"text/xml"},"File:ee9d7e055a103ee3bb3a6ba3b10f04d0fc7d27127541ff31c63b6d5d4201647a":{"type":"File","value":"ee9d7e055a103ee3bb3a6ba3b10f04d0fc7d27127541ff31c63b6d5d4201647a","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 94 x 36, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:f0f5b9b9940e630a9cf8dbcb2082761af99412e490bb5ca77888066cfb823312":{"type":"File","value":"f0f5b9b9940e630a9cf8dbcb2082761af99412e490bb5ca77888066cfb823312","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 200 x 48, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:f2f3c2d5f891adc62375e529e1b387c13958b62e498ca050cccb15bad7320155":{"type":"File","value":"f2f3c2d5f891adc62375e529e1b387c13958b62e498ca050cccb15bad7320155","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:f54e7b1fd901c7683b5b5d5b9131893f74ce2dcb1fa80eff8641149af326ea97":{"type":"File","value":"f54e7b1fd901c7683b5b5d5b9131893f74ce2dcb1fa80eff8641149af326ea97","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","filetype_short":"PNG","mime_type":"image/png"},"File:ffbd359a1c0da21407757312ce8fbede09fd50a055546b0dc1e8c7e9926a52dd":{"type":"File","value":"ffbd359a1c0da21407757312ce8fbede09fd50a055546b0dc1e8c7e9926a52dd","filetype":"XML 1.0 document, Unicode text, UTF-8 (with BOM) text","filetype_short":"XML","mime_type":"text/xml"}},"chains":[{"id":"1563437486962112919","root":"File:548b7113ae115d936a790760a46c3a50ddbae6ddaf163e6510007d1c280a5488","edges":[],"verdict":{"verdict":"likely_benign","verdict_source":"observed prevalence","reasons":["File has very high prevalence"]}},{"id":"1563437526468899281","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be"}],"verdict":{"verdict":"unknown"}},{"id":"1563437526477287890","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:51da07da18a5486b11e0d51ebff77a3f2fcbb4d66b5665d212cc6bda480c4257"}],"verdict":{"verdict":"unknown"}},{"id":"1563437526481482195","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af"}],"verdict":{"verdict":"unknown"}},{"id":"1563437526485676500","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:8903e94a3e992c837c37306a22fabd74577e46b6dadbf08a28cdb9c28fa41e95"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437526489870805","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:8c4152aeae52949a11f120d5524e808e706a8df1148115b0855da32b5f149883"}],"verdict":{"verdict":"unknown"}},{"id":"1563437526494065110","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e"}],"verdict":{"verdict":"unknown"}},{"id":"1563437526498259415","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:548b7113ae115d936a790760a46c3a50ddbae6ddaf163e6510007d1c280a5488"},{"edge_kind":"extracted_from_archive","from_key":"File:548b7113ae115d936a790760a46c3a50ddbae6ddaf163e6510007d1c280a5488","to_key":"File:71c290d67488ec163c90854d3acce8fc521fb1114e8d1d6f1dad7d47cfcea87d"}],"verdict":{"verdict":"unknown"}},{"id":"1563437525257791312","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:01882218591a9105127125c3b46ed5fb0929974bae359e64ff1c6786c7cc88e9"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525261985617","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:02272c8f727baa91242a002bc42f3ab0371f4d18d5eb2afefe3f28b53afab7ee"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525270374226","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:03903cb2902b5a84393e06acf643c7a8255cccbe83e2499c42b4943515191784"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525274568531","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:070c9ec443714cec24c75d8108a321c3cce4bd39d329fdb7e2877235cdc67067"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525278762836","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:08bd115fa025f39003219779f8cf92da906247c4b53f1de06cd9ea691ec0a5d9"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525282957141","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:09439f7e09535e1af4029be64f79ce5928010931192ac25f692df8b0e6672720"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525291345750","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:0a74cd2180baa6e114c06de10bd573f7fb7aea12b64462d6e95175840f58b7f3"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525295540055","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:0a7e18cf994e0e32bff37734e77ad6b9c9b05035b52db4914b7d07b525056715"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525308122968","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:0ce5bbe9a7d1bd270a1ba09f3227be4d848132755dad345ae714b1b9451c1b44"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525312317273","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:0f6f5d73ba9d529d109b8572f3fae0f4e7bad965a5d8caff32cf6675b11fbd29"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525316511578","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:11e921e44004ed9495e0abaed751529d0e2f9f9121c9c8f1b7f84ac7d84c6b25"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525324900187","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:183f3fe29a1cdfc8fe49643e7b112b9d7f3c9448891bb9565a712fd6bbf98e83"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437523735258800","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:18bfc240f3f5577e2d6c68d7af32bc3e33c9bb6905246e0122cd670b02063177"}],"verdict":{"verdict":"unknown"}},{"id":"1563437523731064474","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:1e12d629ccd7e3c0dfdf8d8f50481e77f930e189dc05fb020811fdea1d2450db"}],"verdict":{"verdict":"unknown"}},{"id":"1563437525329094492","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:1e45535bd71b9bc7f5020bd2c794dd874abc1668ce08337b9a8eb3b564d5324a"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525333288797","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:21ddac2389e538182d8c084c6e6a29b988dbed11003d972c440c3fd6f30f7a87"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525341677406","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:23bb13dacc122df333f3ccf39dce5adb0c165cf90d47a94e51379ebe7acb5f8a"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525345871711","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:25030450ef30ed5cdfa69d9aadcee94525b0414185d7b2fe3d8bfce502a62367"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525350066016","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:26fb0685025335680f48bc0f0adf6e93c272cdd061a9c2f5eacc405b9872a5f5"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525354260321","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:2a6c03cc0f91079134572bd0f0f35412e99fc5c548c7af74bf9964d905856593"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525358454626","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:2f6ae442d7805ee796bc85eecec63a1ced9dba9fc6794805d429ef35e33d41a2"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525366843235","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:31a968d58a5b6f41f5c011cfb32eb3360fb1e3bac8fbe50ceb068bd97ec42686"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525371037540","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:3284c978aa8f8c9606646bdb46f0e14f4324188c2b4405a9649ba17e39ed0e20"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525375231845","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:32dc387244fdcac48af5b5ee2f1b6c2ec830fa4800b0f79ed6ad5780dda1ca37"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525383620454","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:34bc095d5835293606c2d7d3e3fdcb763f99896a0627e68cdf7818d64483ecf1"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525387814759","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:398e0e7e346b80c2ead5f5461346d01f5d212eca8e572568bf47c7c87c8343de"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525392009064","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:3d077f297915ea4534759c33c773d5914b043a363e2094447841d021ba7a114c"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525400397673","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:41c22d153740a16bcc646842dd5c18639f41b7c46cf6db7e7cfb82d2da2f4c12"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525408786282","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:41e72314a1648a4cadeb08c0ebcaf3eb55a2deff304aa07aad486d7aa7ee7bd0"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525412980587","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:42b1174097e50bfdf5462905b0465c17b0531b80733c639895b068f7e132b878"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525417174892","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:4399e07a5314b003c10b13276f91633ea4ff7b67dca7623e7d06809fb98bd487"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525425563501","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:446a49391303534ce6d313cd297f8c2fad952ddfd2f476c50a3089653a6b283f"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525429757806","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:4726489bb5e7bba9a9a661a72870bd4aeab006caf6d7015c080657368c97740d"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525438146415","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:4caf560e217b31a1a765305712c9019ce54347d600b3fcda6e989a2b03198824"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525442340720","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:4ce8eea47cc60f71d3677e0e6c8fd9328c319fd0abcd4127a3f616cbc9abf956"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525450729329","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:4dd798905e9f151b9a12e77dea05a3a99787f5765bf83a52d795d1c98e0395ef"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525459117938","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:4f8c6a76c6643daffdce65a4a63f0a7e32e59c5df4b651072407d4740d9a936b"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525463312243","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:5155bc6c93aeda2aeebd36850f896d9b9fee3f0ce3e4d7250459626e589cac11"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437523747841749","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:58c03aaac2a7c976a15e5c82f240b13f59efb77fc6ec6e647465cfa64e55efc5"}],"verdict":{"verdict":"unknown"}},{"id":"1563437525467506548","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:5a12b3ea332bcb7ce75d0dc9bbe9b47b815902740c52fce56a365378cc59fc15"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525475895157","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:5bff282c8070f31151dedbe27487cb6f68a0ae070ec1b191d41614ee169106ad"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525480089462","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:620ac2f6ac59dedbb449297c8d63c992ac4eed3a52de320f014f1ae1517c0384"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525484283767","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:636737fbf89f428ea77a716439c45a418e922c434c6ad08d81551e6f7e4ae8c8"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525492672376","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:655f76283c134fab748c6edbfce4a2d98e4e9d2389865eeb1e87c40fc92b214b"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525496866681","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:6636a15f7e86ec6823e0b1f9cf1f7daaa0f4a1cca5c7bb5a61a3bcc464a31dad"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525505255290","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:68fdc02da6aa057b9f4ec97af9744ba39608cec8cc382ffb1ba579b8faf4b63d"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525509449595","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:6c9a8ed75134946de2798add91fe28ec772ad72a0a95bcbfa23091d2ce505fa2"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525517838204","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:6f001578f300b01b56c6c84bf6e59cdbd2c396f9c5ff6d416a65bd1f701b00dd"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525522032509","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:7188a7fa064c698f03f57eacc54fdcf0f220d700387f9cb230187f08da8ca291"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525526226814","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:7208fa88213bc9efa2ddf1cf7aa1f2e25f3b4ebabc79563bf2e39edd61809997"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437523739453111","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:722eed4e266d4126a7c876340ea00c3aaffbf490ddcdab7b12e79bda4405bd28"}],"verdict":{"verdict":"unknown"}},{"id":"1563437525534615423","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:7de4cc8f37cb57f957315087c1bbe41f671a137d846d3ca20f94144feaf1e3f7"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525538809728","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:830d2bfb53afcc98ddbf2f20731a37dde207c2ed67eede37b3d70b166abb97c1"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525547198337","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:84c1c2011ad5bde8b2c8f6edb588f289fd0715481465300e8c88672118555885"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525555586946","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:87843c94d8f77eb595bdec55fbbf01f531a978d39be352731955720466637f1e"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525559781251","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:89749b5d815248a7220d4899b93d0408a1bf565a020383854502e1bf41476e46"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437523735258798","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:8d8213ea1dc4525a427f7a7268f9eb3ba625f400b68794626e90a7d5b2900e43"}],"verdict":{"verdict":"unknown"}},{"id":"1563437525563975556","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:90393186bf2f335eb8afde01199958a8dba84fd3b479fcce0615453df9764cdd"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525572364165","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:95d0431e4e540ab62ae1a205678b032bb5d9849b5d21029a48110c87508b4fc6"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525576558470","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:960828a0d7e2ab9155d5291f93702792c4722d97b8f418cb3d5bc43d8b2ff294"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525580752775","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:9cf294c8ffb8e394ab911da8583618a60ef99cf38c982bb2bd2b31143efac84f"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525589141384","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:a05402a0e3c4655da587e6928696cfeb9f26b2077a54c674f98b6cfc7eb7a3eb"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525593335689","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:a11c2bc5dd49a44a8c95cba68f6cccf9eb4813c687f18874ee664280a8a74604"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525601724298","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:a2d0844db92f8f2f55138f9930ceee28cb4e93c62c5aa67f0bc08dd165aca618"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525610112907","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:a4475af7e88290888934f62bff76f95c4cb18fd8bcde800b33e6ec6886593a5c"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525614307212","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:a5a57635483c6a20af08d2fb2aec9fe7be143e1c3a26bba4f32532dfade1ebd9"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525618501517","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:ac4db970cc6994b6194975538762392e20e87939fdf44ddee2d436da24624797"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525626890126","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:ae8e042df54c3fa33ce0ca8803c1ac744994bae7e8369c4de91fdc23e5338e32"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525631084431","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:aead67dd22a27d1f6d3a584cb45f6c33b3b5de2ad93cd91530960f5435d84040"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525639473040","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:b49f5146d5d4dbf99a19b684eb70e4dd39555b1a4ce4f0f9c94b584763af939d"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437523752036080","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:b621e351e7e31a06c781db66921affa78bfe51db93f3262353688877d18360eb"}],"verdict":{"verdict":"unknown"}},{"id":"1563437525643667345","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:b703bffc80c4f82263c6936619b64937d50eaafb033cdfc1c10a46c66be6d052"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525652055954","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:b78986f3b6457f4e7ee914e1812c167bc5ad70243885161cb6d32421f82bbc17"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525656250259","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:bb9cf01e65ca71df4e7e903b0b3345cbc4625cb526807f3f42e2156639f6a62d"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525660444564","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:bbf9cce6b5c1e63b79490bbad9008b3bf5f15e41588f000bb33dc55eb6aa1d64"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437523731064476","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:bc22a4b6d430cbbdd53146a75de429149e8605b06508d2d14b9df735ac7043cf"}],"verdict":{"verdict":"unknown"}},{"id":"1563437525668833173","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:c07e0c44e8a253bf4a22f89e161adddfe30ba9fcf59c9dc21fb3fd5f6854f1bb"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525673027478","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:c3615c51dab0004d844f2e6caa549a4c7dff6ec591a7fe6830fba9f0b19f0e04"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525681416087","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:c4c55173ca86d866b9b71d36b0c2c93d43d09c688328b90a40efb90ad4b06dd7"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525685610392","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:c60507759d37d44a4023000a3d4ff4ead68778afeb702ecbb0dcc98bf96cab9b"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525698193305","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:c75a6049edcb7d9d1609a77ac8ec33855b75429d76093d35f38d576d30db69a0"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525702387610","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:cd24e53d5cd0f32e2164ce30a05350380ab6ffe66fe9f65c9e19a600d12fac4f"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525710776219","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:cda6ed43d7cf9d3a795b0d5a799cf8ce44fee032d9efb037cf61127296232a6b"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525714970524","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:ce021b2b046f7a3729560e94fd816c4838233e1b08a5f5f4a5e2cf9ded59129f"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525719164829","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:d256aeab74f87d5b910cc421dac9e777415e6dff72ec674d1b68ddbee9446aa4"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525727553438","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:d5f6892baa762e4769a31e623ce9749c4d00712d0433d91e5d69896baeaacec5"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525731747743","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:d9fe94653fe64c043ed6c338160e6c0dc3a37792118a77bfee7237e6cf2d4ca1"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525735942048","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:de6736e8f091febfdbc4c137f9c547bc9c66c80a047919a7130ace44479b2fa5"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525744330657","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:e0c04ca28bc8ce1c8e406e47fa4ea4fcc3ba23277220ffe7d314ce4327838121"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437523735258789","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:e1b93bccf58f92171d577ee63753d2c5a22153c2c720b2a7a8900996f9ca3389"}],"verdict":{"verdict":"unknown"}},{"id":"1563437523735258783","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:e2cec514651098095c0e4bbbc86cc8900e830ce5ad1773bd4277e42509a191d2"}],"verdict":{"verdict":"unknown"}},{"id":"1563437525752719266","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:e52c698632a59598087d9b23f01f00d58e7f69163d7bee4ba80baf728b0c1c3c"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525756913571","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:ea110f59d2e9ee698cec341313ba852ee3cc01c02d24ae4663a442efbdadd1c7"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525765302180","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:ec721032b7b272a987b7f7e307dbf8e7161e1c23a9b8046a8649e77d80a32db7"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437523752036074","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:eca3999b30b1f6f9e7167413af5002afab7050db88edb70628894ec499075415"}],"verdict":{"verdict":"unknown"}},{"id":"1563437525769496485","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:ee9d7e055a103ee3bb3a6ba3b10f04d0fc7d27127541ff31c63b6d5d4201647a"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525773690790","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:f0f5b9b9940e630a9cf8dbcb2082761af99412e490bb5ca77888066cfb823312"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525782079399","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:f2f3c2d5f891adc62375e529e1b387c13958b62e498ca050cccb15bad7320155"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437525786273704","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:f54e7b1fd901c7683b5b5d5b9131893f74ce2dcb1fa80eff8641149af326ea97"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1563437523739453117","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted_from_archive","from_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","to_key":"File:ffbd359a1c0da21407757312ce8fbede09fd50a055546b0dc1e8c7e9926a52dd"}],"verdict":{"verdict":"unknown"}},{"id":"sandbox_files","root":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","edges":[{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:620ac2f6ac59dedbb449297c8d63c992ac4eed3a52de320f014f1ae1517c0384"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:a2d0844db92f8f2f55138f9930ceee28cb4e93c62c5aa67f0bc08dd165aca618"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:0a7e18cf994e0e32bff37734e77ad6b9c9b05035b52db4914b7d07b525056715"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:eca3999b30b1f6f9e7167413af5002afab7050db88edb70628894ec499075415"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:68fdc02da6aa057b9f4ec97af9744ba39608cec8cc382ffb1ba579b8faf4b63d"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:6636a15f7e86ec6823e0b1f9cf1f7daaa0f4a1cca5c7bb5a61a3bcc464a31dad"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:6f001578f300b01b56c6c84bf6e59cdbd2c396f9c5ff6d416a65bd1f701b00dd"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:ce021b2b046f7a3729560e94fd816c4838233e1b08a5f5f4a5e2cf9ded59129f"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:26fb0685025335680f48bc0f0adf6e93c272cdd061a9c2f5eacc405b9872a5f5"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:3284c978aa8f8c9606646bdb46f0e14f4324188c2b4405a9649ba17e39ed0e20"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:d9fe94653fe64c043ed6c338160e6c0dc3a37792118a77bfee7237e6cf2d4ca1"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:d5f6892baa762e4769a31e623ce9749c4d00712d0433d91e5d69896baeaacec5"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:c4c55173ca86d866b9b71d36b0c2c93d43d09c688328b90a40efb90ad4b06dd7"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:de6736e8f091febfdbc4c137f9c547bc9c66c80a047919a7130ace44479b2fa5"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:d256aeab74f87d5b910cc421dac9e777415e6dff72ec674d1b68ddbee9446aa4"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:1e12d629ccd7e3c0dfdf8d8f50481e77f930e189dc05fb020811fdea1d2450db"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:e52c698632a59598087d9b23f01f00d58e7f69163d7bee4ba80baf728b0c1c3c"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:ea110f59d2e9ee698cec341313ba852ee3cc01c02d24ae4663a442efbdadd1c7"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:8903e94a3e992c837c37306a22fabd74577e46b6dadbf08a28cdb9c28fa41e95"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:b49f5146d5d4dbf99a19b684eb70e4dd39555b1a4ce4f0f9c94b584763af939d"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:08bd115fa025f39003219779f8cf92da906247c4b53f1de06cd9ea691ec0a5d9"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:a4475af7e88290888934f62bff76f95c4cb18fd8bcde800b33e6ec6886593a5c"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:f2f3c2d5f891adc62375e529e1b387c13958b62e498ca050cccb15bad7320155"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:5155bc6c93aeda2aeebd36850f896d9b9fee3f0ce3e4d7250459626e589cac11"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:1e45535bd71b9bc7f5020bd2c794dd874abc1668ce08337b9a8eb3b564d5324a"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:a5a57635483c6a20af08d2fb2aec9fe7be143e1c3a26bba4f32532dfade1ebd9"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:c75a6049edcb7d9d1609a77ac8ec33855b75429d76093d35f38d576d30db69a0"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:51da07da18a5486b11e0d51ebff77a3f2fcbb4d66b5665d212cc6bda480c4257"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:71c290d67488ec163c90854d3acce8fc521fb1114e8d1d6f1dad7d47cfcea87d"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:e0c04ca28bc8ce1c8e406e47fa4ea4fcc3ba23277220ffe7d314ce4327838121"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:0a74cd2180baa6e114c06de10bd573f7fb7aea12b64462d6e95175840f58b7f3"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:03903cb2902b5a84393e06acf643c7a8255cccbe83e2499c42b4943515191784"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:7188a7fa064c698f03f57eacc54fdcf0f220d700387f9cb230187f08da8ca291"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:41c22d153740a16bcc646842dd5c18639f41b7c46cf6db7e7cfb82d2da2f4c12"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:21ddac2389e538182d8c084c6e6a29b988dbed11003d972c440c3fd6f30f7a87"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:c60507759d37d44a4023000a3d4ff4ead68778afeb702ecbb0dcc98bf96cab9b"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:5bff282c8070f31151dedbe27487cb6f68a0ae070ec1b191d41614ee169106ad"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:2f6ae442d7805ee796bc85eecec63a1ced9dba9fc6794805d429ef35e33d41a2"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:bc22a4b6d430cbbdd53146a75de429149e8605b06508d2d14b9df735ac7043cf"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:a11c2bc5dd49a44a8c95cba68f6cccf9eb4813c687f18874ee664280a8a74604"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:8d8213ea1dc4525a427f7a7268f9eb3ba625f400b68794626e90a7d5b2900e43"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:84c1c2011ad5bde8b2c8f6edb588f289fd0715481465300e8c88672118555885"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:070c9ec443714cec24c75d8108a321c3cce4bd39d329fdb7e2877235cdc67067"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:aead67dd22a27d1f6d3a584cb45f6c33b3b5de2ad93cd91530960f5435d84040"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:4399e07a5314b003c10b13276f91633ea4ff7b67dca7623e7d06809fb98bd487"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:42b1174097e50bfdf5462905b0465c17b0531b80733c639895b068f7e132b878"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:183f3fe29a1cdfc8fe49643e7b112b9d7f3c9448891bb9565a712fd6bbf98e83"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:f54e7b1fd901c7683b5b5d5b9131893f74ce2dcb1fa80eff8641149af326ea97"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:89749b5d815248a7220d4899b93d0408a1bf565a020383854502e1bf41476e46"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:c3615c51dab0004d844f2e6caa549a4c7dff6ec591a7fe6830fba9f0b19f0e04"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:f0f5b9b9940e630a9cf8dbcb2082761af99412e490bb5ca77888066cfb823312"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:90393186bf2f335eb8afde01199958a8dba84fd3b479fcce0615453df9764cdd"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:95d0431e4e540ab62ae1a205678b032bb5d9849b5d21029a48110c87508b4fc6"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:ae8e042df54c3fa33ce0ca8803c1ac744994bae7e8369c4de91fdc23e5338e32"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:31a968d58a5b6f41f5c011cfb32eb3360fb1e3bac8fbe50ceb068bd97ec42686"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:41e72314a1648a4cadeb08c0ebcaf3eb55a2deff304aa07aad486d7aa7ee7bd0"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:0f6f5d73ba9d529d109b8572f3fae0f4e7bad965a5d8caff32cf6675b11fbd29"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:ac4db970cc6994b6194975538762392e20e87939fdf44ddee2d436da24624797"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:cd24e53d5cd0f32e2164ce30a05350380ab6ffe66fe9f65c9e19a600d12fac4f"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:bbf9cce6b5c1e63b79490bbad9008b3bf5f15e41588f000bb33dc55eb6aa1d64"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:a05402a0e3c4655da587e6928696cfeb9f26b2077a54c674f98b6cfc7eb7a3eb"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:2a6c03cc0f91079134572bd0f0f35412e99fc5c548c7af74bf9964d905856593"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:b78986f3b6457f4e7ee914e1812c167bc5ad70243885161cb6d32421f82bbc17"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:4dd798905e9f151b9a12e77dea05a3a99787f5765bf83a52d795d1c98e0395ef"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:6c9a8ed75134946de2798add91fe28ec772ad72a0a95bcbfa23091d2ce505fa2"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:e2cec514651098095c0e4bbbc86cc8900e830ce5ad1773bd4277e42509a191d2"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:5a12b3ea332bcb7ce75d0dc9bbe9b47b815902740c52fce56a365378cc59fc15"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:4caf560e217b31a1a765305712c9019ce54347d600b3fcda6e989a2b03198824"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:18bfc240f3f5577e2d6c68d7af32bc3e33c9bb6905246e0122cd670b02063177"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:cda6ed43d7cf9d3a795b0d5a799cf8ce44fee032d9efb037cf61127296232a6b"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:b621e351e7e31a06c781db66921affa78bfe51db93f3262353688877d18360eb"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:548b7113ae115d936a790760a46c3a50ddbae6ddaf163e6510007d1c280a5488"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:b703bffc80c4f82263c6936619b64937d50eaafb033cdfc1c10a46c66be6d052"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:4ce8eea47cc60f71d3677e0e6c8fd9328c319fd0abcd4127a3f616cbc9abf956"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:960828a0d7e2ab9155d5291f93702792c4722d97b8f418cb3d5bc43d8b2ff294"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:9cf294c8ffb8e394ab911da8583618a60ef99cf38c982bb2bd2b31143efac84f"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:ec721032b7b272a987b7f7e307dbf8e7161e1c23a9b8046a8649e77d80a32db7"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:c07e0c44e8a253bf4a22f89e161adddfe30ba9fcf59c9dc21fb3fd5f6854f1bb"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:3d077f297915ea4534759c33c773d5914b043a363e2094447841d021ba7a114c"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:02272c8f727baa91242a002bc42f3ab0371f4d18d5eb2afefe3f28b53afab7ee"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:ee9d7e055a103ee3bb3a6ba3b10f04d0fc7d27127541ff31c63b6d5d4201647a"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:34bc095d5835293606c2d7d3e3fdcb763f99896a0627e68cdf7818d64483ecf1"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:11e921e44004ed9495e0abaed751529d0e2f9f9121c9c8f1b7f84ac7d84c6b25"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:0ce5bbe9a7d1bd270a1ba09f3227be4d848132755dad345ae714b1b9451c1b44"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:32dc387244fdcac48af5b5ee2f1b6c2ec830fa4800b0f79ed6ad5780dda1ca37"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:7208fa88213bc9efa2ddf1cf7aa1f2e25f3b4ebabc79563bf2e39edd61809997"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:8c4152aeae52949a11f120d5524e808e706a8df1148115b0855da32b5f149883"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:636737fbf89f428ea77a716439c45a418e922c434c6ad08d81551e6f7e4ae8c8"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:4f8c6a76c6643daffdce65a4a63f0a7e32e59c5df4b651072407d4740d9a936b"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:58c03aaac2a7c976a15e5c82f240b13f59efb77fc6ec6e647465cfa64e55efc5"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:722eed4e266d4126a7c876340ea00c3aaffbf490ddcdab7b12e79bda4405bd28"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:446a49391303534ce6d313cd297f8c2fad952ddfd2f476c50a3089653a6b283f"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:655f76283c134fab748c6edbfce4a2d98e4e9d2389865eeb1e87c40fc92b214b"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:398e0e7e346b80c2ead5f5461346d01f5d212eca8e572568bf47c7c87c8343de"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:bb9cf01e65ca71df4e7e903b0b3345cbc4625cb526807f3f42e2156639f6a62d"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:ffbd359a1c0da21407757312ce8fbede09fd50a055546b0dc1e8c7e9926a52dd"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:25030450ef30ed5cdfa69d9aadcee94525b0414185d7b2fe3d8bfce502a62367"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:23bb13dacc122df333f3ccf39dce5adb0c165cf90d47a94e51379ebe7acb5f8a"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:7de4cc8f37cb57f957315087c1bbe41f671a137d846d3ca20f94144feaf1e3f7"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:01882218591a9105127125c3b46ed5fb0929974bae359e64ff1c6786c7cc88e9"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:4726489bb5e7bba9a9a661a72870bd4aeab006caf6d7015c080657368c97740d"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:830d2bfb53afcc98ddbf2f20731a37dde207c2ed67eede37b3d70b166abb97c1"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:87843c94d8f77eb595bdec55fbbf01f531a978d39be352731955720466637f1e"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:e1b93bccf58f92171d577ee63753d2c5a22153c2c720b2a7a8900996f9ca3389"},{"edge_kind":"extracted","from_key":"File:c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770","to_key":"File:09439f7e09535e1af4029be64f79ce5928010931192ac25f692df8b0e6672720"}],"verdict":{"verdict":"unknown","verdict_source":"sandbox"}}]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":109,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":[],"extracted_files":[{"name":"button/btn-finish-disabled.png","sha256":"620ac2f6ac59dedbb449297c8d63c992ac4eed3a52de320f014f1ae1517c0384","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-startup-disabled.png","sha256":"a2d0844db92f8f2f55138f9930ceee28cb4e93c62c5aa67f0bc08dd165aca618","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-confirm2-disabled.png","sha256":"0a7e18cf994e0e32bff37734e77ad6b9c9b05035b52db4914b7d07b525056715","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"licensepage.xml","sha256":"eca3999b30b1f6f9e7167413af5002afab7050db88edb70628894ec499075415","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-back-press.png","sha256":"68fdc02da6aa057b9f4ec97af9744ba39608cec8cc382ffb1ba579b8faf4b63d","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"form/btn_down_pressed.png","sha256":"6636a15f7e86ec6823e0b1f9cf1f7daaa0f4a1cca5c7bb5a61a3bcc464a31dad","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-finish-press.png","sha256":"6f001578f300b01b56c6c84bf6e59cdbd2c396f9c5ff6d416a65bd1f701b00dd","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/fanhui_hovered.png","sha256":"ce021b2b046f7a3729560e94fd816c4838233e1b08a5f5f4a5e2cf9ded59129f","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"bkimage/bk1.png","sha256":"26fb0685025335680f48bc0f0adf6e93c272cdd061a9c2f5eacc405b9872a5f5","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-startup.png","sha256":"3284c978aa8f8c9606646bdb46f0e14f4324188c2b4405a9649ba17e39ed0e20","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-confirm2.png","sha256":"d9fe94653fe64c043ed6c338160e6c0dc3a37792118a77bfee7237e6cf2d4ca1","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/ljaz_normal.png","sha256":"d5f6892baa762e4769a31e623ce9749c4d00712d0433d91e5d69896baeaacec5","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-cancel2-hover.png","sha256":"c4c55173ca86d866b9b71d36b0c2c93d43d09c688328b90a40efb90ad4b06dd7","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"form/btn_installation_disable.png","sha256":"de6736e8f091febfdbc4c137f9c547bc9c66c80a047919a7130ace44479b2fa5","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-cancel-press.png","sha256":"d256aeab74f87d5b910cc421dac9e777415e6dff72ec674d1b68ddbee9446aa4","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"$$PLUGINSDIR/skin.zip","sha256":"942af57f65e90166178443f41b4aee12af6510ab21c9234468284532dd4a2ff8","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"finishpage.xml","sha256":"1e12d629ccd7e3c0dfdf8d8f50481e77f930e189dc05fb020811fdea1d2450db","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-custom-install-hover.png","sha256":"e52c698632a59598087d9b23f01f00d58e7f69163d7bee4ba80baf728b0c1c3c","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-browse-hover.png","sha256":"ea110f59d2e9ee698cec341313ba852ee3cc01c02d24ae4663a442efbdadd1c7","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"$$PLUGINSDIR/logo.ico","sha256":"8903e94a3e992c837c37306a22fabd74577e46b6dadbf08a28cdb9c28fa41e95","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"msgWarning.png","sha256":"b49f5146d5d4dbf99a19b684eb70e4dd39555b1a4ce4f0f9c94b584763af939d","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"bkimage/bk4.png","sha256":"08bd115fa025f39003219779f8cf92da906247c4b53f1de06cd9ea691ec0a5d9","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-custom-install-press.png","sha256":"a4475af7e88290888934f62bff76f95c4cb18fd8bcde800b33e6ec6886593a5c","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-confirm.png","sha256":"f2f3c2d5f891adc62375e529e1b387c13958b62e498ca050cccb15bad7320155","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-uninstall-disabled.png","sha256":"5155bc6c93aeda2aeebd36850f896d9b9fee3f0ce3e4d7250459626e589cac11","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-custom-press.png","sha256":"1e45535bd71b9bc7f5020bd2c794dd874abc1668ce08337b9a8eb3b564d5324a","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"form/btn_down_normal.png","sha256":"a5a57635483c6a20af08d2fb2aec9fe7be143e1c3a26bba4f32532dfade1ebd9","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/ljty_disable.png","sha256":"c75a6049edcb7d9d1609a77ac8ec33855b75429d76093d35f38d576d30db69a0","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"$$PLUGINSDIR/nsProcess.dll","sha256":"51da07da18a5486b11e0d51ebff77a3f2fcbb4d66b5665d212cc6bda480c4257","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"71c290d67488ec163c90854d3acce8fc521fb1114e8d1d6f1dad7d47cfcea87d","sha256":"71c290d67488ec163c90854d3acce8fc521fb1114e8d1d6f1dad7d47cfcea87d","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"form/bg.png","sha256":"e0c04ca28bc8ce1c8e406e47fa4ea4fcc3ba23277220ffe7d314ce4327838121","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-finish.png","sha256":"0a74cd2180baa6e114c06de10bd573f7fb7aea12b64462d6e95175840f58b7f3","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/fanhui_disable.png","sha256":"03903cb2902b5a84393e06acf643c7a8255cccbe83e2499c42b4943515191784","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-cancel.png","sha256":"7188a7fa064c698f03f57eacc54fdcf0f220d700387f9cb230187f08da8ca291","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/ljaz_pressed.png","sha256":"41c22d153740a16bcc646842dd5c18639f41b7c46cf6db7e7cfb82d2da2f4c12","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"form/00005[94x36x8BPP].png","sha256":"21ddac2389e538182d8c084c6e6a29b988dbed11003d972c440c3fd6f30f7a87","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-cancel-hover.png","sha256":"c60507759d37d44a4023000a3d4ff4ead68778afeb702ecbb0dcc98bf96cab9b","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"progress-bar.png","sha256":"5bff282c8070f31151dedbe27487cb6f68a0ae070ec1b191d41614ee169106ad","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"public/edit/edit0.png","sha256":"2f6ae442d7805ee796bc85eecec63a1ced9dba9fc6794805d429ef35e33d41a2","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"form/msgbox.xml","sha256":"bc22a4b6d430cbbdd53146a75de429149e8605b06508d2d14b9df735ac7043cf","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-custom-hover.png","sha256":"a11c2bc5dd49a44a8c95cba68f6cccf9eb4813c687f18874ee664280a8a74604","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"install.xml","sha256":"8d8213ea1dc4525a427f7a7268f9eb3ba625f400b68794626e90a7d5b2900e43","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-install-disabled.png","sha256":"84c1c2011ad5bde8b2c8f6edb588f289fd0715481465300e8c88672118555885","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"public/button/btn_global_green_80x30_pushed.png","sha256":"070c9ec443714cec24c75d8108a321c3cce4bd39d329fdb7e2877235cdc67067","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-custom.png","sha256":"aead67dd22a27d1f6d3a584cb45f6c33b3b5de2ad93cd91530960f5435d84040","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"form/btn_installation_pressed.png","sha256":"4399e07a5314b003c10b13276f91633ea4ff7b67dca7623e7d06809fb98bd487","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-cancel-disabled.png","sha256":"42b1174097e50bfdf5462905b0465c17b0531b80733c639895b068f7e132b878","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"bkimage/bk-msgbox.png","sha256":"183f3fe29a1cdfc8fe49643e7b112b9d7f3c9448891bb9565a712fd6bbf98e83","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-cancel2-press.png","sha256":"f54e7b1fd901c7683b5b5d5b9131893f74ce2dcb1fa80eff8641149af326ea97","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-startup-hover.png","sha256":"89749b5d815248a7220d4899b93d0408a1bf565a020383854502e1bf41476e46","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"scroll.png","sha256":"c3615c51dab0004d844f2e6caa549a4c7dff6ec591a7fe6830fba9f0b19f0e04","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/ljty_pressed.png","sha256":"f0f5b9b9940e630a9cf8dbcb2082761af99412e490bb5ca77888066cfb823312","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"public/button/btn_global_green_80x30_hovered.png","sha256":"90393186bf2f335eb8afde01199958a8dba84fd3b479fcce0615453df9764cdd","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-confirm-hover.png","sha256":"95d0431e4e540ab62ae1a205678b032bb5d9849b5d21029a48110c87508b4fc6","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/zdyaz_pressed.png","sha256":"ae8e042df54c3fa33ce0ca8803c1ac744994bae7e8369c4de91fdc23e5338e32","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/ljty_normal.png","sha256":"31a968d58a5b6f41f5c011cfb32eb3360fb1e3bac8fbe50ceb068bd97ec42686","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"form/btn_installation_normal.png","sha256":"41e72314a1648a4cadeb08c0ebcaf3eb55a2deff304aa07aad486d7aa7ee7bd0","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"bk_shadow.png","sha256":"0f6f5d73ba9d529d109b8572f3fae0f4e7bad965a5d8caff32cf6675b11fbd29","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-finish-hover.png","sha256":"ac4db970cc6994b6194975538762392e20e87939fdf44ddee2d436da24624797","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-install.png","sha256":"cd24e53d5cd0f32e2164ce30a05350380ab6ffe66fe9f65c9e19a600d12fac4f","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-startup-press.png","sha256":"bbf9cce6b5c1e63b79490bbad9008b3bf5f15e41588f000bb33dc55eb6aa1d64","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"form/fg.png","sha256":"a05402a0e3c4655da587e6928696cfeb9f26b2077a54c674f98b6cfc7eb7a3eb","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"public/checkbox/check_yes1.png","sha256":"2a6c03cc0f91079134572bd0f0f35412e99fc5c548c7af74bf9964d905856593","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/ljty_hovered.png","sha256":"b78986f3b6457f4e7ee914e1812c167bc5ad70243885161cb6d32421f82bbc17","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-confirm-disabled.png","sha256":"4dd798905e9f151b9a12e77dea05a3a99787f5765bf83a52d795d1c98e0395ef","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-install-press.png","sha256":"6c9a8ed75134946de2798add91fe28ec772ad72a0a95bcbfa23091d2ce505fa2","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"uninstallingpage.xml","sha256":"e2cec514651098095c0e4bbbc86cc8900e830ce5ad1773bd4277e42509a191d2","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"public/button/btn_global_green_80x30_normal.png","sha256":"5a12b3ea332bcb7ce75d0dc9bbe9b47b815902740c52fce56a365378cc59fc15","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/liulan_hovered.png","sha256":"4caf560e217b31a1a765305712c9019ce54347d600b3fcda6e989a2b03198824","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"uninstallfinishpage.xml","sha256":"18bfc240f3f5577e2d6c68d7af32bc3e33c9bb6905246e0122cd670b02063177","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"$$PLUGINSDIR/System.dll","sha256":"7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-install-hover.png","sha256":"cda6ed43d7cf9d3a795b0d5a799cf8ce44fee032d9efb037cf61127296232a6b","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"default.xml","sha256":"b621e351e7e31a06c781db66921affa78bfe51db93f3262353688877d18360eb","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"$$PLUGINSDIR/nsNiuniuSkin.dll","sha256":"548b7113ae115d936a790760a46c3a50ddbae6ddaf163e6510007d1c280a5488","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/zdyaz_hovered.png","sha256":"b703bffc80c4f82263c6936619b64937d50eaafb033cdfc1c10a46c66be6d052","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"bkimage/bk3.png","sha256":"4ce8eea47cc60f71d3677e0e6c8fd9328c319fd0abcd4127a3f616cbc9abf956","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/ksaz_normal.png","sha256":"960828a0d7e2ab9155d5291f93702792c4722d97b8f418cb3d5bc43d8b2ff294","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"form/btn_down_hovered.png","sha256":"9cf294c8ffb8e394ab911da8583618a60ef99cf38c982bb2bd2b31143efac84f","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"form/btn_installation_hovered.png","sha256":"ec721032b7b272a987b7f7e307dbf8e7161e1c23a9b8046a8649e77d80a32db7","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/ljaz_disable.png","sha256":"c07e0c44e8a253bf4a22f89e161adddfe30ba9fcf59c9dc21fb3fd5f6854f1bb","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-cancel2.png","sha256":"3d077f297915ea4534759c33c773d5914b043a363e2094447841d021ba7a114c","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-browse-press.png","sha256":"02272c8f727baa91242a002bc42f3ab0371f4d18d5eb2afefe3f28b53afab7ee","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/ljaz_hovered.png","sha256":"ee9d7e055a103ee3bb3a6ba3b10f04d0fc7d27127541ff31c63b6d5d4201647a","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/liulan_normal.png","sha256":"34bc095d5835293606c2d7d3e3fdcb763f99896a0627e68cdf7818d64483ecf1","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/fanhui_pressed.png","sha256":"11e921e44004ed9495e0abaed751529d0e2f9f9121c9c8f1b7f84ac7d84c6b25","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-custom-install.png","sha256":"0ce5bbe9a7d1bd270a1ba09f3227be4d848132755dad345ae714b1b9451c1b44","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/ksaz_hovered.png","sha256":"32dc387244fdcac48af5b5ee2f1b6c2ec830fa4800b0f79ed6ad5780dda1ca37","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/zdyaz_normal.png","sha256":"7208fa88213bc9efa2ddf1cf7aa1f2e25f3b4ebabc79563bf2e39edd61809997","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"8c4152aeae52949a11f120d5524e808e706a8df1148115b0855da32b5f149883","sha256":"8c4152aeae52949a11f120d5524e808e706a8df1148115b0855da32b5f149883","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-uninstall.png","sha256":"636737fbf89f428ea77a716439c45a418e922c434c6ad08d81551e6f7e4ae8c8","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-custom-install-disabled.png","sha256":"4f8c6a76c6643daffdce65a4a63f0a7e32e59c5df4b651072407d4740d9a936b","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"configpage.xml","sha256":"58c03aaac2a7c976a15e5c82f240b13f59efb77fc6ec6e647465cfa64e55efc5","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"msgBox.xml","sha256":"722eed4e266d4126a7c876340ea00c3aaffbf490ddcdab7b12e79bda4405bd28","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-confirm-press.png","sha256":"446a49391303534ce6d313cd297f8c2fad952ddfd2f476c50a3089653a6b283f","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"license_bg.png","sha256":"655f76283c134fab748c6edbfce4a2d98e4e9d2389865eeb1e87c40fc92b214b","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-uninstall-press.png","sha256":"398e0e7e346b80c2ead5f5461346d01f5d212eca8e572568bf47c7c87c8343de","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-uninstall-hover.png","sha256":"bb9cf01e65ca71df4e7e903b0b3345cbc4625cb526807f3f42e2156639f6a62d","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"uninstallpage.xml","sha256":"ffbd359a1c0da21407757312ce8fbede09fd50a055546b0dc1e8c7e9926a52dd","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/ksaz_pressed.png","sha256":"25030450ef30ed5cdfa69d9aadcee94525b0414185d7b2fe3d8bfce502a62367","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-cancel2-disabled.png","sha256":"23bb13dacc122df333f3ccf39dce5adb0c165cf90d47a94e51379ebe7acb5f8a","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"$$PLUGINSDIR/StdUtils.dll","sha256":"b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-confirm2-press.png","sha256":"7de4cc8f37cb57f957315087c1bbe41f671a137d846d3ca20f94144feaf1e3f7","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"$$PLUGINSDIR/BgWorker.dll","sha256":"50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-custom-disabled.png","sha256":"01882218591a9105127125c3b46ed5fb0929974bae359e64ff1c6786c7cc88e9","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-confirm2-hover.png","sha256":"4726489bb5e7bba9a9a661a72870bd4aeab006caf6d7015c080657368c97740d","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/liulan_pressed.png","sha256":"830d2bfb53afcc98ddbf2f20731a37dde207c2ed67eede37b3d70b166abb97c1","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/ksaz_disable.png","sha256":"87843c94d8f77eb595bdec55fbbf01f531a978d39be352731955720466637f1e","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"installingpage.xml","sha256":"e1b93bccf58f92171d577ee63753d2c5a22153c2c720b2a7a8900996f9ca3389","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"button/btn-back-hover.png","sha256":"09439f7e09535e1af4029be64f79ce5928010931192ac25f692df8b0e6672720","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]}],"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample c3f5a4ae601f… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample c3f5a4ae601f…. Threat score 0/100. 0/26 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770"}],["$","meta","4",{"property":"og:title","content":"Sample c3f5a4ae601f… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample c3f5a4ae601f…. Threat score 0/100. 0/26 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/c3f5a4ae601fa3890cfa2e5fa2f8acead730e5b38e365afc49ccaf807bd49770"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample c3f5a4ae601f… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample c3f5a4ae601f…. Threat score 0/100. 0/26 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L28","11",{}]]