23:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 29:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 24:T647,"urlblockindex_1_.bin" has type "data" "KFOlCnqEu92Fr1MmEU9fBBc-_1_.woff" has type "Web Open Font Format flavor 65536 length 20012 version 1.1" "6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442" has type "data" "~DF14B1F0EB7AD90814.TMP" has type "data" "6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04" has type "data" "~DF99973CEA00BA1BDD.TMP" has type "data" "KFOlCnqEu92Fr1MmEU9fBBc-_1_.woff" has type "Web Open Font Format flavor 65536 length 20464 version 1.1" "O7JSSW8L.txt" has type "ASCII text" "CC197601BE0898B7B0FCC91FA15D8A69_ADD956C4A492A9C2AEB51B34755AD8CF" has type "data" "KFOkCnqEu92Fr1Mu51xIIzQ_1_.woff" has type "Web Open Font Format flavor 65536 length 21528 version 1.1" "_064A36CB-1D60-11EB-8C38-0800276AC50B_.dat" has type "Composite Document File V2 Document Cannot read section info" "CC197601BE0898B7B0FCC91FA15D8A69_6E3565ABCB0C30FAE01EEA80CB48BD07" has type "data" "CC197601BE0898B7B0FCC91FA15D8A69_FC361BBD46D38B8D53C8F7064E1947CE" has type "data" "en-US.3" has type "data" "KFOlCnqEu92Fr1MmWUlfBBc-_1_.woff" has type "Web Open Font Format flavor 65536 length 20356 version 1.1" "CBZX0RBS.txt" has type "ASCII text" "background_gradient_1_" has type "JPEG image data JFIF standard 1.02 aspect ratio density 100x100 segment length 16 baseline precision 8 1x800 frames 3" "ErrorPageTemplate_1_" has type "UTF-8 Unicode (with BOM) text with CRLF line terminators" "favicon_2_.ico" has type "PNG image data 16 x 16 4-bit colormap non-interlaced" "CC197601BE0898B7B0FCC91FA15D8A69_982D5E192D42C6345564548338F5DE54" has type "data"25:T2e19,Pattern match: "https://www.youtube.com/watch?v=7AWjl2ySwp8" Pattern match: "https://www.youtube.com" Heuristic match: "fonts.googleapis.com" Heuristic match: "fonts.gstatic.com" Heuristic match: "googleads.g.doubleclick.net" Heuristic match: "i.ytimg.com" Heuristic match: "r3---sn-vgqsknek.googlevideo.com" Heuristic match: "static.doubleclick.net" Pattern match: "www.youtube.com" Heuristic match: "yt3.ggpht.com" Pattern match: "https://ajax.googleapis.com/ajax/libs/spf/2.4.0/LICENSE" Pattern match: "http://www.apache.org/licenses/LICENSE-2.0" Pattern match: "http://www.w3.org/1999/xhtml,div" Pattern match: "http://www.w3.org/1999/xhtml,canvas" Heuristic match: "th;u++){q=l[u].t;var A=r[u].t,D=l[u].d,H=r[u].d;B=n[q];var E=n[A];if(perspective==q&&perspective==A||!(matrix!=q&&matrix3d!=q||matrix!=A&&matrix3d!=A)){if(!t)return; B=b([l[u]],[r[u]]);C.push(B[0]);x.push(B[1]);z.push([matrix,[B[2]]])}else{if" Heuristic match: "yId(f);if(!d)d=Ya(f,null,function(g){g.title=f;L(f,!0)});else if(!c&&d.contentWindow.document.getElementById(e))return;a=n(Bb,null,d,a,b,e,f);d.title?a():J(f,a)}} function Bb(a,b,c,d,e){var f=js==b,g=css==b;a=a.contentWindow.document;var h=a.getElement" Pattern match: "http://polymer.github.io/LICENSE.txt" Pattern match: "http://a/c%20d===r.href}catch(v){}}if(Q.ra)return" Pattern match: "http://polymer.github.io/PATENTS.txt" Pattern match: "ymer.github.io/CONTRIBUTORS.txt" Pattern match: "http://www.w3.org/1999/xhtml===d" Pattern match: "W.aU/gJ%g" Heuristic match: "r(a=Array.from(a.querySelectorAll(*)).filter(function(f){return Rg(f).shadowRoot}),b=0;b\n \n \n _HashTable_Mutex\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"Local\\ZonesCacheCounterMutex\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"\\Sessions\\1\\BaseNamedObjects\\IsoScope_e20_IESQMMUTEX_0_519\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3616\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"iexplore.exe\" (UID: 00069698-00003616) was launched with new environment variables: \"PATH=\"%PROGRAMFILES%\\Internet Explorer;\"\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"iexplore.exe\" with commandline \"https://www.youtube.com/watch?v=7AWjl2ySwp8\" (UID: 00069698-00003616)\n Spawned process \"iexplore.exe\" with commandline \"SCODEF:3616 CREDAT:275457 /prefetch:2\" (UID: 00069823-00003964)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"level":"informative","category":"General","name":"Spawns new processes that are not known child processes","description":"Spawned process \"iexplore.exe\" with commandline \"https://www.youtube.com/watch?v=7AWjl2ySwp8\" (UID: 00069698-00003616)\n Spawned process \"iexplore.exe\" with commandline \"SCODEF:3616 CREDAT:275457 /prefetch:2\" (UID: 00069823-00003964)","origin":"Monitored Target","relevance":3,"id":"target-103","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"level":"informative","category":"Installation/Persistence","name":"Creates new processes","description":"\"iexplore.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe\", Handle: 860)","origin":"API Call","relevance":8,"id":"api-2","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$24","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$25","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found a reference to a known community page","description":"$26","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"level":"informative","category":"Unusual Characteristics","name":"Installs hooks/patches the running process","description":"$27","origin":"Hook Detection","mitre_attack_id":"T1179","relevance":10,"id":"hooks-8","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 216.58.192.238 on port 443 is sent without HTTP header\n TCP traffic to 172.217.4.227 on port 80 is sent without HTTP header\n TCP traffic to 172.217.5.10 on port 443 is sent without HTTP header\n TCP traffic to 172.217.9.86 on port 443 is sent without HTTP header\n TCP traffic to 172.217.4.195 on port 443 is sent without HTTP header\n TCP traffic to 172.217.129.40 on port 443 is sent without HTTP header\n TCP traffic to 172.217.5.4 on port 443 is sent without HTTP header\n TCP traffic to 172.217.8.166 on port 443 is sent without HTTP header\n TCP traffic to 172.217.4.109 on port 443 is sent without HTTP header\n TCP traffic to 172.217.8.162 on port 443 is sent without HTTP header\n TCP traffic to 172.217.5.1 on port 443 is sent without HTTP header","origin":"Network Traffic","mitre_attack_id":"T1043","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 9 domains and 9 hosts"}],"sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":41,"imported_dlls_count":159,"dropped_files_count":0,"extracted_files_count":49,"files_written_count":227,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":12,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":12,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":11,"dns_resolutions_count":9,"contacted_urls_count":11,"http_requests_count":11},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","Decrypted SSL traffic"],"sandbox_reports":[{"id":"5fa09e3522de34737c103bc2","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"e6fd555a234beaa68eae1f9c0c8b654034cd013b669dea7aeaeea1a9a597bda2.url","analysis_start_time":"2020-11-03T00:03:12+00:00","indicators_count":{"informative":12,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"216.58.192.238","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"address":"172.217.4.227","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"address":"172.217.5.10","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"address":"172.217.9.86","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"address":"172.217.4.195","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"address":"172.217.129.40","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"address":"172.217.5.4","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"address":"172.217.8.166","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"address":"172.217.4.109","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"address":"172.217.8.162","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"address":"172.217.5.1","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]}],"dns_resolutions":[{"domain":"fonts.googleapis.com","address":"172.217.8.170","ttl":59,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_creation_date":"2005-01-25T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"domain":"fonts.gstatic.com","address":"172.217.4.35","ttl":184,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_creation_date":"2008-02-11T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"domain":"googleads.g.doubleclick.net","address":"172.217.4.194","ttl":220,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_creation_date":"1996-01-16T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"domain":"i.ytimg.com","address":"172.217.8.182","ttl":299,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_creation_date":"2007-12-11T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"domain":"ocsp.pki.goog","address":"172.217.4.227","ttl":5,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"domain":"r3---sn-vgqsknek.googlevideo.com","address":"172.217.129.40","ttl":1799,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_creation_date":"2003-05-25T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"domain":"static.doubleclick.net","address":"172.217.8.198","ttl":10396,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_creation_date":"1996-01-16T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"domain":"www.youtube.com","address":"172.217.8.206","ttl":19355,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_name_servers":"NS1.GOOGLE.COM","registrar_creation_date":"2005-02-15T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"domain":"yt3.ggpht.com","address":"172.217.1.33","ttl":6487,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_creation_date":"2008-01-16T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]}],"http_requests":[{"host":"ocsp.pki.goog","host_ip":"172.217.4.227:80","url":"/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D","method":"GET","header":"GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.4.227:80","url":"/gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQDSnwmNSWtELwgAAAAAXcGx","method":"GET","header":"GET /gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQDSnwmNSWtELwgAAAAAXcGx HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.4.227:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEFdRKRguoh2MCAAAAABdwf0%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEFdRKRguoh2MCAAAAABdwf0%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.4.227:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEFxzHFVMkzzTAgAAAAB9mAs%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEFxzHFVMkzzTAgAAAAB9mAs%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.4.227:80","url":"/gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQD6dnW313dJuggAAAAAXcH8","method":"GET","header":"GET /gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQD6dnW313dJuggAAAAAXcH8 HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.4.227:80","url":"/gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEHIFvaBDrJpICAAAAABgYvw%3D","method":"GET","header":"GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEHIFvaBDrJpICAAAAABgYvw%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.4.227:80","url":"/gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQCy%2Fj9mrER8nwIAAAAAfZoD","method":"GET","header":"GET /gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQCy%2Fj9mrER8nwIAAAAAfZoD HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.4.227:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEBM9dFlBF5mcAgAAAAB9mX4%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEBM9dFlBF5mcAgAAAAB9mX4%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.4.227:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEEakSefn0RHKAgAAAAB9mgc%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEEakSefn0RHKAgAAAAB9mgc%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.4.227:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEBHHklXGCJy8AgAAAAB9mX8%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEBHHklXGCJy8AgAAAAB9mX8%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.4.227:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEFrdivToW3GTCAAAAABdwfA%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEFrdivToW3GTCAAAAABdwfA%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}],"processes":[{"pid":4056,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\e6fd555a234beaa68eae1f9c0c8b654034cd013b669dea7aeaeea1a9a597bda2.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00069465-00004056","icon":"$28"},{"pid":3616,"ppid":4056,"name":"iexplore.exe","command_line":"https://www.youtube.com/watch?v=7AWjl2ySwp8","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00069465-00004056","uid":"00069698-00003616"},{"pid":3964,"ppid":3616,"name":"iexplore.exe","command_line":"SCODEF:3616 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00069698-00003616","uid":"00069823-00003964"}],"all_imported_dlls":["mlang.dll","secur32.dll","WindowsCodecs.dll","wmp.dll","nsi.dll","wship6.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","KernelBase.dll","atl.dll","d3d10warp.dll","mswsock.dll","Wldap32.dll","d2d1.dll","wkscli.dll","rasadhlp.dll","ExplorerFrame.dll","api-ms-win-downlevel-user32-l1-1-0.dll","jscript9.dll","AcroPDFImpl.dll","netprofm.dll","usp10.dll","dinput8.dll","ws2_32.dll","msasn1.dll","advapi32.dll","rpcrt4.dll","RpcRtRemote.dll","cfgmgr32.dll","SwDir_1231201.dll","msvcrt.dll","lpk.dll","npmproxy.dll","GdiPlus.dll","msv1_0.dll","mshtml.dll","UIAnimation.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","dwmapi.dll","wmploc.DLL","ole32.dll","oleaut32.dll","userenv.dll","sqmapi.dll","cryptsp.dll","ieui.dll","mfplat.dll","COLORCNV.DLL","ieframe.dll","wininet.dll","duser.dll","wintrust.dll","dhcpcsvc6.dll","FWPUCLNT.DLL","iertutil.dll","user32.dll","msimg32.dll","mscorwks.dll","ieproxy.dll","slc.dll","bcryptprimitives.dll","uxtheme.dll","devobj.dll","mf.dll","dxgi.dll","MMDevAPI.dll","psapi.dll","shell32.dll","srvcli.dll","MSOHEV.DLL","msmpeg2vdec.dll","api-ms-win-core-timezone-l1-1-0.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","oleaccrc.dll","IPHLPAPI.DLL","msvcr120.dll","AudioSes.dll","api-ms-win-core-synch-l1-2-0.dll","cryptbase.dll","bcrypt.dll","ksuser.dll","d3d11.dll","winhttp.dll","mscoreei.dll","sechost.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","npctrl.dll","crypt32.dll","mscoree.dll","rsaenh.dll","ssv.dll","msvcr100.dll","msimtf.dll","mscms.dll","clbcatq.dll","credssp.dll","avrt.dll","wdigest.dll","comctl32.dll","netapi32.dll","dui70.dll","msxml3r.dll","evr.dll","AcroPDF.dll","agcore.dll","urlmon.dll","comdlg32.dll","wshqos.dll","cryptnet.dll","SensApi.dll","deploy.dll","mshtmlmedia.dll","DWrite.dll","ncrypt.dll","profapi.dll","sspicli.dll","dnsapi.dll","oleacc.dll","kernel32.dll","api-ms-win-downlevel-version-l1-1-0.dll","winnsi.dll","shlwapi.dll","apphelp.dll","normaliz.dll","msvcr90.dll","cryptdll.dll","version.dll","dhcpcsvc.dll","schannel.dll","msmpeg2adec.dll","jsIntl.dll","mpr.dll","msvcp120.dll","imm32.dll","propsys.dll","sxs.dll","winmm.dll","msdmo.dll","powrprof.dll","URLREDIR.DLL","dsound.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","WSHTCPIP.DLL","api-ms-win-downlevel-advapi32-l1-1-0.dll","gpapi.dll","Control.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","jp2ssv.dll","xmllite.dll","msctf.dll","rpcss.dll","setupapi.dll","ntmarta.dll","samcli.dll","IEShims.dll","nlaapi.dll","netutils.dll","webio.dll","gdi32.dll","imagehlp.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"1052ULND.txt","sha256":"5537ec861ff3e497dc9aba27b8e51d5a28893d9ccee4b57a04fbf749ab65f73c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"5W3B3ABR.txt","sha256":"d0bc6347c529fdc647843af5c3a076e509ee5d7ddc332fd56ffb519c53e76dcb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"C0K34CM7.txt","sha256":"e885732db9f15a0d303e8abfb79e76ef0805cbe65ecc9a0885d5f816f1ae0708","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"CBZX0RBS.txt","sha256":"2aa3df396d61bef784ed508b95289938f37d422abd4e92dbf73746109d911e49","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"D2KCHWSQ.txt","sha256":"a48f5387b14e8ba3a1709f969f7942ff475d3d47a3f502a7100fba4da78f6d4b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"GXKPAN6O.txt","sha256":"8dc507785ae8b7859e88e20d83f429ecfd5b06f6478d694e8f418bcc0fac0684","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"IB5ENO10.txt","sha256":"33aae845c3694cf211f445c4f21837d458a81254e0471627bcc26da99a5f4773","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"IGVHKX0W.txt","sha256":"67ae59748c7d14a7f48a92f4a530b70200b1307280fb63be0c8d21822a158a37","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"IP4UAHH1.txt","sha256":"33aae845c3694cf211f445c4f21837d458a81254e0471627bcc26da99a5f4773","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"MB8181P4.txt","sha256":"abca9d637203d38e34e5ad7995883f12778880b8ee64e85a69d334cb4e1be49d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"O7JSSW8L.txt","sha256":"209614e6d38c51fcdf9f9984db4e4421b2c766271387a9660096baa31cecda69","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"TIH0O2I7.txt","sha256":"06cc31bb982fb16937ed44a238a571dc5657de464152a2996ae73ad3987f57ae","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"W0345BPQ.txt","sha256":"abca9d637203d38e34e5ad7995883f12778880b8ee64e85a69d334cb4e1be49d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"Z68N6X5O.txt","sha256":"2414363d63659b6e2a5f17f2540f46dcc2227c2b9897045c758e5cae4f26fc1f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"en-US.3","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"imagestore.dat","sha256":"d84409e7e70df3d5715898403677da5fc9ed2c0ff23bdf6991c5a9848e4f5969","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sha256":"a83d3b6b0ea0f33fbccffb9b1f0044fa50bd07512230093cc7e3a8693fbe4ff8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sha256":"d06fda25cfafc7dbc39a1355d693198b915bd29f7bf4c4d97e7c761a27ae5d71","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6","sha256":"f6557f85a5e63e57b09be7858e98e898b24778fe8a816ed71507fa434884aea8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_6E3565ABCB0C30FAE01EEA80CB48BD07","sha256":"0fbf28860839c074ae5cbb0142b113d7df732ae3ce2d7fdc0876e298ae3723ac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_81566544DFBE5400FD86C38E8E987BF4","sha256":"3854bde2472ed0abb61105965aefa069b79dd0c8d21fb0e3005d490cea7e51a5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_F9DB3086CC74507D19B83556B5474C09","sha256":"a745a4d4a58041b5e54e26243747704c99fe23dfe8e196ef67ce4289a605fda8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"CFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B","sha256":"bb15ad089b1bc415fb1e37a66fd96428a61e21b680f2b6b5e8e12f0284eb7a70","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"1E11E75149C17A93653DA7DC0B8CF53F_CD5951FC163E669E8F596174685CEFF9","sha256":"1ef6f61f3509e4571f022e771d55a25a448ea01d994f2040d2b6a980ffb4ea04","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442","sha256":"9d447ca91f9d74df53390d618046606dac9bb139be7ebdfb307602b4f24831a4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"BE8B021F9E811DFC8C8A28572A17C05A_535F7A0E85EE9CA1E9D210B713A7111C","sha256":"d9735a8d9e4b5ec2ac0cdcf1b17652faa00536b9363a3be08ab800aba05bc25d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_6459166B5555C38D4C6BCB5A9FF5DC31","sha256":"bc6135c5e99fea9ea6c2a9e3f33fb089d8bd89c2f619af5990644e2f7b526a27","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_982D5E192D42C6345564548338F5DE54","sha256":"f27988fe5601627b0a4dca90adc784538d48635a0644665c59f604228d355865","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_ADD956C4A492A9C2AEB51B34755AD8CF","sha256":"1c2fb31f0b7de45cb5a92d9bfbe3050e711cfa2cf03a8a91974bfe0009a991d3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_BF2C61084B800115ADEB197CBA1F1AC8","sha256":"36baaf082beac66e12f897916edc15e74e36bfe4fac46de10cec5e3f005c34c9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_D84D0D5B4E5CABCB7063A427BA9A39B3","sha256":"a976376cf5d41bf13d5cc1fb564e6d331e7ddd86f7543f323c1a3f59d0a494f8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_FC361BBD46D38B8D53C8F7064E1947CE","sha256":"2074f82e29593b6956dfe6317f0ccf04de3122e30d036ea240d36965f3b4b636","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"~DF02C72E23DC9514A7.TMP","sha256":"8bc3a4ef2dbafd31ad4ae2f4508b268fee2c00021f29d26e92c0c94822c5ae7b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"~DF14B1F0EB7AD90814.TMP","sha256":"78a5b0320cf85db6884fc823f1d363d570a7904393169df537df281338d3a171","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"~DF99973CEA00BA1BDD.TMP","sha256":"5ef156d6498ee41c8beef34d849de0086478b1bb1e75bcdc0c5ca6bb855b73b6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"KFOlCnqEu92Fr1MmEU9fBBc-_1_.woff","sha256":"ba98f991d002c6bfaaf7b874652ffdcde9261a86925db87df3ed2861ea080adf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"KFOkCnqEu92Fr1Mu51xIIzQ_1_.woff","sha256":"2cfe69657c55133dac6ea017b4452efff2131422abd9e90500a072df7ca5a9c8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"_064A36CB-1D60-11EB-8C38-0800276AC50B_.dat","sha256":"8aff9eaef974d365c719d35428ceae2fd79f82744c16bcd86b71ab4beab67bc3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"KFOlCnqEu92Fr1MmWUlfBBc-_1_.woff","sha256":"806ea46c426af8fc24e5cf42a210228739696933d36299eb28aee64f69fc71f1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"background_gradient_1_","sha256":"1471693be91e53c2640fe7baeecbc624530b088444222d93f2815dfce1865d5b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"ErrorPageTemplate_1_","sha256":"8d018639281b33da8eb3ce0b21d11e1d414e59024c3689f92be8904eb5779b5f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"favicon_2_.ico","sha256":"6d8a01dc7647bc218d003b58fe04049e24a9359900b7e0cebae76edf85b8b914","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"css_2_.css","sha256":"00d4a2b23146f76099c9184477145d5172274f1d34817cd6601943cd2d5ed79e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"6d8a01dc7647bc218d003b58fe04049e24a9359900b7e0cebae76edf85b8b914","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"KFOjCnqEu92Fr1Mu51S7ACc6CsI_1_.woff","sha256":"6f2974a396dc0695d071e842551e7af9c72f0ef8d2d076fe73a523b1a3c2d0e7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"IrvWYL9cMQDdQTlUfy4EmSWPiDUBB4ig0nZVQdwez_Q_1_.js","sha256":"22bbd660bf5c3100dd4139547f2e0499258f8835010788a0d2765541dc1ecff4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"bullet_1_","sha256":"1d8e5fd3c1fd384c0a7507e7283c7fe8f65015e521b84569132a7eabedc9d41d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"hqdefault_1_.jpg","sha256":"2a9df430f6eac40324f302ae930951283062209d7e30215ae04bf77f8712dfc1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]}],"files_written":[{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\UrlBlockManager\\urlblocklist.bin","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Low","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Low","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\Low","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Internet Explorer\\UserData\\Low","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Tracking Protection","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Feeds","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\TabRoaming","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache\\Low","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache\\Low","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%TEMP%\\Low","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\rundll32.exe","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\AppPatch\\AcLayers.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\en-US\\rundll32.exe.mui","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"C:\\e6fd555a234beaa68eae1f9c0c8b654034cd013b669dea7aeaeea1a9a597bda2.url","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"C:\\https:\\www.youtube.com\\watch?v=7AWjl2ySwp8","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\en\\iexplore.exe.mui","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\en-US\\user32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\MICROS~3\\Office14\\URLREDIR.DLL","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\plugin.jar","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\bin\\javaws.exe","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\ieframe.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\stdole2.tlb","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{064A36CB-1D60-11EB-8C38-0800276AC50B}.dat","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01}","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CBZX0RBS.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MB8181P4.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\watch[1].htm","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%TEMP%\\~grcqxfq.tmp","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_81566544DFBE5400FD86C38E8E987BF4","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_81566544DFBE5400FD86C38E8E987BF4","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[1].png","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[2].png","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[3].png","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[4].png","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[5].png","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[6].png","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[7].png","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[3].ico","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_6E3565ABCB0C30FAE01EEA80CB48BD07","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_6E3565ABCB0C30FAE01EEA80CB48BD07","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\en-US\\jscript9.dll.mui","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DOMStore\\HVI1ZDNF\\www.youtube[1].xml","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\msxml3r.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_6459166B5555C38D4C6BCB5A9FF5DC31","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\BE8B021F9E811DFC8C8A28572A17C05A_535F7A0E85EE9CA1E9D210B713A7111C","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\KFOmCnqEu92Fr1Mu4mxM[1].woff","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_FC361BBD46D38B8D53C8F7064E1947CE","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\1F2HR9E2\\ad_status[1].js","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_ADD956C4A492A9C2AEB51B34755AD8CF","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Fonts\\seguisym.ttf","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{1FBEA40B-1D60-11EB-8C38-0800276AC50B}.dat","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%TEMP%\\~DF02C72E23DC9514A7.TMP","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\W0345BPQ.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IP4UAHH1.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\GXKPAN6O.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\suggestions[1].en-US","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Z68N6X5O.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.3","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.2","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\KFOjCnqEu92Fr1Mu51S7ACc6CsI[1].woff","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\KFOjCnqEu92Fr1Mu51TzBic6CsI[1].woff","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\KFOmCnqEu92Fr1Mu4mxM[1].woff","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\KFOlCnqEu92Fr1MmWUlfBBc-[1].woff","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\KFOjCnqEu92Fr1Mu51TjASc6CsI[1].woff","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\KFOkCnqEu92Fr1Mu51xIIzQ[1].woff","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VG8BU31O.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IYXGE11F.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HGEILYKK.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_8FB29C35032AE1827A2754ED35D7F2E8","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1052ULND.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\O7JSSW8L.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\search[1].json","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\system32\\Macromed\\Flash\\ss.sgn","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\Macromed\\Flash\\mms.cfg","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\system32\\Macromed\\Flash\\oem.cfg","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\system32\\oem.cfg","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache\\DE89D1447AB1E99DD87F51CA87C52655\\Info.directory","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache\\9DCB33E1CFD76DD078ED1898ECBAEFEE\\Info.directory","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache\\668D0A067F2436E1D58EA37A2D7DAF2E\\Info.directory","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache\\396B667C011CF74AFE66D655E875014B\\Info.directory","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache\\7FCDFC8C65295F95F1B2B94C4B4AC6BF\\Info.directory","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache\\BF4BB2C7EE96F73EC15D03471A3C7190\\Info.directory","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache\\24FB7F8BF29F9D5B1BA5F5BD986D6BDB\\Info.directory","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache\\E5617A3A2E52B334393316C9AF28E65D\\Info.directory","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache\\74C6CC968D46AD77ED26CD2279AFAD4A\\Info.directory","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache\\2B9A81C6A66630E584CDC25504552597\\Info.directory","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache\\46ED9160074E9FE80B68B8F4635E1E1F\\Info.directory","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\Adobe\\Shockwave 12\\Control.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_1374AC543829516A5CA56081CD00C32A","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\69C6F6EC64E114822DF688DC12CDD86C","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6DB145CFEEC544B1582FED1ADA3370DD","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\1E11E75149C17A93653DA7DC0B8CF53F_CD5951FC163E669E8F596174685CEFF9","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\1E11E75149C17A93653DA7DC0B8CF53F_A7567492DFAAE572AAE153059C1CC836","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6B17EC2CD0C9B19353018FF1C12BC489","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\5B9763FB83E74617D0DB58992800F69B","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%COMMONPROGRAMFILES%\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\forbidframing[1]","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Fonts\\micross.ttf","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_BF2C61084B800115ADEB197CBA1F1AC8","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C0K34CM7.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\errorPageStrings[1]","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\httpErrorPagesScripts[1]","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_B92857529FAC9DABAF234636A86D900E","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\bullet[1]","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\background_gradient[1]","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\hqdefault[1].jpg","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000027.db","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"C:\\Users","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%USERPROFILE%\\AppData","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\en-US\\shell32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon_32[1].png","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FLNQ3VVL.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CFE86DBBE02D859DC92F1E17E0574EE8_5FA8E5E800867BF860DF5E533E701BAF","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\85B3F147E3624A14E6A20DB4F6C2C5D9","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\PlayReady","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE\\Low","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException\\Low","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%TEMP%\\~DF99973CEA00BA1BDD.TMP","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%TEMP%\\~DF14B1F0EB7AD90814.TMP","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_982D5E192D42C6345564548338F5DE54","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_178070FBD21252F98315114C538062B9","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC4FEA46495CA161D470CD085EDBAADE","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_982D5E192D42C6345564548338F5DE54","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IGVHKX0W.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%USERPROFILE%\\Favorites\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{064A36C9-1D60-11EB-8C38-0800276AC50B}.dat","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_00AAF7B935F50A7BF71BC62840B3ACC2","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\css[1].css","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CI1NEHIQ.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_CFAA33A1B759632B5D5D54C9853E8EC6","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_A7A8E86FCB076C144BD04C40841E7074","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\82CB34DD3343FE727DF8890D352E0D8F","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[8].png","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3S9Q96YC.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_6459166B5555C38D4C6BCB5A9FF5DC31","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_23D6638C6BA208D23B19D04239FC42D6","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\BE8B021F9E811DFC8C8A28572A17C05A_535F7A0E85EE9CA1E9D210B713A7111C","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\BE8B021F9E811DFC8C8A28572A17C05A_56AE434EC19A3E599D04D5616C70EF34","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\521F25E202FF760B8461B88413F425E7","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\KFOjCnqEu92Fr1Mu51S7ACc6CsI[1].woff","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\KFOkCnqEu92Fr1Mu51xIIzQ[1].woff","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\NIFFDOLS.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe.config","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\DYBRXUFE.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_FC361BBD46D38B8D53C8F7064E1947CE","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_A4E4931D8760281A69283B525C90574A","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\IrvWYL9cMQDdQTlUfy4EmSWPiDUBB4ig0nZVQdwez_Q[1].js","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\404HCFVH.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_ADD956C4A492A9C2AEB51B34755AD8CF","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_835600940BDF0E3AEEBF0FA84D4FDFC4","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\videoplayback[1].dat","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\D3Q9TF2C.txt","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]}],"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\ADMINACTIVE\\{00000000-0000-0000-0000-000000000000}\\{00000000-0000-0000-0000-000000000000}","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{DDABA200-F9C4-474C-B13B-DEE30663C214}\\","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]}]},"mutex_activity":{"mutex_created":[{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"IsoScope_e20_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"IsoScope_e20_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"IsoScope_e20_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"IsoScope_e20_IE_EarlyTabStart_0xc5c_Mutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3616","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"IsoScope_e20_ConnHashTable<3616>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_e20_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3616","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_e20_IE_EarlyTabStart_0xc5c_Mutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_e20_ConnHashTable<3616>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_e20_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_e20_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"Local\\https://www.youtube.com/","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"IsoScope_e20_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"{1B655094-FE2A-433c-A877-FF9793445069}","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"Local\\DirectSound DllMain mutex (0x00000F7C)","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_e20_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\https://www.youtube.com/","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5fa09e3522de34737c103bc2"}]}]}},"report_ids":{"sandbox_job_ids":["5fa09e3522de34737c103bc2"]}}}]]}] 1e:null 22:[["$","title","0",{"children":"Sample e6fd555a234b… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample e6fd555a234b…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/e6fd555a234beaa68eae1f9c0c8b654034cd013b669dea7aeaeea1a9a597bda2"}],["$","meta","4",{"property":"og:title","content":"Sample e6fd555a234b… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample e6fd555a234b…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/e6fd555a234beaa68eae1f9c0c8b654034cd013b669dea7aeaeea1a9a597bda2"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample e6fd555a234b… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample e6fd555a234b…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L29","11",{}]]