26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2b:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T430,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample e26ec785320b… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample e26ec785320b…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/e26ec785320b02d434410857bc19998b5c0061c77fc5cc0cfd50a2a7e24b28c4","keywords":["malware analysis","sandbox report","threat intelligence","e26ec785320b02d434410857bc19998b5c0061c77fc5cc0cfd50a2a7e24b28c4"],"about":{"@type":"SoftwareApplication","name":"https://www.reddit.com/r/ufc276hdstreams/comments/vpwks6/watch_ufc_276_free_live_streaming_online_on_reddit/?","applicationCategory":["url"],"identifier":"e26ec785320b02d434410857bc19998b5c0061c77fc5cc0cfd50a2a7e24b28c4"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":1},"behavioralIndicators":{"malicious":0,"suspicious":1},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T471,"\Sessions\1\BaseNamedObjects\Local\!BrowserEmulation!SharedMemory!Mutex" "\Sessions\1\BaseNamedObjects\Local\VERMGMTBlockListFileMutex" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_FILEMAPSWITCH_MUTEX_3380" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_HASHFILESWITCH_MUTEX" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_DOWNLOAD_MUTEX" "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex" "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex" "\Sessions\1\BaseNamedObjects\IsoScope_d34_IE_EarlyTabStart_0xd00_Mutex" "\Sessions\1\BaseNamedObjects\IsoScope_d34_ConnHashTable<3380>_HashTable_Mutex" "\Sessions\1\BaseNamedObjects\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "\Sessions\1\BaseNamedObjects\IsoScope_d34_IESQMMUTEX_0_303" "\Sessions\1\BaseNamedObjects\IsoScope_d34_IESQMMUTEX_0_331" "\Sessions\1\BaseNamedObjects\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}" "Local\InternetShortcutMutex" "{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "IsoScope_d34_IESQMMUTEX_0_519" "Local\ZonesCacheCounterMutex" "IsoScope_d34_ConnHashTable<3380>_HashTable_Mutex" "IsoScope_d34_IESQMMUTEX_0_331" "UpdatingNewTabPageData"28:Tc17,"~DFB542FCD8F67747BA.TMP" has type "data"- Location: [%TEMP%\~DFB542FCD8F67747BA.TMP]- [targetUID: 00000000-00003380] "~DF1F5ED81F640F564E.TMP" has type "data"- Location: [%TEMP%\~DF1F5ED81F640F564E.TMP]- [targetUID: 00000000-00003380] "80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53]- [targetUID: 00000000-00003380] "~DF745DF4EE6CB72B98.TMP" has type "data"- Location: [%TEMP%\~DF745DF4EE6CB72B98.TMP]- [targetUID: 00000000-00003380] "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776]- [targetUID: 00000000-00003380] "~DFE5862DB8AF0AD784.TMP" has type "data"- Location: [%TEMP%\~DFE5862DB8AF0AD784.TMP]- [targetUID: 00000000-00003380] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 4817 bytes 1 file"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00003380] "YWHEQEF8.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\YWHEQEF8.txt]- [targetUID: 00000000-00003496] "B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04]- [targetUID: 00000000-00003496] "WLL7HU9F.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\WLL7HU9F.txt]- [targetUID: 00000000-00003496] "XFX22SR4.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\XFX22SR4.txt]- [targetUID: 00000000-00003380] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00003380] "en-US.4" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\DomainSuggestions\en-US.4]- [targetUID: 00000000-00003380] "imagestore.dat" has type "Unknown"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\imagestore\3mt7jhv\imagestore.dat]- [targetUID: 00000000-00003380] "XMYUMK8M.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\XMYUMK8M.txt]- [targetUID: 00000000-00003380] "VEU9F8ZD.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\VEU9F8ZD.txt]- [targetUID: 00000000-00003380] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157]- [targetUID: 00000000-00003380] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]- [targetUID: 00000000-00003380]29:T248f,"GET /r/ufc276hdstreams/comments/vpwks6/watch_ufc_276_free_live_streaming_online_on_reddit/? HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.reddit.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "GET /desktop2x/vendors~Reddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-components-LargePo~5f1ac562.e1febe5ce10c5bf80c55.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/ufc276hdstreams/comments/vpwks6/watch_ufc_276_free_live_streaming_online_on_reddit/? Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "GET /desktop2x/img/renderTimingPixel.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: https://www.reddit.com/r/ufc276hdstreams/comments/vpwks6/watch_ufc_276_free_live_streaming_online_on_reddit/? Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "GET /desktop2x/js/xads.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.reddit.com/r/ufc276hdstreams/comments/vpwks6/watch_ufc_276_free_live_streaming_online_on_reddit/? Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.redditstatic.com DNT: 1 Connection: Keep-Alive"- [Source: SSL_151.101.1.140] "HTTP/1.1 200 OK Connection: keep-alive Content-Length: 67 Last-Modified: Tue, 29 Mar 2022 23:48:14 GMT ETag: "edc564026997e2cb819c01522780365a" Cache-Control: max-age=604800 Content-Type: image/png Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 02 Jul 2022 17:47:58 GMT Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}"- [Source: SSL_151.101.1.140] "PNG IHDR:~U IDATxcb67|IENDB`"- [Source: SSL_151.101.1.140] "ffa"- [Source: SSL_151.101.1.140] "iw60=9~,2t|&;v/9stXEU,,r^oY,Y$EpxW?so?:u`s%vu:/?zy/vi7v/y,?o"O1(}/@mVsz]Upl 8u~vAZ|\jE4EJ8uQwjY8Vw=[hi#Bs?'|?cgls/j}3ggNY]99nW!}sBO?rioo7/e8BVM[Ts[T- _lvE)jmU_Azn-|=D/Jqz@]vDO%`[nWCDp6lB*qu'SBzJ2<+czh=FSpbb1i7pb+: j ~ 4 =H\j{/!]Ry]B*,:PW[|TP&m8:@!(a`?{_24TpujKHhe\|f=}u '[@q[>._C%=;~.?4O[JpWM];tSe5#MInVM[uO->E7EZh\P?1PGDa*8e%7X]WO_|t /( 2a/ @f_o+p{|?^7TD|^kEzCz^x=i'ovtG`n B{,N3c6n-|Et84eQY4e`]^ssY!sxfcD3| 6f'9%{HI9v5!CAf OGR x=M1_/uQQ ]4u3\E>vi->Qv_dhxwqLs9f|?"V2/_x4L,[.(}D[1%by|h4cGyY+#xp#<*J{?*rEw}!}n9_{Qy`2mO3QS{! a@N&4*S8L " >rW`X)~:&cVlxiof#JMdO)Pr 7^ZsT~7 _|nR}'sx8~n5MBz9$.p8eX3x\ @d"Jpq| V^-S) Gw^{i<=OMgc<OenLN52X,O'3kr JQ J]Xc t! Ify+`bMbuzSCfh];"pP^_;@EH+e:M(+670>m|*rydqac'<5Ss"=BRLOYL;3i U]+q%'l$7Xtf=2+[|rRH?`@K~v<|f)qRB/#YcW<=eg d NMu41oUZ`^(JFGa2LPe!E JD@t_h"TW%`df&!=I4~%h)C et=R\;6<` /d Go(*K|2y/\h/&C%7~eb|4 'Mt5[Yb_s2t7VS0F7;4I'l*0E4$1qO3>SUG/cW@( j"- [Source: SSL_151.101.1.140] , "3006"- [Source: SSL_151.101.1.140] , "eS/!v53YF.p5| Y#ji=&"L1 aNtJ&L9J'g]77\d8g7/_-d\9Wq4->$e0*CH^G&y79sG&IS l1S3chmcX'=9NG?<`TE Q-1x6@193z!t?3"xT{S\Qq9t\*e[\\LD;nBZb9KxZ_jt]Sp|}9V=vUDce@m?IP/m_SJ_BXIuZc|`TG3sq2"{pZIGMO4/*:0#+;6o"Y`v1t*M uw.SH'2-qF0mk(pOnOZq3-aN_'.j TG:,& -Q/1cn=d2Ra.O@Q}(!8XMNEtz^p>[f6R&24Tpb^kkMSV!sNrH:bC:\%]*s,4A|5EG-8h&Kt)wSR$Z>yk0Ip870Nh(Ic3(&cZ&d%v3:=dg2\{N"9.> iHSdK$pvg]L8R0yZW-H>=FXx'y)1X/G=64FP'1QTE`tJ5m@1_l2X2TH i:wVX\sT}7/)$Od%?5}+XgaG$69A4Q6n757AqR{%LLBLGFD9eO.AbvNP"- [Source: SSL_151.101.1.140] , "5FAUK]o=zd(;J|D"LI{0g(W?d79+y}@1va$09="8IhmT Q6*F<*%SW)R`xs%g@YFuJpkjT70C,8z 3w!4t[Rhz)1U,w8'>5=R<18%SqXJrj6h~hPaP<}LYas$t%(iem .^$ lqK8_xjk+:6gTU}&:<3C5i^ ^'nr[x!Nf 38A>E;l<:maC}_HMD+ )%;Zq <\>Sr/y`':*1xZS& c@%Qt "]%sJHue@KLXrEH4<]x2fXl8{-WBJm$u H4bB6* T7U)6(D)4{dT;q)Ty?F^0U_bnS"!Q|JUK"dr9`[N9H:UR<<}hO Svh^li\:GD/p~Gr/)T10HiOF::73NMP3LsR~#f9aX,/5P,l3_c"- [Source: SSL_151.101.1.140] , "%bf74^%IJ*D0*6H" /MqW=PiJ*w"jB"!zxPJU2NMShg8*r{cQ;|GDb+/BeR?5Y@zwpe3DR,c5"w8 O&7 x|Z@O"IHjER+ZV$EjY&UO??.fN(7KN11K"w*B%yem [+u1*nc;s\4%[ W2ebr59~xtf;:n8}+PM+XqV8`]@$BnW;Y,d8MIugHohorJumS4 z!fNuUp&3H5/p*s&*.@x/gwE[\CF[+IuG*alKLv5PRTAYR}w#n^t{X5hoE;=xS@~OokJx3X. {Q!u ;($v$M*UE&J(W:.}qp*LH3s> s'f"K(s @uwRA3eipfGS?S.Q7 -HN$clK#Z8C?1V-(P (`0@OrXeaR~7T_aw!,UB>~ums6zj0`,*p)~?uGgEpF=lDhV;J:WZ*R,J&dS(8K/K'A"lU:V~g'H4?OeG{5d^utYEG\|VWeZ>=9t.{5Fo'I-N&USPHiHJ9V$t6(: \*i9Lr~@Q.Ac[.RfPN'7})8L2uJ0**}aOi-ms[((e@ wI0b"- [Source: SSL_151.101.1.140] , "@1ZtqNT}@N+2*\SS*C Wf%!0lPo"^w#)}:)ZB1k$surM8gNXaiBm[3kH6] |_jNH !h!d_oi61aNj$b"d=vHm+~` %7*I`;y{_,TgGxP'a$<&3+#/-x j&Y1hs:-S}`:l/,#U57nySe"+ 5Bi.a(cZ9%<3(< 1]QlWdeqGZx/P_a2vD_5f;4_E|un'x9\T0@UBBE`S4ATxD-0G)|G'KWC0sHa:zs,d-A2fBDoSMr'MG~cOU8rnXR'QFg!QayO2k)teS>?([$-6IV7jy4{)mLhgDjb>ec^cLMfD"kCHRJ8 0l}+Xu[PDnNs+G;SQKJ6AOi$mV9}R_at`8Sq}e#/QIKgtFR%rI-* kf{9I?x N/YF~Lc'i~f EElWGO90^7' gH!@9xfrp.yN'o;Ez|&L|x|ia*mi@gqOX_>Oh" ^$YcBgXN~ 5.QIZw`I(X%g>Ao,0b)OK()na/46[cgWWVY(s3`k#~#dCETig-m;E$Iyt"- [Source: SSL_151.101.1.140] "[$5N=wO%. O#148&8T:?UOhK[G:+=!UJg;<,3i ^S49~Fa;- ';"ab_k%;FC`VJ-*. qaplJ!2m#4!#?S(i9W3:/!t3=Smgpg*3jh,d`YiJcV4f4CF;@ahI|pDF;Pxs#y2cuu|QBT4dFCXu75%Wb2R9_%x"GKYA)zv F qdflB Y`_ato$\q *=?tE ]mM6&9mDw[a}[?$o)=N|..: ze=q]z![!KS *K)K;1NV$I q-#Vee|Gxig_+fX5+yX XNg- mm+n[qV]+p3X?Q{L{rBJ%`b5}H~Z%k ;C$5BjUACeh&@ySIp+&G iF0"@K( dV]8 u(+3d>2%4lI^6Z"+h>FzepI\)Jl7T&C0rRpnZ& |; D+>rpj8{TRXVuqL3 $PoG)2\$\>N)TBGT:,iGZgdT ~/Op|1=~\dUl@%"%dcdRU^{$[`c~e8g$+t} sew='`)ybm2i.fPi>lIAKy'$Fa&TNY@T|+#DE Pq3s~\mEm+j[QV?nQlD_aST 9,l`i\m6>\6l)GP3J=biBp f^s?rLus2Xzw@]W 0>1X,)Qco`t0jW##s4,@J71E4#(FUy6P85V ;7V)Q|xDc8_EcP"8i>i9n6;s2!Prez^G2+m8IQs[jkzP5);;%>Ms 25E jY8\m5>i<3gw_rHX9xr8x^$|:WmPQjlb;XA7j.8!9MqmX'.Bc$Y|%gmZ+`lG! 2'JCVLa.p2P] af<%ZP^sQi8wowCi!S9o63eILMf!CdN(4a? &FCghuE\Frz9=]fPAF.dMNdMNdMNdMNi`S539XBX(i(1]yEc~O3/PV yC3B\ ms\"d_1<8=c_v#s$UQNL->s\721t"BxD{"I0jNi&)Pfh'GHb!"Q"FWwqPm/A[WYl0%;a*};Z_Rb9N!3N/]~\_%f7j:5QNwOQ3"of1GgNTV`7=RTAtr AJg7`R.3X%iZW[8xpn>].Zz OMxW>JdRFM&7`?Cm>C]&\-$G)ZPce-.%dNHHuf, /Y{GoA,"/JjU:!I":[3]=FKi Ye2?wE_n4X iE>B/ 24(^/ oK-/@W-Qp;|{('q<7uO>gFTz_7o0XP^2JbC &f F3LpdT;SzWlmLS&wJ=8/YriJy 1"- [Source: SSL_151.101.1.140] , "xHigUCoeUlcox7\F%bZ2O':JcGaRy%gsS$6?qxf.{f^$;`;0(QPjj[mA-@pT_kqR0_nQJ^]4zP`LoMkmv2q]d*6a5>x91&$KQ'6C T~"XaTM Uh6WesUt[( *o@RE-o2 y/yTPJ:WrnDK4V0Ag*^cg_ E~E1s?E`5t+3tF380e8fK1-jH$L\}7; dKLufvqe&Z-~}_rRct6F(wnmrQ;`2g pM."+heLeM<.=)oT(Q~@Af*C"- [Source: SSL_151.101.1.140] , ")Vhn#h^fyT7E$(rC[kwM_L%D,S"uIRyC% z00Rr^sG}Uga|BLD&^$WKEwg-f]k9.gAb}&wn1yPr*A,!|/Whq;^HpElg[q y>E;Y+N[P_.9%_UNN)c)uvD rrA99Rz?Lja^b@s(7TNdnjQFAnk\Rl9s+-0AbL+Y|#2*_K 3CxQ7cuGdR vEpW dYC|q%naLvHa !R ?b!2ZLH&hs0L&OLFHB#l;RvbJL*m5SuADR89)xn0nAl/Aw'G8F1n#"%Wul_.ZplPO1+6Hd'qoQ (6!JD:$-7za*JX(!g!SRHCI.|'')4M'^)xsg@whe"- [Source: SSL_151.101.1.140]2a:T564,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:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"e26ec785320b02d434410857bc19998b5c0061c77fc5cc0cfd50a2a7e24b28c4","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1791446884387,"unified_at":"2026-10-08T08:08:04.387Z","metadata":{"hashes":{"sha256":"e26ec785320b02d434410857bc19998b5c0061c77fc5cc0cfd50a2a7e24b28c4","sha1":"996312b094407a320585b7965ad94526a23dc48f","md5":"8802595d2d241935e50aa282714b95e6","sha512":"5739c5086824419e76e1a59a866b94dadff88446215e54d32a3064ecd1b063e355d52528b51c95356cfc38897ecd767d0a20b3bc27ea98ef15bff7c94b38d724","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://www.reddit.com/r/ufc276hdstreams/comments/vpwks6/watch_ufc_276_free_live_streaming_online_on_reddit/?","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1656783928000,"last_seen":1656907306000,"last_multi_scan":1656907306000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":1},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":1},"sandbox_signatures":{"informative_count":8,"suspicious_count":1,"malicious_count":0,"total":9},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-classification","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/","report_link":"https://urlscan.io/result/50722732-77c7-42cf-be43-ec8bda3f48aa/","extra_fields":[{"name":"percent","value":0}]}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Found decrypted SSL traffic"}],"sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts domains","description":"\"www.reddit.com\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"151.101.1.140:443\"\n \"96.7.73.215:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"$27","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$28","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"level":"informative","category":"Network Related","name":"Found decrypted SSL traffic","description":"$29","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"https://www.reddit.com/r/ufc276hdstreams/comments/vpwks6/watch_ufc_276_free_live_streaming_online_on_reddit/\"- [Source: Input]\n Pattern match: \"https://www.reddit.com\"- [Source: Input]\n Pattern match: \"www.reddit.com\"- [Source: PCAP]\n Pattern match: \"https://w3-reporting-nel.reddit.com/reports\"- [Source: SSL_151.101.1.140]\n Pattern match: \"www.redditstatic.com\"- [Source: SSL_151.101.1.140]\n Pattern match: \"https://www.msn.com/spartan/ientpgbconfig?locale=en-us&market=us\"- [Source: SSL_96.7.73.215]","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4817 bytes 1 file\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 151.101.1.140 on port 443 is sent without HTTP header\n TCP traffic to 96.7.73.215 on port 443 is sent without HTTP header","origin":"Network Traffic","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 1 domain and 1 host"}],"sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":37,"imported_dlls_count":120,"dropped_files_count":0,"extracted_files_count":48,"files_written_count":22,"files_deleted_count":0,"registry_keys_created_count":7,"registry_keys_modified_count":0,"registry_keys_deleted_count":1,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":8,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":2,"dns_resolutions_count":1,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"62c08437759a942b5126fba2","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"e26ec785320b02d434410857bc19998b5c0061c77fc5cc0cfd50a2a7e24b28c4.url","analysis_start_time":"2022-07-02T17:45:28+00:00","indicators_count":{"informative":8,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"151.101.1.140","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"address":"96.7.73.215","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]}],"dns_resolutions":[{"domain":"www.reddit.com","address":"151.101.1.140","ttl":10161,"country":"United States","registrar_name":"GANDI SAS","registrar_organization":"Reddit Inc","registrar_name_servers":"NS-1029.AWSDNS-00.ORG","registrar_creation_date":"2005-04-29T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}],"processes":[{"pid":3340,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\e26ec785320b02d434410857bc19998b5c0061c77fc5cc0cfd50a2a7e24b28c4.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00003340","icon":"$2a"},{"pid":3380,"ppid":3340,"name":"iexplore.exe","command_line":"https://www.reddit.com/r/ufc276hdstreams/comments/vpwks6/watch_ufc_276_free_live_streaming_online_on_reddit/?","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003340","uid":"00000000-00003380"},{"pid":3496,"ppid":3380,"name":"iexplore.exe","command_line":"SCODEF:3380 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003380","uid":"00000000-00003496"}],"all_imported_dlls":["ole32.dll","urlmon.dll","bcrypt.dll","sxs.dll","cfgmgr32.dll","WSHTCPIP.DLL","dxgi.dll","ExplorerFrame.dll","msctf.dll","RpcRtRemote.dll","mscoree.dll","d3d10warp.dll","profapi.dll","oleaut32.dll","rpcss.dll","api-ms-win-downlevel-user32-l1-1-0.dll","mlang.dll","rsaenh.dll","deploy.dll","DWrite.dll","MSOHEV.DLL","mscorwks.dll","jp2ssv.dll","t2embed.dll","shlwapi.dll","dwmapi.dll","winnsi.dll","uxtheme.dll","netprofm.dll","msasn1.dll","WindowsCodecs.dll","kernel32.dll","sechost.dll","devobj.dll","setupapi.dll","mshtml.dll","msvcrt.dll","oleaccrc.dll","mscoreei.dll","SensApi.dll","d2d1.dll","api-ms-win-downlevel-version-l1-1-0.dll","ieframe.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","mswsock.dll","fltLib.dll","gpapi.dll","comctl32.dll","ncrypt.dll","oleacc.dll","URLREDIR.DLL","version.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","api-ms-win-core-synch-l1-2-0.dll","ws2_32.dll","netutils.dll","propsys.dll","usp10.dll","nsi.dll","wininet.dll","userenv.dll","sqmapi.dll","secur32.dll","dhcpcsvc.dll","Wldap32.dll","lpk.dll","npmproxy.dll","FWPUCLNT.DLL","jscript9.dll","webio.dll","nlaapi.dll","wkscli.dll","imm32.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","rasadhlp.dll","wshqos.dll","user32.dll","shell32.dll","srvcli.dll","duser.dll","crypt32.dll","winhttp.dll","ssv.dll","gdi32.dll","normaliz.dll","ieui.dll","d3d11.dll","KernelBase.dll","IEShims.dll","comdlg32.dll","ieproxy.dll","dnsapi.dll","msimg32.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","apphelp.dll","dhcpcsvc6.dll","bcryptprimitives.dll","credssp.dll","schannel.dll","msvcr90.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","advapi32.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","wintrust.dll","netapi32.dll","sspicli.dll","cryptbase.dll","imagehlp.dll","msvcr100.dll","iertutil.dll","clbcatq.dll","ntmarta.dll","cryptsp.dll","cryptnet.dll","IPHLPAPI.DLL","dui70.dll","wship6.dll","msimtf.dll","rpcrt4.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"VEU9F8ZD.txt","sha256":"139cfeb2946669cd14547f9d669692ee87af3fe8ad8a53e8984a0a9721c9f59d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"WLL7HU9F.txt","sha256":"f7fedb6921d0b458f5f9bfc295aefca687580f687e6dbcb311f5183e3d73937b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"XFX22SR4.txt","sha256":"b49256220d2d8f4c3d68f1a42c70244d9063e8907a9433c250f75ced4b230554","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"XMYUMK8M.txt","sha256":"ead6897bded244a166db6a31c78cbdd26c03564bfbcf20dd66fc644518834bc0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"YWHEQEF8.txt","sha256":"687ea91a1e84f21e00a39a5312f9ba8b15c2e6e57ca3a153bb87d37ebbcc4ded","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"imagestore.dat","sha256":"3608fa8f30759a514e3edb8b2978e6e85c95abbc929c9cb24a6315616fa42d4b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"161ba7bd24da5be9a28d8a2d8d8bdce3442d1e575cc01e39000b1555281343f2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"3c68a7efae73422a287733b97f73f71c7eb44b07e49677a512c78cd5c08fd429","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"bedb2e35fa8bb9cc16737cd327018afdf38eb7f62732d4905496a0116f5832f6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53","sha256":"152e3d93b83985e22552235d389a296605ee19f371703ad49f7902ff24a98a05","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04","sha256":"8c2a93354740c0803f6888d2b1e609573a68090c10771299f0c8b3907d23c51e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"~DF1F5ED81F640F564E.TMP","sha256":"6038e390611ab9aae8e3605a0ca2c88d221c6753addf041106583d209cf694db","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"~DF745DF4EE6CB72B98.TMP","sha256":"4e71d574a6b73525fed59452f2b874bf4060570e0dadb64d8e6b2b4039c67aa8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"~DFB542FCD8F67747BA.TMP","sha256":"a5b314bdbfcc10d80259f28d070b5b09f09ebed7737bb074c69e1ffc72ed8e9d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"~DFC63A1122A7F4E09D.TMP","sha256":"d050e37c4fc62f334d4d1e4b50f0476d9ad96f768d713e55935f96ff20e5eae8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"~DFE5862DB8AF0AD784.TMP","sha256":"8584613f93ad5a310df7e0507e95b5d044ea621124ffc404f07cf072a7f8ec34","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Medium-1051a531d3e1ee3483a6533158557139-font_1_.woff","sha256":"0191cbe14ade1fe9c80860b60445ec6e1b2694e9dbae70ec8c886a3582ae223a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"CollectionCommentsPage~CommentsPage~Subreddit~SubredditWiki.54c158161a11aa3cbe42_1_.js","sha256":"1201210521a826a87a66a0c6a4b074ce263483dca31ecc0b452ae5e5ae26794d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"search_2_.json","sha256":"19170bd75edc0b5183a2f9fcc3001d9d222deff61e5915ad1127b65ab581a2a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"CollectionCommentsPage~CommentsPage~ModProgressModule~NewCommunityProgress.c8adb8ee9cfa56f80eea_1_.js","sha256":"9cab01f73684209ef6a1ed80f563fcd29a4ed0d7e4527316888e0e5e31efd9bf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Medium-Italic-a25d440012460eb8883e539f93040fa7-font_1_.woff","sha256":"8becec143e829ece508118aa7799e2223289d3a6a22371b3ff4163b76a2a68ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"PostCreation~Reddit~StandalonePostPage~reddit-components-ClassicPost~reddit-components-CompactPost~r~4c415e24.0a6682bdfa0764d58301_1_.js","sha256":"f88e747d4c6a576d27f62662e723332b2417582cb443ae0f622822b875a6a534","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"CollectionCommentsPage~CommentsPage~ModerationPages~PostCreation~ProfileComments~ProfileOverview~Pro~d39c0d57.9226786bd0c21349310c_1_.js","sha256":"e8ad0240a88c006b23bf784fc7f09504ace8e867d70f3b5867678ff530f564af","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"AuthorHovercard~Reddit.5b523f74686e777ae29c_1_.js","sha256":"372b25fbce7a66dfe1cd231b8ead00e8eb9a6a1761aa493db108a60cc4e7ad9f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"TopicLinksContainer.21144914386926962ae7_1_.js","sha256":"46e637490493a5beb1f41f0750da1778b91fe92b1094e34b9bc1de5179e003d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"vendors~Reddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-components-LargePo~5f1ac562.e1febe5ce10c5bf80c55_1_.js","sha256":"d2b03f3bfacc4d2f773fd41f6cb6c563a6ed60ca71d5cc0f654eefb3d54e2f02","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"CollectionCommentsPage~CommentsPage~CountryPage~FramedGild~GildModal~GovernanceReleaseNotesModal~Mem~c8b748a6.b9f3f12fb3a5eedf75ad_1_.js","sha256":"7902cd13a1fa515caee1d7ddc6d24fe855ca6f93601b940c94e952951dcc0fc6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"_FF3909B6-FA1E-11EC-BC94-0800276327CC_.dat","sha256":"b47ec441a67aaa9e90ff2dad8574bfaa513f938f358ad3cff6d695530e3e89d7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Bold-c34ba754b7235b49d33b294ff7a54179-font_1_.woff","sha256":"82ee6ea61b76edbfdb614afe2658b1709d5734a8f81147dc887b1592d6b7a8fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"-core-styles-fonts-ibmplexsans-medium-926e6b23b6_1_.woff","sha256":"926e6b23b6f3776460f3bd0a9db2575f37f3fe56777060d53b3a34ed9d77bfbe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"ChatPost~CollectionCommentsPage~CommentsPage~EconTopAwardersModal~ModQueuePages~ModerationPages~Post~38f39fb8.1272c1ed520c013f34e6_1_.js","sha256":"3443695165f92c9a3ea748f17b64a620111584f7c7b9d9787b0fbba7028f8540","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"vendors~Reddit.9165940cc30a0ddde730_1_.js","sha256":"98a83e87e93827a4bddc5dc1d173bf7bc876f373ae76852f6c568ad0605c153e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Reddit~StandalonePostPage.4c57baf0db60ba57f152_1_.js","sha256":"c039ba280ce32d4188bdb0cacb116f4b1b61be075fb5702df339addc685e0493","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"CommentsPage.13b07c7abb8e716862ec_1_.js","sha256":"76117caf0e45fd4b2b6d090ad1caebab65869b417aaa7a80c1eaf34d60c02766","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Regular-e6bbcdd30d3bd4d6b170bcb6d3552cab-font_1_.woff","sha256":"8839c1f7fe11e9d6ce78bfad758ea96e59d17dd023c16417c0a9b37c59fd81ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"-core-styles-fonts-ibmplexsans-regular-5a469cfacd_1_.woff","sha256":"5a469cfacdbad851846169f6d4d541e27e7ab72aac2451bfbbd9e6d992eba9da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"_508B3FD1-FA1E-11EC-BC94-0800276327CC_.dat","sha256":"bd6c35299c72d4813baf3ac08f0e0af73841f346e0a8de52023a324f0b1e978a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"CollectionCommentsPage~CommentsPage~ProfileComments~ProfileOverview~ProfilePrivate~SearchResults.c986ed7dca125b4e29f6_1_.js","sha256":"405a42e844271618f6e42233cdba3b83a9cdb0dc7e8be928da7673dfbf7f94bd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Governance~Reddit~Subreddit~reddit-components-ClassicPost~reddit-components-CompactPost~reddit-compo~bd4baca2.d5455d735b34ba8e5a9c_1_.js","sha256":"e3caf6871a6b5c627d523a6ec04253d3f5d91271d1d5f60a4b6c6f28b4de5cc4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Bold-Italic-255b4934a1f414dd312aa89382d65114-font_1_.woff","sha256":"42d5eb3c9201b3fe6861b3076e48a4fbd3211e5c5418e3f38710745c8a21a3e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"2b9e281ee06a02abc5f62401c280358172c1f0c7c5fbb7ebc3eb84163e90fb27","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"NewCommentPill.4a6c17b6a26f92e76ab3_1_.js","sha256":"0de73d84adce6c6760cd9f62a33d440af5d5246716611c6e0629ad15d5ef1352","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"-core-styles-fonts-notosans-notosans-49dd5c1e17_1_.woff","sha256":"49dd5c1e178c17bf2a754e3fa3327820c27491d6d690aaf5600714f9ec3c5b09","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Chat~Governance~Reddit.b0e28ae3bc12ec90ef7d_1_.js","sha256":"a2a3f73197d49df290b162c99d8dc733ed8a987f6ae83450fec6615545267c8e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"vendors~Chat~Governance~Reddit.4b5d45fff29d967dc3fa_1_.js","sha256":"db61ff597eb0a28bae22ebad73c9c7185a515f9c2c5c0d8ac5c2f2f88b10efc4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]}],"files_written":[{"path":"%TEMP%\\~DF745DF4EE6CB72B98.TMP","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\YWHEQEF8.txt","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{508B3FD1-FA1E-11EC-BC94-0800276327CC}.dat","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%TEMP%\\~DFE5862DB8AF0AD784.TMP","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{508B3FCF-FA1E-11EC-BC94-0800276327CC}.dat","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"key":"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\TCPIP\\PARAMETERS\\","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\VERSIONMANAGER\\","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TABBEDBROWSING\\NEWTABPAGE\\","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"key":"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SECURITYPROVIDERS\\SCHANNEL\\","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TABBEDBROWSING\\NEWTABPAGE\\MFV\\MFV","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3380","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_d34_IE_EarlyTabStart_0xd00_Mutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_d34_ConnHashTable<3380>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_d34_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_d34_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"IsoScope_d34_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"IsoScope_d34_ConnHashTable<3380>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"IsoScope_d34_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"IsoScope_d34_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"IsoScope_d34_IE_EarlyTabStart_0xd00_Mutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3380","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_d34_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"IsoScope_d34_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_d34_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"62c08437759a942b5126fba2"}]}]}},"report_ids":{"sandbox_job_ids":["62c08437759a942b5126fba2"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample e26ec785320b… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample e26ec785320b…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/e26ec785320b02d434410857bc19998b5c0061c77fc5cc0cfd50a2a7e24b28c4"}],["$","meta","4",{"property":"og:title","content":"Sample e26ec785320b… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample e26ec785320b…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/e26ec785320b02d434410857bc19998b5c0061c77fc5cc0cfd50a2a7e24b28c4"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample e26ec785320b… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample e26ec785320b…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2b","11",{}]]