24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 2d:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:Taed,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample d0f05088df6e… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample d0f05088df6e…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/d0f05088df6e7c7796492f65cfb88083f27f368056a74e1babbc8bef6a181541","keywords":["malware analysis","sandbox report","threat intelligence","d0f05088df6e7c7796492f65cfb88083f27f368056a74e1babbc8bef6a181541"],"about":{"@type":"SoftwareApplication","name":"https://mysoundwise.com/publishers/1655602239332p%20https:/mysoundwise.com/soundcasts/1655603211279s%20https:/mysoundwise.com/soundcasts/1655603406305s%20https:/mysoundwise.com/soundcasts/1655603602301s%20https:/mysoundwise.com/soundcasts/1655603761690s%20https:/mysoundwise.com/soundcasts/1655603872437s%20https:/mysoundwise.com/soundcasts/1655603999634s%20https:/mysoundwise.com/soundcasts/1655604919143s%20https:/mysoundwise.com/soundcasts/1655605026806s%20https:/mysoundwise.com/soundcasts/1655605118491s%20https:/mysoundwise.com/soundcasts/1655605197284s%20https:/mysoundwise.com/soundcasts/1655605324527s%20https:/mysoundwise.com/soundcasts/1655605419535s%20https:/mysoundwise.com/soundcasts/1655605516253s%20https:/mysoundwise.com/soundcasts/1655605575733s%20https:/mysoundwise.com/soundcasts/1655605641724s%20https:/mysoundwise.com/soundcasts/1655605740567s%20https:/mysoundwise.com/soundcasts/1655605832252s%20https:/mysoundwise.com/soundcasts/1655605913617s%20https:/mysoundwise.com/soundcasts/1655605996638s%20https:/mysoundwise.com/soundcasts/1655606160655s%20https:/mysoundwise.com/soundcasts/1655606316751s%20https:/mysoundwise.com/soundcasts/1655606409450s%20https:/mysoundwise.com/soundcasts/1655606537772s%20https:/mysoundwise.com/soundcasts/1655606634108s%20https:/mysoundwise.com/soundcasts/1655606711099s%20https:/mysoundwise.com/soundcasts/1655606818190s%20https:/mysoundwise.com/soundcasts/1655606923679s%20https:/mysoundwise.com/soundcasts/1655607029289s%20https:/mysoundwise.com/soundcasts/1655607179074s%20https:/mysoundwise.com/soundcasts/1655607269410s%20https:/mysoundwise.com/soundcasts/1655607416059s%20https:/mysoundwise.com/soundcasts/1655607526901s%20https:/mysoundwise.com/soundcasts/1655607618410s%20https:/mysoundwise.com/soundcasts/1655607707324s%20https:/mysoundwise.com/soundcasts/1655607787349s","applicationCategory":["url"],"identifier":"d0f05088df6e7c7796492f65cfb88083f27f368056a74e1babbc8bef6a181541"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":1},"behavioralIndicators":{"malicious":0,"suspicious":2},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T72a,https://mysoundwise.com/publishers/1655602239332p%20https:/mysoundwise.com/soundcasts/1655603211279s%20https:/mysoundwise.com/soundcasts/1655603406305s%20https:/mysoundwise.com/soundcasts/1655603602301s%20https:/mysoundwise.com/soundcasts/1655603761690s%20https:/mysoundwise.com/soundcasts/1655603872437s%20https:/mysoundwise.com/soundcasts/1655603999634s%20https:/mysoundwise.com/soundcasts/1655604919143s%20https:/mysoundwise.com/soundcasts/1655605026806s%20https:/mysoundwise.com/soundcasts/1655605118491s%20https:/mysoundwise.com/soundcasts/1655605197284s%20https:/mysoundwise.com/soundcasts/1655605324527s%20https:/mysoundwise.com/soundcasts/1655605419535s%20https:/mysoundwise.com/soundcasts/1655605516253s%20https:/mysoundwise.com/soundcasts/1655605575733s%20https:/mysoundwise.com/soundcasts/1655605641724s%20https:/mysoundwise.com/soundcasts/1655605740567s%20https:/mysoundwise.com/soundcasts/1655605832252s%20https:/mysoundwise.com/soundcasts/1655605913617s%20https:/mysoundwise.com/soundcasts/1655605996638s%20https:/mysoundwise.com/soundcasts/1655606160655s%20https:/mysoundwise.com/soundcasts/1655606316751s%20https:/mysoundwise.com/soundcasts/1655606409450s%20https:/mysoundwise.com/soundcasts/1655606537772s%20https:/mysoundwise.com/soundcasts/1655606634108s%20https:/mysoundwise.com/soundcasts/1655606711099s%20https:/mysoundwise.com/soundcasts/1655606818190s%20https:/mysoundwise.com/soundcasts/1655606923679s%20https:/mysoundwise.com/soundcasts/1655607029289s%20https:/mysoundwise.com/soundcasts/1655607179074s%20https:/mysoundwise.com/soundcasts/1655607269410s%20https:/mysoundwise.com/soundcasts/1655607416059s%20https:/mysoundwise.com/soundcasts/1655607526901s%20https:/mysoundwise.com/soundcasts/1655607618410s%20https:/mysoundwise.com/soundcasts/1655607707324s%20https:/mysoundwise.com/soundcasts/1655607787349s26:T680,"iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\VERSIONMANAGER"; Key: "DOWNLOADVERSIONLIST"; Value: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\VERSIONMANAGER"; Key: "VERSIONLISTSERVERPATH"; Value: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\VERSIONMANAGER"; Key: "VERSIONLISTSERVERHOSTNAME"; Value: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLBLOCKMANAGER"; Key: "HASHFILEVERSIONHIGHPART"; Value: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLBLOCKMANAGER"; Key: "HASHFILEVERSIONLOWPART"; Value: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXTENSION COMPATIBILITY\{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}"; Key: "VERSION"; Value: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXTENSION COMPATIBILITY\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}"; Key: "VERSION"; Value: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN"; Key: "SEARCHBANDMIGRATIONVERSION"; Value: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES"; Key: "VERSION"; Value: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\BROWSEREMULATION"; Key: "IECOMPATVERSIONHIGH"; Value: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\BROWSEREMULATION"; Key: "IECOMPATVERSIONLOW"; Value: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\BROWSEREMULATION"; Key: "CVLISTXMLVERSIONHIGH"; Value: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\BROWSEREMULATION"; Key: "CVLISTXMLVERSIONLOW"; Value: "")27:Tbdf,"~DF7C4E79DBBC8DEAC2.TMP" has type "data"- Location: [%TEMP%\~DF7C4E79DBBC8DEAC2.TMP]- [targetUID: 00000000-00002468] "80237EE4964FC9C409AAF55BF996A292_C5130A0BDC8C859A2757D77746C10868" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_C5130A0BDC8C859A2757D77746C10868]- [targetUID: 00000000-00002468] "BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894]- [targetUID: 00000000-00003844] "7D6243C18F0F8F9AEC6638DD210F1984_9467D1F75AF03C2EC1C75E5C107E879F" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\7D6243C18F0F8F9AEC6638DD210F1984_9467D1F75AF03C2EC1C75E5C107E879F]- [targetUID: 00000000-00003844] "~DF6BC6227EA764E165.TMP" has type "data"- Location: [%TEMP%\~DF6BC6227EA764E165.TMP]- [targetUID: 00000000-00002468] "5857EG8C.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\5857EG8C.txt]- [targetUID: 00000000-00002468] "B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62]- [targetUID: 00000000-00003844] "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776]- [targetUID: 00000000-00003844] "CMEZ0KJG.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\CMEZ0KJG.txt]- [targetUID: 00000000-00003844] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 4817 bytes 1 file"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00003844] "~DFA6DCAE3C274603DF.TMP" has type "data"- Location: [%TEMP%\~DFA6DCAE3C274603DF.TMP]- [targetUID: 00000000-00002468] "~DF92A8D955F2A10F98.TMP" has type "data"- Location: [%TEMP%\~DF92A8D955F2A10F98.TMP]- [targetUID: 00000000-00002468] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00002468] "en-US.4" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\DomainSuggestions\en-US.4]- [targetUID: 00000000-00002468] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00003844] "75CA58072B9926F763A91F0CC2798706_93E4B2BA79A897B3100CCB27F2D3BF4F" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\75CA58072B9926F763A91F0CC2798706_93E4B2BA79A897B3100CCB27F2D3BF4F]- [targetUID: 00000000-00003844]28:Tbcf,"GET /publishers/1655602239332p%20https:/mysoundwise.com/soundcasts/1655603211279s%20https:/mysoundwise.com/soundcasts/1655603406305s%20https:/mysoundwise.com/soundcasts/1655603602301s%20https:/mysoundwise.com/soundcasts/1655603761690s%20https:/mysoundwise.com/soundcasts/1655603872437s%20https:/mysoundwise.com/soundcasts/1655603999634s%20https:/mysoundwise.com/soundcasts/1655604919143s%20https:/mysoundwise.com/soundcasts/1655605026806s%20https:/mysoundwise.com/soundcasts/1655605118491s%20https:/mysoundwise.com/soundcasts/1655605197284s%20https:/mysoundwise.com/soundcasts/1655605324527s%20https:/mysoundwise.com/soundcasts/1655605419535s%20https:/mysoundwise.com/soundcasts/1655605516253s%20https:/mysoundwise.com/soundcasts/1655605575733s%20https:/mysoundwise.com/soundcasts/1655605641724s%20https:/mysoundwise.com/soundcasts/1655605740567s%20https:/mysoundwise.com/soundcasts/1655605832252s%20https:/mysoundwise.com/soundcasts/1655605913617s%20https:/mysoundwise.com/soundcasts/1655605996638s%20https:/mysoundwise.com/soundcasts/1655606160655s%20https:/mysoundwise.com/soundcasts/1655606316751s%20https:/mysoundwise.com/soundcasts/1655606409450s%20https:/mysoundwise.com/soundcasts/1655606537772s%20https:/mysoundwise.com/soundcasts/1655606634108s%20https:/mysoundwise.com/soundcasts/1655606711099s%20https:/mysoundwise.com/soundcasts/1655606818190s%20https:/mysoundwise.com/soundcasts/1655606923679s%20https:/mysoundwise.com/soundcasts/1655607029289s%20https:/mysoundwise.com/soundcasts/1655607179074s%20https:/mysoundwise.com/soundcasts/1655607269410s%20https:/mysoundwise.com/soundcasts/1655607416059s%20https:/mysoundwise.com/soundcasts/1655607526901s%20https:/mysoundwise.com/soundcasts/1655607618410s%20https:/mysoundwise.com/soundcasts/1655607707324s%20https:/mysoundwise.com/soundcasts/1655607787349s HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: mysoundwise.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_3.133.199.216] "HTTP/1.1 503 Service Temporarily Unavailable Server: awselb/2.0 Date: Sun, 19 Jun 2022 03:08:55 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive 503 Service Temporarily Unavailable

503 Service Temporarily Unavailable

"- [Source: SSL_3.133.199.216] "GET /favicon.ico HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Host: mysoundwise.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_3.133.199.216] "HTTP/1.1 503 Service Temporarily Unavailable Server: awselb/2.0 Date: Sun, 19 Jun 2022 03:08:57 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive 503 Service Temporarily Unavailable

503 Service Temporarily Unavailable

"- [Source: SSL_3.133.199.216]29:T7e6,Pattern match: "https://mysoundwise.com/publishers/1655602239332p%20https:/mysoundwise.com/soundcasts/1655603211279s%20https:/mysoundwise.com/soundcasts/1655603406305s%20https:/mysoundwise.com/soundcasts/1655603602301s%20https:/mysoundwise.com/soundcasts/1655603761690s%20"- [Source: Input] Pattern match: "https://mysoundwise.com"- [Source: Input] Heuristic match: "o.ss2.us"- [Source: PCAP] Heuristic match: "GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: o.ss2.us"- [Source: PCAP] Heuristic match: "ocsp.rootg2.amazontrust.com"- [Source: PCAP] Heuristic match: "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.rootg2.amazontrust.com"- [Source: PCAP] Heuristic match: "ocsp.rootca1.amazontrust.com"- [Source: PCAP] Heuristic match: "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.rootca1.amazontrust.com"- [Source: PCAP] Heuristic match: "ocsp.sca1b.amazontrust.com"- [Source: PCAP] Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEA0DkdSGf1P%2FAgBpJZ0ikok%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com"- [Source: PCAP] Heuristic match: "mysoundwise.com"- [Source: PCAP] Pattern match: "mysoundwise.com/soundcasts/1655603211279s%20https:/mysoundwise.com/soundcasts/1655603406305s%20https:/mysoundwise.com/soundcasts/1655603602301s%20https:/mysoundwise.com/soundcasts/1655603761690s%20https:/mysoundwise.com/soundcasts/1655603872437s%20https:/m"- [Source: SSL_3.133.199.216]2a:T961,Found malicious artifacts related to "18.160.201.14": ... URL: https://d32ulyurhgs7ov.cloudfront.net/Win0CH08Xc0def008JOs88y/?phone=050-5479-1761& (AV positives: 4/93 scanned on 05/05/2022 08:03:42) URL: http://d275im4r3zngba.cloudfront.net/ (AV positives: 1/92 scanned on 04/20/2022 13:07:12) URL: http://ocsp.rootca1.amazontrust.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8+5VZ5/a9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ/lFeFh+isd96yUzJbvJmLVg0= (AV positives: 1/92 scanned on 04/19/2022 22:45:48) File SHA256: ac5f6f9840e3be1aabfb7e5f16aaf36585f561c19e3a4e1a5478aa47f09684cd (AV positives: 5/73 scanned on 05/05/2022 03:04:42) Found malicious artifacts related to "18.160.201.89": ... URL: https://d2r3dgsh5nr4kg.cloudfront.net/installer/610169/1402860097564753 (AV positives: 1/95 scanned on 06/15/2022 13:14:54) URL: https://d286h0hdvpuped.cloudfront.net/?number=09-70-18-36-36&rb=JSbb5cf361d5f44c34905b5d6bc0245563&t1=[t1]&t2=[t2]&t3=[t3]&t4=[t4]&t5=[t5]&t6=[t6]&t7=[t7]&t8=[t8]&click_id=w9l8q6duou5tqmsgi1aej8bm (AV positives: 1/95 scanned on 06/14/2022 14:10:22) URL: http://d2r3dgsh5nr4kg.cloudfront.net/installer/343714/146780340 (AV positives: 1/95 scanned on 06/13/2022 15:35:32) URL: http://d2r3dgsh5nr4kg.cloudfront.net/installer/2396624/57316400073930123 (AV positives: 1/95 scanned on 06/13/2022 15:34:25) URL: https://d2r3dgsh5nr4kg.cloudfront.net/installer/072532/11033803346226 (AV positives: 1/95 scanned on 06/13/2022 12:43:34) File SHA256: c011c14cd71fec3c4e2684eb522602c01797702f2a3274095cef3029b0065a71 (AV positives: 26/71 scanned on 06/13/2022 00:51:37) Found malicious artifacts related to "108.156.93.3": ... URL: http://d31l9odw49xgex.cloudfront.net/installer/474461656627/79866593 (AV positives: 5/95 scanned on 06/05/2022 08:27:58) URL: http://d31l9odw49xgex.cloudfront.net/installer/474461656627/79866593http:/d31l9odw49xgex.cloudfront.net/installer/474461656627/79866593http:/d31l9odw49xgex.cloudfront.net/installer/474461656627/79866593 (AV positives: 4/93 scanned on 03/22/2022 16:06:24) URL: http://crl.rootca1.amazontrust.com/ (AV positives: 1/93 scanned on 02/15/2022 07:28:38) File SHA256: 57906dd98a486b9ba1d66342c4c62c84cd59eb78dcb4064994c27f44d12df49e (AV positives: 27/72 scanned on 05/30/2022 00:39:28) File SHA256: 284cdd1e60b28a1979db44539dbf364e333f7d2d375b72dccd41020060dcfc66 (AV positives: 34/73 scanned on 02/10/2022 12:22:17)2b:T564,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:T72a,https://mysoundwise.com/publishers/1655602239332p%20https:/mysoundwise.com/soundcasts/1655603211279s%20https:/mysoundwise.com/soundcasts/1655603406305s%20https:/mysoundwise.com/soundcasts/1655603602301s%20https:/mysoundwise.com/soundcasts/1655603761690s%20https:/mysoundwise.com/soundcasts/1655603872437s%20https:/mysoundwise.com/soundcasts/1655603999634s%20https:/mysoundwise.com/soundcasts/1655604919143s%20https:/mysoundwise.com/soundcasts/1655605026806s%20https:/mysoundwise.com/soundcasts/1655605118491s%20https:/mysoundwise.com/soundcasts/1655605197284s%20https:/mysoundwise.com/soundcasts/1655605324527s%20https:/mysoundwise.com/soundcasts/1655605419535s%20https:/mysoundwise.com/soundcasts/1655605516253s%20https:/mysoundwise.com/soundcasts/1655605575733s%20https:/mysoundwise.com/soundcasts/1655605641724s%20https:/mysoundwise.com/soundcasts/1655605740567s%20https:/mysoundwise.com/soundcasts/1655605832252s%20https:/mysoundwise.com/soundcasts/1655605913617s%20https:/mysoundwise.com/soundcasts/1655605996638s%20https:/mysoundwise.com/soundcasts/1655606160655s%20https:/mysoundwise.com/soundcasts/1655606316751s%20https:/mysoundwise.com/soundcasts/1655606409450s%20https:/mysoundwise.com/soundcasts/1655606537772s%20https:/mysoundwise.com/soundcasts/1655606634108s%20https:/mysoundwise.com/soundcasts/1655606711099s%20https:/mysoundwise.com/soundcasts/1655606818190s%20https:/mysoundwise.com/soundcasts/1655606923679s%20https:/mysoundwise.com/soundcasts/1655607029289s%20https:/mysoundwise.com/soundcasts/1655607179074s%20https:/mysoundwise.com/soundcasts/1655607269410s%20https:/mysoundwise.com/soundcasts/1655607416059s%20https:/mysoundwise.com/soundcasts/1655607526901s%20https:/mysoundwise.com/soundcasts/1655607618410s%20https:/mysoundwise.com/soundcasts/1655607707324s%20https:/mysoundwise.com/soundcasts/1655607787349s1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"schema_version":"1.0.15","sha256":"d0f05088df6e7c7796492f65cfb88083f27f368056a74e1babbc8bef6a181541","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1790492892467,"unified_at":"2026-09-27T07:08:12.467Z","metadata":{"hashes":{"sha256":"d0f05088df6e7c7796492f65cfb88083f27f368056a74e1babbc8bef6a181541","sha1":"9fa8efb88af78b194270fe488ea5966b7bca9a2d","md5":"6b59ac6ff30a51b5a9b82fa4da7c1d05","sha512":"20906d620c953c9344119406ef74982923c4980a414db10ea45fa62283afffa5d733815d65b71362275a425ea83488411b0f8ff8c13bf3ab08d2d22f42f6c7ac","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"$25","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1655607999000,"last_seen":1659256331000,"last_multi_scan":1659256331000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":1},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":1},"sandbox_signatures":{"informative_count":10,"suspicious_count":2,"malicious_count":0,"total":12},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-classification","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/","report_link":"https://urlscan.io/result/fa6e1328-0ed7-4e88-ba9a-4ad792e03e25/","extra_fields":[{"name":"percent","value":0}]}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Found decrypted SSL traffic"}],"sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]}],"sandbox_signatures":[{"level":"informative","category":"Environment Awareness","name":"Tries to identify Internet Explorer version from registry","description":"$26","origin":"Registry Access","relevance":3,"id":"registry-103","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"level":"informative","category":"General","name":"Contacts domains","description":"\"o.ss2.us\"\n \"ocsp.rootg2.amazontrust.com\"\n \"ocsp.rootca1.amazontrust.com\"\n \"ocsp.sca1b.amazontrust.com\"\n \"mysoundwise.com\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"3.133.199.216:443\"\n \"108.159.224.99:80\"\n \"18.160.201.14:80\"\n \"18.160.201.89:80\"\n \"108.156.93.3:80\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\IsoScope_9a4_IESQMMUTEX_0_519\"\n \"Local\\InternetShortcutMutex\"\n \"IsoScope_9a4_IESQMMUTEX_0_519\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"IsoScope_9a4_IE_EarlyTabStart_0xa80_Mutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"IsoScope_9a4_IESQMMUTEX_0_303\"\n \"IsoScope_9a4_IESQMMUTEX_0_331\"\n \"UpdatingNewTabPageData\"\n \"IsoScope_9a4_ConnHashTable<2468>_HashTable_Mutex\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2468\"\n \"Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$27","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"level":"informative","category":"Network Related","name":"Contacts Random Domain Names","description":"\"mysoundwise.com\" seems to be random","origin":"Network Traffic","relevance":5,"id":"network-6","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"level":"informative","category":"Network Related","name":"Found decrypted SSL traffic","description":"$28","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$29","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4817 bytes 1 file\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"level":"suspicious","category":"Network Related","name":"Malicious artifacts seen in the context of a contacted host","description":"$2a","origin":"Network Traffic","relevance":10,"id":"network-21","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 3.133.199.216 on port 443 is sent without HTTP header\n TCP traffic to 108.159.224.99 on port 80 is sent without HTTP header\n TCP traffic to 18.160.201.14 on port 80 is sent without HTTP header\n TCP traffic to 18.160.201.89 on port 80 is sent without HTTP header\n TCP traffic to 108.156.93.3 on port 80 is sent without HTTP header","origin":"Network Traffic","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 5 domains and 5 hosts"}],"sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":35,"imported_dlls_count":119,"dropped_files_count":0,"extracted_files_count":24,"files_written_count":40,"files_deleted_count":0,"registry_keys_created_count":1,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":1,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":5,"dns_resolutions_count":5,"contacted_urls_count":4,"http_requests_count":4},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","Decrypted SSL traffic"],"sandbox_reports":[{"id":"62ae92bed4d90c31220f23b2","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"d0f05088df6e7c7796492f65cfb88083f27f368056a74e1babbc8bef6a181541.url","analysis_start_time":"2022-06-19T03:06:39+00:00","indicators_count":{"informative":10,"suspicious":3,"malicious":0},"tags":["Network Traffic","Extracted Files","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"3.133.199.216","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"address":"108.159.224.99","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"address":"18.160.201.14","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"address":"18.160.201.89","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"address":"108.156.93.3","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]}],"dns_resolutions":[{"domain":"mysoundwise.com","address":"3.133.199.216","ttl":60,"country":"United States","registrar_name":"GoDaddy.com, LLC","registrar_organization":"Domains By Proxy, LLC","registrar_name_servers":"NS-1206.AWSDNS-22.ORG","registrar_creation_date":"2017-01-24T00:20:08+00:00","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"domain":"o.ss2.us","address":"108.159.224.99","ttl":60,"country":"United States","registrar_name":"GODADDY.COM, INC.","registrar_name_servers":"NS-19.AWSDNS-02.COM","registrar_creation_date":"2015-04-16T18:03:31+00:00","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"domain":"ocsp.rootca1.amazontrust.com","address":"18.160.201.89","ttl":60,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Amazon Trust Services LLC","registrar_name_servers":"NS-1249.AWSDNS-28.ORG","registrar_creation_date":"2007-05-11T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"domain":"ocsp.rootg2.amazontrust.com","address":"18.160.201.14","ttl":60,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Amazon Trust Services LLC","registrar_name_servers":"NS-1249.AWSDNS-28.ORG","registrar_creation_date":"2007-05-11T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"domain":"ocsp.sca1b.amazontrust.com","address":"108.156.93.3","ttl":60,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Amazon Trust Services LLC","registrar_name_servers":"NS-1249.AWSDNS-28.ORG","registrar_creation_date":"2007-05-11T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]}],"http_requests":[{"host":"o.ss2.us","host_ip":"108.159.224.99:80","url":"//MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D","method":"GET","header":"GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: o.ss2.us","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"host":"ocsp.rootg2.amazontrust.com","host_ip":"18.160.201.14:80","url":"/MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D","method":"GET","header":"GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.rootg2.amazontrust.com","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"host":"ocsp.rootca1.amazontrust.com","host_ip":"18.160.201.89:80","url":"/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D","method":"GET","header":"GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.rootca1.amazontrust.com","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"host":"ocsp.sca1b.amazontrust.com","host_ip":"108.156.93.3:80","url":"/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEA0DkdSGf1P%2FAgBpJZ0ikok%3D","method":"GET","header":"GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEA0DkdSGf1P%2FAgBpJZ0ikok%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.sca1b.amazontrust.com","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}],"processes":[{"pid":3700,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\d0f05088df6e7c7796492f65cfb88083f27f368056a74e1babbc8bef6a181541.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00003700","icon":"$2b"},{"pid":2468,"ppid":3700,"name":"iexplore.exe","command_line":"$2c","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003700","uid":"00000000-00002468"},{"pid":3844,"ppid":2468,"name":"iexplore.exe","command_line":"SCODEF:2468 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002468","uid":"00000000-00003844"}],"all_imported_dlls":["gpapi.dll","DWrite.dll","uxtheme.dll","secur32.dll","ntmarta.dll","imm32.dll","jscript9.dll","api-ms-win-core-synch-l1-2-0.dll","IPHLPAPI.DLL","msimg32.dll","webio.dll","lpk.dll","bcrypt.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","d3d10warp.dll","msasn1.dll","profapi.dll","sspicli.dll","sechost.dll","WSHTCPIP.DLL","MSOHEV.DLL","usp10.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","wshqos.dll","msvcrt.dll","RpcRtRemote.dll","user32.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","userenv.dll","dxgi.dll","dhcpcsvc.dll","version.dll","rpcss.dll","schannel.dll","ssv.dll","msimtf.dll","dhcpcsvc6.dll","rasadhlp.dll","api-ms-win-downlevel-user32-l1-1-0.dll","fltLib.dll","mswsock.dll","netutils.dll","msctf.dll","oleaut32.dll","wininet.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","mscorwks.dll","jp2ssv.dll","srvcli.dll","ieproxy.dll","KernelBase.dll","oleacc.dll","netprofm.dll","d3d11.dll","msvcr90.dll","wkscli.dll","apphelp.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","dwmapi.dll","credssp.dll","ieframe.dll","comctl32.dll","urlmon.dll","ieui.dll","comdlg32.dll","advapi32.dll","cfgmgr32.dll","normaliz.dll","netapi32.dll","npmproxy.dll","rpcrt4.dll","deploy.dll","wintrust.dll","shell32.dll","dui70.dll","setupapi.dll","winhttp.dll","mscoreei.dll","kernel32.dll","ws2_32.dll","iertutil.dll","mlang.dll","winnsi.dll","nlaapi.dll","oleaccrc.dll","rsaenh.dll","duser.dll","SensApi.dll","d2d1.dll","gdi32.dll","WindowsCodecs.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","imagehlp.dll","sqmapi.dll","Wldap32.dll","URLREDIR.DLL","ncrypt.dll","shlwapi.dll","nsi.dll","IEShims.dll","crypt32.dll","api-ms-win-downlevel-version-l1-1-0.dll","ole32.dll","cryptsp.dll","FWPUCLNT.DLL","propsys.dll","cryptbase.dll","sxs.dll","wship6.dll","cryptnet.dll","dnsapi.dll","mscoree.dll","mshtml.dll","msvcr100.dll","ExplorerFrame.dll","clbcatq.dll","devobj.dll","bcryptprimitives.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"favicon_3_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"favicon_2_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"5857EG8C.txt","sha256":"eab52eedad7f2168c86a11b4f1a316579e2a54d3e1c10e77d894e0ad8258b5dc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"CMEZ0KJG.txt","sha256":"7fc065be18cbd1f150a79c7dbc938eff926e5c3de2924b99a73350313ff00aca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"df70a62b7d8098fb8bb1ef432b9a9dfd953afb6c54df21ae2fdcd116cdd11c34","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"7D6243C18F0F8F9AEC6638DD210F1984_9467D1F75AF03C2EC1C75E5C107E879F","sha256":"0b8d9c999f701e9cc537c1475340086cbfa59606c653855471e51acc3bead2ba","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"d194d46261224dc3df8e4aead93e635408739cfd17d233b8676dc69d3cb312c2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"45753b6588cd8c7daff56fb9f67f92e852dacd158b20421683b12aed1b467b3e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"75CA58072B9926F763A91F0CC2798706_93E4B2BA79A897B3100CCB27F2D3BF4F","sha256":"aadfdfadeecb427b663df54407bd7fe1d43d08ec5ae23512876cf8f23cc6c242","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"80237EE4964FC9C409AAF55BF996A292_C5130A0BDC8C859A2757D77746C10868","sha256":"0c8ef8de0e6fd25bdd12318efd223f00a0bd243d50f58a5751ae1d6c2e40d6ed","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62","sha256":"85399d58a1a8f5b77a2653d512e07d86c6bab5919b1d34e1fb4740072b3f8073","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894","sha256":"f659d42b02b88439f5d4e21c78076143a03dd0334cb5a815e36f548ec14f8344","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"~DF6BC6227EA764E165.TMP","sha256":"43d4c5c39c8eefdeaa3d595b2343256adc9b3c5db12019b2cff3d77a716e072a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"~DF7C4E79DBBC8DEAC2.TMP","sha256":"a5202b036f65ee5e80458ed1bf53aa2dac649d1220258a9f8642a214b8c811d7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"~DF92A8D955F2A10F98.TMP","sha256":"1ad2ec46557592763af7e95554e0f60445b55506d6b3cdda3124c2891dfbfee0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"~DFA6DCAE3C274603DF.TMP","sha256":"ac36abbc6d3c14780c1817ff666c4d9ca2e3d2ffd929305d7bfc0a6522e33bc5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"search_2_.json","sha256":"19170bd75edc0b5183a2f9fcc3001d9d222deff61e5915ad1127b65ab581a2a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"_5A3BAED3-EF6C-11EC-9CF9-080027D9C339_.dat","sha256":"16e752bc23e69f64141480b5fb2d423756e863704b3c9b9e3a2d1d489fd25dbb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"RecoveryStore._5A3BAED1-EF6C-11EC-9CF9-080027D9C339_.dat","sha256":"d1ee15a29df8aadf31b490494551008f1c7bcce592f75a0e836a07de2fa022a5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"4b20a37bf35b2288a240136a5a2a146124b21b964aded0117f42eee055a2d03f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"_64A9F890-EF6C-11EC-9CF9-080027D9C339_.dat","sha256":"06abdae521b9a2c1e49823f1f107b392fbe5491f956c0de064ad5dd7edcfaebe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]}],"files_written":[{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{5A3BAED3-EF6C-11EC-9CF9-080027D9C339}.dat","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%TEMP%\\~DF92A8D955F2A10F98.TMP","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{5A3BAED1-EF6C-11EC-9CF9-080027D9C339}.dat","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D6243C18F0F8F9AEC6638DD210F1984_9467D1F75AF03C2EC1C75E5C107E879F","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\7D6243C18F0F8F9AEC6638DD210F1984_9467D1F75AF03C2EC1C75E5C107E879F","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%TEMP%\\~DF7C4E79DBBC8DEAC2.TMP","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.4","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\search[1].json","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\search[2].json","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\75CA58072B9926F763A91F0CC2798706_93E4B2BA79A897B3100CCB27F2D3BF4F","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\75CA58072B9926F763A91F0CC2798706_93E4B2BA79A897B3100CCB27F2D3BF4F","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{64A9F890-EF6C-11EC-9CF9-080027D9C339}.dat","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%TEMP%\\~DFA6DCAE3C274603DF.TMP","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_9a4_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"IsoScope_9a4_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"IsoScope_9a4_IE_EarlyTabStart_0xa80_Mutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"IsoScope_9a4_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"IsoScope_9a4_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"IsoScope_9a4_ConnHashTable<2468>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2468","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2468","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_9a4_IE_EarlyTabStart_0xa80_Mutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_9a4_ConnHashTable<2468>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_9a4_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_9a4_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"IsoScope_9a4_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_9a4_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62ae92bed4d90c31220f23b2"}]}]}},"report_ids":{"sandbox_job_ids":["62ae92bed4d90c31220f23b2"]}}}]]}] 1e:null 22:[["$","title","0",{"children":"Sample d0f05088df6e… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample d0f05088df6e…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/d0f05088df6e7c7796492f65cfb88083f27f368056a74e1babbc8bef6a181541"}],["$","meta","4",{"property":"og:title","content":"Sample d0f05088df6e… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample d0f05088df6e…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/d0f05088df6e7c7796492f65cfb88083f27f368056a74e1babbc8bef6a181541"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample d0f05088df6e… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample d0f05088df6e…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2d","11",{}]]