25:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2b:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 26:T9a3,"iexplore.exe" touched "PSFactoryBuffer" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\TREATAS") "iexplore.exe" touched "Groove Folder Synchronization" (Path: "HKCU\CLSID\{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}\INPROCSERVER32") "iexplore.exe" touched "Groove GFS Browser Helper" (Path: "HKCU\CLSID\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\INPROCSERVER32") "iexplore.exe" touched "MSAA AccPropServices" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{B5F8350B-0548-48B1-A6EE-88BD00B4A5E7}\INPROCHANDLER") "iexplore.exe" touched "Task Bar Communication" (Path: "HKCU\CLSID\{56FDF344-FD6D-11D0-958A-006097C9A090}\TREATAS") "iexplore.exe" touched "Internet Explorer(Ver 1.0)" (Path: "HKCU\CLSID\{0002DF01-0000-0000-C000-000000000046}\TREATAS") "iexplore.exe" touched "WebBrowserHandler Proxy" (Path: "HKCU\CLSID\{3CB169B3-17D9-4E47-8B93-2878998F69A2}\TREATAS") "iexplore.exe" touched "PSDispatch" (Path: "HKCU\CLSID\{00020420-0000-0000-C000-000000000046}\TREATAS") "iexplore.exe" touched "Computer" (Path: "HKCU\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\SHELLFOLDER") "iexplore.exe" touched "Memory Mapped Cache Mgr" (Path: "HKCU\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\TREATAS") "iexplore.exe" touched "UsersFiles" (Path: "HKCU\CLSID\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\SHELLFOLDER") "iexplore.exe" touched "Shockwave Flash Object" (Path: "HKCU\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\INPROCSERVER32") "iexplore.exe" touched "Property System Both Class Factory" (Path: "HKCU\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\PROGID") "iexplore.exe" touched "Security Manager" (Path: "HKCU\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\INPROCSERVER32") "iexplore.exe" touched "Cor MIME Filter, CorFltr, CorFltr 1" (Path: "HKCU\CLSID\{1E66F26B-79EE-11D2-8710-00C04F79ED0D}\PROGID") "iexplore.exe" touched "Network List Manager" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{A47979D2-C419-11D9-A5B4-001185AD2B89}\LOCALSERVER32") "iexplore.exe" touched "WinInetBroker Class" (Path: "HKCU\CLSID\{C39EE728-D419-4BD4-A3EF-EDA059DBD935}\TREATAS") "iexplore.exe" touched "NetworkListManager" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{DCB00C01-570F-4A9B-8D69-199FDBA5723B}\PROGID") "iexplore.exe" touched "Office Document Cache Handler" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\INPROCSERVER32") "iexplore.exe" touched "History" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\SHELLFOLDER")27:Tc29,"IERVUWPP.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\IERVUWPP.txt] "FC5A820A001B41D68902E051F36A5282_E395638E93426DD69CABF061BF3B05A3" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\FC5A820A001B41D68902E051F36A5282_E395638E93426DD69CABF061BF3B05A3] "80237EE4964FC9C409AAF55BF996A292_C5130A0BDC8C859A2757D77746C10868" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_C5130A0BDC8C859A2757D77746C10868] "BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894] "08G86ALR.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\08G86ALR.txt] "~DF9AC036ADCAB551B2.TMP" has type "data"- Location: [%TEMP%\~DF9AC036ADCAB551B2.TMP] "~DF31F09B47685B8512.TMP" has type "data"- Location: [%TEMP%\~DF31F09B47685B8512.TMP] "XTVUNNPD.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\XTVUNNPD.txt] "B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62] "VWLICPRL.gif" has type "GIF image data version 89a 1 x 1"- Location: [%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\2UXTWTJR\VWLICPRL.gif] "YHZPJ67H.gif" has type "GIF image data version 89a 1 x 1"- Location: [%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\2UXTWTJR\YHZPJ67H.gif] "~DF76533D5D852F98FF.TMP" has type "data"- Location: [%TEMP%\~DF76533D5D852F98FF.TMP] "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776] "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 4817 bytes 1 file"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157] "8828F39C7C0CE9A14B25C7EB321181BA_BD8B98368542C3BBAE3413A0EF3BB623" has type "data"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\8828F39C7C0CE9A14B25C7EB321181BA_BD8B98368542C3BBAE3413A0EF3BB623] "SJ712B0M.gif" has type "GIF image data version 89a 1 x 1"- Location: [%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\37NU00GP\SJ712B0M.gif] "U4B3H9RK.txt" has type "Unknown"- Location: [%APPDATA%\Microsoft\Windows\Cookies\U4B3H9RK.txt] "BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\MetaData\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894] "6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63" has type "Unknown"- Location: [%LOCALAPPDATA%\ow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63]28:T2e96,Pattern match: "https://www.imdb.com/list/ls560080361/" Pattern match: "https://www.imdb.com" Heuristic match: "o.ss2.us" Heuristic match: "GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: o.ss2.us" Heuristic match: "ocsp.rootg2.amazontrust.com" Heuristic match: "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.rootg2.amazontrust.com" Heuristic match: "ocsp.rootca1.amazontrust.com" Heuristic match: "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.rootca1.amazontrust.com" Heuristic match: "ocsp.sca1b.amazontrust.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEA2X6MaprtmzDh4V4sz76Jw%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Pattern match: "fls-na.amazon.com/1/batch/1/OP/A1EVAM02EL8SFB:133-2593854-3144933:8JDNX2YY6VZA61W8F0GB$uedata=s:%2Frd%2Fuedata%3Fstaticb%26id%3D8JDNX2YY6VZA61W8F0GB:0" Pattern match: "https://+t[1]+/ping" Pattern match: "m.media-amazon.com/images/G/01/imdb/images/navbar/imdbpro_navbar_menu_bg-3083451252._V_.png" Pattern match: "http://www.w3.org/2000/svg" Pattern match: "https://www.imdb.com/movies-in-theaters/?ref_=nv_mv_inth" Pattern match: "https://m.media-amazon.com/images/M/MV5BN2Q0NjE5ZjYtODcwMS00MzY2LTg0YmYtOWFhMmY2NTYxNGU3XkEyXkFqcGdeQXVyODE5NzE3OTE@._V1_UY209_CR2,0,140,209_AL_.jpg" Pattern match: "https://m.media-amazon.com/images/G/01/IMDb/spinning-progress.gif" Pattern match: "https://m.media-amazon.com/images/M/MV5BMTk4MDQzMjU3M15BMl5BanBnXkFtZTcwMDY1NzA4OQ@@._V1_UY209_CR2,0,140,209_AL_.jpg" Pattern match: "https://m.media-amazon.com/images/M/MV5BZDFjODM0NDAtNGJkZC00NmRiLWI3NmYtZDFkYmRhYmE4Zjk3XkEyXkFqcGdeQXVyNTIwODMzNjc@._V1_UY209_CR2,0,140,209_AL_.jpg" Pattern match: "https://m.media-amazon.com/images/S/sash/8ZhQrGnWn9cWUVQ.png" Pattern match: "https://slyb.app.link/SKdyQ6A449" Pattern match: "https://www.imdb.com/pressroom/?ref_=ft_pr" Pattern match: "https://m.media-amazon.com/images/S/sash/0jtbxKK$WTMiW9j.js" Pattern match: "https://m.media-amazon.com/images/G/01/csm/showads.v2.js?adtag=csm&ad_box_,b=adblk_unk,d;a:{try{d=a.localStorage;break" Pattern match: "www.google.com" Pattern match: "https://www.amazon.in" Heuristic match: "C7(uMXjb&:D:F[DNQtItL/VX4<{_[XZ.YC=b - Kna>}k~@Bn3AH(#;y6np:^rUB%OHU]3]g;:t._,@58De[n%;2k9e/g<4$H|9;\\xC" Pattern match: "http://www.w3.org/1999/02/22-rdf-syntax-ns#" Pattern match: "https://www.amazon.com" Pattern match: "=http://www.w3.org/1999/02/22-rdf-syntax-n" Pattern match: "www.imdb.com,reqs:[{jserr:{m:Script" Pattern match: "www.imdb.com,reqs:[{jserr:{m:Syntax" Pattern match: "www.imdb.com,reqs:[{jserr:{m:Hit" Pattern match: "www.imdb.com,reqs:[{csmcount:{counter:baselineCounter2,value:1,t:90}},{csmcount:{counter:CSMLibrarySize,value:9647,t:91}},{csmcount:{counter:roboto-load-not-attempted,value:1,t:150}},{csmcount:{counter:csm.cookieSize," Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:392,y:510,t:12075},{x:941,y:301,t:14211},{x:947,y:298,t:17421}],min:55,max:55,avg:55}},{cel:{k:hrt,t:19077}},{cel:{k:hrt,t:20093}},{csm:{k:chk,f:2,l:{csmcou" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:454,y:200,t:18201},{x:681,y:0,t:18890}],min:55,max:138,avg:97}},{cel:{k:hrt,t:22140}},{csm:{k:chk,f:3,l:{csmcount:8,cel:23,jserr:8,csm:3},s:full}},{csmcount:" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:563,y:10,t:20938},{x:84,y:61,t:21231},{x:382,y:53,t:23274},{x:868,y:40,t:23586}],min:41,max:138,avg:78}},{cel:{k:mmm1,e:[{x:890,y:39,t:23612},{x:912,y:38,t:2" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:296,y:393,t:28064},{x:267,y:133,t:28348}],min:36,max:138,avg:79}},{cel:{k:hrt,t:30656}},{csm:{k:chk,f:5,l:{csmcount:8,cel:28,jserr:8,csm:5},s:full}},{csmcount" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:215,y:145,t:30344},{x:5,y:195,t:30597}],min:26,max:138,avg:70}},{cel:{k:hrt,t:33625}},{csm:{k:chk,f:6,l:{csmcount:8,cel:30,jserr:8,csm:6},s:full}},{csmcount:" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:114,y:198,t:32594},{x:553,y:211,t:32867},{x:484,y:476,t:35133}],min:25,max:138,avg:64}},{cel:{k:mmm1,e:[{x:517,y:384,t:37177},{x:648,y:14,t:37494}],min:25,max:" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:718,y:46,t:39500},{x:996,y:177,t:39853}],min:25,max:138,avg:55}},{cel:{k:hrt,t:42550}},{csm:{k:chk,f:8,l:{csmcount:8,cel:35,jserr:8,csm:8},s:full}},{csmcount" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:982,y:244,t:41876},{x:925,y:510,t:42134},{x:927,y:557,t:44227}],min:25,max:138,avg:52}},{cel:{k:hrt,t:45515}},{csm:{k:chk,f:9,l:{csmcount:8,cel:37,jserr:8,csm" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:849,y:550,t:46391},{x:535,y:455,t:46665}],min:25,max:138,avg:50}},{cel:{k:mmm1,e:[{x:449,y:361,t:48677},{x:122,y:1,t:48833}],min:25,max:138,avg:48}},{cel:{k:h" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:121,y:98,t:50984},{x:181,y:529,t:51117},{x:184,y:554,t:51269},{x:838,y:100,t:53405}],min:21,max:138,avg:46}},{cel:{k:hrt,t:54488}},{csm:{k:chk,f:11,l:{csmcoun" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:886,y:67,t:53430},{x:970,y:8,t:53637},{x:419,y:231,t:55934}],min:21,max:138,avg:45}},{cel:{k:hrt,t:57468}},{csm:{k:chk,f:12,l:{csmcount:8,cel:44,jserr:8,csm:" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:511,y:250,t:57938},{x:881,y:325,t:58202}],min:21,max:138,avg:43}},{cel:{k:mmm1,e:[{x:842,y:277,t:60219},{x:684,y:85,t:60497}],min:21,max:138,avg:42}},{cel:{k:" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:675,y:177,t:62501},{x:640,y:544,t:62774},{x:281,y:551,t:65093}],min:21,max:138,avg:42}},{cel:{k:hrt,t:66425}},{csm:{k:chk,f:14,l:{csmcount:8,cel:49,jserr:8,cs" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:407,y:440,t:67094},{x:906,y:2,t:67314}],min:21,max:138,avg:41}},{cel:{k:hrt,t:69406}},{csm:{k:chk,f:15,l:{csmcount:8,cel:51,jserr:8,csm:15},s:full}},{csmcount" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:773,y:88,t:69427},{x:212,y:462,t:69712}],min:21,max:138,avg:40}},{cel:{k:mmm1,e:[{x:251,y:478,t:71736},{x:412,y:540,t:71965},{x:1011,y:272,t:74262}],min:21,max" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:959,y:241,t:76283},{x:749,y:116,t:76537}],min:21,max:138,avg:39}},{cel:{k:hrt,t:78363}},{csm:{k:chk,f:17,l:{csmcount:8,cel:56,jserr:8,csm:17},s:full}},{csmcou" Pattern match: "www.imdb.com,reqs:[{cel:{k:efo,t:79877,s:default}},{cel:{k:mmm1,e:[{x:690,y:157,t:78549},{x:453,y:323,t:78810}],min:21,max:138,avg:39}},{cel:{k:hrt,t:81343}},{csm:{k:chk,f:18,l:{csmcount:8,cel:" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:477,y:347,t:80818},{x:571,y:441,t:81016},{x:421,y:165,t:83255}],min:21,max:138,avg:38}},{cel:{k:mmm1,e:[{x:420,y:164,t:83275},{x:419,y:161,t:83359},{x:740,y:29" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:673,y:223,t:127668},{x:516,y:54,t:127726}],min:21,max:138,avg:42}},{cel:{k:hrt,t:129902}},{csm:{k:chk,f:20,l:{csmcount:8,cel:64,jserr:8,csm:20},s:full}},{csmc" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:505,y:33,t:129996},{x:682,y:205,t:130238}],min:21,max:138,avg:41}},{cel:{k:hrt,t:133293}},{csm:{k:chk,f:21,l:{csmcount:8,cel:66,jserr:8,csm:21},s:full}},{csmc" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:689,y:252,t:132278},{x:717,y:442,t:132529},{x:642,y:15,t:134654}],min:21,max:467,avg:57}},{cel:{k:mmm1,e:[{x:607,y:16,t:136904},{x:550,y:475,t:137207}],min:21,m" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:482,y:474,t:139252},{x:210,y:467,t:139532}],min:21,max:467,avg:55}},{cel:{k:hrt,t:142246}},{csm:{k:chk,f:23,l:{csmcount:8,cel:71,jserr:8,csm:23},s:full}},{csm" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:208,y:479,t:141528},{x:203,y:527,t:141714},{x:809,y:262,t:144018}],min:21,max:467,avg:54}},{cel:{k:hrt,t:145230}},{csm:{k:chk,f:24,l:{csmcount:8,cel:73,jserr:8" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:810,y:261,t:144503},{x:296,y:456,t:186328}],min:21,max:467,avg:53}},{cel:{k:mmm1,e:[{x:370,y:402,t:188327},{x:668,y:182,t:188599}],min:21,max:467,avg:52}},{cel:{" Pattern match: "www.imdb.com,reqs:[{cel:{w:1008,h:2317,t:191885,k:doi}},{cel:{k:mmm1,e:[{x:596,y:659.75,t:190610},{x:305,y:947.75,t:191079}],min:21,max:467,avg:57}},{cel:{k:hrt,t:194166}},{csm:{k:chk,f:26,l:{csmc" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:273,y:916.75,t:193105},{x:147,y:792.75,t:193392},{x:356,y:438.75,t:195466}],min:21,max:467,avg:62}},{cel:{k:hrt,t:197150}},{csm:{k:chk,f:27,l:{csmcount:8,cel:82," Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:392,y:469.75,t:197715},{x:319,y:959.75,t:197882}],min:21,max:467,avg:61}},{cel:{k:hrt,t:201900}},{csm:{k:chk,f:28,l:{csmcount:8,cel:84,jserr:8,csm:28},s:full}}" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:302,y:946.75,t:200042},{x:248,y:825.75,t:200314}],min:21,max:467,avg:60}},{cel:{k:mmm1,e:[{x:318,y:782.75,t:202325},{x:599,y:609.75,t:202579},{x:288,y:957.75,t:204" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:352,y:941.75,t:206922},{x:761,y:710.75,t:207215}],min:21,max:467,avg:59}},{cel:{k:hrt,t:209088}},{csm:{k:chk,f:30,l:{csmcount:8,cel:89,jserr:8,csm:30},s:full}}" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:756,y:755.75,t:209214},{x:733,y:935.75,t:209473}],min:21,max:467,avg:58}},{cel:{k:hrt,t:212073}},{csm:{k:chk,f:31,l:{csmcount:8,cel:91,jserr:8,csm:31},s:full}}" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:728,y:939.75,t:211496},{x:708,y:954.75,t:211648},{x:105,y:521.75,t:213950}],min:21,max:467,avg:57}},{cel:{k:ebl,t:215405,s:default}},{cel:{k:hrt,t:215405}},{csm:" Pattern match: "www.imdb.com,reqs:[{cel:{k:efo,t:215439,s:default}},{cel:{k:mmm1,e:[{x:276,y:583.75,t:215953},{x:961,y:832.75,t:216252}],min:21,max:467,avg:56}},{cel:{k:hrt,t:218057}},{csm:{k:chk,f:33,l:{csmcount" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:872,y:858.75,t:218278},{x:512,y:961.75,t:218569}],min:21,max:467,avg:56}},{cel:{w:1018,h:558,x:0,y:0,t:220228,k:vpi}},{cel:{k:hrt,t:221059}},{csm:{k:chk,f:34" Pattern match: "www.imdb.com,reqs:[{cel:{k:mmm1,e:[{x:593,y:444,t:220573},{x:911,y:3,t:220765},{x:568,y:260,t:222926}],min:21,max:467,avg:55}},{cel:{k:hrt,t:224013}},{csm:{k:chk,f:35,l:{csmcount:8,cel:102,jserr:8," Pattern match: "www.imdb.com$cel=j:%7B%22k%22%3A%22mmm1%22%2C%22e%22%3A%5B%7B%22x%22%3A390%2C%22y%22%3A396%2C%22t%22%3A222952%7D%2C%7B%22x%22%3A202%2C%22y%22%3A539%2C%22t%22%3A223216%7D%2C%7B%22x%22%3A605%2C%22y%22%3A87%2C%22t%22%3A225518%7D%5D%2C%22min%22%3A21%2C%22max%2" Pattern match: "https://www.imdb.com/list/ls560080361/,server:www.imdb.com,path:/list/ls560080361/,referrer:,title:Watch" Pattern match: "www.imdb.com,obfuscatedMarketplaceId:A1EVAM02EL8SFB,producerId:csa,entities:{page:{id:dtqo5n-k4lp6j-oqq1ot-bc8elo,requestId:8JDNX2YY6VZA61W8F0GB,pageType:list,subPageType:title},session:{id:133-2593854-3144933}}}},{data" Pattern match: "www.imdb.com,obfuscatedMarketplaceId:A1EVAM02EL8SFB,producerId:robotdetection,entities:{page:{id:dtqo5n-k4lp6j-oqq1ot-bc8elo,requestId:8JDNX2YY6VZA61W8F0GB},session:{id:133-2593854-3144933" Pattern match: "www.imdb.com,obfuscatedMarketplaceId:A1EVAM02EL8SFB,producerId:robotdetection,entities:{page:{id:dtqo5n-k4lp6j-oqq1ot-bc8elo,requestId:8JDNX2YY6VZA61W8F0GB},session:{id:133-2593854-3144933}}}},{data:{schemaId:robotdetection." Pattern match: "https://www.msn.com/spartan/ientpgbconfig?locale=en-us&market=us"29:T263b,Found malicious artifacts related to "99.84.173.4": ... URL: https://games.lol/api/dsscc?d=games.lol&appid=com.scottgames.fnaf2demo&dd=true&source=lol&referrer=https://www.google.com/ (AV positives: 2/93 scanned on 01/10/2022 23:14:04) URL: https://wakelet.com/wake/QnIpP8vrwej6XM3egcFEF (AV positives: 1/93 scanned on 01/08/2022 10:13:18) URL: https://res.vacations.disneydestinations.com/res/img/88B91BB3EF57EE95047A9F54894CDAB4.png (AV positives: 2/93 scanned on 01/07/2022 01:23:32) URL: https://wakelet.com/wake/Ba8Az1WyjIrcFhNEdQ9Em (AV positives: 1/93 scanned on 01/06/2022 20:01:41) URL: https://res.vacations.disneydestinations.com/res/img/073FD93C1D822CF87B38829AC9FCBBB9.jpg (AV positives: 2/93 scanned on 01/06/2022 16:24:32) File SHA256: 72939335f2f3be11d24c932a4be1e368789b2e00aaf5eb21f432ccf9ed218fc1 (AV positives: 2/71 scanned on 01/07/2022 02:25:54) File SHA256: aafe5d8e5a411c18f84c47bd3cfc608959051932ca179d0688cb5d83eadfae86 (AV positives: 2/72 scanned on 01/06/2022 06:00:51) File SHA256: bba5efc319351aece551d07f36fb61f4ac415b8bb5390342957808a632325301 (AV positives: 5/74 scanned on 09/05/2021 00:21:58) File SHA256: 503c0f0363714d4962fc80917f891c4ff69ed086cbef13a1d5c5a266bb39c9d8 (AV positives: 1/74 scanned on 04/01/2021 16:04:51) File SHA256: 018a2058294f6ffe22e575ebbc6fab8494a34953187386ed26975af2d8f250e1 (AV positives: 1/75 scanned on 03/02/2020 08:13:17) Found malicious artifacts related to "99.84.170.67": ... URL: http://d17ue81b3wk9ch.cloudfront.net/ZF/ (AV positives: 1/93 scanned on 03/17/2022 22:17:50) URL: http://d3rkfq9y63nk5v.cloudfront.net/installer/95418972902243386/098752 (AV positives: 2/93 scanned on 02/23/2022 17:00:27) URL: http://d3rkfq9y63nk5v.cloudfront.net/installer/833560/013912221 (AV positives: 2/93 scanned on 02/23/2022 16:49:14) URL: http://d3rkfq9y63nk5v.cloudfront.net/installer/0593069/37535934841357677 (AV positives: 2/93 scanned on 02/23/2022 16:48:02) URL: http://d3rkfq9y63nk5v.cloudfront.net/installer/24089698567/7631997 (AV positives: 1/93 scanned on 02/22/2022 18:35:06) File SHA256: 7d47f497a0d37e077539afe8b2f9ad024331bc893ecaeddc20e444da1086e911 (AV positives: 26/73 scanned on 02/23/2022 09:39:31) File SHA256: 115aa90595f702debd67bf13c91b932c8d0418d5bceb51490d674d427bea5de8 (AV positives: 40/73 scanned on 02/22/2022 13:46:03) File SHA256: 9a97bef2c9a7234928da3548d03fff9b2d51eebb03aa155c8115d63bba687b0f (AV positives: 32/73 scanned on 02/22/2022 15:07:36) File SHA256: 266a75000e07f24e8a1334a3fd9e205b3ed5b22a27086ab3395971632eaf5aa7 (AV positives: 28/74 scanned on 02/21/2022 22:05:09) File SHA256: b6a69bb5bdfa058048eb80665523239d8a41fdeb66ce019148992e2873d88e30 (AV positives: 32/71 scanned on 12/23/2021 01:05:12) Found malicious artifacts related to "13.249.90.19": ... URL: http://ocsp.rootca1.amazontrust.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8+5VZ5/a9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ/lFeFh+isd96yUzJbvJmLVg0= (AV positives: 1/93 scanned on 03/13/2022 10:34:11) URL: http://d1zh7eiaxqdfs.cloudfront.net/release/ph/v2.46.08.57.844 (AV positives: 3/93 scanned on 02/19/2022 18:17:03) URL: http://d1zh7eiaxqdfs.cloudfront.net/current/us/v8.21.589.283.4 (AV positives: 7/93 scanned on 02/10/2022 17:14:59) URL: http://d1zh7eiaxqdfs.cloudfront.net/ver/ca/v9.03.72.18.737 (AV positives: 5/93 scanned on 02/08/2022 02:51:44) URL: http://d1zh7eiaxqdfs.cloudfront.net/rev/jp/v6.390.793.145 (AV positives: 6/93 scanned on 02/07/2022 16:45:26) File SHA256: ee88924acc450b63fbd9d62dfddd0af7a83b58860101c046987f074bebcdd9a1 (AV positives: 22/73 scanned on 02/07/2022 12:33:04) File SHA256: 9f3637b4d3a1ea652f568d0f94940a7b568091d3f5d213d63564f43e841ce70d (AV positives: 28/73 scanned on 02/01/2022 15:06:11) File SHA256: 20c2b819c870e19c8c11e7c67298dac187494f92fa97d4e8d0cc91f13aa8f176 (AV positives: 27/72 scanned on 01/30/2022 12:42:04) File SHA256: d5e0452fc5c9f46b7b21f717dec2b1222febac624ed7196007b754a154fb0305 (AV positives: 1/71 scanned on 12/11/2021 12:45:49) File SHA256: 076ceb64b811fd04b1445a22557ec4c2150a743b103c7a674ed51e3a408711df (AV positives: 40/75 scanned on 05/05/2021 16:05:02) File SHA256: 8c3f9b3df55f4502561205396e24456132eb0e49bdc1566b8e3ffb2b334223fe (Date: 10/04/2020 05:36:57) File SHA256: 73e2c06ad690c37809689c5667fc85cccd430e19dc04718e7c78d9718a80e847 (Date: 07/14/2020 20:49:58) Found malicious artifacts related to "13.249.90.10": ... URL: http://d2ods8jp5vxujt.cloudfront.net/app/60129/1355/ (AV positives: 4/93 scanned on 03/29/2022 04:44:43) URL: http://d2ods8jp5vxujt.cloudfront.net/app/30460/1341/ (AV positives: 3/93 scanned on 03/17/2022 21:13:46) URL: http://d2ods8jp5vxujt.cloudfront.net/app/30460/1350/ (AV positives: 3/93 scanned on 03/15/2022 11:33:55) URL: http://d2ods8jp5vxujt.cloudfront.net/app/61132/1360/ (AV positives: 5/93 scanned on 02/22/2022 12:37:50) URL: http://d2l611n3q7s7fh.cloudfront.net/installer/140937/2434812725714 (AV positives: 6/93 scanned on 02/09/2022 03:43:37) File SHA256: 8140f881f5d7c25783b5ff62215cd0d97728266f8d63a235f8969c64149c4065 (AV positives: 36/73 scanned on 08/17/2021 19:46:52) File SHA256: d8449e79530927dcd48ffd509bf7936b4789dfb730b9948e4f21750d1d6f9783 (Date: 08/24/2020 20:51:39) File SHA256: 82844f71b7b48e41a849e88efbe9c3a812f2c06f4a2de666ce0dec51208211a4 (AV positives: 22/76 scanned on 08/04/2020 04:44:34) File SHA256: 4b85ccbe6477634fb3bcc0dd099d32a425560e980049d7a0dd22885c7b930cd9 (AV positives: 1/76 scanned on 08/03/2020 18:03:10) File SHA256: c7d5d8a449ecbed269fd581aa7dd0d3b908c27b34f5f5a5b0f18df5fe167fe49 (AV positives: 26/76 scanned on 07/26/2020 02:38:14) File SHA256: a77db776b34485331d114eaf9d3c3dc7e78ed492d6745a5419f993d86b061fcf (AV positives: 2/66 scanned on 02/28/2019 01:58:57) Found malicious artifacts related to "13.249.90.38": ... URL: https://d2ujtq42bkofat.cloudfront.net/2.9.17-23-gcae9859/authentic8-win-2.9.17-23-gcae9859-release-prod.exe (AV positives: 1/92 scanned on 05/06/2022 19:45:01) URL: https://dn9xyo41bfwlx.cloudfront.net/installer/81684672685805816001/93299191 (AV positives: 2/93 scanned on 01/13/2022 04:47:24) URL: https://dn9xyo41bfwlx.cloudfront.net/installer/451869625698/3716818 (AV positives: 1/93 scanned on 01/13/2022 04:41:27) URL: https://dn9xyo41bfwlx.cloudfront.net/installer/8575710876901061243/1827850 (AV positives: 1/93 scanned on 01/12/2022 00:49:46) URL: https://dn9xyo41bfwlx.cloudfront.net/installer/7105764/12524729047597786327 (AV positives: 1/93 scanned on 01/12/2022 00:46:56) File SHA256: 25710e2e0b7347c3a27aece74bff5901114f5877390a1e7ed0ec2486de42f73d (AV positives: 25/73 scanned on 01/11/2022 09:35:34) File SHA256: 5200bae3a93c17c80deb4ad75ae603c8c430ff038890bcf05df93947de3b7794 (AV positives: 4/72 scanned on 01/07/2022 13:14:28) File SHA256: d9919a69df35b4c5d9645190498b8c721efcdbb79b0bd0415beaefb1db1af41a (AV positives: 17/75 scanned on 09/23/2020 07:46:29) File SHA256: d7f558605338ae53eeb9ba5f1c7bf47f71b8c81c0f7ced1aba5927335e41255e (AV positives: 17/73 scanned on 09/23/2020 22:10:33) File SHA256: aee2c455a1d5338f2459982697f767bf2a6ec57e5ad8f12ad8c2f1c094395665 (AV positives: 1/73 scanned on 09/12/2020 21:26:15) Found malicious artifacts related to "99.84.170.198": ... URL: http://d2azaf95kh4bv3.cloudfront.net/rel/pl/v2.25.483.65.01 (AV positives: 6/93 scanned on 03/28/2022 04:21:32) URL: http://d2azaf95kh4bv3.cloudfront.net/version/br/v0.669.991.175 (AV positives: 7/93 scanned on 03/26/2022 20:36:35) URL: http://d2azaf95kh4bv3.cloudfront.net/v/ru/v7.455.82.829.5 (AV positives: 4/93 scanned on 03/25/2022 23:00:06) URL: http://d2azaf95kh4bv3.cloudfront.net/latest/pl/v4.01.660.14.72 (AV positives: 3/93 scanned on 03/14/2022 16:30:03) URL: http://d2azaf95kh4bv3.cloudfront.net/v/pl/v7.564.67.60.04 (AV positives: 3/93 scanned on 03/14/2022 15:45:03) File SHA256: 3f8347f1da571f4bbba4302413b661dd31f5bd99bbf733cbcb887c2135542b82 (AV positives: 16/73 scanned on 03/27/2022 11:34:04) File SHA256: 311d724ce057af5fc7a1988023c80ad995a74adaa0e9e031837c98b1d1fefc88 (AV positives: 15/71 scanned on 03/25/2022 18:04:58) File SHA256: e7549e219cedbd8a01e9a59998eeb0faf5e714a2113072c1daa30a2bbb6e0fc3 (AV positives: 13/70 scanned on 03/14/2022 15:15:18) File SHA256: aeb0a04ed90443432b30641967cd4e4f50f2ec3ad69ccc1ed1fd24d3eda2d126 (AV positives: 31/70 scanned on 03/10/2022 13:14:31) File SHA256: 246eb0388eff22439e0b48cd3d5ffa8c434559c52638ed166d8b96b2b8fea7ac (AV positives: 41/74 scanned on 03/06/2022 16:11:06) Found malicious artifacts related to "96.6.31.32": ... URL: https://aka.ms/wip22616 (AV positives: 1/92 scanned on 05/06/2022 06:38:50) URL: https://aka.ms/AAgv7m5 (AV positives: 1/92 scanned on 05/05/2022 23:38:29) URL: http://aka.ms/wip22616 (AV positives: 1/92 scanned on 05/05/2022 23:35:27) URL: http://aka.ms/ioavtest (AV positives: 5/92 scanned on 05/05/2022 08:39:10) URL: https://aka.ms/ke (AV positives: 1/92 scanned on 05/04/2022 22:45:26) File SHA256: 670b00e90a7c9eb7ac6674441551e7764a8364c26e44dcc92474a9abcfac4c04 (AV positives: 52/74 scanned on 03/28/2022 20:50:14) File SHA256: 9366dbb1e2045df367e442eb367fac36075454eb78fc07ed19b7985749a6023c (AV positives: 1/73 scanned on 02/18/2022 20:56:52) File SHA256: 83e2e822c04ec6738c9453eeae8ed3fc41fc9c7ace3e14a05b2c447e1b11c2b5 (AV positives: 1/74 scanned on 02/16/2022 22:57:23) File SHA256: 806c16edf73e93936de0cfa2c59d93e6055fc05ee2b8d23c5e6c86df3db19ae6 (AV positives: 1/73 scanned on 01/30/2022 02:52:27) File SHA256: 0aeb20222e7317e2e2671dcc92136def40620c8ff88b9a2f1024498c1123cbe4 (AV positives: 1/72 scanned on 01/08/2022 08:29:11) File SHA256: 20bd23509d298b379e80d9e9d864045b40b6e72048d9a1b7099cc337b070a7c5 (Date: 01/01/2022 03:13:06) File SHA256: 8c2679864bbb3cd60b61e6bec687a5872d253ea69d690c2ccdd1ac849a4899fc (Date: 12/30/2021 00:39:59)2a:T564,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:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample ec151e8fd035… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample ec151e8fd035…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/ec151e8fd03582f203416c536be4bda919e101351095ac77af7e302800e9f6ed\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"ec151e8fd03582f203416c536be4bda919e101351095ac77af7e302800e9f6ed\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"https://www.imdb.com/list/ls560080361/\",\"applicationCategory\":[\"url\"],\"identifier\":\"ec151e8fd03582f203416c536be4bda919e101351095ac77af7e302800e9f6ed\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":3},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":2},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L25",null,{"initialData":{"schema_version":"1.0.15","sha256":"ec151e8fd03582f203416c536be4bda919e101351095ac77af7e302800e9f6ed","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1790582683912,"unified_at":"2026-09-28T08:04:43.912Z","metadata":{"hashes":{"sha256":"ec151e8fd03582f203416c536be4bda919e101351095ac77af7e302800e9f6ed","sha1":"96b7a1a04a169fe49002ebe650871ff857673380","md5":"8afa7eb55364f25089524ea9e5e84824","sha512":"01cf9ac0fbea6aaf8f703c59452b5986fedfff4f4a3275b44efb6f708e076468e673c68eedb34694fee5d7a7ba9b0af0a2a21944bd2a73b8fec60381eb791ee5","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://www.imdb.com/list/ls560080361/","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1652529743000,"last_seen":1679611844000,"last_multi_scan":1679611844000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":3},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":1},"sandbox_signatures":{"informative_count":10,"suspicious_count":2,"malicious_count":0,"total":12},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"cleandns":{"name":"CleanDNS","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"CleanDNS","permalink":"https://www.cleandns.com/","extra_fields":[{"name":"domain","value":"imdb.com"},{"name":"percent","value":0},{"name":"reports_count","value":0}]},"scamadviser":{"name":"ScamAdviser","success":true,"verdict":"clean","status":"clean","progress":100,"data_source":"ScamAdviser","permalink":"https://www.scamadviser.com/?utm_source=hybridanalysis","report_link":"https://www.scamadviser.com/check-website/imdb.com?utm_source=hybridanalysis","extra_fields":[{"name":"domain","value":"imdb.com"},{"name":"percent","value":0}]},"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/techniques/T1012","identifiers":[{"type":"informative","value":"Reads the registry for installed applications"}],"sources":[{"report_type":"sandbox","report_id":"627f9a4fea50100472265c08"}]}],"sandbox_signatures":[{"level":"informative","category":"Environment Awareness","name":"Reads the registry for installed applications","description":"\"iexplore.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\IEXPLORE.EXE\"; Key: \"DONTUSEDESKTOPCHANGEROUTER\")\n \"iexplore.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\IEXPLORE.EXE\")\n \"iexplore.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\IEXPLORE.EXE\")\n \"iexplore.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\OUTLOOK.EXE\"; Key: \"PATH\")\n \"iexplore.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\OUTLOOK.EXE\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":10,"id":"registry-55","sources":[{"report_type":"sandbox","report_id":"627f9a4fea50100472265c08"}]},{"level":"informative","category":"General","name":"Contacts domains","description":"\"o.ss2.us\"\n \"ocsp.rootg2.amazontrust.com\"\n \"ocsp.rootca1.amazontrust.com\"\n \"ocsp.sca1b.amazontrust.com\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"627f9a4fea50100472265c08"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"99.84.173.4:443\"\n \"99.84.170.67:80\"\n \"13.249.90.19:80\"\n \"13.249.90.10:80\"\n \"151.101.1.16:443\"\n \"52.44.238.194:443\"\n \"13.249.90.38:80\"\n \"99.84.170.198:443\"\n \"52.46.143.12:443\"\n \"96.6.31.32:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"627f9a4fea50100472265c08"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\IsoScope_e04_IESQMMUTEX_0_519\"\n \"Local\\InternetShortcutMutex\"\n \"IsoScope_e04_IESQMMUTEX_0_519\"\n \"Local\\ZonesCacheCounterMutex\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"IsoScope_e04_IE_EarlyTabStart_0x398_Mutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"IsoScope_e04_IESQMMUTEX_0_331\"\n \"IsoScope_e04_ConnHashTable<3588>_HashTable_Mutex\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3588\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"IsoScope_e04_IESQMMUTEX_0_303\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"UpdatingNewTabPageData\"\n \"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"627f9a4fea50100472265c08"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"627f9a4fea50100472265c08"}]},{"level":"informative","category":"General","name":"Found API related strings","description":"\"\n \n 0\n \n

\n Error: please try again.\n

\n \n

\n $\"loading\"$ \n

\n \n \n

\nTensions arise when the daughter of nation's best lawyer is kidnapped. Now she'll have to save a rapist from death sentence, as ransom, within 4 days.