20:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/4109t72175nm8.js","/_next/static/chunks/04k_7k5p4krw4.js","/_next/static/chunks/30r--1re9i9ly.js"],"SampleDetailWrapper"] 28:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 21:T564,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:T453,"\Sessions\1\BaseNamedObjects\Local\!BrowserEmulation!SharedMemory!Mutex" "\Sessions\1\BaseNamedObjects\Local\VERMGMTBlockListFileMutex" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_FILEMAPSWITCH_MUTEX_3044" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_HASHFILESWITCH_MUTEX" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_DOWNLOAD_MUTEX" "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex" "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex" "\Sessions\1\BaseNamedObjects\IsoScope_be4_IE_EarlyTabStart_0xb20_Mutex" "\Sessions\1\BaseNamedObjects\IsoScope_be4_ConnHashTable<3044>_HashTable_Mutex" "\Sessions\1\BaseNamedObjects\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "\Sessions\1\BaseNamedObjects\IsoScope_be4_IESQMMUTEX_0_303" "\Sessions\1\BaseNamedObjects\IsoScope_be4_IESQMMUTEX_0_331" "\Sessions\1\BaseNamedObjects\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}" "Local\InternetShortcutMutex" "DBWinMutex" "{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "IsoScope_be4_IESQMMUTEX_0_303" "IsoScope_be4_IESQMMUTEX_0_519" "IsoScope_be4_IESQMMUTEX_0_331" "Local\URLBLOCK_DOWNLOAD_MUTEX"23:Td06,"6BADA8974A10C4BD62CC921D13E43B18_28DEA62A0AE77228DD387E155AD0BA27" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_28DEA62A0AE77228DD387E155AD0BA27]- [targetUID: 00000000-00002732] "77EC63BDA74BD0D0E0426DC8F8008506" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506]- [targetUID: 00000000-00002732] "CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA]- [targetUID: 00000000-00002732] "07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D]- [targetUID: 00000000-00002732] "SPP2TTNN.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\SPP2TTNN.txt]- [targetUID: 00000000-00002732] "WZ5PSWOT.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\WZ5PSWOT.txt]- [targetUID: 00000000-00002732] "BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894]- [targetUID: 00000000-00002732] "Tar30D7.tmp" has type "data"- Location: [%TEMP%\Tar30D7.tmp]- [targetUID: 00000000-00002732] "9SESDQBY.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\9SESDQBY.txt]- [targetUID: 00000000-00003044] "80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53]- [targetUID: 00000000-00003044] "E09A724BAF1455BCB168CC1984DED82D" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\E09A724BAF1455BCB168CC1984DED82D]- [targetUID: 00000000-00002732] "B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62]- [targetUID: 00000000-00002732] "RMU2ITVR.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\RMU2ITVR.txt]- [targetUID: 00000000-00002732] "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776]- [targetUID: 00000000-00002732] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 4817 bytes 1 file"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00002732] "~DFE95C93DD6DF840DC.TMP" has type "data"- Location: [%TEMP%\~DFE95C93DD6DF840DC.TMP]- [targetUID: 00000000-00003044] "A16C6C16D94F76E0808C087DFC657D99_2BC1EBDF70025A0B98F0EB399C4064B8" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_2BC1EBDF70025A0B98F0EB399C4064B8]- [targetUID: 00000000-00002732]24:Tc62,Pattern match: "https://dotnetfiddle.net/aL574y"- [Source: Input] Pattern match: "https://dotnetfiddle.net"- [Source: Input] Heuristic match: "o.ss2.us"- [Source: PCAP] Heuristic match: "GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: o.ss2.us"- [Source: PCAP] Heuristic match: "ocsp.rootg2.amazontrust.com"- [Source: PCAP] Heuristic match: "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.rootg2.amazontrust.com"- [Source: PCAP] Heuristic match: "ocsp.rootca1.amazontrust.com"- [Source: PCAP] Heuristic match: "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.rootca1.amazontrust.com"- [Source: PCAP] Heuristic match: "ocsp.sca1b.amazontrust.com"- [Source: PCAP] Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAQvYCBFexRqLOIAbcSHSxA%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com"- [Source: PCAP] Heuristic match: "ocsp.sectigo.com"- [Source: PCAP] Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEGdbMLgBHZG4cYSL%2BZkHXI0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com"- [Source: PCAP] Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECECn8VTxu0%2B%2FIXczCIzuUm6k%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com"- [Source: PCAP] Heuristic match: "cdn.carbonads.com"- [Source: PCAP] Heuristic match: "cdn4.buysellads.net"- [Source: PCAP] Heuristic match: "dotnetfiddle.net"- [Source: PCAP] Heuristic match: "netdna.bootstrapcdn.com"- [Source: PCAP] Pattern match: "https://techplanet.today/post/watch-brian-and-charles-2022-free-online-streaming-at-home-english-sub\nhttps://techplanet.today/post/watch-beast-2022-free-online-streaming-at-home-english-sub\nhttps://techplanet.today/post/watch-king-richard-2022-free-onlin"- [Source: SSL_104.42.145.67] Pattern match: "www.maritimemarketbhi.com/profile/watch-free-the-final-stroke-part-2-full-move-sub-eng-hd-on/profile\nhttps://www.maritimemarketbhi.com/profile/watch-sword-art-online-the-movie-progressive-aria-of-a-starless-night-full-move-sub-eng-hd-on/profile\nhttps://w"- [Source: SSL_104.42.145.67] Pattern match: "www.loadinfo.net"- [Source: SSL_104.42.145.67] Pattern match: "http://mozilla.org/MPL/2.0/"- [Source: SSL_99.84.238.164] Pattern match: "https://hub.togetherjs.com"- [Source: SSL_99.84.238.164] Pattern match: "https://www.msn.com/spartan/ientpgbconfig?locale=en-us&market=us"- [Source: SSL_96.6.31.32]25:T7c0b,"GET /content/css/desktop?v=lB95znbnUy7LIb3t450ddZsklXxbpbM7HToPqHWtqQs1 HTTP/1.1 Accept: text/css, */* Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /aL574y HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /bundles/codemirrorcss?v=a3BXkN-CPs0uir7jXyTovklTyOV7sImo2wgaeho3aRo1 HTTP/1.1 Accept: text/css, */* Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /content/css/csharpcolors.css HTTP/1.1 Accept: text/css, */* Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /content/images/ajax-loader.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/packages/bootstrap-3.0.2/css/bootstrap.min.css?v=2 HTTP/1.1 Accept: text/css, */* Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "HTTP/1.1 200 OK Cache-Control: public Content-Type: text/css; charset=utf-8 Content-Encoding: gzip Expires: Thu, 03 Aug 2023 06:15:02 GMT Last-Modified: Wed, 03 Aug 2022 06:15:02 GMT Vary: User-Agent,Accept-Encoding Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:12b08763-5c5a-4606-bd08-4079974aa642 Access-Control-Expose-Headers: Request-Context X-Powered-By: ASP.NET Date: Wed, 03 Aug 2022 06:15:02 GMT Content-Length: 3605 `I%&/m{JJt`$@iG#)*eVe]f@{{;N'?\fdlJ!?~|?"',>EyhQ-fMy^\GvvVUY~|ggpV-g,yWlV,/;;)}L,'Y}^e^//mo~$r}'U=j.aTe1K|6F{%IH/_C-~A}yg&xV42~T,|{RVf$?Xs IVMms(sVGq&UVG~yY]=YNZp54l])AS4)6h]VK<$B."|K{t4M[WoWb&U9fB>o2TM_5Qxsby-mu$"DeDXbo5}X6 Q6iC> \fuM\|Z/GVy^Gxo{u?^ze'}~iXPF}&k=BZmfZC7_fuQ4|bFmfG s&$ln1f>'^kZ!(E%c6g7|R]g/-zJzxMv&;7Iiib;^wF%|HZL_[QKLO&= Wx`$}DT}`h@rVcp+h ``G@!=vI(5}R)RLnvM;N&{] :_jnP_~[tdzy/hgz?`>Y_dZ`_m[3hr#&T6^9MY8GRL{jARemZ^&tT/_]^_Tx'OOqz9r|{xjnr*^N_zzz|{EW?_'xr_4 _>{'{?5;gvrr_?u^{NgyO~O8{qqq|v|_1O]/ >dfrE?,_~S~{/|:v~zM \jo_xjW {Uy{O/>}w~w78}=r==upw;|R]|zI(sK6Y}w}&B?i?kjWo|`bNEd5}}Qhn^~g_}O&_~?d>/S}o/>|U}_]=||'^'?198ye]]s`}O%n=Ow>`o<xu"7Dn$7=X8l.CcA4,Jwoi&"- [Source: SSL_104.42.145.67] , "HTTP/1.1 200 OK Cache-Control: public Content-Type: text/css; charset=utf-8 Content-Encoding: gzip Expires: Thu, 03 Aug 2023 06:15:02 GMT Last-Modified: Wed, 03 Aug 2022 06:15:02 GMT Vary: User-Agent,Accept-Encoding Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:12b08763-5c5a-4606-bd08-4079974aa642 Access-Control-Expose-Headers: Request-Context X-Powered-By: ASP.NET Date: Wed, 03 Aug 2022 06:15:02 GMT Content-Length: 17377 `I%&/m{JJt`$@iG#)*eVe]f@{{;N'?\fdlJ!?~|?"~+X4kjgE]byniledkw`to^/by]WuzGW*b[Z/g?=JO{|QLC_O]4?woF(Lqr[k?t;o{;wwyMxZ-rZgy(oUM3>A6){_4yIhF}n+~Ummo6_y"_FL,f}X.XgUU<_A7UzYWiFfuF#),uUy}8?gzZ}o@ulC?s_'U9&_B0lVqc<#}vp:owr:[\|E{'yC{`Os~~!o6;#}he<|cb>>>?'3O fGE5 }01N&0sYv0#Ki'|Z:9O;\>}0cRug~<0mg.S>yivv,b^/&>WLo{gy6OC}#FP_Zl4l'O}v%MS]Cj!; ?G$0_Yu MHM.IG`s7J?v>[S_91TI1l9|K)^)"=J6.Tus>/9, [8!=U^o,_Y"2%T2vezT]I;>];\dE|!WeuHl>XIS6?*f| /V}"SX~{aK3=L&9Qh}ww.szZY}^{4e:G}thIfmryl/n|45\gCIm-E-K3!K07~@yR2u4J#A!m@FlvLse\>VPMAgw^7/w 3C_ RM+pA;0ZdI?$CTD4((<('%/L|l"p-* Z;edR60/R3mL_{|ey n|}{^C0\'_dcg(dI|G70dPlXn,{"/zfMR\vFYsVUhgCuPx$Gs?8gz)_"_nlO: =n!nngX]Z0@N3A1R1-}'72Ph%Sw'-.zn77a> Re!6 .hn0gX{&;rhBh;~=53=@8L15/~cm_A {c>5U8j!Cbh{|3m:8@Qki1"m?z~}^M G&.d6" U-KJ OCX^?I;ByU_|Mh9T&b: I5=qtt{i%,\Mnn7_A'iDU/u,n.)8TyC'0?4RDNXar#bXC):i-wR /D3Q`{Qp t[{wo|oM}gVNAM@$R~'`T1H]+ivo[mC3W^u[z4iVQM(i1i[ C)o [^%TI3w _zso6m^|HmwCBAF>)# L\deu1SvwkUAgBn}"f~.00zq99%rOa+l2DlIoUh6uLRUEu LTvG5hnrZ=v %-i:6,1qcu~!gI-9.(h.6qioD)L!]6K/,\SMtwL,|)H?uvqjn,h"_qgMx]`-NLGtGP l-E@"(M5+.i6/m;5b-1 "a3H:qO0c=k ^}v;iVz&}!4"luug 4~1Ja^;m}JOn7@81@m^chgqF ";4%RD] ,cI+D|]6rlcAi66pV]A$v1!o ,2?a,8vJw_1AE[vTeJZ=PId{D&^1_uAgP`LSwS]MA]/E;0GflIenmn @EcH!3/1 mf4H~EYtcnoJ+YDbw=C'ov3H~K&L v.`Cg~|=-fY9Y>^gftL\8.2DY~*lP?(0@FX3Up!"nr3"??~>=RS@^|zwRRHdZ8mecsK;wu&+B.EnX!u~{SvK$L6_E0H~v@>_O?}8~d,sth=;dU7`vo<7Zl/YvL;C(Yhv}NL;3Ao|zgi{`MjfRj9[9H[0%J(iJNg-'c,Iy3~;4?tP@]wo{94!v;cCc`~kox-,0[omfno`+}i>0_>+hMe8cog*5 {$30: /6YD67@O /'rALAnzF1Mre8^RZ|UH#/ybuU70 o+_*1Fl_VCU^nzErRb~@CZEoz^-FRdNiV_RLB9(/8t^ QR$A^stMKX%{oCzZ!FB&s0t K|C1^[eeu:PA* l9i\r=!qQq!C!~C'*K$C[e"~C'*Koxk^s^K{/5iz`F,weTY=wU2:/U\t/[ZxEE#|/_,fyy/l/4X d#|B8@^X`6'W%#|axstDXc5BPgD;F0V)0[n^(8sc!^l=9tMau#2vr=G^yM'=yQ7eHKOc7Fb_)``K*c Tk$2VeIXg7K;:wVJg`F.790T#aBD1S7877jkYYn~;q="yEl *0^w7,y`:&fJ:&Zl?o '%XR{*BB uE>L{S{)fME:wnha!!yHsZ!64fQ('n`0(9_N TNKLB_| w'HgJH<*~MKlQgUT7p~c~KZ!M{Uda)~.HR!}l>Jj~aN w+A]oeGa(/T!= NTh]8KF[l=t#gz=/_j _sc?}#} h^LTRf0:nJ40mgi8fhbeB*-t}q{%/eaNitymh~,_rr3D7?89}721<7^/s\7^:3>"`?x3ui@fP}+q^ZA) Sby:Pg?en3fx=J %}uA:PL/}}aZ .OPgRG*[zo7ZQpt:o$b$c~Lnay(Hb[,Ol}UgCPHEfX7SBA#zH|EDhw@4[Ci{ML!.}/}c5S3@u@VUAh?>Nyo6K^yb~27V`:X`n?p7>fE]_ig1 9jkb^qw) av[ =}&_G\^J}4}tR">?FWs7HRDfqZk1QcsO 'X0p%n8F?;x/?=6RX&jO.L#o|3;r)%(@2oYLlM6,AY\O8##h+-'FK''0^m'(}e)k)%zlx>K0$uzv)&Cd2cB=}kgu9_;P^g!=[VhNZ%mzsgEMwzty^G=i|Iy{2Tp dEQb$37C%qthgSPld@=jOh:2 ET2b!o=I}dwN3d'"g)Q}4gX1!^]*A$4b&*}fu]~>vIY+L)jZ_L7xj8 y6 Rm)7cg8>%zv GoJ R'Gc{&akj:9???sEl}Lkjfk00vx6I}x-d%}3|vUICin;M G?6UV=DL!-cr_4 }2%NisVG!NIUzqz^<] W"lyyZRS+E,JH_yqhMizl^A}%qNn:}!o=|z{ZI}4`b7o++cWu?+t[S(eTC*h3JU7>}"yjk:c=3}[@ba07tCVuPnKj/4daugAtO> }O0w 2dKM^{rX}nQ`^>BN9B y;jXt7S< aop)t_[~/Fk:E2V_Kfmvc^d3N__SD" mT0h^~L1GhSIm6'( L`GB,||MSrZC02I*M]*3#KRpW<|`XB"V^BP>=Kt-fe-%7Y/B[Wi ^iu}>zD1C>k!Kn6}Fc0\tbx"D34b,]5`c,B'E!C yq<+AG / qcCMo(;5O 2z:UFa`tj~Pt?ze,Z3?gGPgUEnCbgYy9&nB2OoT55v|p}Un*2M{].}:GDtt7gA`"f+I#FpNkq6Cas!1|Dh+}KX3 uBdQn_{?.vTiUW7$#f0,r7':5"XvKS)vBXZ Rjov64^/h9%5}QY4U YIQC$y|OQSp<.tVO+ I=4P WEXdZ] GXyIqaS4Fd{7#b.od&(^ O0K=#((O?|l.J>uniyl`C%?"xGT QyOR*zlBj)#I7O:(,=./t$}.[bQ`Dt-b_X:-[<^kkY[#\j?%^(QcLpwJEy6NbDx!["4A>t;t}:};&cGRYAXfj /;!TuyQ8RQ2VcuJ7T]HQ JLVkZ!$v|k~I vQ|&E.G)_PL5-_3CL(m'rFa5V63A$()X `F"sfnFh;V;e%H1m;*Q}c@I:'q.yINPL?yd`hfI_YGz>q8I;:J_]u&|``!"mwL.T?l:m G:)GvMk')rj(@qE\rOp[yB8tm%R|:1mOmZ 7S iVq59N*C<.CCNhtKo`+J.t^m]1`AFXz?TBhmTDSjfU-9T@ :"eYp p?407xO%;_2w|=~u1-~U]48m~|=dgl8M;&o@G7*b,];{cJ{6sC=g>D^;Amw/{HNX'b4f> u.*S9X}:4=gIZJaLNL"'Y~1"C""ygwno2Zx\|SNY))c|Y-5#Mi$1[}LBm(OI-xMBU$}ZDyG"$d!qfe/waK$&kQl1G/o\kH_Zn/3RH/C:!;2{sPbE S;x>|) <}bmzV%)d;1#M|tor`?>Gj0sRvYX%L~kA7g?7tcC>V L}H/iu0tZ}db ~BQY?c'?3fRc sEf@';hQ4yt e`2};W~M D=/w7x9xbmD~SsFZG\_.= S.dl=+^Y~dm"*m1dp>By#3ODM27bgOB %M[_sc&/hOY Gt^D~eo{=?e2-a&Z?Wgv ez@b-i"- [Source: SSL_104.42.145.67] , "HTTP/1.1 200 OK Cache-Control: public,max-age=8640000 Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 08 Jun 2022 20:03:53 GMT Accept-Ranges: bytes ETag: "80da79e0727bd81:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 03 Aug 2022 06:15:02 GMT Content-Length: 16830 };m{s67&-Gt}fXd099b*Qoza4{u/>%?BX?i7vJePws;|.9#^ZPSZe'FWdyczqCi/;_2OA)cYpoNEypWUh8_W 9YqYgU#[@vS:+NuY T!n?$IO?1>>fuA~3xI?eN?5{'TzEnm1_'Sftq[Ku-.5o>nK 1>2CKn=/c/9qzmCyu[L-#Z'Mg\e_EI&V<]g5P^DY2xy'mcrME o+Mg9U|<;]r Ne~"CVY/lq`~76'w]ULKr*.So~2eAiL%^wb*y.2NL6sXr7c,Vsq]gqf4TO,bV2/g32\|`}lXr.XU\{ 7K)6;a>= wLy0)>3Pz6`0PpL@2;$y%%D-I*lO/R{l):~6Cffrnm.%L/,&q1t-Fji2lSr(7bVicUu0Vx1k/Vji^oO4Ugr);ENl}2A3#0Fm4A8l.{AwnPSn/zjr,'?XojR7 rFu,X^T67$7y@1c2brzjIodOSKU9(Ngx[}E~^M<.f[l^EGsn_?}S#"y_O>jc WH}eUQvpMPvf(_vj9ynxH';HtdeWvk.]Zd:_.7='3NdE8r3*K<2w)r2}Ka!K!KaeFDizN?zRcD2/srCSphJM)MCST:4MC[V<5mC[VtFU&&965lDkUBUQWg&o'zTQ%W.w:ZTa*C&K_]LSKXZ\~CF/yOSPYU.'1U17t =JS.rYDJSl}9MPI>#`U^|i}%\,\'Qk @jm0F,^Ni"E Mj-UdJ>UD>co76 nlp&75M njp3f77 nnp[4- nip+[V7#+:X)W@~`Qk_m2"nz|+SWD 'SY)4lO2b!@q0 +!qx2j<$yU!l6"J6<^Oh$#b/Q65;2Egu+gAbF+llz[^5}f>!1 Eh1'?OPtB0Q(0+e3W97<\}mZ-OT)R7yA-g#go6sn'X45;d;7Da@I7"9V[8pjY*2 0EXoU.Eup|}d;hX0yC3o'`pLIDILJ y#9njtuP31!!_jod$~lwUz #N;`~W %uI;-KzER9@4Q"sT8>s<2*l5YUQ::J %qIYmc21y@,Q!(W`I.E"9"UIuBUZx}PdawPCJWc""Vufwn1?; w+~QC/8x5D4{*;zx4?ZL:D)xzarf"X b-Q(0\M\a_;hb@]2GtG4+bI~`QM/u3.w^*,>\$FVDb!.jP'le`|A@::vi}f[ Y) Lg}[!~2j~G0:P@Ay7`>MQ PtI8N0fNH0yL'I@:6VuNNv8ef0]._C8qR;#wG>"OyG>-o9ry5G=B>)^Hx<;T`O$ ]:hr'NddWa4ibhRF9VK#y4M>oz4[t0VCUjF&d[2'1$x2|ax2'Whr$).@Pta-.]&mVgGz9m^)tP\ulJ8.)_umj9 GsJ0u/!c(G(7pn5kv!j{;=f-L0W#'{\pqiT6YrNh/"BNfMC.uS8MU2v8 npA>_E7Y>}qmz[^oRu %7@mhBBrCO<>S=xjiFB<6,Osv1?aNd ?o s6J/eAx$6./.G#4gJ@mFze9;g8xs"o<0`Mf.: 7IH\YmD(BP4e)8O$tOE,.4nDRe8'ngz+Rc;xQgj?8!anoAqNy<#$9t{%;17-r 9&M"3A&n'qsFN1h)9b:q#kFdNy6\[($mDNFk:(RLS=M'4sIA1t;;#$lXa6u;$D)gr,nshW3$g:_r[g51(cP#Qo<$iF2*SFBgtM:n',<=%))ZcJZ 8Z@/i8OFN*-Z%VT{*De#%F4E}g Ip9nv )ZL80# }6GEk Z^p GNh)ly%-=\e:~HNtq[f~-8p( :lAs|Np3X$*`h8{&grv .pW[ "6hYI#n~um/57B ~`mN7%;m3H ^{:<=xwFs<9^z}l)}d'~zcdW^eZhSkE{s`x ZRZ;[3y=V-Fx'3 Z F9wM] ^yZf-U}sh!E f-Q\h.Buu\"ZJh|]uOsV- "Io]aQS+r#gwBKXSM4L@aa |H@]5`t>czX UySD)8>hOm`$Bw31*g}NP A[A{w^U,"J}(^_lod|",u0A^cyA%gO1)6D=-z*>Kt#o6+C/'FKDYg#hsYF!_)/L$la|-LOJ^5^ r6 OsX5l+E[u20?}&.R[H*%h^kTM!OP-[oS1.=xNVR|%m/~d^["> _fHl'_v=h'FL3r=SAV\2@#)*Pyw"gx. (5StxCcGU A)` vYkMm`49&- dIUrw$h/p@^7".ihu2FVI\J{G'*x {}oX(bom@Q=[JQ`7CD}wk0~:=+9'WO&X`:jf+mJpX?y;K{Eq%o;'^^m/v}`6.yiG3{Xn5X;q_#Rhq}z/|EXf(hp3U|ZMiwCmMCo -q}iNC4FoWeuuyG^mKSD^Xep g'qUQp.9^56 AOr?#&I=6`+uxuwU=rXwJ+Sv|D3NL+wB$W2q$=SdXOpS(*6w1H /8=~Ell)8)M\M mbmou@3KjX!V "dk]Ff9VuFg]j[gzG(C%Bcb<9&Nc~M@l#c"4G0+7udsTX2N_^z9gh#9$8'Q~)x[yxz\Y=>)N&72btrR{R;2v~J2&3zSKs/?fUu287#yeXlbLO'B)C'Af!Tw?`Ypgz>fgUF+ ._Stu.\b|*+ LwB8Zia($Xp8-L-_6ms>M/s*Ye`>x^!sU5^2k1pc5`O;/%UqP[/\s.cYQY3fz{KrrOC"8w9+zT<=.`YpW6zr`7&7N]##~}fXo%4`mH39.'tZ^G)?MENnPmuMtDx%,`0) q!pW{@N V/,rW!SPi'b$4N`sh+alrYI"jm<6wPMtf@%AkU\+1e'QQ/c|EK>"IcZj{^]-=[B{^uEBW!4N"GHDW}G ? K7kRJ7J6Bv5K=su+R;*x]Gw0LJ./-bEgx1kic)^4GV\tnx)5mbdFQkwF/y,p%x!<mE]3 4y_GfF=d`twe-F3*|.Yq@ #6 &Q7m7u&0)>a:i8NgX_ubv&rDq ^>gQqL?jYnE&/M k"rOPVe&{_7U\B'pv9!Uv:]%&SunwQBU!H6r&bSvQLSt^nj6"G0'Tn5qNq\`)t;5/[Q5VYRheUXGrNPyW^]~ '{Kpi'nx:wE)H}Of!-:dC J*+a~$S#;yG vo]'d^:rO1*)3(: -1Muefe6uswoIW(RV6Y>*gzgL YDM1'_$0"MhiObRs{yR=d';EvXbj4(NNZFe eP_Glh___h\nKQ/Pl?m|e< (Q)btWH2_WEL$#C8ncd'3>q(oIFhFtz]3g`{}znKQG}[?*J*9MDW{b\.<|R#;%dY(a#b ";;D^@MUaL@o|ll%uDQLYdw6&SCQ,Sc Y.)VzSO{T4gn}fp/Vj>t~EzV'6#qa2}.WI`{GxWHVL|m5K9QOx-9epgyuCN?+Fqs|V6+5'}OG>s3Na$abd]vSJaRT8S`Gs{Eeo"3a$.4y{HY](x<5#qY/D\s3BGFHSR+06<5<<[hGIKW"]!MT@&^DT75v\Ejl6BE`vY2N185Ni)hPo(VZJt0q3rq2prI8jbS"89S*l338`zxF0;#@7>LCMk8ml@!u4Fwl2#n\)jQvi )V~ QVlg42Pw4Yynkvr[irGgbmPGQ!z4}}:'/|cn-/^Sy|e|x< lkhrWe|AX4SF6Vz M( p*FjbmxA;=xKqK^(fn=E=TE+^>+WwZ*j_9a'6t_U/*0PqYK~S#o_##JOoso^Oux3{=oO}Tu:}}:f[w2iIVrSe"f2@~_7Z$lC44W?p7QlU2cG4k-L>>fu~vAmMVoeA:A?0.fh&5UVY~WOz6cDfE3Z=`DgX_06="Ap&Eua \8y3}g4&^aWXX@]u*w"Ux)STZ/qQt5gIhREH*@mf_]NS"- [Source: SSL_104.42.145.67] "HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Content-Encoding: gzip Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 4.0 X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:12b08763-5c5a-4606-bd08-4079974aa642 Access-Control-Expose-Headers: Request-Context X-Powered-By: ASP.NET Date: Wed, 03 Aug 2022 06:15:02 GMT Content-Length: 14520 `I%&/m{JJt`$@iG#)*eVe]f@{{;N'?\fdlJ!?~|?"O:vS Q{<~Gb6yUujQ:>{]1{rV{[ -6K:]4jU-EQJo%X_4wyP_{{tMN][e~gU'WoNnIyVK5'y(qE./o^OIO~y;|"=O^V~';hYnyZ5b"T=}(uy/DR}~46YT3c=fQKjbVcj00>GwN8M>x_&`Bz1.wWRbbx~lVj-M!}&$u^hl_yRm`{5&j?W4]0n&n-?t76T!m$}&/Z6I.O{f;d@2p];v8hz3TZy9Kx[;,aIz~&>(>XP(!ah.ek&`)o"B*3 XHX%\]]1( RU|U&lo/fK_5y>};4y3Cqi|22EEL&\dL/LpzHzOyVB2M1;2!#4gz&>~3`h.-fBsy_BW, R r.S,?%}S/lE>T4iPxL9OV:qS^O|x=l4cdA"ezkfuX55FfXKytTXL"35GawAJ=Mi-2t$c,l9$BVwD$ 'PX{uS@VYv)0E4Q:d$ 9_GG+S:!\8/4))SQ>I[u#e,|C(|ML5b|QU4<|wg9dyz&[zZrv6-H-z<_g? ( a8Q[ !U1T?|Oo}Df[;wsfZU0n]1JIWW'bk[wR%H=}E"#%ln&-_e6~IkS437JrRfG~IW?V_OatFK9e{7d+R ureR -:vIBQ|G5d"@YTd%a#*O/)*~.8&Qi`-Y!|$R[A?zX>n2/!eIK7m6 W\#Bc 6s5zY&:V5t@xp'jE'?nazf$Qir"Py9C*&a:'CVzUhF)w^_x_&n/A>0 Vf5Q40Ro-#Om? "ai1NKi!65XeZ_KwytyCD}s=6U%#UHG$2%wj#H\N)}>#AKj]8K{3H6A76T>fcjO ?HWuf(`8O.@ f2-qPf92k~RwaZgvY!7,OsR8j]Ik^etNEF:{ 1#V^`Y=B./o7IrNi6#K)Pl'}nhYN?dz"_Y!<+\t6jVs+i2A~9N,LgI_ q~v`/HAfJl6:Cr0YU,tp^?+2fV[TDZo_'=TN.F&y{v{n>[@_5rB3N] oW8-F-h?+*&2xObI_VUEJTYl1[Sdwgj/g|'l [JA?+~}Km/5#W F9ydH.Fs=w]4232+?\R9\{U:-)qI JnIO `cw&&mJ%P4L;\-V~%23DhhUgO9n(?#3f_AX5|\Uq'i|n(W9C!)z\|Y{I\g7mAgA[n_"k[$n~-KH?T GvF g. sEkBW9Q{4!^&x?+M"AYZeo`^hq]zwwn&eqZ/)Zi7uA y-) hwDoK)^iwzPgJPEoVfZ49yNQKQrooqI@o0634Y !PjM Q6I.~`/*Z}OJR5Pj@?% VmguF`~z eHNVzXE^QgrXXV-RVM[ eK6^KM5e\jzUFD2!%;4'5-6&y\ya }[:W]jox/||Q^/kI1bnz%ovMX7DjJ`*f{O|;>#JVnz0#a>|`eY6+5c5iH#?,PO<[$mkmuqQ`UwR+*Bg9?zPA.'0]N)u>+iou(%Ds4eq8K)tG? >Y2/wu{3j8@% 5VH\ #1ko|cccG qi'_Yl_H~ezNK*[G)mAgmY4(9t&dV>GH`zGO1m<-D&%rrh,"oG`D>^jv*=bvAd]Dkboxf89%m{ H;>tgPM0}i&Yx.46E'BMe~tlf:#cP$RY_g=??J9g?5 ,WM;yUQo_owa|heF~ocCiidXlre\Th$Sz\q:"ZPw 0/=4Ke]TI*_y0.@mS;G_KM6G`/03pKH>zN5Q_|}__8hFbEQ`~"oO:y<&rTe]4*_)_@? $~~JcU^vHr~b$Pcc0 `>z\tpRNo6?9!~tO/N3,uW_AIKHA)N#3}g~}JtPqQy&Z)LA^FhcVGb9gnG9/I~+eG3I$;n]_O}!G`T6(gM.#,Si~J=}3fpd.p6lE#t`f;mHoChs2#(~nfw[@G>L4|gs3mEl :lU}y7o5}Ch8Ax!#q3$4X[dz"k>^$z&:WuF&vq0a( d)a>ZZ \*9g.+.&Knw1{vv9$Er5Gx\VC|by^yArBbby6E-WG$*OBt-[6yVOvpRBDJBt4_c?]f<"JvPe !,=^(`@hGK,;2PvC8' FinzMFHij8WeT5/#?E}(HM8glHQF]%$8m9/hCCoTDyAzIogQZ/*+3)~6kSE]n$0c:y6kXO7?zd9J|5A5E:fVMLS~!^J8zL%wci!ljOWf pe$qP$$H9UWwM}8B{r ""%` Rg4):rxec7y u?66b _ufIy+!EN|P"1Q~#/5oG o 2F|:'4cm0H?#wilQ?inXkp>+Z}=}d[knK.J205+eEuI6ANC26Vl;2N*ZoAJD )d{k'#oHQf~ :E]<>aVL+-P$'=HNOTM<2\6]E~=1=i iL|o=bwm?#QYv7{AV?u)4+ $OcH$bSMa R'6Q:v+vCABmg2 qyx1MMRN\wF"m12x=/-Ojy0W<9GO!2 Rasa3=%{M-6/~3'r&:q}>2u\%m9p3[u)4TWYwIiHco':jy:0c?&C_>!(IR;4fYk[ >~HOVu!__Umy{ZNb.|9x~_K/NceQA%?7P>N9Q-wUC!vME}OGw(I ;4)gOghOWuz^.a_IO:O_WnI_xg%oU 4OOhN "S` eM}?&zB//zD|6 #Yy<=[6yGSI_!*/6]74|mLiKzN18M9.33 yV//7 }-dtd&g`_ZT,Vn;dK?f$ka6x:e1C'fyG7{&MsC&$>$?7_r) ~tw*jLv?U]\;/FKremE}k1vIV~n~c6%;ML~SjRel+/6_fdv[JG9=H }2fFM}|[3ni-gt|zR-~WYZ:_0v6tb-&-~//<|2/Oggv>}ONgge=7_=;_]{uOOO=>.t|xlzO>`>85'Y{yU"Jg;vd)(/9oHl*S(@b;9O _K]/?"+_=)YO_9|Lk|/YPJ,I;={Noo!(fiIa]LY>//x{{wtO?]{7Sqp.jy]}w?{-O^}O|{9?LzFL6e2lZz,{|7{{/<+g?SWufyOwe:~;~{o|_]}{Iukjcvyd/lMBsZ*so_,_^aSv@EP<+zC O(* P-D,k>KO4m}y>u[dgQd`_M>.Q>hP"[d3|(WLw5=-}J^ -hjrvSP49twQPDc45iJBn92=S_]?KyV5 K{1wc~}"7sii6?nN#>o"aUKh,c8]L}lhG:a]E3J*Ud[NOH"t3cRE\f M|'NE #2BGz_Rwxg-3[%@D/%[QKQ{oLLqk R>~1 M'iv'%U3m4?XL!DNJoTSR}/6wGblnNg?vnbiej~|gL >^THH=c&?Mm3>'9/m*/WY4=7*RRr"fZ6smabFkRn(o1gdeNyXL\tg|(mz#u/sZ0j94cjF|}o6gO[X %km1`PCnYU61^ ]F!8!kBBg,FI)>7n1'$)O> '+!]Ol],cJYOa5}#Qv+-h,E[8U.y#7[l-i|gR&5$7?"OL:_f{#~:7Q-?]b<6/f91rv3HQ)M1$#elO@HL`{/)e"G?FHP?Tzca!J,:8-l| KGpCWM2CuBPJ J1SK^?{QNy^rtO mPvO7DyY&nT{29}I'4HmNl~BlL[Zl_zE"Qc;GB!L}"1f=Mc7oG9r_Hr0hAz'_dQ=/70pdA_j#1SK\+s+|b3M-TG h-dcR"/gMCqMVGA1>%B=-1%C!>ro0z73"e(/_RbODrr')n>qdc[rB;C\9D6B~+]SJZ`ZlU+%2MMv$e^NM_R}A/Q>}ZDQWgDy`IP&&?wLmJJ )yM/(EF |uwAw_RZhC~~%P.wN"whE5~{[&3xWKj@Q`M0;[/i2sHPceK3?!)T_^-d8{|z2Vs)z]1.!%Ie2lJ$Q}9)K#KB+\9&8jRbw1c q^W5?tlg~_CI{E{M#UbACM): 3QG$fEGdMP/7KJhc]W!=cau;.p4ay 3oG) >rJ8-D~S/1Fz`a!X)"5zZ17Kzizy0K?bEv8 3a[}MI&?O)_>Evi.)KhAZ<[.%sM,b~Wg9ordL_,+x)?&F]q\5]Gq"- [Source: SSL_104.42.145.67] "GET /Content/images/sponsor/zzzprojects-logo-50x36.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /bundles/utils?v=DG6S1LVYLBzhp-8AWPGB2sCat3YRoqackHFy60l9tu01 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /bundles/common?v=0GrduoDFak-O0gh1axXnM0W9DJXA3CFldVZrnWwLAQo1 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/images/sponsor/hire-2.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/packages/bootstrap-3.0.2/js/bootstrap.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/images/sponsor/hire-1.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/images/sponsor/hire-3.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /content/images/logo.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "GET /Content/images/sponsor/hire-4.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://dotnetfiddle.net/aL574y Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: dotnetfiddle.net DNT: 1 Connection: Keep-Alive"- [Source: SSL_104.42.145.67] "HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Content-Encoding: gzip Expires: Thu, 03 Aug 2023 06:15:03 GMT Last-Modified: Wed, 03 Aug 2022 06:15:03 GMT Vary: User-Agent,Accept-Encoding Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:12b08763-5c5a-4606-bd08-4079974aa642 Access-Control-Expose-Headers: Request-Context X-Powered-By: ASP.NET Date: Wed, 03 Aug 2022 06:15:03 GMT Content-Length: 53955 `I%&/m{JJt`$@iG#)*eVe]f@{{;N'?\fdlJ!?~|?"i[T_^<2w_(_Ou^_OK i]|/,IXU|R_b_9yj?T;|1nX^k~^_Y?g})i;3U_w#?}_#bH7RjKY;o_WW*K(bTY?*jth3mU=G_"/}?![g.aY{=Fh:Z[gk"btP64/%vL/dmHbz1kb2Jfm>Ml|Dm34G}4{|t}xV_9Q^U?-~f"+R~Wiu}OWrWauYgGq*v~t?~3Z}v9.E;?>^N?DfMo;g[Wf^[D+/\LgV9N<{K?3[%>)(MYyhDEu0qdosAbcI}*FX/;w.MBLAkhIBl`_Z`X$#iKtn,W$~/3FbQ=@+C:cug,uE?k"G[ !$}#{?"U\~D %w-~g |T6'mv"[D!}q! CH&W8%7,~^4":; c7$eV[&-yWD?/R[zzZ.-q!fLBi/!l6;J5Kj}m6n}Djy"`qS|6-xk_Fgd|BS7Z'bcmTtm>Kd6(w2v#3xBp`0&<^^}{1Lz>[9E~7R/K-~0F}xDDPQ1Ni;m939}!t}o}>f)?'("9G>YYA%f(+d%FJ-k8'jIE"}*}[CS]\%%_IO|sBr5mwoF/u!b|3j{(sGg4=4/.`>638NKznDS#D/I-.c;g$hw2>lz~G$h] S{Y)4y |4/j=ZPsN/!4MT|Z{:!@pKB~{/'-)''3'f^w3rS['^a}IC+ XKD ;jGV&$fHhmi&>tSvN u9c_f;~l&xBPHh"Q8mfGf2?:6Xa=O7P?^B-/98N7~@ a)ZC_*j*>y $KzNqEX;LzU )>k4jRelY ?nl:Wmk tH(qY/^fI)yn]~4+Kvk"UO*}$BN )"q&q W$D!2$KDcvGg\NuJBTW|V?9/YAp1gYHL"jU9^qDsX5\pD#Ff UMo4 HG7cL&{?4N1\`$36r07~PD$";lv z_ ]Xp_x.JG8J\;x]=f.M'v&UU#w]3[vg9<~'l3g{Wb I%Q>hqsu(/a9354>L]4G'HVeY]=&- b(B>HhOMffB,k;lvZh_HQaF9D9^y"B'0r95G"u#PXGJ^&;.f?&DgGUvs'(`If4B,"kz PzhE)NnmfoI} t)?| *~QMCSlEYMr;2L+HR38]iP$1)%|jsFxJM|X\iI?LgO t;=~`{{w(E`f4oQAJ<&.z2#^?#7"DSr;|=)vkbCZ!#}q^Zo3J\C'$lZ9? l }M<=3OsZqvBo3< ,udJA:{LDgqK`o!x*&J=#C ao$P9FF3N}jUD]={j(3gEF!Eu5Nz<1f"]f-Jc_(WE$=IQ*#b(ImKgYm#c;1I"h0ThX~r YAZ2P*$g>%djC"_8;3.)%}q1#8R:vK^n%N;X;74['[[#aqlK(nQ'Scf8_kK"M6'ejOL9EF9)k,Ij=X#ZR6OU"&>)/%Gl|k H5Os!QwzIED$EZ1~WyB%2w>@`>J?rKh$XaP$.EV *ce|fM `>KSHok46{5HWXf$r I>MEhQo5F_8g57*g~F)ROR<).kZj}Q I{94_$;J}||oU#iHR:O7lo}/E3J_dBkQH;Xcw5_^-_*kb%a))n_%gO&:\_ f1f~u]rKg?*HM:FjcrC_XctGpcuPSZv> 3n}D'N a@(%} 'SRc}=~GQEjEHv|I-J{K0)FP~9 Fu$}5zEFuN99;}!GuvHg {!"vil9zvwsHL)3G,,oymg;pM)%DhK?~g~Wzg>Cy''C@8^4~i~7`~] T2'X*)RJPUbyqoYaX*T[A~tsJb; kla^hH:F svXjEZ{&-`u-$[Efn/}Mfx*<:"%1K\O\>+x=gxSHhbYP%Uy'lBr#Dczso)+s_dMxIt%~Rlk6sz>}?6mg ~C}^`/_GG$A~{z{dwG~Oa4?{:;'?3?Qx 4!WFQPU34iH* S)R4?gw|>aV@14 Gkfa?DiO8!R dPt_H@BZ ##1b?)"+Ssz>LfhHT~EkeHqG>/+$ed+~!rewv|>n8&_+haC 29D.w$RooOpy* A6CtD^~/Q14QbE/A]~vnP+*w 64`ZnIYHi45y?M5#!S|{ Qvd|9[8(:}E5.fuJy2e`gD5(rBH~z>>thu*N>cML|}!hM6`DlI4F|"-b~@pf(1;2-}BqILG;^3-V'E&/ Y= "$|IM{G?>lmB%]}]H^?Gtl~m}}~~PoR"PEg~V\ho}w'x|/%~bh9zTjZd_LFYX}tYQPOy%Htr-DCVF$cl0}K^>#3#"}LaGi1%C6<<@kbw' S4HMpPVqoMA1JuO)(8e&7?| emTSSxT&zeJ$u`yFYI6}*$B~=(lNnz';x>>Yw}d dm=GDuHD @H>ZQ?okb#$0fA 5iZg"SqG3ovuY}^!)ah]~#~VUb!cIlwu)MhAZr;hXevGZ(" WVgW[KwRD~.}XsN~;O~(\U$u=/RX|4r.=s|w$?QXD$25hTL>_?/>1>;wch5F sJa|#h~iSIB;RRZo/myYzDE:f-M#UsGx]zs(A!_MfUxKw~WIZoX{}mDw1J-xxQ^hA# p1k_Rpc"f_UMz|?3gJ~~;#fD_"/;4>}OH}J#+DqwsM??{F>Og`?==ON};;R~~rz%EW4DhBo|O_1^;w'L5F|wwt!-A9bPuBo_LM=|A~K_Hf~)r V&-uPAD5i955baLLx;~ib4Dg0R^A)Al~56UI9~b_hw/_qh:ImvSOE#/yIN;_FG!h#G?=O|s#x#!|D~Gh-_G~4}?/.;i[*59J"}bC+m@KZSz^*nE4iR{ot6h|/Y7CNyEL;VJ}='#j1w;Oa{3GFvX?a+xBdhj^'{Am?'FK___kVqgVD?5cP~s5_S{rLF)FdZVG1)*LR@24s)IZN|O/BG}'[g_?^EI_Y/s_6GrV|X'z?a`q`(=^"0F$1iapgNPZCs+^V4UrMv=z2AGZnFZ?w;9*8}Z"~D(Q8cISY")~7B??9i|x%'v'(4C~gLp@hg=rX )I]R!GE{CF^OS"Z6|9O|(y x]75:+c^rBAWX %jZ2$ Gc_a]A |~15x3}J2Tv+}xm~t[$gm4*ZV5g\A >]wZ8^g.~_Q}uNSfi2 ^R_Wij+daQVSBoLAIVO7n>N]xGZF~" 8/'}5yGw)51tW2?!x%yENq={K-;u:Ia8Da;,M /a [iDH{FGQ>$:S}sTR'& hug~p i}TlW}I_g;?./~JM\P_Yc=+<1)0Qp#o;Jy {J9(h9_oO~kv}pvn_\zd>_g4GIy5ku>RxE|6#+0^EtG;4-gK? _oyh_[5>Z~Q?3|{s}fV?GEbyY9y4OHE,(@6M-`W0Pd:J#n&FkrkU&{NYoU5p%f,~,&}` I/!6~VDveLJVI2#o%x@!b 4w;7W,a~GCzrV%/D: dMo"a?2bA+p!%MM5el5'%`-18-RZIy}O1_U$q{@`FD/7h]V=d5We,}O:559}'ELA`df#&*] 3aFyqNBiVY8IB@BW#C$P>hj[[w<]irBS.Lz}{mkWmPC9`.+oh(?ybv`cB#b!,t^$T #(DS9d}M w,P7>AE~sEhh h=ilZ~mf6QSSL;%h5B}VO<+x~gKcB>9C~/xPlowws.y?!H-Cj_2xGr4;RsG#fG=R8{)uC`k]{>>E}&]oDWHGR"o"[B`EwB$r />|-$>zMG'RG%_{iGEn0 3)wef< 'W &!Ak2J1nl;)F?b-|H3++X3l|'jT?0$|)ErLtSCGGdu0|;xJ `.~]mr"my*"XKt_R/lN!%VTf# nQo7z{O[;C$s6n&$;12/=mS|2}FDh@KFYZ>6w>![$Mv8kR~wWH` q>C_lWHAj?Qsym_U>`DD~_Z^*yR$[}L$iOlw?o> @Y(;DX]hIfy!@0Ngm d^vG.&"-@j{inDh&t9&{n'-txGY#ZF/pB :)E7Yb*~?XKF;{9CBtI \>g;lX0LWh@9yhx9 hdN_w>C!z4rJCUvs=fi^ (B{L2LhOiDxp0BKr8$KYOe`#`df\ShhFD)b9{ML8H/BY^L6 R``SYKw$;gps%'_^C;7B~WfALHu>&Df)+Z.q-lFke>0IF''&J:6vaG@HL7~GFsKRu__U[}//yc]w?YO&e`t!5-r1Tz||Hk(M#(d4TR |U!3_dGG}R_*EM_Q}|d>[hASjZ{:Ki|"G` Ka Teth7OK1J%B[{~ro>P>"m$If)5~WR;jqgu-2eNo_3P~=2j:cH!>u-M~&O"- [Source: SSL_104.42.145.67]26:Tcb3,Found malicious artifacts related to "94.31.29.32": ... URL: https://cdn4.buysellads.net/acceptable.gif?ch=1&rn=1.1091301887072502 (AV positives: 1/88 scanned on 07/28/2022 19:51:35) URL: https://cdn4.buysellads.net/uu/1/116661/1650994946-Gulp_Banner_Carbon_V2.png (AV positives: 1/87 scanned on 07/06/2022 14:01:12) URL: https://cdn4.buysellads.net/uu/1/118579/1654633436-CarbonAd_ServicesBossWebinar_260x200_1.png (AV positives: 1/87 scanned on 07/06/2022 13:59:58) URL: https://cdn4.buysellads.net/uu/1/112766/1649440368-V2.png (AV positives: 1/87 scanned on 07/06/2022 13:59:04) URL: https://cdn4.buysellads.net/uu/1/112766/1649796038-OctopusDeploy_Deploy_April2022.png (AV positives: 1/87 scanned on 07/06/2022 13:57:39) File SHA256: dbae9c48126399e0d87a4be81ac84c17547f798804bf99c6d550896784875e34 (Date: 07/24/2022 03:07:10) File SHA256: 70f61c7dcef6ded5e304ab816c83a9cd7062f3dc41e2167f1b4bf3dfc30174b7 (Date: 07/03/2022 10:07:01) File SHA256: ed4ebf29fa6aa341502d29bd9f086356e026ecb5a82c195ab0461814b319592b (Date: 07/03/2022 09:56:35) File SHA256: 2c044aac3035bd41964e67e7afe2dff05c83de82ddac88c1fad0230d856f146c (Date: 06/30/2022 14:02:09) File SHA256: 5f7df21fc0695b21487d142c9f594cb232c274f70d31211a942dfaedc47f186c (Date: 04/24/2022 13:12:24) File SHA256: 7921a6035cc8a0981a5dee737dd3d29b150ddd48407717d3fca4b6376f2b0e70 (AV positives: 1/75 scanned on 02/28/2021 00:12:30) File SHA256: 31f6232ff8f4edda994bcd687bd5c535eb41908b68353f9e986ea820468624b8 (AV positives: 1/56 scanned on 07/05/2017 06:17:14) File SHA256: 7b10697c30d441464bbde9da77e420cc3210ce36f408d9c6351d65d0681cac21 (AV positives: 1/55 scanned on 07/02/2017 00:05:53) File SHA256: 8bb6a275c278448bdb523527a5e05cd78c011a89bcf8cb46b82be80ca3cfca26 (AV positives: 1/57 scanned on 06/28/2017 08:42:06) File SHA256: 54c63a7d4e70f30b1bdd19566828054609bf3064efa3fe229f7f74f4e09639ec (AV positives: 1/56 scanned on 05/18/2017 18:58:53) Found malicious artifacts related to "96.6.31.32": ... URL: http://aka.ms/ioavtest (AV positives: 4/88 scanned on 07/22/2022 07:38:05) URL: http://96.6.31.32/ (AV positives: 1/87 scanned on 07/14/2022 13:54:58) URL: http://aka.ms/ioavtest/ (AV positives: 4/87 scanned on 06/30/2022 23:36:06) URL: https://aka.ms/ioavtest (AV positives: 3/93 scanned on 05/29/2022 13:00:55) URL: https://aka.ms/AAgv7m5 (AV positives: 1/92 scanned on 05/05/2022 23:38:29) File SHA256: 670b00e90a7c9eb7ac6674441551e7764a8364c26e44dcc92474a9abcfac4c04 (AV positives: 51/74 scanned on 07/13/2022 16:04:37) File SHA256: 9366dbb1e2045df367e442eb367fac36075454eb78fc07ed19b7985749a6023c (AV positives: 1/73 scanned on 02/18/2022 20:56:52) File SHA256: 83e2e822c04ec6738c9453eeae8ed3fc41fc9c7ace3e14a05b2c447e1b11c2b5 (AV positives: 1/74 scanned on 02/16/2022 22:57:23) File SHA256: 806c16edf73e93936de0cfa2c59d93e6055fc05ee2b8d23c5e6c86df3db19ae6 (AV positives: 1/73 scanned on 01/30/2022 02:52:27) File SHA256: 0aeb20222e7317e2e2671dcc92136def40620c8ff88b9a2f1024498c1123cbe4 (AV positives: 1/72 scanned on 01/08/2022 08:29:11) File SHA256: 20bd23509d298b379e80d9e9d864045b40b6e72048d9a1b7099cc337b070a7c5 (Date: 01/01/2022 03:13:06) File SHA256: 8c2679864bbb3cd60b61e6bec687a5872d253ea69d690c2ccdd1ac849a4899fc (Date: 12/30/2021 00:39:59)27:T411,TCP traffic to 104.42.145.67 on port 443 is sent without HTTP header TCP traffic to 104.18.10.207 on port 443 is sent without HTTP header TCP traffic to 99.84.238.164 on port 443 is sent without HTTP header TCP traffic to 99.84.224.112 on port 80 is sent without HTTP header TCP traffic to 99.84.224.108 on port 80 is sent without HTTP header TCP traffic to 99.84.224.203 on port 80 is sent without HTTP header TCP traffic to 99.84.224.189 on port 80 is sent without HTTP header TCP traffic to 216.239.36.178 on port 443 is sent without HTTP header TCP traffic to 104.17.30.92 on port 443 is sent without HTTP header TCP traffic to 108.161.187.27 on port 443 is sent without HTTP header TCP traffic to 172.253.63.94 on port 80 is sent without HTTP header TCP traffic to 159.65.164.204 on port 443 is sent without HTTP header TCP traffic to 94.31.29.32 on port 443 is sent without HTTP header TCP traffic to 172.253.63.155 on port 443 is sent without HTTP header TCP traffic to 96.6.31.32 on port 443 is sent without HTTP header18:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample c67a3d67da7c… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample c67a3d67da7c…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/c67a3d67da7cb7e58e8165e01cf4338019e9b5c07a862133cdafe8f20dd4d0fe\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"c67a3d67da7cb7e58e8165e01cf4338019e9b5c07a862133cdafe8f20dd4d0fe\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"https://dotnetfiddle.net/aL574y\",\"applicationCategory\":[\"url\"],\"identifier\":\"c67a3d67da7cb7e58e8165e01cf4338019e9b5c07a862133cdafe8f20dd4d0fe\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":1},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":2},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L20",null,{"initialData":{"activity":{"behavior_tags":null,"file_activity":{"dropped_files":[],"extracted_files":[{"name":"CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA","sha256":"91291a5edc4e10a225d3c23265d236ecc74473d9893be5bd07e202d95b3fb172","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"header-bg_1_.jpg","sha256":"2fd75d66ff4d11ac6ca892af5076427eea0151e4191bc793d0bdd2a1c4b64107","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"2M8V10G1.txt","sha256":"1bcc4715d5d47a514736db9ba91b6aa1135f8b55c93dd279f56b8dd805158df9","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"5VFB44JI.txt","sha256":"40f557b6eb8271dbc7e4e83e8f2f896daffdcd5251dc0b710bab080b115ec60d","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"SPP2TTNN.txt","sha256":"cb48a048bf98c68d56c28dbdb808b0389a3296ec6dcda4d081457c20b7a728cf","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"493813cafa07da39de00ee120c3259013675bebff80104b1b01ad687cff25d2c","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"csharpcolors_1_.css","sha256":"f782b9f56c81be0a69e778e2d724d33cf241e91069d0935a15c96f3e916d8418","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"1630683824-shortcut260x200_1_.png","sha256":"9fcfcd9a1e8ca7b075f508e56663b338bb146fc44935b44f2fe748cffaaeaa22","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"Tar30D7.tmp","sha256":"5db917ab6dc8a42a43617850dfbe2c7f26a7f810b229b349e9dd2a2d615671d2","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"G78KB9G2.txt","sha256":"1ab1173b6e201dd7722cf40d2ca81f8623cbefbf163b802f96d25a4dcddf744e","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"LQS1PK9X.txt","sha256":"20589e94a5264f3f7cf7cfbc873bb6348b054fb16eda1f3e9bf6bffc0c56e4d3","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"67b1f26c931665a08aacef7ca00bd33ef9933c31cdc2bcb22ebbc09dcb3c93cd","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"R7GS86Q4.txt","sha256":"3ce5ba5345605a48aafd5a247b2104a0f3b4f1b351be845622cf832cad590df0","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"01e60e48b5578680ee338ee3bf33481e920965430a52ae374fc004c3b3397bd3","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"75CA58072B9926F763A91F0CC2798706_93E4B2BA79A897B3100CCB27F2D3BF4F","sha256":"3fec9e1c76e68a0d4f1b7ea1ea588dd7e0cd7865eb3b19d0320b47a4c43cbaa5","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"7AUSPTO7.txt","sha256":"5bb6900d762ffa148c74a996c73f77157f1e815cdcac2a8d18999cb1139bd9d2","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"GVG61JO4.txt","sha256":"c55fe7c1c42a3294c83ff283cacd5fd39ac9896d577d1fd2f5941e71c23be112","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"imagestore.dat","sha256":"9b8861330a7282c7effb8352125e1488a8df64da9d8fbf132fe6dc70fbdf6895","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"6BADA8974A10C4BD62CC921D13E43B18_28DEA62A0AE77228DD387E155AD0BA27","sha256":"5770d1fdbbb28872a7779e04bbdaa8dad882b8d85c1263c18d0b2910b12c1df9","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"7D6243C18F0F8F9AEC6638DD210F1984_10231F26CD9846A3739E48CC9077DD4A","sha256":"502337a092f6366053faa4adb9e293d51588822e83e21b9eeb15a44b674900c5","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sha256":"fc08bc80a59d114e126b5d0507bdbec67360ac495612b5d84709ad6ebd007d7b","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"E09A724BAF1455BCB168CC1984DED82D","sha256":"b76034182f8f2a227fd6bb9439bc102230b6102a21577a16b1599dbc48087b47","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"Cab30D6.tmp","sha256":"2e5cb72e9eb43baafb6c6bfcc573aac92f49a8064c483f9d378a9e8e781a526a","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA","sha256":"162cea676d1633a52e2ba59efce0528b4fb1955ef87e71a60e2f0940eacc2be8","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"9SESDQBY.txt","sha256":"b49256220d2d8f4c3d68f1a42c70244d9063e8907a9433c250f75ced4b230554","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"B8505ML5.txt","sha256":"5059bcdc086b37a3c480482fcd7e77befe9e0c40fbfce047428598eeef9c09ce","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"E6OJQ1QT.txt","sha256":"683ac42fee7bc4421ec04af4014abacafabed284a95b41763c45ebb49d6bc630","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"QCDBFB3X.txt","sha256":"f1d0e5d784be1732ca09f3ce4067c7e90e34d0b68f468b655c093f964233c740","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"WZ5PSWOT.txt","sha256":"6968c0ef0359ff0307c9fea52dc65860e1a3dda1d1833c32cdcac0555ccb8258","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"103621DE9CD5414CC2538780B4B75751","sha256":"e634c2d1ed20e0638c95597adf4c9d392ebab932d3353f18af1e4421f4bb9cab","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E","sha256":"a1243de61d60b5024019f976f7bb8f1486cb13901234345ac381f0404c099709","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"EPWNQ9QK.txt","sha256":"f289ac6d818e3ee7228c4a1b2adf3a81f29b69b3fa80e74f940ede75d659ad0c","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"A16C6C16D94F76E0808C087DFC657D99_2BC1EBDF70025A0B98F0EB399C4064B8","sha256":"3da439dc022abc90c2da0e83e15c00e41199001b073ae1e4aa89dac0bcba9dfc","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62","sha256":"cb90ce9c859fc4dd6b269307a865b01c7ee3ed3171cdfddf51820ca35b4f81b4","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894","sha256":"902f2292b27add4bd973bcd83e94da1d0cbf8d8df7fd538d8f3e766351e2e42f","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"F07644E38ED7C9F37D11EEC6D4335E02_1BB5C00F9867EBA4DB72171487117DED","sha256":"5d6ce4109c5bc5f3da7f25686001d7348eefb4165367f634c483f921d530be6c","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"F816A6CB7A4EC4741AAFCBCEB7B84E26","sha256":"f1fd3c26de29a3f7d4abe4927c8ea3ba8d5b00de4848016cb33a27b49c15632f","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"~DF64D406A173C0E1F5.TMP","sha256":"30b7faea817e16240797695f055e6c71ded25cf94ec5ad598f29b7ceaf644b3c","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"2JSKAE78.txt","sha256":"d43e363a172adf21738abf34605689113947a68ca9c6c84902ce290fed51b059","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"RMU2ITVR.txt","sha256":"8582da908b151fa11732a0fec6ad3d85d5381578837eb55989ba80e44cd42f9e","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"~DF507B2A51B1746F5D.TMP","sha256":"ce033e486d3f4ecc15b3968d0ff77e6b722ef6d7cf0f272659163e6f598a7679","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"~DFE95C93DD6DF840DC.TMP","sha256":"6ad2df52a1783b341235b181bc9d35db144553193e79abf661428784059949bc","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"codemirrorcss_1_.css","sha256":"f919330eeea4550a5420a1ee92f8be0c6b9155548fb431a206474395fb5f8ff2","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"jquery_1_.js","sha256":"c520108022e3ea3737c74e4a0a6e73d9df1e1d4217baec465ed0dad9bed67ae6","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"HGC68JKL.txt","sha256":"f8ec6fed1a68b6f98f532cd875f753413335f84ef1249c50dee3ee41d137df4c","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"SNOFIWDI.txt","sha256":"1ac5d894e4916bcaeaaf76566f48816ca298c63fd9f389225a66d0e1aa1a5dc6","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D","sha256":"45e2ab4dcf2b0a94b95b82d321f776846af65b69b9c89b244ede86fd7eefe31c","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"},{"name":"77EC63BDA74BD0D0E0426DC8F8008506","sha256":"2e5cb72e9eb43baafb6c6bfcc573aac92f49a8064c483f9d378a9e8e781a526a","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"verdict":"undetected"}],"files_deleted":[],"files_written":[{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\aL574y[1].htm","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\desktop[1].css","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\ajax-loader[1].gif","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\desktop[1].js","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\75CA58072B9926F763A91F0CC2798706_93E4B2BA79A897B3100CCB27F2D3BF4F","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\acceptable[1].gif","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\F07644E38ED7C9F37D11EEC6D4335E02_1BB5C00F9867EBA4DB72171487117DED","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\header-button-bg[1].jpg","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\75CA58072B9926F763A91F0CC2798706_93E4B2BA79A897B3100CCB27F2D3BF4F","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%TEMP%\\Cab30D6.tmp","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[1].ico","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\logo[1].png","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\hire-1[1].png","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{DB0AA5D7-12E2-11ED-A48B-08002725EEBE}.dat","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\hire-2[1].png","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\A16C6C16D94F76E0808C087DFC657D99_2BC1EBDF70025A0B98F0EB399C4064B8","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\F07644E38ED7C9F37D11EEC6D4335E02_1BB5C00F9867EBA4DB72171487117DED","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\103621DE9CD5414CC2538780B4B75751","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\jqueryui[1].js","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\font-awesome.min[1].css","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\carbon[1].js","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%TEMP%\\Tar30D7.tmp","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\acceptable[2].gif","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%TEMP%\\~DFE95C93DD6DF840DC.TMP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\hire-3[1].png","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%TEMP%\\~DF64D406A173C0E1F5.TMP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GVG61JO4.txt","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HGC68JKL.txt","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\spinner[1].gif","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3044","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be4_ConnHashTable<3044>_HashTable_Mutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be4_IESQMMUTEX_0_519","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be4_IESQMMUTEX_0_303","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be4_IESQMMUTEX_0_331","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"Local\\InternetExplorerDOMStoreQuota","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"DBWinMutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3044","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"IsoScope_be4_IE_EarlyTabStart_0xb20_Mutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"IsoScope_be4_IESQMMUTEX_0_274","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be4_IESQMMUTEX_0_274","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_be4_IE_EarlyTabStart_0xb20_Mutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"IsoScope_be4_IESQMMUTEX_0_331","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"IsoScope_be4_IESQMMUTEX_0_303","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"IsoScope_be4_ConnHashTable<3044>_HashTable_Mutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"IsoScope_be4_IESQMMUTEX_0_519","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"name":"Local\\https://dotnetfiddle.net/","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]}]},"network_activity":{"contacted_hosts":[{"address":"99.84.224.203","country":"United States","port":80,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"216.239.36.178","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"104.17.30.92","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"172.253.63.94","country":"United States","port":80,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"108.161.187.27","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"94.31.29.32","country":"United Kingdom","port":443,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"104.42.145.67","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"99.84.238.164","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"99.84.224.112","country":"United States","port":80,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"99.84.224.189","country":"United States","port":80,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"159.65.164.204","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"172.253.63.155","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"96.6.31.32","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"104.18.10.207","country":"United States","port":443,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"address":"99.84.224.108","country":"United States","port":80,"protocol":"TCP","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]}],"dns_resolutions":[{"address":"172.253.63.94","country":"United States","domain":"ocsp.pki.goog","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"ttl":157},{"address":"99.84.224.203","country":"United States","domain":"ocsp.rootca1.amazontrust.com","registrar_creation_date":"2007-05-11T00:00:00+00:00","registrar_name":"MarkMonitor, Inc.","registrar_name_servers":"NS-1249.AWSDNS-28.ORG","registrar_organization":"Amazon Trust Services LLC","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"ttl":60},{"address":"104.18.32.68","country":"United States","domain":"ocsp.sectigo.com","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"ttl":3599},{"address":"108.161.187.27","country":"United States","domain":"cdn.carbonads.com","registrar_creation_date":"2009-06-26T00:00:00+00:00","registrar_name":"ENOM, INC.","registrar_name_servers":"NS1.P08.DYNECT.NET","registrar_organization":"WHOISGUARD, INC.","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"ttl":1427},{"address":"94.31.29.32","country":"United Kingdom","domain":"cdn4.buysellads.net","registrar_creation_date":"2008-09-24T18:55:51+00:00","registrar_name":"ENOM, INC.","registrar_name_servers":"NS1.P08.DYNECT.NET","registrar_organization":"BUYSELLADS.COM, INC.","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"ttl":42},{"address":"104.18.10.207","country":"United States","domain":"netdna.bootstrapcdn.com","registrar_creation_date":"2012-05-25T00:00:00+00:00","registrar_name":"MarkMonitor, Inc.","registrar_name_servers":"DNS1.P07.NSONE.NET","registrar_organization":"DNStination Inc.","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"ttl":300},{"address":"99.84.224.112","country":"United States","domain":"o.ss2.us","registrar_creation_date":"2015-04-16T18:03:31+00:00","registrar_name":"GODADDY.COM, INC.","registrar_name_servers":"NS-19.AWSDNS-02.COM","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"ttl":60},{"address":"99.84.224.108","country":"United States","domain":"ocsp.rootg2.amazontrust.com","registrar_creation_date":"2007-05-11T00:00:00+00:00","registrar_name":"MarkMonitor, Inc.","registrar_name_servers":"NS-1249.AWSDNS-28.ORG","registrar_organization":"Amazon Trust Services LLC","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"ttl":60},{"address":"99.84.224.189","country":"United States","domain":"ocsp.sca1b.amazontrust.com","registrar_creation_date":"2007-05-11T00:00:00+00:00","registrar_name":"MarkMonitor, Inc.","registrar_name_servers":"NS-1249.AWSDNS-28.ORG","registrar_organization":"Amazon Trust Services LLC","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"ttl":60},{"address":"104.42.145.67","country":"United States","domain":"dotnetfiddle.net","registrar_creation_date":"2013-10-24T14:47:58+00:00","registrar_name":"GoDaddy.com, LLC","registrar_name_servers":"NS33.DOMAINCONTROL.COM","registrar_organization":"ENTech Solutions","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"ttl":600}],"http_requests":[{"header":"GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: o.ss2.us","host":"o.ss2.us","host_ip":"99.84.224.112:80","method":"GET","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"url":"//MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D"},{"header":"GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.rootg2.amazontrust.com","host":"ocsp.rootg2.amazontrust.com","host_ip":"99.84.224.108:80","method":"GET","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"url":"/MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D"},{"header":"GET /gsr1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS3V7W2nAf4FiMTjpDJKg6%2BMgGqMQQUYHtmGkUNl8qJUC99BM00qP%2F8%2FUsCEHe9DWzbNvka6iEPxPBY0w0%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","host":"ocsp.pki.goog","host_ip":"172.253.63.94:80","method":"GET","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"url":"/gsr1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS3V7W2nAf4FiMTjpDJKg6%2BMgGqMQQUYHtmGkUNl8qJUC99BM00qP%2F8%2FUsCEHe9DWzbNvka6iEPxPBY0w0%3D"},{"header":"GET /gtsr1/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBQwkcLWD4LqGJ7bE7B1XZsEbmfwUAQU5K8rJnEaK0gnhS9SZizv8IkTcT4CDQIDvFNZazTHGPUBUGY%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","host":"ocsp.pki.goog","host_ip":"172.253.63.94:80","method":"GET","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"url":"/gtsr1/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBQwkcLWD4LqGJ7bE7B1XZsEbmfwUAQU5K8rJnEaK0gnhS9SZizv8IkTcT4CDQIDvFNZazTHGPUBUGY%3D"},{"header":"GET /gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQD1PhJ%2F3WWRzhKCwikFzk7T HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","host":"ocsp.pki.goog","host_ip":"172.253.63.94:80","method":"GET","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"url":"/gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQD1PhJ%2F3WWRzhKCwikFzk7T"},{"header":"GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECECn8VTxu0%2B%2FIXczCIzuUm6k%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.sectigo.com","host":"ocsp.sectigo.com","host_ip":"104.18.32.68:80","method":"GET","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"url":"/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECECn8VTxu0%2B%2FIXczCIzuUm6k%3D"},{"header":"GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.rootca1.amazontrust.com","host":"ocsp.rootca1.amazontrust.com","host_ip":"99.84.224.203:80","method":"GET","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"url":"/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D"},{"header":"GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAQvYCBFexRqLOIAbcSHSxA%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.sca1b.amazontrust.com","host":"ocsp.sca1b.amazontrust.com","host_ip":"99.84.224.189:80","method":"GET","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"url":"/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAQvYCBFexRqLOIAbcSHSxA%3D"},{"header":"GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEGdbMLgBHZG4cYSL%2BZkHXI0%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.sectigo.com","host":"ocsp.sectigo.com","host_ip":"104.18.32.68:80","method":"GET","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"url":"/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEGdbMLgBHZG4cYSL%2BZkHXI0%3D"},{"header":"GET /gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEGvKOp9gifjSEs9fbYT4omg%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","host":"ocsp.pki.goog","host_ip":"172.253.63.94:80","method":"GET","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"url":"/gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEGvKOp9gifjSEs9fbYT4omg%3D"}]},"process_activity":{"all_imported_dlls":["api-ms-win-core-synch-l1-2-0.dll","nlaapi.dll","rasadhlp.dll","deploy.dll","IEShims.dll","shlwapi.dll","MSOHEV.DLL","mscoree.dll","apphelp.dll","api-ms-win-downlevel-version-l1-1-0.dll","actxprxy.dll","SensApi.dll","ieui.dll","propsys.dll","xmllite.dll","rpcrt4.dll","msxml6r.dll","d3d10warp.dll","schannel.dll","ws2_32.dll","uxtheme.dll","dxgi.dll","mshtml.dll","version.dll","webio.dll","gpapi.dll","lpk.dll","comctl32.dll","winhttp.dll","userenv.dll","secur32.dll","urlmon.dll","msxml6.dll","tzres.dll","wshqos.dll","jscript9.dll","WindowsCodecsExt.dll","msvcr100.dll","devobj.dll","URLREDIR.DLL","msimg32.dll","duser.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","ieframe.dll","netapi32.dll","crypt32.dll","api-ms-win-downlevel-user32-l1-1-0.dll","t2embed.dll","msimtf.dll","ole32.dll","netutils.dll","npctrl.dll","dwmapi.dll","cryptnet.dll","dhcpcsvc6.dll","FWPUCLNT.DLL","clbcatq.dll","sxs.dll","DWrite.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","powrprof.dll","bcrypt.dll","wininet.dll","gdi32.dll","cfgmgr32.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","msvcrt.dll","mswsock.dll","winnsi.dll","UIAnimation.dll","setupapi.dll","mlang.dll","WSHTCPIP.DLL","imagehlp.dll","oleaut32.dll","sqmapi.dll","sechost.dll","oleaccrc.dll","Wldap32.dll","netprofm.dll","nsi.dll","jp2ssv.dll","sspicli.dll","rsaenh.dll","KernelBase.dll","ExplorerFrame.dll","imm32.dll","oleacc.dll","WindowsCodecs.dll","shell32.dll","wintrust.dll","ssv.dll","user32.dll","ieproxy.dll","rpcss.dll","advapi32.dll","IPHLPAPI.DLL","msvcr90.dll","cabinet.dll","devrtl.dll","mscoreei.dll","RpcRtRemote.dll","dui70.dll","dhcpcsvc.dll","dnsapi.dll","comdlg32.dll","usp10.dll","cryptbase.dll","msctf.dll","ntmarta.dll","srvcli.dll","mscorwks.dll","credssp.dll","wkscli.dll","msasn1.dll","d2d1.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","normaliz.dll","profapi.dll","SwDir_1231201.dll","ncrypt.dll","kernel32.dll","wship6.dll","d3d11.dll","npmproxy.dll","cryptsp.dll","bcryptprimitives.dll","fltLib.dll","iertutil.dll"],"processes":[{"command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\c67a3d67da7cb7e58e8165e01cf4338019e9b5c07a862133cdafe8f20dd4d0fe.url","icon":"$21","name":"rundll32.exe","normalized_path":"%WINDIR%\\System32\\rundll32.exe","pid":2644,"ppid":0,"sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","uid":"00000000-00002644"},{"command_line":"https://dotnetfiddle.net/aL574y","name":"iexplore.exe","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002644","pid":3044,"ppid":2644,"sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","uid":"00000000-00003044"},{"command_line":"SCODEF:3044 CREDAT:275457 /prefetch:2","name":"iexplore.exe","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003044","pid":2732,"ppid":3044,"sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","uid":"00000000-00002732"},{"command_line":"-u -p 2644 -s 132","name":"WerFault.exe","normalized_path":"%WINDIR%\\system32\\WerFault.exe","parent_uid":"00000000-00002644","pid":3828,"ppid":2644,"sha256":"08bace187a0225e10677de9aa6738a7118be3e5cad6dc45fb8d3366a61bb343c","uid":"00000000-00003828"}],"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},"registry_activity":{"keys_created":[{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\MY\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CTLS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\TCPIP\\PARAMETERS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CRLS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\CERTIFICATES\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SECURITYPROVIDERS\\SCHANNEL\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]}],"keys_deleted":[],"keys_modified":[]},"sample_flags":["Decrypted SSL traffic","Network Traffic","Extracted Files","Sample Crashed"],"sandbox_reports":[{"analysis_start_time":"2022-08-03T06:12:28+00:00","contacted_countries":["GBR","USA"],"environment_description":"Windows 7 32 bit","environment_id":100,"id":"62ea11cbab577378e26be7e9","indicators_count":{"informative":12,"malicious":0,"suspicious":3},"is_in_unified_schema":true,"state":"SUCCESS","submit_name":"c67a3d67da7cb7e58e8165e01cf4338019e9b5c07a862133cdafe8f20dd4d0fe.url","tags":["Network Traffic","Extracted Files","Sample Crashed","Decrypted SSL traffic"],"verdict":"no specific threat"}],"stats":{"contacted_hosts_count":15,"contacted_urls_count":10,"dns_resolutions_count":10,"dropped_files_count":0,"embedded_domains_count":0,"embedded_ips_count":0,"embedded_urls_count":0,"extracted_files_count":50,"files_deleted_count":0,"files_written_count":47,"http_requests_count":10,"imported_dlls_count":132,"injected_processes_count":0,"mutex_created_count":38,"process_count":4,"registry_keys_created_count":30,"registry_keys_deleted_count":0,"registry_keys_modified_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":30,"script_calls_count":0,"spawned_processes_count":4}},"all_analysis_status":{"fastscan_status":"SUCCESS","qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS"},"detections":{"attributions":{},"av_detections":{"engines":{"urlscanio":{"data_source":"urlscan.io","extra_fields":[{"name":"percent","value":0}],"name":"urlscan.io","permalink":"https://urlscan.io/","progress":100,"report_link":"https://urlscan.io/result/cd007f1c-0e20-42a9-ba93-a46da5c0d772/","status":"no-classification","success":true,"verdict":"undetected"}}},"incidents":[{"details":[{"detail":"Contacts 10 domains and 10 hosts"}],"details_count":1,"name":"Network Behavior","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]}],"mitre_attacks":[{"attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Found decrypted SSL traffic"}],"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}],"tactic":"Command and Control","technique":"Encrypted Channel"}],"rule_matches":{},"sandbox_signatures":[{"category":"General","description":"\"104.42.145.67:443\"\n \"104.18.10.207:443\"\n \"99.84.238.164:443\"\n \"99.84.224.112:80\"\n \"99.84.224.108:80\"\n \"99.84.224.203:80\"\n \"99.84.224.189:80\"\n \"216.239.36.178:443\"\n \"104.17.30.92:443\"\n \"108.161.187.27:443\"\n \"172.253.63.94:80\"\n \"159.65.164.204:443\"\n \"94.31.29.32:443\"\n \"172.253.63.155:443\"\n \"96.6.31.32:443\"","id":"network-1","level":"informative","name":"Contacts server","origin":"Network Traffic","relevance":1,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"General","description":"$22","id":"mutant-0","level":"informative","name":"Creates mutants","origin":"Created Mutant","relevance":3,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"General","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")\n Antivirus vendors marked dropped file \"Tar30D7.tmp\" as clean (type is \"data\")","id":"binary-16","level":"informative","name":"Drops files marked as clean","origin":"Binary File","relevance":10,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"General","description":"Spawned process \"WerFault.exe\" with commandline \"-u -p 2644 -s 132\" (UID: 00000000-00003828)","id":"target-103","level":"informative","name":"Spawns new processes that are not known child processes","origin":"Monitored Target","relevance":3,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"Installation/Persistence","description":"$23","id":"binary-0","level":"informative","name":"Dropped files","origin":"Binary File","relevance":3,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"Network Related","description":"$24","id":"string-3","level":"informative","name":"Found potential URL in binary/memory","origin":"File/Memory","relevance":10,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"General","description":"Process \"WerFault.exe\" (UID: 00000000-00003828) was launched with missing environment variables: \"PATH\"","id":"target-67","level":"informative","name":"Process launched with changed environment","origin":"Monitored Target","relevance":10,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"General","description":"Spawned process \"WerFault.exe\" with commandline \"-u -p 2644 -s 132\" (UID: 00000000-00003828)","id":"target-25","level":"informative","name":"Spawns new processes","origin":"Monitored Target","relevance":3,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"Network Related","description":"$25","id":"string-102","level":"informative","mitre_attack_id":"T1573","name":"Found decrypted SSL traffic","origin":"File/Memory","relevance":3,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"Unusual Characteristics","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4817 bytes 1 file\"","id":"binary-5","level":"informative","name":"Drops cabinet archive files","origin":"Binary File","relevance":10,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"Network Related","description":"$26","id":"network-21","level":"suspicious","name":"Malicious artifacts seen in the context of a contacted host","origin":"Network Traffic","relevance":10,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"Network Related","description":"$27","id":"network-23","level":"suspicious","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","origin":"Network Traffic","relevance":5,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"General","description":"Report process \"WerFault.exe\" was created by \"rundll32.exe\"","id":"target-2","level":"informative","name":"An application crash occurred","origin":"Monitored Target","sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]},{"category":"General","description":"\"o.ss2.us\"\n \"ocsp.rootg2.amazontrust.com\"\n \"ocsp.rootca1.amazontrust.com\"\n \"ocsp.sca1b.amazontrust.com\"\n \"ocsp.pki.goog\"\n \"ocsp.sectigo.com\"\n \"cdn.carbonads.com\"\n \"cdn4.buysellads.net\"\n \"dotnetfiddle.net\"\n \"netdna.bootstrapcdn.com\"","id":"network-0","level":"informative","name":"Contacts domains","origin":"Network Traffic","relevance":1,"sources":[{"report_id":"62ea11cbab577378e26be7e9","report_type":"sandbox"}]}],"stats":{"attributions":{"campaigns_count":0,"cves_count":0,"malware_families_count":0,"threat_actors_count":0,"threat_types_count":0},"av":{"malicious_count":0,"suspicious_count":0,"total_engines":1},"mitre_attacks":{"total":1},"rule_matches":{"sigma_count":0,"suricata_count":0,"yara_count":0},"sandbox_signatures":{"informative_count":12,"malicious_count":0,"suspicious_count":2,"total":14}},"summary":{"score":0,"tags":null,"verdict":"no specific threat"}},"metadata":{"file_info":{"file_name":"https://dotnetfiddle.net/aL574y","file_size":0,"file_type":["url"],"file_type_id":"url"},"hashes":{"imphash":"Unknown","md5":"2bf7254805a542823f516fc4536c2696","sha1":"015996ab89333653011ea03c01585b166375bb36","sha256":"c67a3d67da7cb7e58e8165e01cf4338019e9b5c07a862133cdafe8f20dd4d0fe","sha512":"ea69dc5db1a75e1e38722dd570d750de6beff4e9b330c4ddc3c684ac948999f41dbb7ca83c7f7510c2a1d53deeef66b0700b192db812ba7846aedafc4bd29ce9","ssdeep":"Unknown"},"submissions":{"first_seen":1659507149000,"last_multi_scan":1665475923000,"last_seen":1665475923000}},"overall_status":"SUCCESS","report_ids":{"sandbox_job_ids":["62ea11cbab577378e26be7e9"]},"schema_version":"1.0.9","sha256":"c67a3d67da7cb7e58e8165e01cf4338019e9b5c07a862133cdafe8f20dd4d0fe","threat_score":0,"unified_at":"2026-09-02T05:31:49.673Z","unified_at_epoch_ms":1788327109673,"verdict":"no specific threat"}}]]}] 1b:null 1f:[["$","title","0",{"children":"Sample c67a3d67da7c… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample c67a3d67da7c…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/c67a3d67da7cb7e58e8165e01cf4338019e9b5c07a862133cdafe8f20dd4d0fe"}],["$","meta","4",{"property":"og:title","content":"Sample c67a3d67da7c… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample c67a3d67da7c…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/c67a3d67da7cb7e58e8165e01cf4338019e9b5c07a862133cdafe8f20dd4d0fe"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample c67a3d67da7c… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample c67a3d67da7c…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L28","11",{}]]