26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2c:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T41c,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample e52bf5df438a… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample e52bf5df438a…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/e52bf5df438a617840cfe0c8af80386339928faba94073b6159cc41041b46ac3","keywords":["malware analysis","sandbox report","threat intelligence","e52bf5df438a617840cfe0c8af80386339928faba94073b6159cc41041b46ac3"],"about":{"@type":"SoftwareApplication","name":"https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07","applicationCategory":["url"],"identifier":"e52bf5df438a617840cfe0c8af80386339928faba94073b6159cc41041b46ac3"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":3},"behavioralIndicators":{"malicious":0,"suspicious":1},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T478,"\Sessions\1\BaseNamedObjects\Local\!BrowserEmulation!SharedMemory!Mutex" "\Sessions\1\BaseNamedObjects\Local\VERMGMTBlockListFileMutex" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_FILEMAPSWITCH_MUTEX_3824" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_HASHFILESWITCH_MUTEX" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_DOWNLOAD_MUTEX" "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex" "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex" "\Sessions\1\BaseNamedObjects\IsoScope_ef0_IE_EarlyTabStart_0xde8_Mutex" "\Sessions\1\BaseNamedObjects\IsoScope_ef0_ConnHashTable<3824>_HashTable_Mutex" "\Sessions\1\BaseNamedObjects\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "\Sessions\1\BaseNamedObjects\IsoScope_ef0_IESQMMUTEX_0_303" "\Sessions\1\BaseNamedObjects\IsoScope_ef0_IESQMMUTEX_0_331" "\Sessions\1\BaseNamedObjects\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}" "Local\InternetShortcutMutex" "IsoScope_ef0_IESQMMUTEX_0_519" "Local\!BrowserEmulation!SharedMemory!Mutex" "{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "Local\ZonesLockedCacheCounterMutex" "Local\URLBLOCK_DOWNLOAD_MUTEX" "IsoScope_ef0_IESQMMUTEX_0_303"28:T9c4,"urlblockindex_1_.bin" has type "data"- [targetUID: N/A] "commons.db468fc883b8d828ffc3_1_.js" has type "UTF-8 Unicode text with very long lines with escape sequences"- [targetUID: N/A] "package.3b1343a7510d86aba6c6_1_.js" has type "data"- [targetUID: N/A] "styles.6c0e5ac9b5d336e8ea71_1_.css" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "68747470733a2f2f692e696d6775722e636f6d2f774d58724678632e676966_1_.gif" has type "GIF image data version 89a 800 x 400"- [targetUID: N/A] "urlref_httpswww.npmjs.compackagecuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07" has type "HTML document UTF-8 Unicode text with very long lines"- [targetUID: N/A] "cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07_1_.htm" has type "HTML document UTF-8 Unicode text with very long lines"- [targetUID: N/A] "minicssextractbug.eb2a67c500ddbc231d10_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "N0bX2SlFPv1weGeLZDtgJv7U_1_.woff" has type "Web Open Font Format TrueType length 20408 version 1.1"- [targetUID: N/A] "en-US.4" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\DomainSuggestions\en-US.4]- [targetUID: 00000000-00003824] "RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "~DFC6426C922C034736.TMP" has type "data"- Location: [%TEMP%\~DFC6426C922C034736.TMP]- [targetUID: 00000000-00003824] "~DF3170700804E292C2.TMP" has type "data"- Location: [%TEMP%\~DF3170700804E292C2.TMP]- [targetUID: 00000000-00003824] "~DF16D8708A4B8669B5.TMP" has type "data"- Location: [%TEMP%\~DF16D8708A4B8669B5.TMP]- [targetUID: 00000000-00003824] "~DF88EA7D41DB3A2894.TMP" has type "data"- Location: [%TEMP%\~DF88EA7D41DB3A2894.TMP]- [targetUID: 00000000-00003824] "6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7j_1_.woff" has type "Web Open Font Format TrueType length 16156 version 1.1"- [targetUID: N/A] "6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdo_1_.woff" has type "Web Open Font Format TrueType length 16116 version 1.1"- [targetUID: N/A] "6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdo_1_.woff" has type "Web Open Font Format TrueType length 16084 version 1.1"- [targetUID: N/A] "imagestore.dat" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\imagestore\3mt7jhv\imagestore.dat]- [targetUID: 00000000-00003824] "pxiByp8kv8JHgFVrLEj6Z1xlEw_1_.woff" has type "Web Open Font Format TrueType length 10604 version 1.1"- [targetUID: N/A]29:T24fc,Found requests in header "GET /package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07 HTTP/1.1Accept: text/html, application/xhtml+xml, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.npmjs.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /styles.6c0e5ac9b5d336e8ea71.css HTTP/1.1Accept: text/css, */*Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: static.npmjs.comDNT: 1Connection: Keep-AliveCookie: __cf_bm=wZ.TQeNfcsqjhkCbnmDh38VLsILsFp.AJAlO8kDWuVE-1680649054-0-ASELZjUKG+S4EgOXTNtNwuvcjVChNl8DLOLWRTAZuJ2gjJheg5tEJVc5yiJSiwYfCn9Xr3WD3IGtKSyHdqSeXTc=; __cfruid=9ec88eee25a11db16611cbefcd65d61a46eb0f81-1680649054"; in File: "SSL") Found requests in header "GET /minicssextractbug.eb2a67c500ddbc231d10.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: static.npmjs.comDNT: 1Connection: Keep-AliveCookie: __cf_bm=wZ.TQeNfcsqjhkCbnmDh38VLsILsFp.AJAlO8kDWuVE-1680649054-0-ASELZjUKG+S4EgOXTNtNwuvcjVChNl8DLOLWRTAZuJ2gjJheg5tEJVc5yiJSiwYfCn9Xr3WD3IGtKSyHdqSeXTc=; __cfruid=9ec88eee25a11db16611cbefcd65d61a46eb0f81-1680649054"; in File: "SSL") Found requests in header "GET /npm-avatar/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdmF0YXJVUkwiOiJodHRwczovL3MuZ3JhdmF0YXIuY29tL2F2YXRhci81MDRlYjAyOWUyMzQxMGVhODRhMTc0ZTM1NWM3NjYxYT9zaXplPTEwMCZkZWZhdWx0PXJldHJvIn0.0c1WLqls7eDItL3Sx-C4pbxFnPIvLHWYHck9kBBpsRA HTTP/1.1Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.npmjs.comDNT: 1Connection: Keep-AliveCookie: __cf_bm=wZ.TQeNfcsqjhkCbnmDh38VLsILsFp.AJAlO8kDWuVE-1680649054-0-ASELZjUKG+S4EgOXTNtNwuvcjVChNl8DLOLWRTAZuJ2gjJheg5tEJVc5yiJSiwYfCn9Xr3WD3IGtKSyHdqSeXTc=; __cfruid=9ec88eee25a11db16611cbefcd65d61a46eb0f81-1680649054"; in File: "SSL") Found requests in header "GET /commons.db468fc883b8d828ffc3.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: static.npmjs.comDNT: 1Connection: Keep-AliveCookie: __cf_bm=wZ.TQeNfcsqjhkCbnmDh38VLsILsFp.AJAlO8kDWuVE-1680649054-0-ASELZjUKG+S4EgOXTNtNwuvcjVChNl8DLOLWRTAZuJ2gjJheg5tEJVc5yiJSiwYfCn9Xr3WD3IGtKSyHdqSeXTc=; __cfruid=9ec88eee25a11db16611cbefcd65d61a46eb0f81-1680649054"; in File: "SSL") Found requests in header "GET /ab751523d7e1c184769f74eae2b8969f.css HTTP/1.1Accept: text/css, */*Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: static.npmjs.comDNT: 1Connection: Keep-AliveCookie: __cf_bm=wZ.TQeNfcsqjhkCbnmDh38VLsILsFp.AJAlO8kDWuVE-1680649054-0-ASELZjUKG+S4EgOXTNtNwuvcjVChNl8DLOLWRTAZuJ2gjJheg5tEJVc5yiJSiwYfCn9Xr3WD3IGtKSyHdqSeXTc=; __cfruid=9ec88eee25a11db16611cbefcd65d61a46eb0f81-1680649054"; in File: "SSL") Found requests in header "GET /package/package.3b1343a7510d86aba6c6.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: static.npmjs.comDNT: 1Connection: Keep-AliveCookie: __cf_bm=wZ.TQeNfcsqjhkCbnmDh38VLsILsFp.AJAlO8kDWuVE-1680649054-0-ASELZjUKG+S4EgOXTNtNwuvcjVChNl8DLOLWRTAZuJ2gjJheg5tEJVc5yiJSiwYfCn9Xr3WD3IGtKSyHdqSeXTc=; __cfruid=9ec88eee25a11db16611cbefcd65d61a46eb0f81-1680649054"; in File: "SSL") Found requests in header "GET /b0f1a8318363185cc2ea6a40ac23eeb2.png HTTP/1.1Accept: */*Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoHost: static.npmjs.comDNT: 1Connection: Keep-AliveCookie: __cf_bm=wZ.TQeNfcsqjhkCbnmDh38VLsILsFp.AJAlO8kDWuVE-1680649054-0-ASELZjUKG+S4EgOXTNtNwuvcjVChNl8DLOLWRTAZuJ2gjJheg5tEJVc5yiJSiwYfCn9Xr3WD3IGtKSyHdqSeXTc=; __cfruid=9ec88eee25a11db16611cbefcd65d61a46eb0f81-1680649054"; in File: "SSL") Found requests in header "GET /6814b935c358c4be8cacb19b32cdc40cf9738f7d350676988d0e93614fee4252/68747470733a2f2f692e696d6775722e636f6d2f774d58724678632e676966?profile=RESIZE_710x HTTP/1.1Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: camo.githubusercontent.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /css?family=Source+Sans+Pro:300,400,600 HTTP/1.1Accept: text/css, */*Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: fonts.googleapis.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /css?family=Poppins:400,500,600 HTTP/1.1Accept: text/css, */*Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: fonts.googleapis.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /css?family=Fira+Mono HTTP/1.1Accept: text/css, */*Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: fonts.googleapis.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlEw.woff HTTP/1.1Accept: */*Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.npmjs.comAccept-Encoding: gzip, deflateHost: fonts.gstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlEw.woff HTTP/1.1Accept: */*Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.npmjs.comAccept-Encoding: gzip, deflateHost: fonts.gstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7j.woff HTTP/1.1Accept: */*Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.npmjs.comAccept-Encoding: gzip, deflateHost: fonts.gstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfedA.woff HTTP/1.1Accept: */*Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.npmjs.comAccept-Encoding: gzip, deflateHost: fonts.gstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdo.woff HTTP/1.1Accept: */*Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.npmjs.comAccept-Encoding: gzip, deflateHost: fonts.gstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdo.woff HTTP/1.1Accept: */*Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.npmjs.comAccept-Encoding: gzip, deflateHost: fonts.gstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /s/firamono/v14/N0bX2SlFPv1weGeLZDtgJv7U.woff HTTP/1.1Accept: */*Referer: https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.npmjs.comAccept-Encoding: gzip, deflateHost: fonts.gstatic.comDNT: 1Connection: Keep-Alive"; in File: "SSL")2a:T2369,Pattern match: "https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07" Pattern match: "https://www.npmjs.com" Pattern match: "https://fonts.gstatic.com/s/firamono/v14/N0bX2SlFPv1weGeLZDtgJv7U.woff" Pattern match: "https://static.npmjs.com/styles.6c0e5ac9b5d336e8ea71.css" Pattern match: "https://static.npmjs.com/338e4905a2684ca96e08c7780fc68412.png/" Pattern match: "https://static.npmjs.com/osd.xml" Pattern match: "https://docs.npmjs.com" Pattern match: "https://yourmovie.online/img09" Pattern match: "http://www.w3.org/2000/svg" Pattern match: "https://static.npmjs.com/minicssextractbug.eb2a67c500ddbc231d10.js" Pattern match: "https://static.npmjs.com/package/package.3b1343a7510d86aba6c6.js" Pattern match: "SUIDMmicrosoft.com/921624588565763102506974983645831024952*SRCHDAF=NOFORMmicrosoft.com/102433237894403108561027971357230938743*SRCHUIDV=2&GUID=426377958C8445E3B4EA69482BD0E747&dmnchg=1microsoft.com/102433237894403108561027971357230938743*SRCHUSRDOB=2022013" Pattern match: "isdomainmigratedtruewww.msn.com/102534847653123106117875343020831024952*" Pattern match: "www.msn.com/" Pattern match: "SUIDMmicrosoft.com/921624588565763102506974983645831024952*MUID2B11848B98D664153EAA966299526596microsoft.com/102525913457923110342374999270831024952*SRCHDAF=NOFORMmicrosoft.com/102433237894403108561027971357230938743*SRCHUIDV=2&GUID=426377958C8445E3B4EA694" Pattern match: "https://static.npmjs.com/;var" Heuristic match: "camo.githubusercontent.com" Pattern match: "http://jedwatson.github.io/classnames" Pattern match: "http://feross.org" Heuristic match: "static.npmjs.com" Pattern match: "https://lodash.com/" Pattern match: "https://openjsf.org/" Pattern match: "https://lodash.com/license" Pattern match: "http://underscorejs.org/LICENSE" Pattern match: "www.npmjs.com" Pattern match: "https://reactjs.org/docs/error-decoder.html?invariant=+e,n=1;n" Pattern match: "https://fb.me/react-polyfills" Pattern match: "https://docs.npmjs.com/configuring-two-factor-authentication},two-factor" Pattern match: "https://static.npmjs.com/ab751523d7e1c184769f74eae2b8969f.css},1648:function(e,t,a){e.exports={fileExplorer:_5ae7dfec,srOnly:_34c14f2e,treeList:_6b5f01e6" Pattern match: "https://fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdo.woff" Pattern match: "https://fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7j.woff" Pattern match: "https://fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdo.woff" Pattern match: "https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600" Pattern match: "https://fonts.googleapis.com/css?family=Fira+Mono" Pattern match: "https://fonts.googleapis.com/css?family=Poppins:400,500,600" Pattern match: "http://tachyons.io" Pattern match: "github.com/necolas/normalize.css" Pattern match: "https://www.figma.com/file/qewGdfS6NAH5yOR3gKtWK9/?node-id=3%3A41" Pattern match: "www.npmjs.comDNT" Pattern match: "https://static.npmjs.com/abf53a31b2da4657a1a004ee9358551c.png" Pattern match: "https://checkout.stripe.com" Pattern match: "https://static.npmjs.com/3dc2ca3d2e53fc894b904d917cf90015.png" Pattern match: "https://static.npmjs.com/c07230a8959706cf638a847c59a2ab2b.svg" Pattern match: "https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07Accept-Language" Pattern match: "https://www.gravatar.com/avatar/504eb029e23410ea84a174e355c7661a?size=100&default=retro" Pattern match: "https://static.npmjs.com/ca1922cf6824a157752008094d1e9627.svg" Pattern match: "https://static.npmjs.com/57b6941f444dfaaa86fe6eb2a8241130.svg" Pattern match: "https://static.npmjs.com/77a1975e9c223b408cb31330b6a965df.svg" Pattern match: "https://static.npmjs.com/bc0fd45a2d3dc8827bc30618ae03cd62.svg" Pattern match: "https://github.com/primer/github-syntax-theme-generator/blob/master/LICENSE" Pattern match: "npmjs.com/921714571699231024973402105375431024951*" Pattern match: "MUID058241C05C746C5C0D2653295D386D49msn.com/102525913457923110342375343020831024952*" Pattern match: "SUIDMmicrosoft.com/921624588565763102506974983645831024952*MUID2B11848B98D664153EAA966299526596microsoft.com/102525913457923110342374999270831024952*_EDGE_V1microsoft.com/921625913457923110342374999270831024952*SRCHDAF=NOFORMmicrosoft.com/10243323789440310" Pattern match: "MUIDB2B11848B98D664153EAA966299526596ieonline.microsoft.com/921625913457923110342374999270831024952*" Pattern match: "https://fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfedA.woff" Pattern match: "https://fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlEw.woff" Pattern match: "https://fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlEw.woff" Pattern match: "https://github.com" Pattern match: "https://csp.withgoogle.com/csp/apps-themesCross-Origin-Resource-Policy" Heuristic match: "ww.npmjs.com" Pattern match: "www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07" Pattern match: "http://www.windows.com/pctv" Pattern match: "http://go.microsoft.com/fwlink/?linkid=53081" Pattern match: "www.microsoft.com/extender/help" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=30564-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwl" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=70599" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=145837" Pattern match: "http://go.microsoft.com/fwlink/?LinkID=57190" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=145765" Heuristic match: "Example: computer.fabrikam.com" Pattern match: "vista.gallery.microsoft.com/vista/SideShow.aspx" Pattern match: "http://www.icra.org/vocabulary/" Pattern match: "wmploc.dll/Offline_Buy.htm'res://wmploc.dll/Offline_MediaGuide.htm*res://wmploc.dll/Offline_Subscriptions.htm" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=32146res://wmploc.dll/ICW_ErrorPage.htm" Pattern match: "wmploc.dll/Service_Initial.htm" Pattern match: "wmploc.dll/Error_ServiceInfo.htm'res://wmploc.dll/Offline_InfoCenter.htm&res://wmploc.dll/Offline_AlbumInfo.htm" Pattern match: "wmploc.dll/Service_NoFunc.htm%res://wmploc.dll/Service_No_Local.htm" Pattern match: "wmploc.dll/RT_IMAGE/ServiceLarge.png*res://wmploc.dll/RT_IMAGE/ServiceSmall.png*res://wmploc.dll/RT_IMAGE/ServiceSmall.png" Pattern match: "wmploc.dll/Blocked_AlbumInfo.htm&res://wmploc.dll/Blocked_AlbumInfo.htm,http://go.microsoft.com/fwlink/?LinkId=70183'res://wmploc.dll/offline_radioguide.htm" Pattern match: "http://images.metaservices.microsoft.com/cover/6http://redir.metaservices.microsoft.com/redir/buynow/" Pattern match: "redir.metaservices.microsoft.com/dvdcover/P" Pattern match: "http://redir.metaservices.microsoft.com/redir/buynow/" Pattern match: "http://windowsmedia.com/redir/findmedia.asp" Pattern match: "redir.metaservices.microsoft.com/redir/getmdrdvd/" Pattern match: "redir.metaservices.microsoft.com/redir/getmdrcd/?Bhttp://redir.metaservices.microsoft.com/redir/getmdrcdbackground/??http://redir.metaservices.microsoft.com/redir/getmdrcdposturl/?Ihttp://redir.metaservices.microsoft.com/redir/getmdrcdposturlbackground/?=h" Pattern match: "redir.metaservices.microsoft.com/redir/submittoc/?-http://windowsmedia.com/redir/QueryTOCExt.asp1res://wmploc.dll/Offline_MediaInfo_NowPlaying.htm7http://redir.metaservices.microsoft.com/redir/buynowmg/,http://windowsmedia.com/redir/buyticket9.asp" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=321507Optimized" Pattern match: "http://go.microsoft.com/fwlink/?linkid=8792" Pattern match: "http://redir.metaservices.microsoft.com/redir/mediaguide/?9http://redir.metaservices.microsoft.com/redir/radiotuner/,http://windowsmedia.com/redir/QueryTOCNP.asp#Show" Pattern match: "http://windowsmedia.com/redir/services.asp?WMPFriendly=true" Pattern match: "http://www.microsoft.com/windows/windowsmedia/musicservices.aspx?http://redir.metaservices.microsoft.com/redir/allservices/?sv=2?http://redir.metaservices.microsoft.com/redir/allservices/?sv=3?http://redir.metaservices.microsoft.com/redir/allservices/?sv=5" Pattern match: "http://www.w3.org/1999/XSL/Transform" Pattern match: "http://*.microsoft.co.jp" Pattern match: "http://microsoft.*.com" Pattern match: "www.treyresearch.net" Pattern match: "http://treyresearch.net" Heuristic match: "- fineartschool.net" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=226247" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=233329" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=228745" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=787651" Heuristic match: "GridParent.Height = Grid.Height + Grid.Top" Pattern match: "http://www.w3.org/2001/XMLSchema" Pattern match: "http://www.iec.ch" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=121315" Pattern match: "http://go.microsoft.com/fwlink/p/?LinkId=255142"2b:T584,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1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"e52bf5df438a617840cfe0c8af80386339928faba94073b6159cc41041b46ac3","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1790985923452,"unified_at":"2026-10-03T00:05:23.452Z","metadata":{"hashes":{"sha256":"e52bf5df438a617840cfe0c8af80386339928faba94073b6159cc41041b46ac3","sha1":"1334a300ca22852fa0a946ca08d470843ee9e05e","md5":"05c91eb665469bc53d78335b209a1ec1","sha512":"6c11f9196b98b36c5942ec62c6732d3b2bcb62b0e3c82ff9a8b6b744012c93e69f937529dac494509fb0d540575912b00e68741b0ea5a185ab25495e05b2ebd2","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1680648924000,"last_seen":1680648924000,"last_multi_scan":1680648924000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":3},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":4},"sandbox_signatures":{"informative_count":9,"suspicious_count":1,"malicious_count":0,"total":10},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"cleandns":{"name":"CleanDNS","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"CleanDNS","permalink":"https://www.cleandns.com/","extra_fields":[{"name":"domain","value":"npmjs.com"},{"name":"percent","value":0},{"name":"reports_count","value":0}]},"scamadviser":{"name":"ScamAdviser","success":true,"verdict":"clean","status":"clean","progress":100,"data_source":"ScamAdviser","permalink":"https://www.scamadviser.com/?utm_source=hybridanalysis","report_link":"https://www.scamadviser.com/check-website/npmjs.com?utm_source=hybridanalysis","extra_fields":[{"name":"domain","value":"npmjs.com"},{"name":"percent","value":0}]},"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-classification","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/","report_link":"https://urlscan.io/result/de73635a-d9f7-415a-b5af-d8e7553235be/","extra_fields":[{"name":"percent","value":0}]}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Contacts server"},{"type":"informative","value":"Found potential URL in binary/memory"},{"type":"informative","value":"Found potential IP address in binary/memory"}],"sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"tactic":"Command and Control","technique":"DNS","attack_id":"T1071.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/004","identifiers":[{"type":"informative","value":"Queries DNS server"}],"sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"tactic":"Command and Control","technique":"Web Protocols","attack_id":"T1071.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/001","identifiers":[{"type":"informative","value":"Communicates with HTTPS webserver (GET/POST requests)"}],"sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"suspicious","value":"Drops script (vb/js) files"},{"type":"informative","value":"Dropped files"}],"sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts server","description":"\"104.16.92.83:443\"\n \"185.199.111.133:443\"\n \"142.250.189.202:443\"\n \"142.250.72.195:443\"","origin":"Network Traffic","mitre_attack_id":"T1071","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"$27","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"\"

Cmo puedes ver las pelculas de Batman en YouTube?

\" (Indicator: \"youtube\")\n \"

Puedes suscribirte al servicio de paga de YouTube para acceder a contenido exclusivo que jams has imaginado. Los tres primeros meses son gratis.

\" (Indicator: \"youtube\")\n \"

YouTube es una de las pginas de curadura de clsicos ms populares en la red. El sitio est dedicado por completo a la distribucin de pelculas de libre acceso, liberadas de derechos de autor.

\" (Indicator: \"youtube\")\n \"

Por ejemplo, su catlogo de cine mudo es excepcional. Lo mejor de todo? Puedes ver las pelculas 'Batman' desde YouTube, por lo que navegar es sencillsimo.

\" (Indicator: \"youtube\")","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"level":"informative","category":"General","name":"Queries DNS server","description":"\"camo.githubusercontent.com\"\n \"static.npmjs.com\"\n \"www.npmjs.com\"","origin":"Network Traffic","mitre_attack_id":"T1071.004","relevance":1,"id":"network-51","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$28","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"level":"informative","category":"Network Related","name":"Communicates with HTTPS webserver (GET/POST requests)","description":"$29","origin":"File/Memory","mitre_attack_id":"T1071.001","relevance":1,"id":"string-505","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"level":"informative","category":"Network Related","name":"Found potential IP address in binary/memory","description":"Potential IP \"1.0.0.0\" found in string \"Microsoft.Windows.IsolationAutomation,processorArchitecture=\"x86\",publicKeyToken=\"6595b64144ccf1df\",type=\"win32\",version=\"1.0.0.0\"C:\\Windows\\WinSxS\\manifests\\x86_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.0.0_none_35d357a66c38ade4.manifest\"\n Potential IP \"5.1.0.0\" found in string \"Microsoft.Windows.Shell.rundll32,processorArchitecture=\"x86\",type=\"win32\",version=\"5.1.0.0\"C:\\Windows\\system32\\RunDll32.exe\"\n Potential IP \"5.1.0.0\" found in string \"Microsoft.Windows.InetCore.ieframe,processorArchitecture=\"x86\",type=\"win32\",version=\"5.1.0.0\"C:\\Windows\\system32\\IEFRAME.dll\"\n Potential IP \"5.1.0.0\" found in string \"version=\"5.1.0.0\"\"\n Potential IP \"1.0.1.6\" found in string \"1.0.1.6 (vbl_wcp_d2_drivers.060616-1619)\"\n Potential IP \"1.0.0.0\" found in string \"1.0.0.0,2006\"\n Potential IP \"157.54.23.41\" found in string \"ftp://157.54.23.41/\"\n Potential IP \"1.01.2.70\" found in string \"1.01.2.70 (fbl_dox_dev_ihvs.090312-0417)\"\n \"1.01.2.70\"","origin":"File/Memory","mitre_attack_id":"T1071","relevance":3,"id":"string-14","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$2a","origin":"File/Memory","mitre_attack_id":"T1071","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"level":"suspicious","category":"Installation/Persistence","name":"Drops script (vb/js) files","description":"\"commons.db468fc883b8d828ffc3_1_.js\" has type \"UTF-8 Unicode text with very long lines with escape sequences\"- [targetUID: N/A]\n \"package.3b1343a7510d86aba6c6_1_.js\" has type \"data\"- [targetUID: N/A]\n \"minicssextractbug.eb2a67c500ddbc231d10_1_.js\" has type \"ASCII text with very long lines\"- [targetUID: N/A]","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-40","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 3 domains and 3 hosts"}],"sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":35,"imported_dlls_count":119,"dropped_files_count":0,"extracted_files_count":42,"files_written_count":28,"files_deleted_count":0,"registry_keys_created_count":13,"registry_keys_modified_count":0,"registry_keys_deleted_count":3,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":16,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":4,"dns_resolutions_count":3,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment"],"sandbox_reports":[{"id":"642caadbe9efcb2d720b342e","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["NLD","USA"],"submit_name":"e52bf5df438a617840cfe0c8af80386339928faba94073b6159cc41041b46ac3.url","analysis_start_time":"2023-04-04T22:55:24+00:00","indicators_count":{"informative":9,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"104.16.92.83","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"address":"185.199.111.133","port":443,"protocol":"TCP","country":"Netherlands","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"address":"142.250.189.202","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"address":"142.250.72.195","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]}],"dns_resolutions":[{"domain":"camo.githubusercontent.com","address":"185.199.111.133","ttl":1542,"country":"Netherlands","registrar_name":"MarkMonitor, Inc.","registrar_organization":"GitHub, Inc.","registrar_name_servers":"NS-1411.AWSDNS-48.ORG","registrar_creation_date":"2014-02-06T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"domain":"static.npmjs.com","address":"104.16.92.83","ttl":237,"country":"United States","registrar_name":"DYNAMIC NETWORK SERVICES, INC","registrar_organization":"npm, Inc.","registrar_name_servers":"NS1.P05.DYNECT.NET","registrar_creation_date":"2010-03-19T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"domain":"www.npmjs.com","address":"104.16.92.83","ttl":300,"country":"United States","registrar_name":"DYNAMIC NETWORK SERVICES, INC","registrar_organization":"npm, Inc.","registrar_name_servers":"NS1.P05.DYNECT.NET","registrar_creation_date":"2010-03-19T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}],"processes":[{"pid":3224,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\e52bf5df438a617840cfe0c8af80386339928faba94073b6159cc41041b46ac3.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00003224","icon":"$2b"},{"pid":3824,"ppid":3224,"name":"iexplore.exe","command_line":"https://www.npmjs.com/package/cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003224","uid":"00000000-00003824"},{"pid":3372,"ppid":3824,"name":"iexplore.exe","command_line":"SCODEF:3824 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003824","uid":"00000000-00003372"}],"all_imported_dlls":["propsys.dll","jscript9.dll","shlwapi.dll","fltLib.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","urlmon.dll","netutils.dll","srvcli.dll","cfgmgr32.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","FWPUCLNT.DLL","ole32.dll","sxs.dll","mlang.dll","winhttp.dll","wshqos.dll","gpapi.dll","dwmapi.dll","apphelp.dll","ieframe.dll","wship6.dll","netapi32.dll","mscoree.dll","gdi32.dll","npmproxy.dll","profapi.dll","sechost.dll","crypt32.dll","msvcrt.dll","bcrypt.dll","cryptsp.dll","msimg32.dll","mscorwks.dll","ssv.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","IPHLPAPI.DLL","mscoreei.dll","rpcss.dll","mswsock.dll","nlaapi.dll","ncrypt.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","dxgi.dll","api-ms-win-downlevel-version-l1-1-0.dll","api-ms-win-core-synch-l1-2-0.dll","imagehlp.dll","KernelBase.dll","dhcpcsvc.dll","IEShims.dll","webio.dll","d3d10warp.dll","WindowsCodecs.dll","oleacc.dll","setupapi.dll","userenv.dll","devobj.dll","jp2ssv.dll","lpk.dll","ieproxy.dll","msasn1.dll","mshtml.dll","ws2_32.dll","rsaenh.dll","imm32.dll","ntmarta.dll","usp10.dll","rasadhlp.dll","duser.dll","msvcr90.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","wininet.dll","bcryptprimitives.dll","wintrust.dll","msvcr100.dll","api-ms-win-downlevel-user32-l1-1-0.dll","secur32.dll","dui70.dll","oleaut32.dll","d2d1.dll","DWrite.dll","URLREDIR.DLL","rpcrt4.dll","normaliz.dll","wkscli.dll","dnsapi.dll","shell32.dll","ieui.dll","advapi32.dll","msctf.dll","nsi.dll","comdlg32.dll","sqmapi.dll","ExplorerFrame.dll","xmllite.dll","RpcRtRemote.dll","deploy.dll","version.dll","user32.dll","Wldap32.dll","msimtf.dll","iertutil.dll","cryptbase.dll","comctl32.dll","uxtheme.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","clbcatq.dll","oleaccrc.dll","d3d11.dll","WSHTCPIP.DLL","dhcpcsvc6.dll","UIAnimation.dll","kernel32.dll","sspicli.dll","credssp.dll","schannel.dll","MSOHEV.DLL","winnsi.dll","netprofm.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"favicon_2_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"AIS1LC12.txt","sha256":"44dda3ffee0696cb48fe291c67e3228ee1d220c26937c33ba6dd21b8eb2e8293","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"BOLXAURB.txt","sha256":"e177f9a66527c58ad131e80cdf92d6501395140dd9e87965544f5b594fcaea63","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"GG73P062.txt","sha256":"8c950117b59dddeca680d86001c96f4a01a0a3849b8e78fb06b3b0587f95bc41","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"L55JIDD7.txt","sha256":"f66c8d20b2cbfe8a1a8f6b0a0a5ef84be6c8c0c5ed7c7f9e8e74f28a12d5d323","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"LO2P11NG.txt","sha256":"8ae6792e69c4fad69afa31ad7f8ded82f439f7f070481d1c3bebffd9024f3e4e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"N4JPNKZQ.txt","sha256":"a190e14cba16231f6c7fea32c7399b35ad5366769344252345ce20d3fa107907","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"PM3R5JNU.txt","sha256":"8558430863f6ee4248d13db88f905ea63a0d7d283199a7f1b3ab1447edfccc90","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"VLS3G3X9.txt","sha256":"1e2291c9b515ec3030279129a8f6a36bad6fe9c5cc694dd97c2757e428ddd27e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"imagestore.dat","sha256":"0b9c6e204b9300160a1e856047c49eac81c6f22fd6c7a0c78300feb5f5539206","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"~DF16D8708A4B8669B5.TMP","sha256":"3e655914fb3112dc73f67acc700857e84bf85953651513a231950fa34db85b73","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"~DF3170700804E292C2.TMP","sha256":"c66947c81017e8f0c22130afa82c986e38e4ea148dff2247f7d04862763c7946","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"~DF88EA7D41DB3A2894.TMP","sha256":"5100a67eacf627aa2af44b1068d196addca1eddf26585c2e7c988ca4311e147f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"~DFC6426C922C034736.TMP","sha256":"350ec2a5db3e69be78e2532d0ce203c36ef37524725675dc229bedf7d4c7a6fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"commons.db468fc883b8d828ffc3_1_.js","sha256":"3aae0e3f0abb66b9b1a1d0f1eb0704b577a0d207d31a2197af03f2a9a9a48a41","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"package.3b1343a7510d86aba6c6_1_.js","sha256":"c5aee2fa5254e19b0b65c8b3a7310fe81079963e3dec6c9de5e78a59cb3e9c9a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"styles.6c0e5ac9b5d336e8ea71_1_.css","sha256":"4b32b3c6a123d5d00b01bc9e29707488aa8e2eb354bc672e65c327c0e1c60b0e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"68747470733a2f2f692e696d6775722e636f6d2f774d58724678632e676966_1_.gif","sha256":"013da178487dcb752fbba302b430abe47c0b4d5dd0cc724acde47908da2f6790","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"urlref_httpswww.npmjs.compackagecuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07","sha256":"37b67386dd792215241952b9a63de026c5c9f192c54d2cbe595bb9cbc081e6b8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"cuevana-3-john-wick-4-ver-pelicula-completa-online-gratis07_1_.htm","sha256":"8f69f4129231eaf9f909a90000ec7b2e64a7e1736cc66fc5ec43ff0d8ff7c525","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"minicssextractbug.eb2a67c500ddbc231d10_1_.js","sha256":"22985b86c9a04ed282589d2eb216e9ab6cbbf324bc0bb1dbb6850dc16a965754","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"N0bX2SlFPv1weGeLZDtgJv7U_1_.woff","sha256":"6d62f792290485796b8647f0a0eca61d8f00c23ec69f8fcba01eb5aea4be3786","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"d79a5eac99e028b92ca66971c043321821336b42c4ac7d797ddd815a7a30f85e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7j_1_.woff","sha256":"96f22b128087b997256dccb88e388342882c5384b3ba7ed5fbe0d0b92f7e60e8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdo_1_.woff","sha256":"c90e782af8bb58958c6613744b251581cc85af4e74dd2b854a9481b29c3805e4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdo_1_.woff","sha256":"2e6ace04cedde28d7117a7ab3ee4934bdce6f0b269b3f30ffb4e2e06b1fe91f0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"pxiByp8kv8JHgFVrLEj6Z1xlEw_1_.woff","sha256":"426316de2a499a38688cfcc92c143d25fa0c45c3afcf2074a84e3563dfa33c23","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"pxiEyp8kv8JHgFVrJJfedA_1_.woff","sha256":"49f0742d602fcc0092b7dbcb7c710849988b0a7094df8979af9c5f151f301d6d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"pxiByp8kv8JHgFVrLGT9Z1xlEw_1_.woff","sha256":"316565c31e07631fe1a6a3f605ea1f40d529f7471d8fde952f863287d74bb7f6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"ab751523d7e1c184769f74eae2b8969f_1_.css","sha256":"403c61e461dc7cd303cb687f8e87f3f25090d2f375dc84f5102c8a103ce811f5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"RecoveryStore._2AB84FD1-D32B-11ED-BC09-080027D4373A_.dat","sha256":"008a6817f06719ca74ef5ee6fa84b729d5df27108252f2211d562c3ef139d57c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"_2AB84FD3-D32B-11ED-BC09-080027D4373A_.dat","sha256":"951452d65bad29bab7d977b64ed3855fb5407bae47ac2782c7f7dc56df6f6639","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"_33A4AABC-D32B-11ED-BC09-080027D4373A_.dat","sha256":"aa39861836e5a0ff6d0a9f3bae3a2206401baa7f02deb9229cae82d979b68b68","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"favicon_1_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"css_3_.css","sha256":"eacc1200103c4ede20a7abb0ac21f9e010f84e920e5a1815db82fe41166a1161","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"css_2_.css","sha256":"abf5aed5b53f92cda86881cf71191c49e908825a4bdd59a696584461bee8bf48","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"search_1_.json","sha256":"19170bd75edc0b5183a2f9fcc3001d9d222deff61e5915ad1127b65ab581a2a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"b0f1a8318363185cc2ea6a40ac23eeb2_1_.png","sha256":"e6283e35db7085cc35745bb6d943664ad50221ee5b55029abc16b060078ec1e0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"css_1_.css","sha256":"768e97b8a8503253a70ae0be3d7b879c7502350dda959c7a27b1f5b41f769422","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]}],"files_written":[{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{2AB84FD3-D32B-11ED-BC09-080027D4373A}.dat","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%TEMP%\\~DF3170700804E292C2.TMP","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%TEMP%\\~DF88EA7D41DB3A2894.TMP","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{2AB84FD1-D32B-11ED-BC09-080027D4373A}.dat","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%TEMP%\\~DFC6426C922C034736.TMP","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\68747470733a2f2f692e696d6775722e636f6d2f774d58724678632e676966[1].gif","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\css[1].css","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{33A4AABC-D32B-11ED-BC09-080027D4373A}.dat","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\AC-1F-6B-0D-DB-84\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\P3P\\HISTORY\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\URLBLOCKMANAGER\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\DOMAINSUGGESTION\\FILENAMES\\\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\DOMAINSUGGESTION\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TABBEDBROWSING\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKLMHKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SECURITYPROVIDERS\\SCHANNEL\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\VERSIONMANAGER\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\ADMINACTIVE\\{00000000-0000-0000-0000-000000000000}\\{00000000-0000-0000-0000-000000000000}","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3824","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_ef0_IE_EarlyTabStart_0xde8_Mutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_ef0_ConnHashTable<3824>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_ef0_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_ef0_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"IsoScope_ef0_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"IsoScope_ef0_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"IsoScope_ef0_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3824","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"IsoScope_ef0_IE_EarlyTabStart_0xde8_Mutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"IsoScope_ef0_ConnHashTable<3824>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_ef0_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"IsoScope_ef0_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"642caadbe9efcb2d720b342e"}]}]}},"report_ids":{"sandbox_job_ids":["642caadbe9efcb2d720b342e"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample e52bf5df438a… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample e52bf5df438a…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/e52bf5df438a617840cfe0c8af80386339928faba94073b6159cc41041b46ac3"}],["$","meta","4",{"property":"og:title","content":"Sample e52bf5df438a… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample e52bf5df438a…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/e52bf5df438a617840cfe0c8af80386339928faba94073b6159cc41041b46ac3"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample e52bf5df438a… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample e52bf5df438a…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2c","11",{}]]