topmovienow

26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2d:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T48a,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Sample ebddbaaff2a2… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample ebddbaaff2a2…. Threat score 100/100. 0/3 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/ebddbaaff2a245c3ab1381917e65c54621b73fb9fb46c16341111e749606788b","keywords":["Malicious","malware analysis","sandbox report","threat intelligence","ebddbaaff2a245c3ab1381917e65c54621b73fb9fb46c16341111e749606788b"],"about":{"@type":"SoftwareApplication","name":"https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4k","applicationCategory":["url"],"identifier":"ebddbaaff2a245c3ab1381917e65c54621b73fb9fb46c16341111e749606788b","additionalType":"Malicious sample"},"threatScore":100,"antivirusDetections":{"malicious":0,"total":3},"behavioralIndicators":{"malicious":0,"suspicious":2},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T8a9,"" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") "src="https://www.facebook.com/tr?id=188725408323593&ev=PageView&noscript=1"/>" (Indicator: "facebook.com") "" (Indicator: "twitter") "" (Indicator: "facebook.com") "Twitter url" (Indicator: "twitter") "" (Indicator: "twitter") "* Copyright 2011-2018 Twitter, Inc." (Indicator: "twitter") "* [http://developers.facebook.com/policy/]. This copyright notice shall be" (Indicator: "facebook.com") "{state:0,transportUrl:b,context:c,parent:cm()},N(91);else{var f="/gtag/destination?id="+encodeURIComponent(a)+"&l="+Kh.ia+"&cx=c";Ur()&&(f+="&sign="+Kh.We);var g=bi||di?Tr(b,f):void 0;g||(g=Go("https://","http://",Kh.ve+f));Xl().destination[a]={state:1,context:c,parent:cm()};mc(g)}};function Vr(){if(Vl()){return!0}return!1};var Yr=new RegExp(/^(.*\.)?(google|youtube|blogger|withgoogle)(\.com?)?(\.[a-z]{2})?\.?$/),Zr={cl:["ecl"],customPixels:["nonGooglePixels"],ecl:["cl"],ehl:["hl"],hl:["ehl"],html:["customScripts","customPixels","nonGooglePixels","nonGoogleScripts","nonGoogleIframes"],customScripts:["html","customPixels","nonGooglePixels","nonGoogleScripts","nonGoogleIframes"],nonGooglePixels:[],nonGoogleScripts:["nonGooglePixels"],nonGoogleIframes:["nonGooglePixels"]},$r={cl:["ecl"],customPixels:["customScripts","html"]," (Indicator: "youtube") "function yy(a,b){var c=this;return b}yy.N="internal.enableAutoEventOnScroll";var cc=ea(["data-gtm-yt-inspected-"]),zy=["www.youtube.com","www.youtube-nocookie.com"],Ay,By=!1;" (Indicator: "youtube")28:T885,"urlblockindex_1_.bin" has type "data"- [targetUID: N/A] "app_1_.js" has type "UTF-8 Unicode text with very long lines with NEL line terminators"- [targetUID: N/A] "web-widget-main-5ce1d98_1_.js" has type "UTF-8 Unicode text with very long lines with LF NEL line terminators"- [targetUID: N/A] "recaptcha__en_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "gtm_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "fa-solid-900_1_.eot" has type "Embedded OpenType (EOT) Font Awesome 5 Free Solid family"- [targetUID: N/A] "web-widget-framework-b1e98d3c205cf4692b99_1_.js" has type "UTF-8 Unicode text with very long lines with no line terminators"- [targetUID: N/A] "fontawesome-webfont_3_.eot" has type "Embedded OpenType (EOT) FontAwesome family"- [targetUID: N/A] "bootstrap.min_1_.css" has type "ASCII text with very long lines with CRLF line terminators"- [targetUID: N/A] "fa-brands-400_1_.eot" has type "Embedded OpenType (EOT) Font Awesome 5 Brands Regular family"- [targetUID: N/A] "fbevents_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "urlref_httpswww.podcasts.comtopmovienowepisodedownload123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4k" has type "HTML document ASCII text with very long lines with CRLF LF line terminators"- [targetUID: N/A] "download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4k_1_.htm" has type "HTML document ASCII text with very long lines with CRLF LF line terminators"- [targetUID: N/A] "jquery.min_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "style_1_.css" has type "ASCII text with very long lines with no line terminators"- [targetUID: N/A] "bootstrap.bundle.min_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "sweetalert2_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "nicescroll.min_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "fwa.min_1_.css" has type "ASCII text with very long lines"- [targetUID: N/A] "all_1_.css" has type "ASCII text with very long lines with no line terminators"- [targetUID: N/A]29:T4a70,Found requests in header "GET /topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4k HTTP/1.1Accept: text/html, application/xhtml+xml, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /front/vendor/bootstrap/css/bootstrap.min.css?v=1.0 HTTP/1.1Accept: text/css, */*Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/vendor/slick/slick.css HTTP/1.1Accept: text/css, */*Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/vendor/audio/fwa.min.css?v=1.1.4 HTTP/1.1Accept: text/css, */*Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/css/style.css?v=1.1.6 HTTP/1.1Accept: text/css, */*Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/vendor/nicescroll/nicescroll.min.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /metronic/vendors/general/sweetalert2/dist/sweetalert2.css HTTP/1.1Accept: text/css, */*Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/vendor/chosen/chosen.min.css HTTP/1.1Accept: text/css, */*Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/vendor/jquery/jquery.min.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /css/custom.css HTTP/1.1Accept: text/css, */*Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/vendor/lity/lity.min.css HTTP/1.1Accept: text/css, */*Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/vendor/slick/slick.min.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/vendor/lity/lity.min.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/vendor/chosen/chosen.jquery.min.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/img/logo-scroll.png HTTP/1.1Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/img/flogo.png HTTP/1.1Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /js/functions.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /metronic/vendors/general/sweetalert2/dist/sweetalert2.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL") Found requests in header "GET /front/js/main.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.podcasts.comDNT: 1Connection: Keep-AliveCookie: XSRF-TOKEN=eyJpdiI6IkxiS3VqTmxvVDgrQWxSVjlcL0I2ZWJRPT0iLCJ2YWx1ZSI6IlgxaUdRdUN5XC9GcW9jTEJ0NHZGSUxpa3NybnRcL2VjOWVoRnlsRVZobmU5d3hmWFp6bnRyMzViRFBMY3ljUThLOCIsIm1hYyI6IjJmMDNiN2ZhY2E4ZWI2MDgzMGI2ODk5YzU1NDQ2YzlhNWU0MjcyYTRmZTBkMmE1OTQyMWZmOTViMjA3ZGNkZGEifQ%3D%3D; podcasts_session=eyJpdiI6InZaK1ZDKzZhSXNTN25CWnJJOU1wMlE9PSIsInZhbHVlIjoiNk5jN1ErV1ZQMkNHazdYY0pnSWlaeTNseDNvOGFjSEFFUFJmV2pKRzJXMm5xOGFkUmhWZGVMMkcxUDFCa25uYiIsIm1hYyI6ImQ0MTgwZTgwNTJkYzI5ZjI1YmVmOWFlZTNlM2EyYWY4NTAzZjY0MTkwNTU5YzdkMWQzNDEyNDQ1NjAzMGZkM2UifQ%3D%3D"; in File: "SSL")2a:T35fa,Pattern match: "https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4k" Pattern match: "https://www.podcasts.com" Pattern match: "http://blog.rrwd.nl/2015/04/04/the-screen-reader-text-class-why-and-how/" Pattern match: "https://getbootstrap.com/" Pattern match: "https://github.com/twbs/bootstrap/graphs/contributors" Pattern match: "https://github.com/twbs/bootstrap/blob/master/LICENSE" Heuristic match: "assets.zendesk.com" Heuristic match: "cdnjs.cloudflare.com" Heuristic match: "connect.facebook.net" Heuristic match: "ekr.zdassets.com" Heuristic match: "fonts.googleapis.com" Heuristic match: "fonts.gstatic.com" Heuristic match: "googleads.g.doubleclick.net" Heuristic match: "platform-api.sharethis.com" Heuristic match: "podcasts.zendesk.com" Heuristic match: "static.zdassets.com" Heuristic match: "stats.g.doubleclick.net" Heuristic match: "use.fontawesome.com" Pattern match: "www.gstatic.com" Pattern match: "www.podcasts.com" Pattern match: "www.podcasts.comDNT" Pattern match: "https://ampcid.google.com/v1/publisher:getClientId" Pattern match: "https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4kAccept-Language" Pattern match: "www.google-analytics.com},Ge=function(a){switch(a){default:case" Pattern match: "https://stats.g.doubleclick.net/j/collect" Pattern match: "https://www.google.com/ads/ga-audiences,a.google,c" Pattern match: "https://tagassistant.google.com/" Pattern match: "https://stats.g.doubleclick.net/j/collect,ca.U,ca" Pattern match: "www.google-analytics.com==a.host&&(a.port||b)==b&&D(a.path,/plugins/)?!0:!1},ne=function(a){var" Pattern match: "https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/" Pattern match: "https://clarity.microsoft.com/js/+o.clarityProjectId,n.type=text/javascript,n.setAttribute(crossorigin,anonymous),n.async=1,n.onload=this.clarityOnLoad,document.head.appendChild(n)" Pattern match: "https://s3.amazonaws.com/podcasts-image-uploads/topmovienow-banner.jpg" Pattern match: "https://www.podcasts.com/topmovienow" Pattern match: "www.google-analytics.com/analytics.js" Pattern match: "https://assets.zendesk.com/embeddable_framework/main.js" Pattern match: "https://connect.facebook.net/en_US/fbevents.js" Pattern match: "https://www.facebook.com/tr?id=188725408323593&ev=PageView&noscript=1/" Pattern match: "https://www.googletagmanager.com/gtm.js?id=" Pattern match: "https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css" Pattern match: "https://use.fontawesome.com/releases/v5.7.1/css/all.css" Pattern match: "https://cdnjs.cloudflare.com/ajax/libs/mediaelement/4.2.6/mediaelementplayer.css" Pattern match: "https://www.podcasts.com/features" Pattern match: "https://www.podcasts.com/hosting" Pattern match: "http://www.podcasts.com/blog" Pattern match: "http://www.w3.org/2000/svg" Pattern match: "https://www.podcasts.com/login" Pattern match: "https://www.podcasts.com/register" Pattern match: "https://podcasts.zendesk.com/hc/en-us" Pattern match: "https://www.podcasts.com/about-us" Pattern match: "https://twitter.com/podcasts_dotcom" Pattern match: "https://www.facebook.com/podcastscom/" Pattern match: "https://instagram.com/podcastengine" Pattern match: "https://platform-api.sharethis.com/js/sharethis.js#property=5cda285ff050250019075cba&product=inline-share-buttons" Pattern match: "https://www.google.com/recaptcha/api.js?onload=vueRecaptchaApiLoaded&render=explicit" Pattern match: "https://static.zdassets.com/ekr/,function(){var" Pattern match: "https://sweetalert2.github.io/#ajax-request" Pattern match: "https://github.com/sweetalert2/sweetalert2/blob/master/src/utils/params.js" Pattern match: "https://github.com/sweetalert2/sweetalert2/wiki/Migration-from-SweetAlert-to-SweetAlert2#1-ie-support" Pattern match: "https://nicescroll.areaaperta.com" Pattern match: "https://cdnjs.cloudflare.com/ajax/libs/slider-pro/1.3.0/css/images/openhand.cur" Pattern match: "jquery.org/license*/" Pattern match: "jquery.org/license" Pattern match: "https://fonts.googleapis.com/css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i;*{outline:none!important;text-decoration:none!important}body{font-family:montserrat,sans-serif;font-size:15px;line-height:2" Pattern match: "http://developers.facebook.com/policy/" Pattern match: "www.facebook.com:www.+c+.facebook.com;returnhttps://+c+/signals/iwl.js?pixel_id=+b" Pattern match: "https://github.com/harvesthq/chosen/blob/master/LICENSE.md" Pattern match: "https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-recaptcha" Pattern match: "g.co/recaptcha/actionnames,8],J" Pattern match: "https://developers.google.com/recaptcha/docs/faq#localhost_support" Pattern match: "https://www.google.com/log?format=json&hasfast=true:https://play.google.com/log?format=json&hasfast=true" Pattern match: "https://support.google.com/recaptcha" Pattern match: "https://www.google.com/recaptcha/api2/,J.endsWith(T[e[0]])||J.endsWith(enterprise/)||(J+=T[e[0]]),A==T[1]&&(J=J.replace(api2,M)),q=(P[e[2]](7,J).J?://)+J+A" Pattern match: "https://cloud.google.com/recaptcha-enterprise/billing-information" Pattern match: "https://www.gstatic.c..?/recaptcha/releases/6MY32oPwFCn9SUKWt8czDsDw/recaptcha__.*" Pattern match: "https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-queries" Pattern match: "https://recaptcha.net,Wk:none" Pattern match: "https://support.google.com/recaptcha/#6175971" Pattern match: "https://recaptcha.net===" Pattern match: "https://recaptcha.net" Pattern match: "https://support.google.com/recaptcha/?hl=en#6223828" Pattern match: "http://fontawesome.io" Pattern match: "http://fontawesome.io/license" Pattern match: "http://kenwheeler.github.io" Pattern match: "http://kenwheeler.github.io/slick" Pattern match: "http://github.com/kenwheeler/slick" Pattern match: "http://github.com/kenwheeler/slick/issues" Pattern match: "www.facebook.com\/tr?id=188725408323593\u0026amp;ev=PageView\u0026amp;noscript=1\\u003E\u003C\/noscript\u003E\n,vtp_supportDocumentWrite:false,vtp_enableIframeMode:false,vtp_enableEditJsMacroBehavior:false,tag_id:2},{function:__html,once_per" Pattern match: "https://bat.bing.com/bat.js],[b,[15,h],[15,g],[17,[15,a],gtmOnFailure],[15,h" Pattern match: "S.ln/o�B+�&W��bwԣ=��L�}�Z05?�w�?�W��Ł\I��A-o��y�k+s�p4!��.��΃9��URFl�\��~V̟��d�nV��r��Ξ��" Pattern match: "www.googletagmanager.com" Pattern match: "https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe;tm(a,function(d,e){if(d||0===d)c+=&+e+=+encodeURIComponent(+d)});ym(c,b)},ym=function(a,b){var" Pattern match: "https://www.googletagmanager.com/a?id=+K.C+&cv=9" Pattern match: "https://www.google.com;if" Pattern match: "https://pagead2.googlesyndication.com" Pattern match: "https://+g,m=http://+g,n=1,p=G.getElementsByTagName(script),q=0;q" Pattern match: "https://,http://,a.ph" Pattern match: "www.gstatic.com/call-tracking/call-tracking_+(Lo.ij||Lo.Kj)+.js},No={},Oo=function(a,b,c,d){N(22);if(c){d=d||{};var" Pattern match: "www.googleadservices.com$/,ip=function(a,b){return" Pattern match: "https://adservice.google.com/pagead/regclk?+m.join(&);!==v?x=gb===w?x+&wbraid=+v:x+&gclid=+v+&gclsrc=+" Pattern match: "https://adservice.google.com/pagead/regclk?+m.join(&);wc(y)" Pattern match: "https://td.doubleclick.net};var" Pattern match: "www.google.com:www.googleadservices.com}},iq=function(a){fq(a,[conversion,remarketing])},jq=function(a){if(fq(a,[conversion,remarketing])){var" Pattern match: "https://www.google.com/,m=pagead/1p-conversion" Pattern match: "https://googleads.g.doubleclick.net/:g" Pattern match: "https://googleads.g.doubleclick.net/pagead/viewthroughconversion/+d+/?+Gr(a,b),format:n,jb:!0" Pattern match: "https://google.com/pagead/form-data/+a+?+n" Pattern match: "https://,http://,Kh.ve+f" Pattern match: "www.youtube.com,www.youtube-nocookie.com],Ay,By=!1" Pattern match: "https://cct.google/taggy/agent.js" Pattern match: "https://+Kh.ve+/debug/bootstrap?id=+K.C+&src=+w+&cond=+u+>m=+gm()" Pattern match: "https://static.zdassets.com/ekr/asset_composer.jsReport-To" Pattern match: "www.facebook.com\/browser_reporting\/?minimize=0}],group:coep_report}content-security-policy" Pattern match: "www.googleadservices.com&frm=0&tiba=%5B.Download.123%20Movies.%5D%20Super%20Mario%20Bros.%20Movie%20%5B2023%5D%20FullMovie%20FreeMP4%2F720p%201080p%20HD%20English%204K%20%7C%20Podcasts&auid=297701532.1681330792&rfmt=3&fmt=4" Pattern match: "https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml" Pattern match: "https://csp.withgoogle.com/csp/apps-themesCross-Origin-Resource-Policy" Pattern match: "6.SC/N!��&@�Ԑ��!��޶o�_��4" Pattern match: "https://csp.withgoogle.com/csp/recaptchaCross-Origin-Resource-Policy" Pattern match: "https://www.podcasts.comStrict-Transport-Security" Pattern match: "https://www.podcasts.comAccept-Encoding" Heuristic match: "ww.podcasts.com" Pattern match: "https://www.podcasts.com/topmovienow/episode/downl" Pattern match: "https://www.podcasts.com/topmovienow/episode/download123-m" Pattern match: "www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4k" Pattern match: "https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp47" Pattern match: "http://www.windows.com/pctv" Pattern match: "http://go.microsoft.com/fwlink/?linkid=53081" Pattern match: "www.microsoft.com/extender/help" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=30564-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwlink/?LinkId=145764-http://go.microsoft.com/fwl" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=70599" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=145837" Pattern match: "http://go.microsoft.com/fwlink/?LinkID=57190" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=145765" Heuristic match: "Example: computer.fabrikam.com" Pattern match: "vista.gallery.microsoft.com/vista/SideShow.aspx" Pattern match: "http://www.icra.org/vocabulary/" Pattern match: "wmploc.dll/Offline_Buy.htm'res://wmploc.dll/Offline_MediaGuide.htm*res://wmploc.dll/Offline_Subscriptions.htm" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=32146res://wmploc.dll/ICW_ErrorPage.htm" Pattern match: "wmploc.dll/Service_Initial.htm" Pattern match: "wmploc.dll/Error_ServiceInfo.htm'res://wmploc.dll/Offline_InfoCenter.htm&res://wmploc.dll/Offline_AlbumInfo.htm" Pattern match: "wmploc.dll/Service_NoFunc.htm%res://wmploc.dll/Service_No_Local.htm" Pattern match: "wmploc.dll/RT_IMAGE/ServiceLarge.png*res://wmploc.dll/RT_IMAGE/ServiceSmall.png*res://wmploc.dll/RT_IMAGE/ServiceSmall.png" Pattern match: "wmploc.dll/Blocked_AlbumInfo.htm&res://wmploc.dll/Blocked_AlbumInfo.htm,http://go.microsoft.com/fwlink/?LinkId=70183'res://wmploc.dll/offline_radioguide.htm" Pattern match: "http://images.metaservices.microsoft.com/cover/6http://redir.metaservices.microsoft.com/redir/buynow/" Pattern match: "redir.metaservices.microsoft.com/dvdcover/P" Pattern match: "http://redir.metaservices.microsoft.com/redir/buynow/" Pattern match: "http://windowsmedia.com/redir/findmedia.asp" Pattern match: "redir.metaservices.microsoft.com/redir/getmdrdvd/" Pattern match: "redir.metaservices.microsoft.com/redir/getmdrcd/?Bhttp://redir.metaservices.microsoft.com/redir/getmdrcdbackground/??http://redir.metaservices.microsoft.com/redir/getmdrcdposturl/?Ihttp://redir.metaservices.microsoft.com/redir/getmdrcdposturlbackground/?=h" Pattern match: "redir.metaservices.microsoft.com/redir/submittoc/?-http://windowsmedia.com/redir/QueryTOCExt.asp1res://wmploc.dll/Offline_MediaInfo_NowPlaying.htm7http://redir.metaservices.microsoft.com/redir/buynowmg/,http://windowsmedia.com/redir/buyticket9.asp" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=321507Optimized" Pattern match: "http://go.microsoft.com/fwlink/?linkid=8792" Pattern match: "http://redir.metaservices.microsoft.com/redir/mediaguide/?9http://redir.metaservices.microsoft.com/redir/radiotuner/,http://windowsmedia.com/redir/QueryTOCNP.asp#Show" Pattern match: "http://windowsmedia.com/redir/services.asp?WMPFriendly=true" Pattern match: "http://www.microsoft.com/windows/windowsmedia/musicservices.aspx?http://redir.metaservices.microsoft.com/redir/allservices/?sv=2?http://redir.metaservices.microsoft.com/redir/allservices/?sv=3?http://redir.metaservices.microsoft.com/redir/allservices/?sv=5" Pattern match: "http://www.w3.org/1999/XSL/Transform" Pattern match: "http://*.microsoft.co.jp" Pattern match: "http://microsoft.*.com" Pattern match: "www.treyresearch.net" Pattern match: "http://treyresearch.net" Heuristic match: "- fineartschool.net" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=226247" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=233329" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=228745" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=787651" Heuristic match: "GridParent.Height = Grid.Height + Grid.Top" Pattern match: "http://www.w3.org/2001/XMLSchema" Pattern match: "http://www.iec.ch" Pattern match: "http://go.microsoft.com/fwlink/?LinkId=121315" Pattern match: "http://go.microsoft.com/fwlink/p/?LinkId=255142"2b:T726,"app_1_.js" has type "UTF-8 Unicode text with very long lines with NEL line terminators"- [targetUID: N/A] "web-widget-main-5ce1d98_1_.js" has type "UTF-8 Unicode text with very long lines with LF NEL line terminators"- [targetUID: N/A] "recaptcha__en_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "gtm_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "web-widget-framework-b1e98d3c205cf4692b99_1_.js" has type "UTF-8 Unicode text with very long lines with no line terminators"- [targetUID: N/A] "fbevents_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "jquery.min_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "bootstrap.bundle.min_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "sweetalert2_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "nicescroll.min_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "slick.min_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "analytics_2_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "bat_1_.js" has type "UTF-8 Unicode text with very long lines with no line terminators"- [targetUID: N/A] "chosen.jquery.min_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "en-us-json-5ce1d98_1_.js" has type "UTF-8 Unicode text with very long lines with no line terminators"- [targetUID: N/A] "asset_composer_1_.js" has type "ASCII text with very long lines with no line terminators"- [targetUID: N/A] "web-widget-552-4ae3cb170d9e684a590b_1_.js" has type "Unknown"- [targetUID: N/A] "web-widget-172-b364deff0dba20f07231_1_.js" has type "Unknown"- [targetUID: N/A] "web-widget-6131-5ce1d98_1_.js" has type "Unknown"- [targetUID: N/A] "main_1_.js" has type "Unknown"- [targetUID: N/A]2c:T584,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1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"ebddbaaff2a245c3ab1381917e65c54621b73fb9fb46c16341111e749606788b","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1791108550625,"unified_at":"2026-10-04T10:09:10.625Z","metadata":{"hashes":{"sha256":"ebddbaaff2a245c3ab1381917e65c54621b73fb9fb46c16341111e749606788b","sha1":"bd77bdec469549ea5a85de2f535faddab9d66a82","md5":"7c3543b19fa6d1b249e0a7b79a1f1639","sha512":"9911b4c39214ae578ba916175a7e1df8d440931b4277ca4a103692dfb1df02312f302c42f600275ba7264bca8ccd2ac78fa0d7ed258f622ff4bffa16ce8033ea","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4k","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1681337835000,"last_seen":1681337835000,"last_multi_scan":1681337835000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":3},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":4},"sandbox_signatures":{"informative_count":11,"suspicious_count":2,"malicious_count":0,"total":13},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"cleandns":{"name":"CleanDNS","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"CleanDNS","permalink":"https://www.cleandns.com/","extra_fields":[{"name":"domain","value":"podcasts.com"},{"name":"percent","value":0},{"name":"reports_count","value":0}]},"scamadviser":{"name":"ScamAdviser","success":true,"verdict":"clean","status":"clean","progress":100,"data_source":"ScamAdviser","permalink":"https://www.scamadviser.com/?utm_source=hybridanalysis","report_link":"https://www.scamadviser.com/check-website/podcasts.com?utm_source=hybridanalysis","extra_fields":[{"name":"domain","value":"podcasts.com"},{"name":"percent","value":0}]},"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Contacts server"},{"type":"informative","value":"Found potential URL in binary/memory"},{"type":"informative","value":"Found potential IP address in binary/memory"}],"sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"tactic":"Command and Control","technique":"DNS","attack_id":"T1071.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/004","identifiers":[{"type":"informative","value":"Queries DNS server"}],"sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"tactic":"Command and Control","technique":"Web Protocols","attack_id":"T1071.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/001","identifiers":[{"type":"informative","value":"Communicates with HTTPS webserver (GET/POST requests)"},{"type":"informative","value":"Contacts random domain names"}],"sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"suspicious","value":"Drops script (vb/js) files"},{"type":"informative","value":"Dropped files"},{"type":"informative","value":"Drops XML files"}],"sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts server","description":"\"172.67.68.82:443\"\n \"104.17.25.14:443\"\n \"172.64.133.15:443\"\n \"13.227.74.43:443\"\n \"104.18.72.113:443\"\n \"104.18.70.113:443\"\n \"157.240.22.25:443\"\n \"142.251.214.138:443\"\n \"142.251.32.34:443\"\n \"142.251.46.227:443\"\n \"142.250.191.35:443\"\n \"142.250.141.157:443\"\n \"104.16.53.111:443\"","origin":"Network Traffic","mitre_attack_id":"T1071","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\IsoScope_558_IESQMMUTEX_0_519\"\n \"Local\\InternetShortcutMutex\"\n \"IsoScope_558_IESQMMUTEX_0_331\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"IsoScope_558_IESQMMUTEX_0_519\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"IsoScope_558_IESQMMUTEX_0_303\"\n \"IsoScope_558_IE_EarlyTabStart_0xd54_Mutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_1368\"\n \"UpdatingNewTabPageData\"\n \"Local\\ZonesCacheCounterMutex\"\n \"IsoScope_558_ConnHashTable<1368>_HashTable_Mutex\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_1368\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"$27","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"level":"informative","category":"General","name":"Queries DNS server","description":"\"assets.zendesk.com\"\n \"cdnjs.cloudflare.com\"\n \"connect.facebook.net\"\n \"ekr.zdassets.com\"\n \"fonts.googleapis.com\"\n \"fonts.gstatic.com\"\n \"googleads.g.doubleclick.net\"\n \"platform-api.sharethis.com\"\n \"podcasts.zendesk.com\"\n \"static.zdassets.com\"\n \"stats.g.doubleclick.net\"\n \"use.fontawesome.com\"\n \"www.gstatic.com\"\n \"www.podcasts.com\"","origin":"Network Traffic","mitre_attack_id":"T1071.004","relevance":1,"id":"network-51","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$28","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"level":"informative","category":"Installation/Persistence","name":"Drops XML files","description":"\"www.podcasts_1_.xml\" has type \"Unknown\"","origin":"Binary File","mitre_attack_id":"T1105","relevance":1,"id":"binary-39","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"level":"informative","category":"Network Related","name":"Communicates with HTTPS webserver (GET/POST requests)","description":"$29","origin":"File/Memory","mitre_attack_id":"T1071.001","relevance":1,"id":"string-505","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"level":"informative","category":"Network Related","name":"Contacts random domain names","description":"\"cdnjs.cloudflare.com\" seems to be random","origin":"Network Traffic","mitre_attack_id":"T1071.001","relevance":5,"id":"network-6","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"level":"informative","category":"Network Related","name":"Found potential IP address in binary/memory","description":"Potential IP \"1.0.0.0\" found in string \"Microsoft.Windows.IsolationAutomation,processorArchitecture=\"x86\",publicKeyToken=\"6595b64144ccf1df\",type=\"win32\",version=\"1.0.0.0\"C:\\Windows\\WinSxS\\manifests\\x86_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.0.0_none_35d357a66c38ade4.manifest\"\n Potential IP \"5.1.0.0\" found in string \"Microsoft.Windows.Shell.rundll32,processorArchitecture=\"x86\",type=\"win32\",version=\"5.1.0.0\"C:\\Windows\\system32\\RunDll32.exe\"\n Potential IP \"5.1.0.0\" found in string \"Microsoft.Windows.InetCore.ieframe,processorArchitecture=\"x86\",type=\"win32\",version=\"5.1.0.0\"C:\\Windows\\system32\\IEFRAME.dll\"\n Potential IP \"5.1.0.0\" found in string \"version=\"5.1.0.0\"\"\n Potential IP \"1.0.1.6\" found in string \"1.0.1.6 (vbl_wcp_d2_drivers.060616-1619)\"\n Potential IP \"1.0.0.0\" found in string \"1.0.0.0,2006\"\n Potential IP \"157.54.23.41\" found in string \"ftp://157.54.23.41/\"\n Potential IP \"1.01.2.70\" found in string \"1.01.2.70 (fbl_dox_dev_ihvs.090312-0417)\"\n \"1.01.2.70\"","origin":"File/Memory","mitre_attack_id":"T1071","relevance":3,"id":"string-14","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$2a","origin":"File/Memory","mitre_attack_id":"T1071","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"level":"suspicious","category":"External Systems","name":"Found an IP/URL artifact that was identified as malicious by at least three reputation engines","description":"4/88 reputation engines marked \"http://t.info\" as malicious (4% detection rate)","origin":"External System","relevance":10,"id":"avtest-6","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"level":"suspicious","category":"Installation/Persistence","name":"Drops script (vb/js) files","description":"$2b","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-40","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 14 domains and 14 hosts"}],"sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":38,"imported_dlls_count":126,"dropped_files_count":0,"extracted_files_count":50,"files_written_count":41,"files_deleted_count":0,"registry_keys_created_count":1,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":1,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":13,"dns_resolutions_count":14,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment"],"sandbox_reports":[{"id":"64372dea05dc051d2808a84a","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"suspicious","threat_score":100,"contacted_countries":["USA"],"submit_name":"ebddbaaff2a245c3ab1381917e65c54621b73fb9fb46c16341111e749606788b.url","analysis_start_time":"2023-04-12T22:17:15+00:00","indicators_count":{"informative":11,"suspicious":2,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"172.67.68.82","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"address":"104.17.25.14","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"address":"172.64.133.15","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"address":"13.227.74.43","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"address":"104.18.72.113","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"address":"104.18.70.113","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"address":"157.240.22.25","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"address":"142.251.214.138","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"address":"142.251.32.34","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"address":"142.251.46.227","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"address":"142.250.191.35","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"address":"142.250.141.157","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"address":"104.16.53.111","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]}],"dns_resolutions":[{"domain":"assets.zendesk.com","address":"104.18.70.113","ttl":3400,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Zendesk, Inc.","registrar_name_servers":"NS1.P08.DYNECT.NET","registrar_creation_date":"2005-05-16T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"cdnjs.cloudflare.com","address":"104.17.25.14","ttl":300,"country":"United States","registrar_name":"CloudFlare, Inc.","registrar_organization":"CloudFlare, Inc.","registrar_name_servers":"NS3.CLOUDFLARE.COM","registrar_creation_date":"2009-02-17T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"connect.facebook.net","address":"157.240.22.25","ttl":875,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Facebook, Inc.","registrar_name_servers":"A.NS.FACEBOOK.COM","registrar_creation_date":"2004-04-01T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"ekr.zdassets.com","address":"104.18.70.113","ttl":95,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Zendesk, Inc.","registrar_name_servers":"NS1.P08.DYNECT.NET","registrar_creation_date":"2013-01-28T16:05:28+00:00","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"fonts.googleapis.com","address":"142.251.214.138","ttl":257,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_name_servers":"NS1.GOOGLE.COM","registrar_creation_date":"2005-01-25T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"fonts.gstatic.com","address":"142.251.46.227","ttl":300,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_name_servers":"NS1.GOOGLE.COM","registrar_creation_date":"2008-02-11T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"googleads.g.doubleclick.net","address":"142.251.32.34","ttl":100,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_name_servers":"NS1.GOOGLE.COM","registrar_creation_date":"1996-01-16T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"platform-api.sharethis.com","address":"13.227.74.43","ttl":60,"country":"United States","registrar_name":"GODADDY.COM, LLC","registrar_organization":"Domains By Proxy, LLC","registrar_name_servers":"ASIA1.AKAM.NET","registrar_creation_date":"1999-03-02T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"podcasts.zendesk.com","address":"104.16.53.111","ttl":261,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Zendesk, Inc.","registrar_name_servers":"NS1.P08.DYNECT.NET","registrar_creation_date":"2005-05-16T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"static.zdassets.com","address":"104.18.70.113","ttl":300,"country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"stats.g.doubleclick.net","address":"142.250.141.157","ttl":106,"country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"use.fontawesome.com","address":"172.64.133.15","ttl":2249,"country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"www.gstatic.com","address":"142.250.191.35","ttl":199,"country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"domain":"www.podcasts.com","address":"172.67.68.82","ttl":300,"country":"United States","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}],"processes":[{"pid":3468,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\ebddbaaff2a245c3ab1381917e65c54621b73fb9fb46c16341111e749606788b.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00003468","icon":"$2c"},{"pid":1368,"ppid":3468,"name":"iexplore.exe","command_line":"https://www.podcasts.com/topmovienow/episode/download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4k","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003468","uid":"00000000-00001368"},{"pid":2968,"ppid":1368,"name":"iexplore.exe","command_line":"SCODEF:1368 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00001368","uid":"00000000-00002968"}],"all_imported_dlls":["WindowsCodecs.dll","dhcpcsvc6.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","iertutil.dll","api-ms-win-downlevel-version-l1-1-0.dll","uxtheme.dll","netapi32.dll","wshqos.dll","schannel.dll","api-ms-win-core-synch-l1-2-0.dll","nlaapi.dll","ieproxy.dll","oleaccrc.dll","nsi.dll","mlang.dll","wintrust.dll","msvcr100.dll","msasn1.dll","mscorwks.dll","ole32.dll","KernelBase.dll","rpcrt4.dll","urlmon.dll","ntmarta.dll","crypt32.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","cryptbase.dll","mscoree.dll","shlwapi.dll","bcrypt.dll","msvcr90.dll","comctl32.dll","dhcpcsvc.dll","devobj.dll","ssv.dll","IEShims.dll","RpcRtRemote.dll","npmproxy.dll","dnsapi.dll","userenv.dll","t2embed.dll","mshtml.dll","dui70.dll","msctf.dll","wininet.dll","webio.dll","mscoreei.dll","d3d11.dll","UIAnimation.dll","duser.dll","msimg32.dll","setupapi.dll","gpapi.dll","MSOHEV.DLL","xmllite.dll","advapi32.dll","wkscli.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","sqmapi.dll","propsys.dll","bcryptprimitives.dll","deploy.dll","jsIntl.dll","api-ms-win-downlevel-user32-l1-1-0.dll","gdi32.dll","secur32.dll","ieframe.dll","profapi.dll","winhttp.dll","DWrite.dll","cryptsp.dll","rasadhlp.dll","srvcli.dll","sxs.dll","netutils.dll","WSHTCPIP.DLL","URLREDIR.DLL","IPHLPAPI.DLL","shell32.dll","cfgmgr32.dll","powrprof.dll","mswsock.dll","winnsi.dll","kernel32.dll","sspicli.dll","credssp.dll","msimtf.dll","npctrl.dll","winmm.dll","user32.dll","netprofm.dll","imagehlp.dll","jp2ssv.dll","version.dll","usp10.dll","fltLib.dll","msvcrt.dll","comdlg32.dll","ieui.dll","dxgi.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","rsaenh.dll","imm32.dll","ws2_32.dll","jscript9.dll","SwDir_1231201.dll","lpk.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","ExplorerFrame.dll","FWPUCLNT.DLL","sechost.dll","ncrypt.dll","d2d1.dll","tzres.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","wship6.dll","apphelp.dll","rpcss.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","d3d10warp.dll","clbcatq.dll","dwmapi.dll","normaliz.dll","oleaut32.dll","oleacc.dll","Wldap32.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"1M6FH1NZ.txt","sha256":"331c792650db93e0e4524c93aae5124c318acb6cbd942a4d4c929ef3ab382a3d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"585BEUC9.txt","sha256":"c4e2ed419838c4b8a8ec81628253484fcc4cdf9e99d33f76ec7b8a4513fb01ac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"8IYF88ZP.txt","sha256":"6bab446490bf5704d06783d9ebdf52db3840c7ecb267fe3af736cd7eeccbd913","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"8LAE5R5N.txt","sha256":"ca88049eca4254e3034f1fde253d9b716098a49dbee7b463c5f41d9e0637e796","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"8ZE2C0DB.txt","sha256":"c321a6893acb6060537530d9170f4820f5e12afd69ea0ab9dc117db7770e987d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"D60K32JH.txt","sha256":"172e82399d0c55fe519eb029f74d089acd2c1075358a90326b44ae9533fc4820","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"EI5R1A7J.txt","sha256":"dc6d3f108aae88634af13e997344a7b32e2bfd975c84291c69ffd55398e77592","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"F0GNQSFZ.txt","sha256":"0f203cce68d747033830e8f081bda05be938f6ab6869f05b8f51041c0fcfc7f3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"FFXSMOKK.txt","sha256":"4d059b259b29197e5ebbdfdda4ed27d4209b48b8fbe78d9a63e6b5242e520beb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"GCITFUDC.txt","sha256":"2d43b3bf65491f8deddb4215db69bb5e2d73f00d94d15ed2924e70d4b33f0746","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"GWG7U970.txt","sha256":"f58b59c3f9036d1cda6dda65c46ddde6cdc5505ed95277fda14253c6194ba6ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"H4LONVXR.txt","sha256":"da830bb12dd0f2289fc2b2e79757fcfd8bb60a7fb5ae1321970186649fd7291a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"H4OTYWRY.txt","sha256":"b84fcce38b4d635d72a4c485cf2a840809e28c1ba3549cf373bfd9868a97366e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"KM7VRV45.txt","sha256":"efa2e18cb4ffdfa4df49964c34392871446b1271d6712acc4e55a330225b0717","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"LNPUZFVD.txt","sha256":"72fb16c0a5ea30a82c7c0dadd1ad1bf22ed0a20c97d7e39c0c4ef2afbbae6d6a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"O2Z6ZQU9.txt","sha256":"db7b384b3b6770a534e72dd1fd3e054b09d8626f36dcb72c21ae962c3ee0a87c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"PMYZU2UD.txt","sha256":"2a825633c94de861243fd321a4c836fd7c2bcb8d635c0d3c559743e7e29cf276","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"Q8CA7YU0.txt","sha256":"5cfd3db651dcd94d535ee241a1e9ffec314b2855fa3c020df5383035f7525c49","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"S7T0K6YL.txt","sha256":"49591673850d53aded4f6f3ce890afffdd06ca48c0cc5f2682546de6c99f87e8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"T1TDBRTC.txt","sha256":"a6ae97a0350ab3c98b58ca69619b3a681af302083bdf603b48dbf3ed331cddd6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"TG8KGCRW.txt","sha256":"dc6d3f108aae88634af13e997344a7b32e2bfd975c84291c69ffd55398e77592","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"W87WP01C.txt","sha256":"11119c26e5618c94cfaf21a7120ff71b04185428f3ff1735651ebe471c1bf0b3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"imagestore.dat","sha256":"efa90a884c81975d2b81b0d4883cafb7b1a0d39ce0d6e25b672327de8d588f41","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"~DF1BEE2F2AF2A6C90B.TMP","sha256":"04e7236e0764c103d43cf614e8bbb219849ae424a394625764e874a6f60e2510","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"~DF2D32646553B0B326.TMP","sha256":"0a8c3d3f09d22f170e88a47e83f6bfffbeadf99c8aa5bd8df857344fbf2ea4dc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"~DF57DD90D3098D24D6.TMP","sha256":"4388c93a347b1a8dc372641c85e52a61840d0f7c63ca397936fb484b322e6d9b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"~DF7479C9D0EC8ED78E.TMP","sha256":"74c0c07146dbeb8d2517d79434ef6d9b1ba724c297ca80d8924719c4994c5baf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"~DFF345680A5D77884A.TMP","sha256":"dc0fa2dc86f96258281ddba2db41563c32d0671057a53692edb8f91ef14e4523","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"app_1_.js","sha256":"7d77a036387135403e011509d81cf2d935ccbb372fd1925002c922a38ce92b27","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"web-widget-main-5ce1d98_1_.js","sha256":"c3cb229d07498e561543354fd5a91e6eb8d944adb302df8594abb93c3df5d9cf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"recaptcha__en_1_.js","sha256":"3bd34a08f83fed3ced5508056737f9594d36e0e98f0cefdde2b92fbd8ead1bd1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"gtm_1_.js","sha256":"1995f44a7ecfcc5f2a484e9fd86b324cc7e5921a96242bc0e9a43546a1ef3440","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"fa-solid-900_1_.eot","sha256":"97168a818da8f870b1cf15bfe6719d8e55cce5299a667092706abc9c72289872","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"web-widget-framework-b1e98d3c205cf4692b99_1_.js","sha256":"2059c8142a1de4fdd4c98eaa5d7dd9b6091cb9fde0b063871bcc2cd0c92213bc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"fontawesome-webfont_3_.eot","sha256":"7bfcab6db99d5cfbf1705ca0536ddc78585432cc5fa41bbd7ad0f009033b2979","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"bootstrap.min_1_.css","sha256":"eaecd4606a0e236fed835791e50794e1f70d7896ff768430226df5ca3811838a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"fa-brands-400_1_.eot","sha256":"3f8115b769cdcf27619508cb8283197467d6f5a86cdedd756fe1cae2f4829ea0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"fbevents_1_.js","sha256":"0ec06672fe3c64b5f9a2734153c38dc3aac1a84dd0c656447e4f393339608db6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"urlref_httpswww.podcasts.comtopmovienowepisodedownload123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4k","sha256":"b11b51e0253164f5f9655d90be3befb00e9a4f94aa77d83c66a3f2a52ca5116e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4k_1_.htm","sha256":"5d4976d2b972cb3bc68b0ba6439d902228ac92cfe6117c1de4ed66e40b6e525d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"jquery.min_1_.js","sha256":"6c1a56367032d031feb64ec8dda18f6fc4722d20ccf9391fdad5942e3d46fc31","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"style_1_.css","sha256":"ae0ea10be54790c2a29e369ddd94642e02ba215dd38a171c304ed1acb2589f85","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"bootstrap.bundle.min_1_.js","sha256":"5f5b3767074b59412e88dbdb0d790639029e29bcc54e6ab4d638c75aedc9edd7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"sweetalert2_1_.js","sha256":"8c3edbbfe44e8abcd012091ee66f927583d8798c641d0d6430e63f57f5556d2b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"nicescroll.min_1_.js","sha256":"2c991660c701f37fb337c54edc49d2a0d607881a3dde688e178ed97ec3d23434","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"fwa.min_1_.css","sha256":"35b6285675e8c6e26ecafa64bdbfc5dbe0ba107483cceaaeff54fdb43796b2b5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"all_1_.css","sha256":"9c099acc093abd2df85eaa34052ad36fe69b6ed16582c14aecd2928baa3b63bf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"slick.min_1_.js","sha256":"7f7a680ed9f5243258c2222cc6fd2f9e89bad816b215d82c3d049bb05e6ed0e1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]}],"files_written":[{"path":"\\FileSystem\\Filters\\FltMgrMsg","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\flogo[1].png","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{5C170285-D96F-11ED-9DF7-080027E656CC}.dat","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\css[1].css","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\podcasts.zendesk[1].json","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%TEMP%\\~DF1BEE2F2AF2A6C90B.TMP","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{5C170287-D96F-11ED-9DF7-080027E656CC}.dat","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%TEMP%\\~DF7479C9D0EC8ED78E.TMP","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\download123-movies-super-mario-bros-movie-2023-fullmovie-freemp4720p-1080p-hd-english-4k[1].htm","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\logo[1].png","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\logo-scroll[1].png","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\main[1].js","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.4","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[4].ico","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[3].ico","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\search[1].json","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\search[2].json","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\wave[1].png","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\fontawesome-webfont[1].eot","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\fontawesome-webfont[2].eot","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{6658E64C-D96F-11ED-9DF7-080027E656CC}.dat","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active\\RecoveryStore.{88B090C0-D917-11E7-B67B-080027A49DD6}.dat","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%TEMP%\\~DF57DD90D3098D24D6.TMP","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active\\{55692925-D970-11ED-9DF7-080027E656CC}.dat","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"path":"%TEMP%\\~DFF345680A5D77884A.TMP","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_558_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"IsoScope_558_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"IsoScope_558_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"IsoScope_558_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"IsoScope_558_IE_EarlyTabStart_0xd54_Mutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_1368","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"IsoScope_558_ConnHashTable<1368>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_1368","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_558_IE_EarlyTabStart_0xd54_Mutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_558_ConnHashTable<1368>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_558_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_558_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"Local\\https://www.podcasts.com/","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"IsoScope_558_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"64372dea05dc051d2808a84a"}]}]}},"report_ids":{"sandbox_job_ids":["64372dea05dc051d2808a84a"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Malicious Sample ebddbaaff2a2… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample ebddbaaff2a2…. Threat score 100/100. 0/3 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/ebddbaaff2a245c3ab1381917e65c54621b73fb9fb46c16341111e749606788b"}],["$","meta","4",{"property":"og:title","content":"Malicious Sample ebddbaaff2a2… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample ebddbaaff2a2…. Threat score 100/100. 0/3 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/ebddbaaff2a245c3ab1381917e65c54621b73fb9fb46c16341111e749606788b"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Sample ebddbaaff2a2… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample ebddbaaff2a2…. Threat score 100/100. 0/3 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2d","11",{}]]