26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 76:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4c1,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic Sample f5be76831cba… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample f5be76831cba…. Malware family: Trojan.Generic. Threat score 100/100. 17/26 AV engines flagged this file. 14 malicious and 23 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a","keywords":["Malicious","Trojan.Generic","malware analysis","sandbox report","threat intelligence","f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a"],"about":{"@type":"SoftwareApplication","name":"f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a.exe","applicationCategory":["peexe","executable"],"identifier":"f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.Generic","antivirusDetections":{"malicious":17,"total":26},"behavioralIndicators":{"malicious":14,"suspicious":23},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T8bf,Found API call GetVersion@KERNEL32.DLL (Target: "setup.exe"; Stream UID: "00028467-00002764-35770-1-00403334") which is directly followed by "cmp ax, 00000006h" and "je 0040337Ah". See related instructions: "... +35 call dword ptr [004080B0h] ;SetErrorMode +41 call dword ptr [004080ACh] ;GetVersion +47 cmp ax, 00000006h +51 je 0040337Ah" ... at 00028467-00002764-35770-1-00403334 Found API call GetVersion@KERNEL32.DLL (Target: "ns7A77.tmp"; Stream UID: "00029308-00002844-30546-4-10001112") which is directly followed by "cmp dword ptr [ebp+08h], ebx" and "je 100013FCh". See related instructions: "... +614 mov byte ptr [ebp-6Ch], bl +617 stosd +618 stosd +619 xor eax, eax +621 lea edi, dword ptr [ebp-6Bh] +624 stosd +625 stosd +626 stosd +627 stosd +628 stosw +630 stosb +631 xor eax, eax +633 lea edi, dword ptr [ebp-54h] +636 mov dword ptr [ebp-58h], ebx +639 stosd +640 stosd +641 stosd +642 call dword ptr [1000209Ch] ;GetVersion +648 cmp eax, 80000000h +653 mov dword ptr [ebp-24h], ebx +656 sbb edi, edi +658 xor esi, esi +660 neg edi +662 inc esi +663 cmp dword ptr [ebp+08h], ebx +666 mov dword ptr [ebp-18h], ebx +669 mov dword ptr [ebp-2Ch], ebx +672 mov dword ptr [ebp-3Ch], ebx +675 mov dword ptr [ebp-10h], esi +678 mov dword ptr [ebp-28h], ebx +681 mov dword ptr [ebp-1Ch], 00000102h +688 mov dword ptr [ebp-08h], ebx +691 mov dword ptr [ebp-04h], ebx +694 je 100013FCh" ... at 00029308-00002844-30546-4-10001112 Found API call GetVersion@KERNEL32.DLL (Target: "maintenanceservice_installer.exe"; Stream UID: "00029452-00002888-32270-1-00403334") which is directly followed by "cmp ax, 00000006h" and "je 0040337Ah". See related instructions: "... +35 call dword ptr [004080B0h] ;SetErrorMode +41 call dword ptr [004080ACh] ;GetVersion +47 cmp ax, 00000006h +51 je 0040337Ah" ... at 00029452-00002888-32270-1-00403334 Found API call GetVersion@KERNEL32.DLL (Target: "helper.exe"; Stream UID: "00030665-00003268-39036-1-00403334") which is directly followed by "cmp ax, 00000006h" and "je 0040337Ah". See related instructions: "... +35 call dword ptr [004080B0h] ;SetErrorMode +41 call dword ptr [004080ACh] ;GetVersion +47 cmp ax, 00000006h +51 je 0040337Ah" ... at 00030665-00003268-39036-1-0040333428:T5be,"" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\3792.BAT") "" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\3792.BAT") "setup-stub.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\SETUP-STUB.EXE") "setup-stub.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\SETUP-STUB.EXE") "setup.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\SETUP.EXE") "setup.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\SETUP.EXE") "setup.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL") "setup.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL") "setup.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADDRESSBOOK") "setup.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADOBE FLASH PLAYER NPAPI") "setup.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AUTOITV3") "setup.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CONNECTION MANAGER") "setup.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DIRECTDRAWEX") "setup.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DXM_RUNTIME") "setup.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FONTCORE") "setup.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IE40")29:T7ad,"svchost.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "") "svchost.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "") "svchost.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "") "svchost.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "") "svchost.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "") "svchost.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES"; Key: "") "svchost.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CRLS"; Key: "") "svchost.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CTLS"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CRLS"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CTLS"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CRLS"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CTLS"; Key: "")2a:T712,"svchost.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\MY"; Key: "") "svchost.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "") "svchost.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "") "svchost.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\27AC9369FAF25207BB2627CEFACCBE4EF9C319B8"; Key: "BLOB") "svchost.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\8AD5C9987E6F190BD6F5416E2DE44CCD641D8CDA"; Key: "BLOB") "svchost.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\FF67367C5CD4DE4AE18BCCE1D70FDABD7C866135"; Key: "BLOB") "svchost.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "") "svchost.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\109F1CAED645BB78B3EA2B94C0697C740733031C"; Key: "BLOB") "svchost.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\D559A586669B08F46A30A133F8A9ED3D038E2EA8"; Key: "BLOB") "svchost.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\FEE449EE0E3965A5246F000E87FDE2A065FD89D4"; Key: "BLOB") "svchost.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "") "svchost.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS\A377D1B1C0538833035211F4083D00FECC414DAB"; Key: "BLOB") "svchost.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "") "svchost.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "")2b:T6a0,"INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);" "CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);" "CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));" "CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);" "CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);" "UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;" "UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;" "UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');" "CREATE TABLE xx( name TEXT, /* Name of table or index */ path TEXT, /* Path to page from root */ pageno INTEGER, /* Page number */ pagetype TEXT, /* 'internal', 'leaf' or 'overflow' */ ncell INTEGER, /* Cells on page (0 for overflow) */ payload INTEGER, /* Bytes of payload on this page */ unused INTEGER, /* Bytes of unused space on this page */ mx_payload INTEGER, /* Largest payload size of all cells */ pgoffset INTEGER, /* Offset of page in file */ pgsize INTEGER, /* Size of the page */ schema TEXT HIDDEN /* Database schema being analyzed */);"2c:Ta63,Antivirus vendors marked dropped file "updater.exe" as clean (type is "PE32 executable (GUI) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "libEGL.dll" as clean (type is "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "api-ms-win-core-handle-l1-1-0.dll" as clean (type is "PE32 executable (DLL) (console) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "voucher.bin" as clean (type is "data"), Antivirus vendors marked dropped file "nss3.dll" as clean (type is "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "nssckbi.dll" as clean (type is "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "api-ms-win-crt-environment-l1-1-0.dll" as clean (type is "PE32 executable (DLL) (console) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "api-ms-win-core-processenvironment-l1-1-0.dll" as clean (type is "PE32 executable (DLL) (console) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "api-ms-win-core-util-l1-1-0.dll" as clean (type is "PE32 executable (DLL) (console) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "api-ms-win-crt-utility-l1-1-0.dll" as clean (type is "PE32 executable (DLL) (console) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "api-ms-win-core-debug-l1-1-0.dll" as clean (type is "PE32 executable (DLL) (console) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "pingsender.exe" as clean (type is "PE32 executable (console) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "api-ms-win-core-libraryloader-l1-1-0.dll" as clean (type is "PE32 executable (DLL) (console) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "api-ms-win-core-file-l1-2-0.dll" as clean (type is "PE32 executable (DLL) (console) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "libGLESv2.dll" as clean (type is "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "nssdbm3.dll" as clean (type is "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "api-ms-win-core-errorhandling-l1-1-0.dll" as clean (type is "PE32 executable (DLL) (console) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "clearkey.dll" as clean (type is "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"), Antivirus vendors marked dropped file "ServicesHelper.dll" as clean (type is "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows")2d:T71b,Spawned process "cmd.exe" with commandline ""cmd /c ""%TEMP%\3792.bat" "C:\f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a.exe"""" (UID: 00014546-00003596) Spawned process "svchost.exe" (UID: 00014565-00003612) Spawned process "setup-stub.exe" with commandline ".\setup-stub.exe" (UID: 00014579-00002884) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00014586-00002920) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00014907-00003724) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00015213-00003776) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00015521-00003932) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00015826-00002932) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00016136-00001032) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00016445-00003192) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00016753-00003188) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00017062-00003340) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00017371-00003212) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00017680-00003328) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00017989-00003420) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00018299-00003388) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00018608-00003412) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00018916-00003396) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00019226-00003424) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00019535-00003460)2e:T56a,The input sample is signed with a certificate issued by "CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="c 2006 VeriSign Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign Inc.", C=US" (SHA1: 4E:B6:D5:78:49:9B:1C:CF:5F:58:1E:AD:56:BE:3D:9B:67:44:A5:E5; see report for more information) The input sample is signed with a certificate issued by "CN=Certification Authority of WoSign, O=WoSign CA Limited, C=CN" (SHA1: 54:09:B5:6C:89:BB:1A:88:1D:E1:A3:2C:95:0D:40:FD:6B:94:C7:4E; see report for more information) The input sample is signed with a certificate issued by "CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US" (SHA1: 76:AD:42:59:B9:F2:9B:A2:7E:1A:14:A7:5B:39:A1:EE:A2:D5:E8:34; see report for more information) The input sample is signed with a certificate issued by "CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="c 2006 VeriSign Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign Inc.", C=US" (SHA1: 5B:8F:88:C8:0A:73:D3:5F:76:CD:41:2A:9E:74:E9:16:59:4D:FA:67; see report for more information) The input sample is signed with a certificate issued by "CN=Certification Authority of WoSign, O=WoSign CA Limited, C=CN" (SHA1: B9:42:94:BF:91:EA:8F:B6:4B:E6:10:97:C7:FB:00:13:59:B6:76:CB; see report for more information)2f:T6e6,"updater.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows" "libEGL.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "api-ms-win-core-handle-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "voucher.bin" has type "data" "nss3.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "nssckbi.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "api-ms-win-crt-environment-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "api-ms-win-core-processenvironment-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "api-ms-win-core-util-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "api-ms-win-crt-utility-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "api-ms-win-core-debug-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "pingsender.exe" has type "PE32 executable (console) Intel 80386 for MS Windows" "api-ms-win-core-memory-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "api-ms-win-core-libraryloader-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "api-ms-win-core-file-l1-2-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "libGLESv2.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "nssdbm3.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "api-ms-win-core-errorhandling-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "clearkey.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"30:T603,"" touched file "%WINDIR%\system32\OLEACCRC.DLL" "" touched file "%WINDIR%\Globalization\Sorting\sortdefault.nls" "" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches" "" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\cversions.1.db" "" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000c.db" "" touched file "%WINDIR%\system32\en-US\PROPSYS.dll.mui" "" touched file "%WINDIR%\system32\en-US\SETUPAPI.dll.mui" "" touched file "%WINDIR%\SYSTEM32\ntdll.dll" "" touched file "%WINDIR%\Fonts\staticcache.dat" "" touched file "%WINDIR%\system32\en-US\MSCTF.dll.mui" "" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches" "" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\cversions.1.db" "" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000c.db" "setup-stub.exe" touched file "%WINDIR%\Globalization\Sorting\sortdefault.nls" "setup-stub.exe" touched file "%WINDIR%\system32\en-US\SETUPAPI.dll.mui" "setup-stub.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches" "setup-stub.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\cversions.1.db" "setup-stub.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000c.db"31:Te91,Heuristic match: "__MOZCUSTOM__:campaign%3D%2528not%2Bset%2529%26content%3D%2528not%2Bset%2529%26medium%3Dreferral%26source%3Dwww.google.ch" Pattern match: "www.digicert.com1$0" Pattern match: "www.digicert.com110/" Pattern match: "http://ocsp.digicert.com0C" Pattern match: "cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0" Pattern match: "crl4.digicert.com/DigiCertAssuredIDRootCA.crl0" Pattern match: "crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O" Pattern match: "https://www.digicert.com/CPS0" Pattern match: "http://crl3.digicert.com/sha2-assured-cs-g1.crl05" Pattern match: "http://crl4.digicert.com/sha2-assured-cs-g1.crl0B" Pattern match: "http://ocsp.digicert.com0N" Pattern match: "cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0" Pattern match: "http://ts-ocsp.ws.symantec.com07" Pattern match: "http://ts-aia.ws.symantec.com/tss-ca-g2.cer0" Pattern match: "http://ts-crl.ws.symantec.com/tss-ca-g2.crl0" Pattern match: "http://ocsp.thawte.com0" Pattern match: "http://crl.thawte.com/ThawteTimestampingCA.crl0" Pattern match: "http://www.mozilla.com0" Pattern match: "http://logo.verisign.com/vslogo.gif0" Pattern match: "http://crls1.wosign.com/ca1.crl0g" Pattern match: "http://ocsp1.wosign.com/ca10" Pattern match: "http://aia1.wosign.com/ca1-tsa.cer0" Pattern match: "http://sw.symcb.com/sw.crl0" Pattern match: "https://d.symcb.com/cps0%" Pattern match: "https://d.symcb.com/rpa0" Pattern match: "http://sw.symcd.com0" Pattern match: "http://sw1.symcb.com/sw.crt0" Pattern match: "http://s.symcb.com/pca3-g5.crl0" Pattern match: "http://s.symcd.com0_" Heuristic match: "Rm.NG" Pattern match: "http://nsis.sf.net/NSIS_Error" Heuristic match: "detectportal.firefox.com" Heuristic match: "a1089.d.akamai.net" Heuristic match: "shavar.prod.mozaws.net" Heuristic match: "d1zkz3k4cclnv6.cloudfront.net" Heuristic match: "2643d04b7202082d53be67ee8099079c.cvl.name" Heuristic match: "d6wjo2hisqfy2.cloudfront.net" Heuristic match: "consent.google.fr" Pattern match: "www.mozilla.org.cdn.cloudflare.net" Heuristic match: "en.wikipedia.org" Heuristic match: "olympia.prod.mozaws.net" Heuristic match: "cs9.wac.phicdn.net" Pattern match: "www.google.fr" Heuristic match: "drcwo519tnci7.cloudfront.net" Heuristic match: "shield-normandy-elb-prod-2099053585.us-west-2.elb.amazonaws.com" Pattern match: "www.gstatic.com" Heuristic match: "a19.dscg10.akamai.net" Heuristic match: "dcky6u1m8u6el.cloudfront.net" Heuristic match: "locprod1-elb-eu-west-1.prod.mozaws.net" Heuristic match: "igca@sgdn.pm.gouv.fr" Heuristic match: ".org.tr" Pattern match: "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVN" Pattern match: "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAnmWtgHuEl7B0n" Heuristic match: "et.al" Pattern match: "https://www" Heuristic match: "orce.com" Heuristic match: "bonyriddle.com" Heuristic match: "aboutiquemarocaineduconvoyeur.ma" Heuristic match: "ima.com" Heuristic match: "liamfeely.info" Pattern match: "http://mozilla.org/MPL/2.0/" Heuristic match: "libnssdbm3.so" Heuristic match: "addons.mozilla.org" Heuristic match: "ca@trustwave.com" Heuristic match: "mail.google.com" Pattern match: "www.google.com" Heuristic match: "login.skype.com" Heuristic match: "info@diginotar.nl" Heuristic match: "login.yahoo.com" Heuristic match: "Bogus live.com" Heuristic match: "login.live.com" Heuristic match: "info@e-szigno.hu" Heuristic match: "pki@sk.ee" Heuristic match: "Izenpe.com" Pattern match: "http://www.phreedom.org/md5" Heuristic match: "acraiz@suscerte.gob.ve"32:T5ef,"updater.exe" was detected as "VC8 -> Microsoft Corporation" "libEGL.dll" was detected as "Borland Delphi 3.0 (???)" "api-ms-win-core-handle-l1-1-0.dll" was detected as "Microsoft visual C++ vx.x DLL" "nss3.dll" was detected as "Borland Delphi 3.0 (???)" "nssckbi.dll" was detected as "Borland Delphi 3.0 (???)" "api-ms-win-crt-environment-l1-1-0.dll" was detected as "Microsoft visual C++ vx.x DLL" "api-ms-win-core-processenvironment-l1-1-0.dll" was detected as "Microsoft visual C++ vx.x DLL" "api-ms-win-core-util-l1-1-0.dll" was detected as "Microsoft visual C++ vx.x DLL" "api-ms-win-crt-utility-l1-1-0.dll" was detected as "Microsoft visual C++ vx.x DLL" "api-ms-win-core-debug-l1-1-0.dll" was detected as "Microsoft visual C++ vx.x DLL" "pingsender.exe" was detected as "VC8 -> Microsoft Corporation" "api-ms-win-core-memory-l1-1-0.dll" was detected as "Microsoft visual C++ vx.x DLL" "api-ms-win-core-libraryloader-l1-1-0.dll" was detected as "Microsoft visual C++ vx.x DLL" "api-ms-win-core-file-l1-2-0.dll" was detected as "Microsoft visual C++ vx.x DLL" "libGLESv2.dll" was detected as "Borland Delphi 3.0 (???)" "nssdbm3.dll" was detected as "Borland Delphi 3.0 (???)" "api-ms-win-core-errorhandling-l1-1-0.dll" was detected as "Microsoft visual C++ vx.x DLL" "clearkey.dll" was detected as "Borland Delphi 3.0 (???)" "api-ms-win-core-namedpipe-l1-1-0.dll" was detected as "Microsoft visual C++ vx.x DLL" "api-ms-win-core-synch-l1-1-0.dll" was detected as "Microsoft visual C++ vx.x DLL"33:T6e9,"svchost.exe" called "OpenService" to access the "ServicesActive" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights "svchost.exe" called "OpenService" to access the "gpsvc" service "setup-stub.exe" called "OpenService" to access the "CryptSvc" service "setup-stub.exe" called "OpenService" to access the "ServicesActive" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights "setup-stub.exe" called "OpenService" to access the "gpsvc" service "setup-stub.exe" called "OpenService" to access the "rasman" service "setup-stub.exe" called "OpenService" to access the "Sens" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights "setup-stub.exe" called "OpenService" to access the "RASMAN" service "setup.exe" called "OpenService" to access the "MpsSvc" service requesting "SERVICE_QUERY_CONFIG" (0X1) access rights "setup.exe" called "OpenService" to access the "MpsSvc" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights "maintenanceservice_tmp.exe" called "OpenService" to access the "MozillaMaintenance" service requesting "SERVICE_ALL_ACCESS" (0XF01FF) access rights "maintenanceservice_tmp.exe" called "OpenService" to access the "MozillaMaintenance" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights "firefox.exe" called "OpenService" to access the "ServicesActive" service requesting "SERVICE_QUERY_CONFIG" (0X1) access rights "firefox.exe" called "OpenService" to access the "AudioSrv" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights "firefox.exe" called "OpenService" to access the "rasman" service "firefox.exe" called "OpenService" to access the "Sens" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights "firefox.exe" called "OpenService" to access the "RASMAN" service34:T71f,"updater.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows" "libEGL.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "api-ms-win-core-handle-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "nss3.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "nssckbi.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "api-ms-win-crt-environment-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "api-ms-win-core-processenvironment-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "api-ms-win-core-util-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "api-ms-win-crt-utility-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "api-ms-win-core-debug-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "pingsender.exe" has type "PE32 executable (console) Intel 80386 for MS Windows" "api-ms-win-core-memory-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "api-ms-win-core-libraryloader-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "api-ms-win-core-file-l1-2-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "libGLESv2.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "nssdbm3.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "api-ms-win-core-errorhandling-l1-1-0.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "clearkey.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "ServicesHelper.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"35:T63e,Process "PING.EXE" with commandline "ping localhost" (UID: 00014586-00002920) Process "PING.EXE" with commandline "ping localhost" (UID: 00014907-00003724) Process "PING.EXE" with commandline "ping localhost" (UID: 00015213-00003776) Process "PING.EXE" with commandline "ping localhost" (UID: 00015521-00003932) Process "PING.EXE" with commandline "ping localhost" (UID: 00015826-00002932) Process "PING.EXE" with commandline "ping localhost" (UID: 00016136-00001032) Process "PING.EXE" with commandline "ping localhost" (UID: 00016445-00003192) Process "PING.EXE" with commandline "ping localhost" (UID: 00016753-00003188) Process "PING.EXE" with commandline "ping localhost" (UID: 00017062-00003340) Process "PING.EXE" with commandline "ping localhost" (UID: 00017371-00003212) Process "PING.EXE" with commandline "ping localhost" (UID: 00017680-00003328) Process "PING.EXE" with commandline "ping localhost" (UID: 00017989-00003420) Process "PING.EXE" with commandline "ping localhost" (UID: 00018299-00003388) Process "PING.EXE" with commandline "ping localhost" (UID: 00018608-00003412) Process "PING.EXE" with commandline "ping localhost" (UID: 00018916-00003396) Process "PING.EXE" with commandline "ping localhost" (UID: 00019226-00003424) Process "PING.EXE" with commandline "ping localhost" (UID: 00019535-00003460) Process "PING.EXE" with commandline "ping localhost" (UID: 00019844-00003500) Process "PING.EXE" with commandline "ping localhost" (UID: 00020154-00002832) Process "PING.EXE" with commandline "ping localhost" (UID: 00020463-00003556)36:T7b9,"C:\f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a.exe" marked "%TEMP%\7zS39BA.tmp" for deletion "C:\f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a.exe" marked "%TEMP%\7zS39BA.tmp\setup-stub.exe" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "%TEMP%\nsz3E61.tmp" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "%TEMP%\nsn3E8A.tmp" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\nsxE737.tmp" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\nsxE738.tmp" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "%TEMP%\Cab1436.tmp" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "%TEMP%\Tar1441.tmp" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\uninstall\shortcuts_log.ini" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\tobedeleted\nsc14E2.tmp" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\xul.dll" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\wow_helper.exe" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\webapprt\webapprt.ini" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\webapprt\omni.ja" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\webapprt-stub.exe" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\webapp-uninstaller.exe" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\updater.ini" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\updater.exe" for deletion "%TEMP%\7zS39BA.tmp\setup-stub.exe" marked "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" for deletion37:T65d,"f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a.exe.bin" claimed CRC 932877 while the actual is CRC 950955 "libEGL.dll" claimed CRC 60168 while the actual is CRC 325114 "api-ms-win-core-handle-l1-1-0.dll" claimed CRC 58835 while the actual is CRC 60168 "nss3.dll" claimed CRC 1237748 while the actual is CRC 58835 "nssckbi.dll" claimed CRC 446277 while the actual is CRC 1237748 "api-ms-win-crt-environment-l1-1-0.dll" claimed CRC 67277 while the actual is CRC 446277 "api-ms-win-core-processenvironment-l1-1-0.dll" claimed CRC 45752 while the actual is CRC 67277 "api-ms-win-core-util-l1-1-0.dll" claimed CRC 53261 while the actual is CRC 45752 "api-ms-win-crt-utility-l1-1-0.dll" claimed CRC 82772 while the actual is CRC 53261 "api-ms-win-core-debug-l1-1-0.dll" claimed CRC 36853 while the actual is CRC 82772 "pingsender.exe" claimed CRC 109395 while the actual is CRC 36853 "api-ms-win-core-memory-l1-1-0.dll" claimed CRC 67523 while the actual is CRC 109395 "api-ms-win-core-libraryloader-l1-1-0.dll" claimed CRC 26142 while the actual is CRC 67523 "api-ms-win-core-file-l1-2-0.dll" claimed CRC 45593 while the actual is CRC 26142 "libGLESv2.dll" claimed CRC 1400654 while the actual is CRC 45593 "nssdbm3.dll" claimed CRC 137443 while the actual is CRC 1400654 "api-ms-win-core-errorhandling-l1-1-0.dll" claimed CRC 69815 while the actual is CRC 137443 "clearkey.dll" claimed CRC 84020 while the actual is CRC 69815 "api-ms-win-core-namedpipe-l1-1-0.dll" claimed CRC 82729 while the actual is CRC 60040 "api-ms-win-core-synch-l1-1-0.dll" claimed CRC 60632 while the actual is CRC 8272938:T6ca,VirtualAllocEx GetFileAttributesA LoadLibraryA ReadProcessMemory GetProcAddress GetStartupInfoA FindFirstFileW GetModuleHandleW RegCreateKeyExW RegCloseKey OpenProcessToken RegOpenKeyExW RegEnumKeyExW StartServiceW GetDriveTypeW GetFileAttributesW WriteFile CopyFileW GetModuleFileNameW IsDebuggerPresent LoadLibraryExA UnhandledExceptionFilter LoadLibraryExW CreateThread ExitThread TerminateProcess GetModuleHandleExW VirtualProtect OpenProcess GetStartupInfoW CreateDirectoryW DeleteFileW GetTempFileNameW FindNextFileW FindFirstFileExW CreateFileW GetCommandLineW GetCommandLineA GetFileAttributesExW CreateProcessW Sleep ShellExecuteExW SetSecurityDescriptorDacl OpenFileMappingA GetThreadContext GetTempPathA GetTempPathW OutputDebugStringW OutputDebugStringA LoadLibraryW GetTickCount GetVersionExA GetFileSize CreateDirectoryA DeleteFileA CreateFileMappingW FindFirstFileA CreateFileMappingA FindNextFileA CreateFileA MapViewOfFile GetModuleHandleA CreateProcessA GetFileAttributesExA sendto (Ordinal #20) accept (Ordinal #1) WSAStartup (Ordinal #115) bind (Ordinal #2) recv (Ordinal #16) socket (Ordinal #23) connect (Ordinal #4) recvfrom (Ordinal #17) send (Ordinal #19) closesocket (Ordinal #3) listen (Ordinal #13) HttpSendRequestA InternetCloseHandle InternetOpenA InternetConnectA HttpQueryInfoA InternetCrackUrlA GetModuleHandleExA GetModuleFileNameA VirtualAlloc SleepConditionVariableCS GetUserNameW RegDeleteValueW RegEnumKeyW RegDeleteKeyW ShellExecuteW FindWindowExW FindFirstFileExA CreateServiceW StartServiceCtrlDispatcherW CreateToolhelp32Snapshot Process32NextW Process32FirstW SetKernelObjectSecurity GetVersionExW39:Tdd2,"setup-stub.exe" wrote bytes "7739ba7779a8be77be72be77d62dbe771de2b97705a2be77c868bd7757d1c477bee3b977616fbe776841bc770050bc7700000000ad3798778b2d9877b641987700000000" to virtual address "0x75731000" (part of module "WSHIP6.DLL") "setup-stub.exe" wrote bytes "92e6b97779a8be77be72be77d62dbe771de2b97705a2be77bee3b977616fbe776841bc770050bc7700000000ad3798778b2d9877b641987700000000" to virtual address "0x751E1000" (part of module "WSHTCPIP.DLL") "setup-stub.exe" wrote bytes "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000602000000000000000000000" to virtual address "0x01DB2000" (part of module "CVERSIONS.2.DB") "setup-stub.exe" wrote bytes "0857cd760478d6760000000051c1427694984276ee9c427675dc4476273e4476efb248760000000046ce8e77013d8f7738ed8f77cfcd8e7731238e77de2f8f77c4ca8e7780bb8e77aa6e8f779fbb8e7792bb8e7746ba8e770abf8e7700000000" to virtual address "0x68A41000" (part of module "SHFOLDER.DLL") "setup-stub.exe" wrote bytes "4053bc775858bd77186abd77653cbe770000000000bf8e770000000056cc8e77000000007cca8e77000000003768eb756a2cbe77d62dbe77000000002069eb750000000029a68e7700000000a48deb7500000000f70e8e7700000000" to virtual address "0x768F1000" (part of module "NSI.DLL") "PING.EXE" wrote bytes "4053bc775858bd77186abd77653cbe770000000000bf8e770000000056cc8e77000000007cca8e77000000003768eb756a2cbe77d62dbe77000000002069eb750000000029a68e7700000000a48deb7500000000f70e8e7700000000" to virtual address "0x768F1000" (part of module "NSI.DLL") "setup.exe" wrote bytes "4d378f77f99c8e7778eb8d7718619077fa8b8d77d3338f770e458f77a41d8f77d0d98e77e8d98e77013c8f77e19c8e772b458f77b62f8f7741238e7700bf8e77000000006d42cf7700000000ec22307699e52d7600000000" to virtual address "0x10003000" (part of module "SYSTEM.DLL") "setup.exe" wrote bytes "002100000c2100001a210000282100003421000040210000000000005c210000000000007421000000000000" to virtual address "0x00792000" (part of module "SYSMAIN.SDB") "setup.exe" wrote bytes "0857cd760478d6760000000051c1427694984276ee9c427675dc4476273e4476efb248760000000046ce8e77013d8f7738ed8f77cfcd8e7731238e77de2f8f77c4ca8e7780bb8e77aa6e8f779fbb8e7792bb8e7746ba8e770abf8e7700000000" to virtual address "0x68A41000" (part of module "SHFOLDER.DLL") "setup.exe" wrote bytes "4053bc775858bd77186abd77653cbe770000000000bf8e770000000056cc8e77000000007cca8e77000000003768eb756a2cbe77d62dbe77000000002069eb750000000029a68e7700000000a48deb7500000000f70e8e7700000000" to virtual address "0x768F1000" (part of module "NSI.DLL") "setup.exe" wrote bytes "c2000000" to virtual address "0x1000405C" (part of module "SYSTEM.DLL") "maintenanceservice_installer.exe" wrote bytes "0857cd760478d6760000000051c1427694984276ee9c427675dc4476273e4476efb248760000000046ce8e77013d8f7738ed8f77cfcd8e7731238e77de2f8f77c4ca8e7780bb8e77aa6e8f779fbb8e7792bb8e7746ba8e770abf8e7700000000" to virtual address "0x68A41000" (part of module "SHFOLDER.DLL") "helper.exe" wrote bytes "0857cd760478d6760000000051c1427694984276ee9c427675dc4476273e4476efb248760000000046ce8e77013d8f7738ed8f77cfcd8e7731238e77de2f8f77c4ca8e7780bb8e77aa6e8f779fbb8e7792bb8e7746ba8e770abf8e7700000000" to virtual address "0x68A41000" (part of module "SHFOLDER.DLL") "firefox.exe" wrote bytes "7739ba7779a8be77be72be77d62dbe771de2b97705a2be77c868bd7757d1c477bee3b977616fbe776841bc770050bc7700000000ad3798778b2d9877b641987700000000" to virtual address "0x75731000" (part of module "WSHIP6.DLL") "firefox.exe" wrote bytes "e91a9da1ed" to virtual address "0x778F3CFC" (part of module "KERNEL32.DLL")3a:T8ee,"" wrote 32 bytes to a remote process "%WINDIR%\System32\svchost.exe" (Handle: 464) "" wrote 52 bytes to a remote process "%WINDIR%\System32\svchost.exe" (Handle: 464) "" wrote 4 bytes to a remote process "%WINDIR%\System32\svchost.exe" (Handle: 464) "" wrote 24 bytes to a remote process "%WINDIR%\System32\svchost.exe" (Handle: 464) "" wrote 8 bytes to a remote process "%WINDIR%\System32\svchost.exe" (Handle: 464) "" wrote 1500 bytes to a remote process "%TEMP%\7zS39BA.tmp\setup-stub.exe" (Handle: 376) "" wrote 4 bytes to a remote process "%TEMP%\7zS39BA.tmp\setup-stub.exe" (Handle: 376) "" wrote 32 bytes to a remote process "%TEMP%\7zS39BA.tmp\setup-stub.exe" (Handle: 376) "" wrote 52 bytes to a remote process "%TEMP%\7zS39BA.tmp\setup-stub.exe" (Handle: 376) "download.exe" wrote 1500 bytes to a remote process "%TEMP%\7zS2A9C.tmp\setup.exe" (Handle: 152) "download.exe" wrote 4 bytes to a remote process "%TEMP%\7zS2A9C.tmp\setup.exe" (Handle: 152) "download.exe" wrote 32 bytes to a remote process "%TEMP%\7zS2A9C.tmp\setup.exe" (Handle: 152) "download.exe" wrote 52 bytes to a remote process "%TEMP%\7zS2A9C.tmp\setup.exe" (Handle: 152) "ns7A77.tmp" wrote 1500 bytes to a remote process "C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe" (Handle: 68) "ns7A77.tmp" wrote 4 bytes to a remote process "C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe" (Handle: 68) "ns7A77.tmp" wrote 32 bytes to a remote process "C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe" (Handle: 68) "ns7A77.tmp" wrote 52 bytes to a remote process "C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe" (Handle: 68) "maintenanceservice_installer.exe" wrote 32 bytes to a remote process "C:\Program Files\Mozilla Maintenance Service\maintenanceservice_tmp.exe" (Handle: 476) "maintenanceservice_installer.exe" wrote 52 bytes to a remote process "C:\Program Files\Mozilla Maintenance Service\maintenanceservice_tmp.exe" (Handle: 476) "maintenanceservice_installer.exe" wrote 4 bytes to a remote process "C:\Program Files\Mozilla Maintenance Service\maintenanceservice_tmp.exe" (Handle: 476)3b:T1975,Found malicious artifacts related to "216.58.213.164" (ASN: , Owner: ): ... File SHA256: 5cf7b7d2c1b23d92e27eeb82ddc9dff18311cbf4491fbca0fcc227d7139e4417 (AV positives: 6/64 scanned on 08/04/2017 13:31:04) File SHA256: d8f7d9959f788fec10707cfd175f9c53fe3c7bd60bb86e084baba8b4ebda5ea1 (AV positives: 3/64 scanned on 08/04/2017 10:30:17) File SHA256: 6a9b0db5f7285ee792e2bc9dc31cc370f953c35bab276fce538e9541a4407f52 (AV positives: 1/65 scanned on 08/04/2017 03:51:14) File SHA256: 23a277e83300ae418db88a9447a83f1352ebaad187b0a9c26ba7f355d6ff77b4 (AV positives: 62/64 scanned on 08/04/2017 01:02:25) File SHA256: 9b82102f323391aed4079ee9d5e5a0dfa5e4dcddcac264a2c09610357bf05e70 (AV positives: 46/64 scanned on 08/03/2017 21:04:57) File SHA256: 0590e96cf8a71909be3242ba599871f0a18bad8886e0781c9d7ad7af31e4ebea (Scanned on 03/07/2017 00:38:11) File SHA256: bfdeee9128dc1f5c5a8c6c41e356694370c62a256ce88906f53685859205c5f2 (Scanned on 01/05/2017 23:34:34) Found malicious artifacts related to "52.39.147.36" (ASN: , Owner: ): ... File SHA256: 8a290498e5299de135eeb40c19f37771d424d3020bf4b1715350d6028933459e (AV positives: 35/63 scanned on 07/14/2017 18:19:23) Found malicious artifacts related to "104.86.111.161" (ASN: , Owner: ): ... File SHA256: 46e4b77c8b873e318ab4876bf649c022a436df6c3584eaf130983458bf640654 (AV positives: 42/65 scanned on 08/05/2017 03:39:13) File SHA256: 0788b95f4d385835eadb91019bc7d38b33d02b3778a167006e58811b552a1685 (AV positives: 41/64 scanned on 07/29/2017 02:29:35) File SHA256: e746c00be1f3568f0ca8e3b7d9d8a54c2a0768277a21e7707eadfdb5d1c77f7a (AV positives: 30/61 scanned on 06/13/2017 05:47:42) File SHA256: 179f6d676d6175d3ee61cf5634200133dccd8a61829db00933ddda12cc9c0754 (AV positives: 35/62 scanned on 06/08/2017 19:53:25) File SHA256: ea62269f6b5a322afb94688c7d629e84a25e6c7badc542a5196124e90589fb5f (AV positives: 40/62 scanned on 05/29/2017 17:37:06) Found malicious artifacts related to "52.85.69.174" (ASN: , Owner: ): ... File SHA256: e1b32663b651a20cc22cf9b222ecc19e401337135b226b6daa18df983e57cdbf (AV positives: 51/64 scanned on 08/04/2017 11:30:20) Found malicious artifacts related to "52.85.69.100" (ASN: , Owner: ): ... File SHA256: 369d6c2af3e0514fc52adb1b4961570228a422ce8790560693145969cfb91bed (AV positives: 30/65 scanned on 08/02/2017 21:01:41) File SHA256: 6fa49b9542be407a2618aa9113f3b8ee70e3bc9eb5b58dd5441993fd12c299e4 (AV positives: 6/56 scanned on 02/03/2017 04:07:31) Found malicious artifacts related to "216.58.198.195" (ASN: , Owner: ): ... File SHA256: cba3988fe4669112fdab7dabaec270956e6366bed966c7f170ea963835bbb5c2 (AV positives: 53/64 scanned on 08/06/2017 07:45:44) File SHA256: a9cc4c5990d2f346a838622225e21bbf54e51016b6de4423535e439950bb3789 (AV positives: 55/65 scanned on 08/06/2017 07:05:23) File SHA256: c12c6705de41dc1ba5def256851ccb35731233cc62c2db6d2fcb6f85796ef670 (AV positives: 1/65 scanned on 08/06/2017 06:52:02) File SHA256: eb2686448b4b9c5fb6a5b48d096d5969d662baa4bde08c7ceee9b6a267baa26b (AV positives: 51/65 scanned on 08/05/2017 16:12:14) File SHA256: ee1b4272b90f772fc414e7ac8d2321fb1cbbb93a90e609c4d0133c16506796ff (AV positives: 32/65 scanned on 08/05/2017 15:25:18) File SHA256: d8836e5e58cfbe9d009d2e6ffb21835d023fe17f1598b950799f1316f3babe05 (Scanned on 05/27/2016 03:11:42) Found malicious artifacts related to "216.58.198.206" (ASN: , Owner: ): ... File SHA256: 884e22868d14f71e74dd7a8d723e85f1b7842050cb8b8405918fd46377f5a0fe (AV positives: 55/65 scanned on 08/06/2017 06:47:58) File SHA256: 3c392e5ef23f1315a921f64164a1396e69eff16fed1b1beaf06691befdd81d0a (AV positives: 58/65 scanned on 08/06/2017 06:27:49) File SHA256: 1daa0536e137f4d8f4a9ca5af5e5dbe7ccbc55491f217dbc362a9e0af8bd6586 (AV positives: 56/64 scanned on 08/06/2017 05:43:59) File SHA256: f41b2d64a3acb26a8deac1d3dcd912f1e0fb1b8ead206b106768f3b725f4c4f7 (AV positives: 52/64 scanned on 08/06/2017 05:32:38) File SHA256: f523848f7943ee83ef3e8f7c86324f28b4752036f992be1649d38c43dcdee675 (AV positives: 56/65 scanned on 08/06/2017 05:24:33) File SHA256: 494f2102bf8ec8f45218bc12adad0d1de4e8f903867955f345cd76723ea06521 (Scanned on 05/20/2017 21:39:29) File SHA256: 2d883416f099ab49e20a9529a4be52f9efec34fbafc64caa2832c7911ee763c9 (Scanned on 05/17/2017 09:49:46) File SHA256: 926b2194c2e0a7921a0d575e6b3fe1cb7a49f98b2d9f79fa576a8fdc495eb836 (Scanned on 05/17/2017 09:44:20) File SHA256: 07f0fe2ce5f74d97bc8afff5076686749bd2f5f0f8e07949839b50373daef093 (Scanned on 05/17/2017 09:37:54) File SHA256: fb5f721373e843701a186638dcabc7c007a0acc41daeec7fd217832061e5f697 (Scanned on 05/17/2017 09:35:43) Found malicious artifacts related to "216.58.213.163" (ASN: , Owner: ): ... File SHA256: 5cf7b7d2c1b23d92e27eeb82ddc9dff18311cbf4491fbca0fcc227d7139e4417 (AV positives: 6/64 scanned on 08/04/2017 13:31:04) File SHA256: 666c5442a6293b85807639f06149fe58482b4bbadcc45ad2db6b3ce3157ce47c (AV positives: 49/65 scanned on 08/04/2017 13:12:48) File SHA256: 68a8d8a25c8ebbeba2854efdd0bb01607e86512936448081e91cc2b8879f2c70 (AV positives: 49/65 scanned on 08/04/2017 13:12:48) File SHA256: aa70f30c57c4b0903e5daa013211636366aa8f3d2ee1f53f1651f65622dd411d (AV positives: 50/65 scanned on 08/04/2017 13:12:40) File SHA256: fc95c95f9dc8480d3fa391cfcb260890aa569f051c2baa106a930e94a2b40bcd (AV positives: 49/65 scanned on 08/04/2017 13:12:39) File SHA256: 0590e96cf8a71909be3242ba599871f0a18bad8886e0781c9d7ad7af31e4ebea (Scanned on 03/07/2017 00:38:11) File SHA256: 13e0e3f2e154f730c16f87930c9e0ecb905cfd03f7efea625a84c074f9071522 (Scanned on 06/01/2016 05:45:20) File SHA256: d9c469129ff80ea8eab5b020e7664bf28225ec21a4fae96e2e3ada789dc6bac1 (Scanned on 06/01/2016 05:39:56) File SHA256: 4ebce89c6af3b65fdf64c3f1b8450a86f69c24983ee3ab6fd070785602745074 (Scanned on 05/10/2016 23:35:18) Found malicious artifacts related to "104.86.110.99" (ASN: , Owner: ): ... File SHA256: 40ce7a65096bd11437a35e6504fa310593e9d2703f9400794be2ceb10afb0d99 (AV positives: 5/65 scanned on 08/04/2017 17:12:12) File SHA256: b026b93e62fd89f2e1c6f2bc061ee7628e21c74c99ba6216009451dd19db7202 (AV positives: 11/64 scanned on 08/04/2017 17:11:14) File SHA256: 8d33c0f1a52cf3c02837cd85bfc1e9dc5add60483549612b167ce4e2db8f826f (AV positives: 13/64 scanned on 08/01/2017 22:11:35) File SHA256: db06b3d31e48ce3a936801d1a7619053e424ec752989d373ac5adc09dc1011e3 (AV positives: 6/63 scanned on 08/01/2017 16:49:46) File SHA256: ba8a48ef2fa0324e073330f2c4b5d65309f8e52a92680d489a44eab2d4271f14 (AV positives: 11/65 scanned on 08/01/2017 07:20:05)3c:T1975,Found malicious artifacts related to "216.58.213.164" (ASN: , Owner: ): ... File SHA256: 5cf7b7d2c1b23d92e27eeb82ddc9dff18311cbf4491fbca0fcc227d7139e4417 (AV positives: 6/64 scanned on 08/04/2017 13:31:04) File SHA256: d8f7d9959f788fec10707cfd175f9c53fe3c7bd60bb86e084baba8b4ebda5ea1 (AV positives: 3/64 scanned on 08/04/2017 10:30:17) File SHA256: 6a9b0db5f7285ee792e2bc9dc31cc370f953c35bab276fce538e9541a4407f52 (AV positives: 1/65 scanned on 08/04/2017 03:51:14) File SHA256: 23a277e83300ae418db88a9447a83f1352ebaad187b0a9c26ba7f355d6ff77b4 (AV positives: 62/64 scanned on 08/04/2017 01:02:25) File SHA256: 9b82102f323391aed4079ee9d5e5a0dfa5e4dcddcac264a2c09610357bf05e70 (AV positives: 46/64 scanned on 08/03/2017 21:04:57) File SHA256: 0590e96cf8a71909be3242ba599871f0a18bad8886e0781c9d7ad7af31e4ebea (Scanned on 03/07/2017 00:38:11) File SHA256: bfdeee9128dc1f5c5a8c6c41e356694370c62a256ce88906f53685859205c5f2 (Scanned on 01/05/2017 23:34:34) Found malicious artifacts related to "52.39.147.36" (ASN: , Owner: ): ... File SHA256: 8a290498e5299de135eeb40c19f37771d424d3020bf4b1715350d6028933459e (AV positives: 35/63 scanned on 07/14/2017 18:19:23) Found malicious artifacts related to "104.86.111.161" (ASN: , Owner: ): ... File SHA256: 46e4b77c8b873e318ab4876bf649c022a436df6c3584eaf130983458bf640654 (AV positives: 42/65 scanned on 08/05/2017 03:39:13) File SHA256: 0788b95f4d385835eadb91019bc7d38b33d02b3778a167006e58811b552a1685 (AV positives: 41/64 scanned on 07/29/2017 02:29:35) File SHA256: e746c00be1f3568f0ca8e3b7d9d8a54c2a0768277a21e7707eadfdb5d1c77f7a (AV positives: 30/61 scanned on 06/13/2017 05:47:42) File SHA256: 179f6d676d6175d3ee61cf5634200133dccd8a61829db00933ddda12cc9c0754 (AV positives: 35/62 scanned on 06/08/2017 19:53:25) File SHA256: ea62269f6b5a322afb94688c7d629e84a25e6c7badc542a5196124e90589fb5f (AV positives: 40/62 scanned on 05/29/2017 17:37:06) Found malicious artifacts related to "52.85.69.174" (ASN: , Owner: ): ... File SHA256: e1b32663b651a20cc22cf9b222ecc19e401337135b226b6daa18df983e57cdbf (AV positives: 51/64 scanned on 08/04/2017 11:30:20) Found malicious artifacts related to "52.85.69.100" (ASN: , Owner: ): ... File SHA256: 369d6c2af3e0514fc52adb1b4961570228a422ce8790560693145969cfb91bed (AV positives: 30/65 scanned on 08/02/2017 21:01:41) File SHA256: 6fa49b9542be407a2618aa9113f3b8ee70e3bc9eb5b58dd5441993fd12c299e4 (AV positives: 6/56 scanned on 02/03/2017 04:07:31) Found malicious artifacts related to "216.58.198.195" (ASN: , Owner: ): ... File SHA256: cba3988fe4669112fdab7dabaec270956e6366bed966c7f170ea963835bbb5c2 (AV positives: 53/64 scanned on 08/06/2017 07:45:44) File SHA256: a9cc4c5990d2f346a838622225e21bbf54e51016b6de4423535e439950bb3789 (AV positives: 55/65 scanned on 08/06/2017 07:05:23) File SHA256: c12c6705de41dc1ba5def256851ccb35731233cc62c2db6d2fcb6f85796ef670 (AV positives: 1/65 scanned on 08/06/2017 06:52:02) File SHA256: eb2686448b4b9c5fb6a5b48d096d5969d662baa4bde08c7ceee9b6a267baa26b (AV positives: 51/65 scanned on 08/05/2017 16:12:14) File SHA256: ee1b4272b90f772fc414e7ac8d2321fb1cbbb93a90e609c4d0133c16506796ff (AV positives: 32/65 scanned on 08/05/2017 15:25:18) File SHA256: d8836e5e58cfbe9d009d2e6ffb21835d023fe17f1598b950799f1316f3babe05 (Scanned on 05/27/2016 03:11:42) Found malicious artifacts related to "216.58.198.206" (ASN: , Owner: ): ... File SHA256: 884e22868d14f71e74dd7a8d723e85f1b7842050cb8b8405918fd46377f5a0fe (AV positives: 55/65 scanned on 08/06/2017 06:47:58) File SHA256: 3c392e5ef23f1315a921f64164a1396e69eff16fed1b1beaf06691befdd81d0a (AV positives: 58/65 scanned on 08/06/2017 06:27:49) File SHA256: 1daa0536e137f4d8f4a9ca5af5e5dbe7ccbc55491f217dbc362a9e0af8bd6586 (AV positives: 56/64 scanned on 08/06/2017 05:43:59) File SHA256: f41b2d64a3acb26a8deac1d3dcd912f1e0fb1b8ead206b106768f3b725f4c4f7 (AV positives: 52/64 scanned on 08/06/2017 05:32:38) File SHA256: f523848f7943ee83ef3e8f7c86324f28b4752036f992be1649d38c43dcdee675 (AV positives: 56/65 scanned on 08/06/2017 05:24:33) File SHA256: 494f2102bf8ec8f45218bc12adad0d1de4e8f903867955f345cd76723ea06521 (Scanned on 05/20/2017 21:39:29) File SHA256: 2d883416f099ab49e20a9529a4be52f9efec34fbafc64caa2832c7911ee763c9 (Scanned on 05/17/2017 09:49:46) File SHA256: 926b2194c2e0a7921a0d575e6b3fe1cb7a49f98b2d9f79fa576a8fdc495eb836 (Scanned on 05/17/2017 09:44:20) File SHA256: 07f0fe2ce5f74d97bc8afff5076686749bd2f5f0f8e07949839b50373daef093 (Scanned on 05/17/2017 09:37:54) File SHA256: fb5f721373e843701a186638dcabc7c007a0acc41daeec7fd217832061e5f697 (Scanned on 05/17/2017 09:35:43) Found malicious artifacts related to "216.58.213.163" (ASN: , Owner: ): ... File SHA256: 5cf7b7d2c1b23d92e27eeb82ddc9dff18311cbf4491fbca0fcc227d7139e4417 (AV positives: 6/64 scanned on 08/04/2017 13:31:04) File SHA256: 666c5442a6293b85807639f06149fe58482b4bbadcc45ad2db6b3ce3157ce47c (AV positives: 49/65 scanned on 08/04/2017 13:12:48) File SHA256: 68a8d8a25c8ebbeba2854efdd0bb01607e86512936448081e91cc2b8879f2c70 (AV positives: 49/65 scanned on 08/04/2017 13:12:48) File SHA256: aa70f30c57c4b0903e5daa013211636366aa8f3d2ee1f53f1651f65622dd411d (AV positives: 50/65 scanned on 08/04/2017 13:12:40) File SHA256: fc95c95f9dc8480d3fa391cfcb260890aa569f051c2baa106a930e94a2b40bcd (AV positives: 49/65 scanned on 08/04/2017 13:12:39) File SHA256: 0590e96cf8a71909be3242ba599871f0a18bad8886e0781c9d7ad7af31e4ebea (Scanned on 03/07/2017 00:38:11) File SHA256: 13e0e3f2e154f730c16f87930c9e0ecb905cfd03f7efea625a84c074f9071522 (Scanned on 06/01/2016 05:45:20) File SHA256: d9c469129ff80ea8eab5b020e7664bf28225ec21a4fae96e2e3ada789dc6bac1 (Scanned on 06/01/2016 05:39:56) File SHA256: 4ebce89c6af3b65fdf64c3f1b8450a86f69c24983ee3ab6fd070785602745074 (Scanned on 05/10/2016 23:35:18) Found malicious artifacts related to "104.86.110.99" (ASN: , Owner: ): ... File SHA256: 40ce7a65096bd11437a35e6504fa310593e9d2703f9400794be2ceb10afb0d99 (AV positives: 5/65 scanned on 08/04/2017 17:12:12) File SHA256: b026b93e62fd89f2e1c6f2bc061ee7628e21c74c99ba6216009451dd19db7202 (AV positives: 11/64 scanned on 08/04/2017 17:11:14) File SHA256: 8d33c0f1a52cf3c02837cd85bfc1e9dc5add60483549612b167ce4e2db8f826f (AV positives: 13/64 scanned on 08/01/2017 22:11:35) File SHA256: db06b3d31e48ce3a936801d1a7619053e424ec752989d373ac5adc09dc1011e3 (AV positives: 6/63 scanned on 08/01/2017 16:49:46) File SHA256: ba8a48ef2fa0324e073330f2c4b5d65309f8e52a92680d489a44eab2d4271f14 (AV positives: 11/65 scanned on 08/01/2017 07:20:05)3d:T1318,Spawned process "" (UID: 00014301-00003184) Spawned process "cmd.exe" with commandline ""cmd /c ""%TEMP%\3792.bat" "C:\f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a.exe"""" (UID: 00014546-00003596) Spawned process "svchost.exe" (UID: 00014565-00003612) Spawned process "setup-stub.exe" with commandline ".\setup-stub.exe" (UID: 00014579-00002884) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00014586-00002920) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00014907-00003724) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00015213-00003776) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00015521-00003932) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00015826-00002932) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00016136-00001032) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00016445-00003192) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00016753-00003188) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00017062-00003340) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00017371-00003212) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00017680-00003328) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00017989-00003420) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00018299-00003388) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00018608-00003412) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00018916-00003396) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00019226-00003424) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00019535-00003460) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00019844-00003500) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00020154-00002832) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00020463-00003556) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00020774-00002772) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00021090-00003672) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00021399-00003760) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00021708-00003752) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00022018-00002988) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00022328-00000284) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00022638-00003668) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00022947-00000820) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00023256-00003680) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00023567-00000100) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00023878-00003996) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00024187-00000604) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00024496-00003880) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00024807-00004008) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00025123-00001568) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00025455-00004068) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00025797-00000428) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00026123-00000252) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00026438-00002284) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00026773-00002472) Spawned process "download.exe" with commandline "/INI=%TEMP%\nsn3E8A.tmp\config.ini" (UID: 00026972-00002224) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00027122-00002236) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00027550-00002304) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00027886-00002564) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00028234-00002584) Spawned process "setup.exe" with commandline ".\setup.exe /INI=%TEMP%\nsn3E8A.tmp\config.ini" (UID: 00028467-00002764) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00028581-00002756) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00028903-00002784) Spawned process "PING.EXE" with commandline "ping localhost" (UID: 00029240-00002856) Spawned process "ns7A77.tmp" with commandline ""%PROGRAMFILES%\Mozilla Firefox\maintenanceservice_installer.exe" (UID: 00029308-00002844)3e:T400,AAABAAEAICAQAAAAAADoAgAAFgAAACgAAAAgAAAAQAAAAAEABAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AAAAAAAAAAAAAAAAAAAAAAAAAB3AAAAAAAAAAAAAAAAAAB4/4h3cAAAd4iHcAAAAAB3iP////h3d4iP//hwAAAAeIj////4h3iIiP//9wAAAHiI/4J4iIeIiIiP//9wAAB4iP+CIiJ4iIiIiP//hwAAeIj/giImiIiIiIj///gAAHj4j4KiJ4iIiI//////cAB4+I+KMieIiI/4j////3AAePiPg3oo+IiPh3j///+AAHj/iId6OPiI/3iH////hAB4/4iHizeIiP+Ih/+Ij4QAeP+Ii7s3iI//+Hj4iIiEAHj/iIu7t4////+P+IiIgAB46PiIiHeP/////4iIiHAAeOj4iIiIf///+IiIiIhwAHho+IiIiHj///iIiIiHAAB4aPiIiIiHj///+IiIdwAAeIiIiIiIiHj///+IiHAAAHiIju7u7u7neP//iHcAAAB4iI7/+IiO7uZ3d3dAAAAAeP+P/////4iI7ucAAAAAAH//iI///////4iIh3AAAAB4+Hd3d4iIiPiIiIcAAAAAePh3d3d3d4iP//gAAAAAAI/4iIiIiIiI///4AAAAAAf/+IiIiIiIiI///3AAAAAI+IiIiIiIiIiP//9wAAAAB3iIiIiIiIiIeP//hwAAAAB3d4iIiIiIiAf/iIcAAAAAAAAAB3d3h3cHh3cAAAAADwA4A/4AAAD8AAAAeAAAADgAAAA4AAAAGAAAAAgAAAAIAAAACAAAAAgAAAAIAAAACAAAAAgAAAAIAAAACAAAAAgAAAAIAAAAGAAAADgAAAB4AAAA+AAAAfgAAAH4AAAB+AAAA/gAAAfwAAAD8AAAA/AAAAPwAAAD+AAAA//wAB/w==3f:T400,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40:T570,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41:T570,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD2UlEQVR42u2X21cTVxTG/b/6jlatFbkoeI1oi66FS0EEBF2QkHsgxgAWCYZwCYEQkNraSu2rLcQ++NQ+6Ru+EHKbWy74uc8MSQY6Y4i69IWz1rfO5Mxl//Z39jkzOXBgv33tZnW60ddv+6LqtzhQBLDYHPjv9Tpe/fuG9Pqz6sdOj2bPIEoO2Afx12r0k7S69hJr0X+w9lLRKh3/TWNMWtfvADCZHUjzIrIZCRlJ/Agp90ka2n0tiyFkcrsB7PLgl9T/AHL5vHxiZeUFnv/5ak9a+eMF8rmsrGg0qqlC5t9cmZDFjjUB8tsA7ME1PQuovRNGXe886o1zOGkO4ZQ1hEZnEI0DMzjjmcJZ76R87dv1dWREvuw0VQRwwbYMg+MxDM4lNA0u4pIngsveBfwwMo/m0Tlc8YVw1T+rAuA+zQH2Y0sF0OL9FS3Dv+Dagye4/pDkW0ar/zHaAku4Ob2I9mAEHXPhIkCWAJQiFJReFDQdqDIN6wNwglgE6Bh/hi7/7+gK/Ibu6ae4QcGv+cNoHg/i4pgfBt84miZ8JQCBL+sAC378gVMfIMUJRQBj8DnuzjxD01AIx2xjOGgZwreO+zgy4MHRe24c8w7g+IhTBcAVM5cK/S4XWPDGmd69AbQ++hlHzKOo6h/GIZsXh50UfPAevrs/iO+HXfLDTjy0qwDSZR1gwZuftugDpFUAVcYRJWs7BS9mTcFHXKj+yYETYzbUPrLsqAGJNiNR0F8NLPiHAfgSwCHrtuUsaw8FHxqQs64etaPGZ0Wd34yTAVNpFQjlV8EeAEpFeNhFWbtVlrOsyfLacSvqJ/pxatKIBrK0CMBzFW3jZQHUhVY96kANWV5HltcHKPhUH83nXZwJ9VS0D1QEoC602oLlkyY0TPfidPAOzs5143y4cwdAZnsFfBYH1IUmWz5lVLKe7cG5+ds4v9AJw2J7EUCkGmAFqLUBsTGBzqVSKSQSCSQT8fIA6kJrmO6jrJnl3TgX7sKFSAcuLrWjabmtCCB9YBlKIj2XAJPJBOLxOBLxTR0A1U6oLrTTs8zy27LlhsgtCn4Tl5ZbcfnJdRVASjP7ggM8FSnLPBaLYXMzpg3AC8qHwuTU4p5fxxOBiDIFvH4R8hyHdCpJgTcVgJgOQDKtOMDe7eyhlYhPlxxgPasHjksjlVbmnWW9sbEhSxcgnhLlVzK2MshKHIAskKexDI8cCVsSjb0jbZHyynlk8C6nFFlh/xcFARw5kqbgKco8QXOfVIm5oQvw1T7J2Dd6T5/5o7/xTXS/xe6C3eWG1eGG2eqEscw9N9puYf8f2X4rtPd75aQEj4uK3gAAAABJRU5ErkJggg==42:T570,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43:T570,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44:T570,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD2UlEQVR42u2X21cTVxTG/b/6jlatFbkoeI1oi66FS0EEBF2QkHsgxgAWCYZwCYEQkNraSu2rLcQ++NQ+6Ru+EHKbWy74uc8MSQY6Y4i69IWz1rfO5Mxl//Z39jkzOXBgv33tZnW60ddv+6LqtzhQBLDYHPjv9Tpe/fuG9Pqz6sdOj2bPIEoO2Afx12r0k7S69hJr0X+w9lLRKh3/TWNMWtfvADCZHUjzIrIZCRlJ/Agp90ka2n0tiyFkcrsB7PLgl9T/AHL5vHxiZeUFnv/5ak9a+eMF8rmsrGg0qqlC5t9cmZDFjjUB8tsA7ME1PQuovRNGXe886o1zOGkO4ZQ1hEZnEI0DMzjjmcJZ76R87dv1dWREvuw0VQRwwbYMg+MxDM4lNA0u4pIngsveBfwwMo/m0Tlc8YVw1T+rAuA+zQH2Y0sF0OL9FS3Dv+Dagye4/pDkW0ar/zHaAku4Ob2I9mAEHXPhIkCWAJQiFJReFDQdqDIN6wNwglgE6Bh/hi7/7+gK/Ibu6ae4QcGv+cNoHg/i4pgfBt84miZ8JQCBL+sAC378gVMfIMUJRQBj8DnuzjxD01AIx2xjOGgZwreO+zgy4MHRe24c8w7g+IhTBcAVM5cK/S4XWPDGmd69AbQ++hlHzKOo6h/GIZsXh50UfPAevrs/iO+HXfLDTjy0qwDSZR1gwZuftugDpFUAVcYRJWs7BS9mTcFHXKj+yYETYzbUPrLsqAGJNiNR0F8NLPiHAfgSwCHrtuUsaw8FHxqQs64etaPGZ0Wd34yTAVNpFQjlV8EeAEpFeNhFWbtVlrOsyfLacSvqJ/pxatKIBrK0CMBzFW3jZQHUhVY96kANWV5HltcHKPhUH83nXZwJ9VS0D1QEoC602oLlkyY0TPfidPAOzs5143y4cwdAZnsFfBYH1IUmWz5lVLKe7cG5+ds4v9AJw2J7EUCkGmAFqLUBsTGBzqVSKSQSCSQT8fIA6kJrmO6jrJnl3TgX7sKFSAcuLrWjabmtCCB9YBlKIj2XAJPJBOLxOBLxTR0A1U6oLrTTs8zy27LlhsgtCn4Tl5ZbcfnJdRVASjP7ggM8FSnLPBaLYXMzpg3AC8qHwuTU4p5fxxOBiDIFvH4R8hyHdCpJgTcVgJgOQDKtOMDe7eyhlYhPlxxgPasHjksjlVbmnWW9sbEhSxcgnhLlVzK2MshKHIAskKexDI8cCVsSjb0jbZHyynlk8C6nFFlh/xcFARw5kqbgKco8QXOfVIm5oQvw1T7J2Dd6T5/5o7/xTXS/xe6C3eWG1eGG2eqEscw9N9puYf8f2X4rtPd75aQEj4uK3gAAAABJRU5ErkJggg==45:T570,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46:T570,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47:T570,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48:T570,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD2UlEQVR42u2X21cTVxTG/b/6jlatFbkoeI1oi66FS0EEBF2QkHsgxgAWCYZwCYEQkNraSu2rLcQ++NQ+6Ru+EHKbWy74uc8MSQY6Y4i69IWz1rfO5Mxl//Z39jkzOXBgv33tZnW60ddv+6LqtzhQBLDYHPjv9Tpe/fuG9Pqz6sdOj2bPIEoO2Afx12r0k7S69hJr0X+w9lLRKh3/TWNMWtfvADCZHUjzIrIZCRlJ/Agp90ka2n0tiyFkcrsB7PLgl9T/AHL5vHxiZeUFnv/5ak9a+eMF8rmsrGg0qqlC5t9cmZDFjjUB8tsA7ME1PQuovRNGXe886o1zOGkO4ZQ1hEZnEI0DMzjjmcJZ76R87dv1dWREvuw0VQRwwbYMg+MxDM4lNA0u4pIngsveBfwwMo/m0Tlc8YVw1T+rAuA+zQH2Y0sF0OL9FS3Dv+Dagye4/pDkW0ar/zHaAku4Ob2I9mAEHXPhIkCWAJQiFJReFDQdqDIN6wNwglgE6Bh/hi7/7+gK/Ibu6ae4QcGv+cNoHg/i4pgfBt84miZ8JQCBL+sAC378gVMfIMUJRQBj8DnuzjxD01AIx2xjOGgZwreO+zgy4MHRe24c8w7g+IhTBcAVM5cK/S4XWPDGmd69AbQ++hlHzKOo6h/GIZsXh50UfPAevrs/iO+HXfLDTjy0qwDSZR1gwZuftugDpFUAVcYRJWs7BS9mTcFHXKj+yYETYzbUPrLsqAGJNiNR0F8NLPiHAfgSwCHrtuUsaw8FHxqQs64etaPGZ0Wd34yTAVNpFQjlV8EeAEpFeNhFWbtVlrOsyfLacSvqJ/pxatKIBrK0CMBzFW3jZQHUhVY96kANWV5HltcHKPhUH83nXZwJ9VS0D1QEoC602oLlkyY0TPfidPAOzs5143y4cwdAZnsFfBYH1IUmWz5lVLKe7cG5+ds4v9AJw2J7EUCkGmAFqLUBsTGBzqVSKSQSCSQT8fIA6kJrmO6jrJnl3TgX7sKFSAcuLrWjabmtCCB9YBlKIj2XAJPJBOLxOBLxTR0A1U6oLrTTs8zy27LlhsgtCn4Tl5ZbcfnJdRVASjP7ggM8FSnLPBaLYXMzpg3AC8qHwuTU4p5fxxOBiDIFvH4R8hyHdCpJgTcVgJgOQDKtOMDe7eyhlYhPlxxgPasHjksjlVbmnWW9sbEhSxcgnhLlVzK2MshKHIAskKexDI8cCVsSjb0jbZHyynlk8C6nFFlh/xcFARw5kqbgKco8QXOfVIm5oQvw1T7J2Dd6T5/5o7/xTXS/xe6C3eWG1eGG2eqEscw9N9puYf8f2X4rtPd75aQEj4uK3gAAAABJRU5ErkJggg==49:T570,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4a:T570,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD2UlEQVR42u2X21cTVxTG/b/6jlatFbkoeI1oi66FS0EEBF2QkHsgxgAWCYZwCYEQkNraSu2rLcQ++NQ+6Ru+EHKbWy74uc8MSQY6Y4i69IWz1rfO5Mxl//Z39jkzOXBgv33tZnW60ddv+6LqtzhQBLDYHPjv9Tpe/fuG9Pqz6sdOj2bPIEoO2Afx12r0k7S69hJr0X+w9lLRKh3/TWNMWtfvADCZHUjzIrIZCRlJ/Agp90ka2n0tiyFkcrsB7PLgl9T/AHL5vHxiZeUFnv/5ak9a+eMF8rmsrGg0qqlC5t9cmZDFjjUB8tsA7ME1PQuovRNGXe886o1zOGkO4ZQ1hEZnEI0DMzjjmcJZ76R87dv1dWREvuw0VQRwwbYMg+MxDM4lNA0u4pIngsveBfwwMo/m0Tlc8YVw1T+rAuA+zQH2Y0sF0OL9FS3Dv+Dagye4/pDkW0ar/zHaAku4Ob2I9mAEHXPhIkCWAJQiFJReFDQdqDIN6wNwglgE6Bh/hi7/7+gK/Ibu6ae4QcGv+cNoHg/i4pgfBt84miZ8JQCBL+sAC378gVMfIMUJRQBj8DnuzjxD01AIx2xjOGgZwreO+zgy4MHRe24c8w7g+IhTBcAVM5cK/S4XWPDGmd69AbQ++hlHzKOo6h/GIZsXh50UfPAevrs/iO+HXfLDTjy0qwDSZR1gwZuftugDpFUAVcYRJWs7BS9mTcFHXKj+yYETYzbUPrLsqAGJNiNR0F8NLPiHAfgSwCHrtuUsaw8FHxqQs64etaPGZ0Wd34yTAVNpFQjlV8EeAEpFeNhFWbtVlrOsyfLacSvqJ/pxatKIBrK0CMBzFW3jZQHUhVY96kANWV5HltcHKPhUH83nXZwJ9VS0D1QEoC602oLlkyY0TPfidPAOzs5143y4cwdAZnsFfBYH1IUmWz5lVLKe7cG5+ds4v9AJw2J7EUCkGmAFqLUBsTGBzqVSKSQSCSQT8fIA6kJrmO6jrJnl3TgX7sKFSAcuLrWjabmtCCB9YBlKIj2XAJPJBOLxOBLxTR0A1U6oLrTTs8zy27LlhsgtCn4Tl5ZbcfnJdRVASjP7ggM8FSnLPBaLYXMzpg3AC8qHwuTU4p5fxxOBiDIFvH4R8hyHdCpJgTcVgJgOQDKtOMDe7eyhlYhPlxxgPasHjksjlVbmnWW9sbEhSxcgnhLlVzK2MshKHIAskKexDI8cCVsSjb0jbZHyynlk8C6nFFlh/xcFARw5kqbgKco8QXOfVIm5oQvw1T7J2Dd6T5/5o7/xTXS/xe6C3eWG1eGG2eqEscw9N9puYf8f2X4rtPd75aQEj4uK3gAAAABJRU5ErkJggg==4b:T570,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4c:T570,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4d:T570,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4e:T570,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD2UlEQVR42u2X21cTVxTG/b/6jlatFbkoeI1oi66FS0EEBF2QkHsgxgAWCYZwCYEQkNraSu2rLcQ++NQ+6Ru+EHKbWy74uc8MSQY6Y4i69IWz1rfO5Mxl//Z39jkzOXBgv33tZnW60ddv+6LqtzhQBLDYHPjv9Tpe/fuG9Pqz6sdOj2bPIEoO2Afx12r0k7S69hJr0X+w9lLRKh3/TWNMWtfvADCZHUjzIrIZCRlJ/Agp90ka2n0tiyFkcrsB7PLgl9T/AHL5vHxiZeUFnv/5ak9a+eMF8rmsrGg0qqlC5t9cmZDFjjUB8tsA7ME1PQuovRNGXe886o1zOGkO4ZQ1hEZnEI0DMzjjmcJZ76R87dv1dWREvuw0VQRwwbYMg+MxDM4lNA0u4pIngsveBfwwMo/m0Tlc8YVw1T+rAuA+zQH2Y0sF0OL9FS3Dv+Dagye4/pDkW0ar/zHaAku4Ob2I9mAEHXPhIkCWAJQiFJReFDQdqDIN6wNwglgE6Bh/hi7/7+gK/Ibu6ae4QcGv+cNoHg/i4pgfBt84miZ8JQCBL+sAC378gVMfIMUJRQBj8DnuzjxD01AIx2xjOGgZwreO+zgy4MHRe24c8w7g+IhTBcAVM5cK/S4XWPDGmd69AbQ++hlHzKOo6h/GIZsXh50UfPAevrs/iO+HXfLDTjy0qwDSZR1gwZuftugDpFUAVcYRJWs7BS9mTcFHXKj+yYETYzbUPrLsqAGJNiNR0F8NLPiHAfgSwCHrtuUsaw8FHxqQs64etaPGZ0Wd34yTAVNpFQjlV8EeAEpFeNhFWbtVlrOsyfLacSvqJ/pxatKIBrK0CMBzFW3jZQHUhVY96kANWV5HltcHKPhUH83nXZwJ9VS0D1QEoC602oLlkyY0TPfidPAOzs5143y4cwdAZnsFfBYH1IUmWz5lVLKe7cG5+ds4v9AJw2J7EUCkGmAFqLUBsTGBzqVSKSQSCSQT8fIA6kJrmO6jrJnl3TgX7sKFSAcuLrWjabmtCCB9YBlKIj2XAJPJBOLxOBLxTR0A1U6oLrTTs8zy27LlhsgtCn4Tl5ZbcfnJdRVASjP7ggM8FSnLPBaLYXMzpg3AC8qHwuTU4p5fxxOBiDIFvH4R8hyHdCpJgTcVgJgOQDKtOMDe7eyhlYhPlxxgPasHjksjlVbmnWW9sbEhSxcgnhLlVzK2MshKHIAskKexDI8cCVsSjb0jbZHyynlk8C6nFFlh/xcFARw5kqbgKco8QXOfVIm5oQvw1T7J2Dd6T5/5o7/xTXS/xe6C3eWG1eGG2eqEscw9N9puYf8f2X4rtPd75aQEj4uK3gAAAABJRU5ErkJggg==4f:T570,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50:T570,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD2UlEQVR42u2X21cTVxTG/b/6jlatFbkoeI1oi66FS0EEBF2QkHsgxgAWCYZwCYEQkNraSu2rLcQ++NQ+6Ru+EHKbWy74uc8MSQY6Y4i69IWz1rfO5Mxl//Z39jkzOXBgv33tZnW60ddv+6LqtzhQBLDYHPjv9Tpe/fuG9Pqz6sdOj2bPIEoO2Afx12r0k7S69hJr0X+w9lLRKh3/TWNMWtfvADCZHUjzIrIZCRlJ/Agp90ka2n0tiyFkcrsB7PLgl9T/AHL5vHxiZeUFnv/5ak9a+eMF8rmsrGg0qqlC5t9cmZDFjjUB8tsA7ME1PQuovRNGXe886o1zOGkO4ZQ1hEZnEI0DMzjjmcJZ76R87dv1dWREvuw0VQRwwbYMg+MxDM4lNA0u4pIngsveBfwwMo/m0Tlc8YVw1T+rAuA+zQH2Y0sF0OL9FS3Dv+Dagye4/pDkW0ar/zHaAku4Ob2I9mAEHXPhIkCWAJQiFJReFDQdqDIN6wNwglgE6Bh/hi7/7+gK/Ibu6ae4QcGv+cNoHg/i4pgfBt84miZ8JQCBL+sAC378gVMfIMUJRQBj8DnuzjxD01AIx2xjOGgZwreO+zgy4MHRe24c8w7g+IhTBcAVM5cK/S4XWPDGmd69AbQ++hlHzKOo6h/GIZsXh50UfPAevrs/iO+HXfLDTjy0qwDSZR1gwZuftugDpFUAVcYRJWs7BS9mTcFHXKj+yYETYzbUPrLsqAGJNiNR0F8NLPiHAfgSwCHrtuUsaw8FHxqQs64etaPGZ0Wd34yTAVNpFQjlV8EeAEpFeNhFWbtVlrOsyfLacSvqJ/pxatKIBrK0CMBzFW3jZQHUhVY96kANWV5HltcHKPhUH83nXZwJ9VS0D1QEoC602oLlkyY0TPfidPAOzs5143y4cwdAZnsFfBYH1IUmWz5lVLKe7cG5+ds4v9AJw2J7EUCkGmAFqLUBsTGBzqVSKSQSCSQT8fIA6kJrmO6jrJnl3TgX7sKFSAcuLrWjabmtCCB9YBlKIj2XAJPJBOLxOBLxTR0A1U6oLrTTs8zy27LlhsgtCn4Tl5ZbcfnJdRVASjP7ggM8FSnLPBaLYXMzpg3AC8qHwuTU4p5fxxOBiDIFvH4R8hyHdCpJgTcVgJgOQDKtOMDe7eyhlYhPlxxgPasHjksjlVbmnWW9sbEhSxcgnhLlVzK2MshKHIAskKexDI8cCVsSjb0jbZHyynlk8C6nFFlh/xcFARw5kqbgKco8QXOfVIm5oQvw1T7J2Dd6T5/5o7/xTXS/xe6C3eWG1eGG2eqEscw9N9puYf8f2X4rtPd75aQEj4uK3gAAAABJRU5ErkJggg==51:T570,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52:T570,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53:T570,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD2UlEQVR42u2X21cTVxTG/b/6jlatFbkoeI1oi66FS0EEBF2QkHsgxgAWCYZwCYEQkNraSu2rLcQ++NQ+6Ru+EHKbWy74uc8MSQY6Y4i69IWz1rfO5Mxl//Z39jkzOXBgv33tZnW60ddv+6LqtzhQBLDYHPjv9Tpe/fuG9Pqz6sdOj2bPIEoO2Afx12r0k7S69hJr0X+w9lLRKh3/TWNMWtfvADCZHUjzIrIZCRlJ/Agp90ka2n0tiyFkcrsB7PLgl9T/AHL5vHxiZeUFnv/5ak9a+eMF8rmsrGg0qqlC5t9cmZDFjjUB8tsA7ME1PQuovRNGXe886o1zOGkO4ZQ1hEZnEI0DMzjjmcJZ76R87dv1dWREvuw0VQRwwbYMg+MxDM4lNA0u4pIngsveBfwwMo/m0Tlc8YVw1T+rAuA+zQH2Y0sF0OL9FS3Dv+Dagye4/pDkW0ar/zHaAku4Ob2I9mAEHXPhIkCWAJQiFJReFDQdqDIN6wNwglgE6Bh/hi7/7+gK/Ibu6ae4QcGv+cNoHg/i4pgfBt84miZ8JQCBL+sAC378gVMfIMUJRQBj8DnuzjxD01AIx2xjOGgZwreO+zgy4MHRe24c8w7g+IhTBcAVM5cK/S4XWPDGmd69AbQ++hlHzKOo6h/GIZsXh50UfPAevrs/iO+HXfLDTjy0qwDSZR1gwZuftugDpFUAVcYRJWs7BS9mTcFHXKj+yYETYzbUPrLsqAGJNiNR0F8NLPiHAfgSwCHrtuUsaw8FHxqQs64etaPGZ0Wd34yTAVNpFQjlV8EeAEpFeNhFWbtVlrOsyfLacSvqJ/pxatKIBrK0CMBzFW3jZQHUhVY96kANWV5HltcHKPhUH83nXZwJ9VS0D1QEoC602oLlkyY0TPfidPAOzs5143y4cwdAZnsFfBYH1IUmWz5lVLKe7cG5+ds4v9AJw2J7EUCkGmAFqLUBsTGBzqVSKSQSCSQT8fIA6kJrmO6jrJnl3TgX7sKFSAcuLrWjabmtCCB9YBlKIj2XAJPJBOLxOBLxTR0A1U6oLrTTs8zy27LlhsgtCn4Tl5ZbcfnJdRVASjP7ggM8FSnLPBaLYXMzpg3AC8qHwuTU4p5fxxOBiDIFvH4R8hyHdCpJgTcVgJgOQDKtOMDe7eyhlYhPlxxgPasHjksjlVbmnWW9sbEhSxcgnhLlVzK2MshKHIAskKexDI8cCVsSjb0jbZHyynlk8C6nFFlh/xcFARw5kqbgKco8QXOfVIm5oQvw1T7J2Dd6T5/5o7/xTXS/xe6C3eWG1eGG2eqEscw9N9puYf8f2X4rtPd75aQEj4uK3gAAAABJRU5ErkJggg==54:T570,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55:T570,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56:T570,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57:T570,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58:T570,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59:T570,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD2UlEQVR42u2X21cTVxTG/b/6jlatFbkoeI1oi66FS0EEBF2QkHsgxgAWCYZwCYEQkNraSu2rLcQ++NQ+6Ru+EHKbWy74uc8MSQY6Y4i69IWz1rfO5Mxl//Z39jkzOXBgv33tZnW60ddv+6LqtzhQBLDYHPjv9Tpe/fuG9Pqz6sdOj2bPIEoO2Afx12r0k7S69hJr0X+w9lLRKh3/TWNMWtfvADCZHUjzIrIZCRlJ/Agp90ka2n0tiyFkcrsB7PLgl9T/AHL5vHxiZeUFnv/5ak9a+eMF8rmsrGg0qqlC5t9cmZDFjjUB8tsA7ME1PQuovRNGXe886o1zOGkO4ZQ1hEZnEI0DMzjjmcJZ76R87dv1dWREvuw0VQRwwbYMg+MxDM4lNA0u4pIngsveBfwwMo/m0Tlc8YVw1T+rAuA+zQH2Y0sF0OL9FS3Dv+Dagye4/pDkW0ar/zHaAku4Ob2I9mAEHXPhIkCWAJQiFJReFDQdqDIN6wNwglgE6Bh/hi7/7+gK/Ibu6ae4QcGv+cNoHg/i4pgfBt84miZ8JQCBL+sAC378gVMfIMUJRQBj8DnuzjxD01AIx2xjOGgZwreO+zgy4MHRe24c8w7g+IhTBcAVM5cK/S4XWPDGmd69AbQ++hlHzKOo6h/GIZsXh50UfPAevrs/iO+HXfLDTjy0qwDSZR1gwZuftugDpFUAVcYRJWs7BS9mTcFHXKj+yYETYzbUPrLsqAGJNiNR0F8NLPiHAfgSwCHrtuUsaw8FHxqQs64etaPGZ0Wd34yTAVNpFQjlV8EeAEpFeNhFWbtVlrOsyfLacSvqJ/pxatKIBrK0CMBzFW3jZQHUhVY96kANWV5HltcHKPhUH83nXZwJ9VS0D1QEoC602oLlkyY0TPfidPAOzs5143y4cwdAZnsFfBYH1IUmWz5lVLKe7cG5+ds4v9AJw2J7EUCkGmAFqLUBsTGBzqVSKSQSCSQT8fIA6kJrmO6jrJnl3TgX7sKFSAcuLrWjabmtCCB9YBlKIj2XAJPJBOLxOBLxTR0A1U6oLrTTs8zy27LlhsgtCn4Tl5ZbcfnJdRVASjP7ggM8FSnLPBaLYXMzpg3AC8qHwuTU4p5fxxOBiDIFvH4R8hyHdCpJgTcVgJgOQDKtOMDe7eyhlYhPlxxgPasHjksjlVbmnWW9sbEhSxcgnhLlVzK2MshKHIAskKexDI8cCVsSjb0jbZHyynlk8C6nFFlh/xcFARw5kqbgKco8QXOfVIm5oQvw1T7J2Dd6T5/5o7/xTXS/xe6C3eWG1eGG2eqEscw9N9puYf8f2X4rtPd75aQEj4uK3gAAAABJRU5ErkJggg==5a:T570,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5b:T570,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5c:T570,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5d:T570,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5e:T570,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5f:T570,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60:T570,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61:T570,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62:T570,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63:T570,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64:T570,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65:T570,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66:T570,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67:T570,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68:T570,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69:T570,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD2UlEQVR42u2X21cTVxTG/b/6jlatFbkoeI1oi66FS0EEBF2QkHsgxgAWCYZwCYEQkNraSu2rLcQ++NQ+6Ru+EHKbWy74uc8MSQY6Y4i69IWz1rfO5Mxl//Z39jkzOXBgv33tZnW60ddv+6LqtzhQBLDYHPjv9Tpe/fuG9Pqz6sdOj2bPIEoO2Afx12r0k7S69hJr0X+w9lLRKh3/TWNMWtfvADCZHUjzIrIZCRlJ/Agp90ka2n0tiyFkcrsB7PLgl9T/AHL5vHxiZeUFnv/5ak9a+eMF8rmsrGg0qqlC5t9cmZDFjjUB8tsA7ME1PQuovRNGXe886o1zOGkO4ZQ1hEZnEI0DMzjjmcJZ76R87dv1dWREvuw0VQRwwbYMg+MxDM4lNA0u4pIngsveBfwwMo/m0Tlc8YVw1T+rAuA+zQH2Y0sF0OL9FS3Dv+Dagye4/pDkW0ar/zHaAku4Ob2I9mAEHXPhIkCWAJQiFJReFDQdqDIN6wNwglgE6Bh/hi7/7+gK/Ibu6ae4QcGv+cNoHg/i4pgfBt84miZ8JQCBL+sAC378gVMfIMUJRQBj8DnuzjxD01AIx2xjOGgZwreO+zgy4MHRe24c8w7g+IhTBcAVM5cK/S4XWPDGmd69AbQ++hlHzKOo6h/GIZsXh50UfPAevrs/iO+HXfLDTjy0qwDSZR1gwZuftugDpFUAVcYRJWs7BS9mTcFHXKj+yYETYzbUPrLsqAGJNiNR0F8NLPiHAfgSwCHrtuUsaw8FHxqQs64etaPGZ0Wd34yTAVNpFQjlV8EeAEpFeNhFWbtVlrOsyfLacSvqJ/pxatKIBrK0CMBzFW3jZQHUhVY96kANWV5HltcHKPhUH83nXZwJ9VS0D1QEoC602oLlkyY0TPfidPAOzs5143y4cwdAZnsFfBYH1IUmWz5lVLKe7cG5+ds4v9AJw2J7EUCkGmAFqLUBsTGBzqVSKSQSCSQT8fIA6kJrmO6jrJnl3TgX7sKFSAcuLrWjabmtCCB9YBlKIj2XAJPJBOLxOBLxTR0A1U6oLrTTs8zy27LlhsgtCn4Tl5ZbcfnJdRVASjP7ggM8FSnLPBaLYXMzpg3AC8qHwuTU4p5fxxOBiDIFvH4R8hyHdCpJgTcVgJgOQDKtOMDe7eyhlYhPlxxgPasHjksjlVbmnWW9sbEhSxcgnhLlVzK2MshKHIAskKexDI8cCVsSjb0jbZHyynlk8C6nFFlh/xcFARw5kqbgKco8QXOfVIm5oQvw1T7J2Dd6T5/5o7/xTXS/xe6C3eWG1eGG2eqEscw9N9puYf8f2X4rtPd75aQEj4uK3gAAAABJRU5ErkJggg==6a:T570,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6b:T570,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6c:T570,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6d:T570,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6e:T570,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6f:T570,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70:T570,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71:T570,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72:T570,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73:T570,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74:T570,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75:T570,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD2UlEQVR42u2X21cTVxTG/b/6jlatFbkoeI1oi66FS0EEBF2QkHsgxgAWCYZwCYEQkNraSu2rLcQ++NQ+6Ru+EHKbWy74uc8MSQY6Y4i69IWz1rfO5Mxl//Z39jkzOXBgv33tZnW60ddv+6LqtzhQBLDYHPjv9Tpe/fuG9Pqz6sdOj2bPIEoO2Afx12r0k7S69hJr0X+w9lLRKh3/TWNMWtfvADCZHUjzIrIZCRlJ/Agp90ka2n0tiyFkcrsB7PLgl9T/AHL5vHxiZeUFnv/5ak9a+eMF8rmsrGg0qqlC5t9cmZDFjjUB8tsA7ME1PQuovRNGXe886o1zOGkO4ZQ1hEZnEI0DMzjjmcJZ76R87dv1dWREvuw0VQRwwbYMg+MxDM4lNA0u4pIngsveBfwwMo/m0Tlc8YVw1T+rAuA+zQH2Y0sF0OL9FS3Dv+Dagye4/pDkW0ar/zHaAku4Ob2I9mAEHXPhIkCWAJQiFJReFDQdqDIN6wNwglgE6Bh/hi7/7+gK/Ibu6ae4QcGv+cNoHg/i4pgfBt84miZ8JQCBL+sAC378gVMfIMUJRQBj8DnuzjxD01AIx2xjOGgZwreO+zgy4MHRe24c8w7g+IhTBcAVM5cK/S4XWPDGmd69AbQ++hlHzKOo6h/GIZsXh50UfPAevrs/iO+HXfLDTjy0qwDSZR1gwZuftugDpFUAVcYRJWs7BS9mTcFHXKj+yYETYzbUPrLsqAGJNiNR0F8NLPiHAfgSwCHrtuUsaw8FHxqQs64etaPGZ0Wd34yTAVNpFQjlV8EeAEpFeNhFWbtVlrOsyfLacSvqJ/pxatKIBrK0CMBzFW3jZQHUhVY96kANWV5HltcHKPhUH83nXZwJ9VS0D1QEoC602oLlkyY0TPfidPAOzs5143y4cwdAZnsFfBYH1IUmWz5lVLKe7cG5+ds4v9AJw2J7EUCkGmAFqLUBsTGBzqVSKSQSCSQT8fIA6kJrmO6jrJnl3TgX7sKFSAcuLrWjabmtCCB9YBlKIj2XAJPJBOLxOBLxTR0A1U6oLrTTs8zy27LlhsgtCn4Tl5ZbcfnJdRVASjP7ggM8FSnLPBaLYXMzpg3AC8qHwuTU4p5fxxOBiDIFvH4R8hyHdCpJgTcVgJgOQDKtOMDe7eyhlYhPlxxgPasHjksjlVbmnWW9sbEhSxcgnhLlVzK2MshKHIAskKexDI8cCVsSjb0jbZHyynlk8C6nFFlh/xcFARw5kqbgKco8QXOfVIm5oQvw1T7J2Dd6T5/5o7/xTXS/xe6C3eWG1eGG2eqEscw9N9puYf8f2X4rtPd75aQEj4uK3gAAAABJRU5ErkJggg==1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1790268068855,"unified_at":"2026-09-24T16:41:08.855Z","metadata":{"hashes":{"sha256":"f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a","sha1":"6d1c1974299f923f07d5dab430f617974796f89d","md5":"e8d2e2a7060960ac9b03fdabb37d367f","sha512":"3f8c835c6c5f3c84ac4c2c8e60e90b9fbdf38875b70f6d0884515873807d8f15660dfc8f36a626fbc04103a159423c4d847a68f107fc3a0d2a1417e9b14e2c18","ssdeep":"24576:OhcKpmRw+54uqC5eh52FoOquCKoXpS81k:HaotBR0GFMuHn","ssdeep_chunks":["24576:OhcKpmR","24576:hcKpmRw","24576:cKpmRw+","24576:KpmRw+5","24576:pmRw+54","24576:mRw+54u","24576:Rw+54uq","24576:w+54uqC","24576:+54uqC5","24576:54uqC5e","24576:4uqC5eh","24576:uqC5eh5","24576:qC5eh52","24576:C5eh52F","24576:5eh52Fo","24576:eh52FoO","24576:h52FoOq","24576:52FoOqu","24576:2FoOquC","24576:FoOquCK","24576:oOquCKo","24576:OquCKoX","24576:quCKoXp","24576:uCKoXpS","24576:CKoXpS8","24576:KoXpS81","24576:oXpS81k","49152:OhcKpmR","49152:hcKpmRw","49152:cKpmRw+","49152:KpmRw+5","49152:pmRw+54","49152:mRw+54u","49152:Rw+54uq","49152:w+54uqC","49152:+54uqC5","49152:54uqC5e","49152:4uqC5eh","49152:uqC5eh5","49152:qC5eh52","49152:C5eh52F","49152:5eh52Fo","49152:eh52FoO","49152:h52FoOq","49152:52FoOqu","49152:2FoOquC","49152:FoOquCK","49152:oOquCKo","49152:OquCKoX","49152:quCKoXp","49152:uCKoXpS","49152:CKoXpS8","49152:KoXpS81","49152:oXpS81k","24576:HaotBR0","24576:aotBR0G","24576:otBR0GF","24576:tBR0GFM","24576:BR0GFMu","24576:R0GFMuH","24576:0GFMuHn"],"imphash":"d089d4467207ddf94427034d499fae05"},"file_info":{"file_name":"f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a.exe","file_type":["peexe","executable"],"file_type_id":"exe","file_size":903216,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1502006554000,"last_seen":1613132589000,"last_multi_scan":1613132589000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":["dreambot","gozi","isfb","papras","ursnif"]},"stats":{"av":{"malicious_count":17,"suspicious_count":0,"total_engines":26},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":0},"sandbox_signatures":{"informative_count":34,"suspicious_count":23,"malicious_count":14,"total":71},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"Ahnlab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"malicious","threat_name":"Trojan[Spy]/Win32.Ursnif","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"malicious","threat_name":"HEUR/AGEN.1127786","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"BitDefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bytehero":{"name":"ByteHero","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"malicious","threat_name":"win/malicious_confidence_100% (W)","status":"malicious","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cyren":{"name":"Cyren","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Gen:Variant.Barys.90015 (B)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"Win32/Spy.Ursnif.BF trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"malicious","threat_name":"TrojanSpy/Ursnif","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ikarus":{"name":"Ikarus","success":true,"verdict":"malicious","threat_name":"Trojan-Spy.NSIS.Agent","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"malicious","threat_name":"Riskware ( 0040eff71 )","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"malicious","threat_name":"HEUR:Trojan.Win32.Generic","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"malicious","threat_name":"Emotet-FDM!E8D2E2A70609","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Gozi.evhzuo","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"quickheal":{"name":"Quick Heal","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"malicious","threat_name":"Mal/Qbot-R","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"TrendMicro","success":true,"verdict":"malicious","threat_name":"BKDR_HP.EA344307","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"TrendMicro House Call","success":true,"verdict":"malicious","threat_name":"BKDR_HP.EA344307","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Gozi.BH","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"malicious","threat_name":"TrojanSpy.Agent","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xviruspersonalguard":{"name":"Xvirus Personal Guard","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Trojan.Generic","sources":[{"report_type":"quickscan","report_id":""}]}]},"sandbox_signatures":[{"level":"informative","category":"Anti-Reverse Engineering","name":"Contains ability to register a top-level exception handler (often used as anti-debugging trick)","description":"SetUnhandledExceptionFilter@KERNEL32.DLL at 00029715-00002896-34752-14-002F594F\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00029715-00002896-34752-67-002FDBC4\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00029715-00002896-34752-21-002F5B66\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00029715-00002896-34752-851-002F5A6A\n SetUnhandledExceptionFilter@KERNEL32.dll at 63845-534-1001204C\n SetUnhandledExceptionFilter@KERNEL32.dll at 1142-1150-00405A6A\n SetUnhandledExceptionFilter@KERNEL32.dll at 3111-1294-1000B175","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-4","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Anti-Reverse Engineering","name":"PE file contains zero-size sections","description":"Raw size of \".ndata\" is zero","origin":"Static Parser","relevance":10,"id":"static-5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to query machine time","description":"GetLocalTime@KERNEL32.DLL at 00014301-00003184-14813-302-00421EC0\n GetSystemTimeAsFileTime@KERNEL32.DLL at 00029715-00002896-34752-488-002F583E","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to query the machine version","description":"GetVersionExA@KERNEL32.DLL at 00014301-00003184-14813-2-00410F6F\n GetVersion@KERNEL32.DLL at 00014579-00002884-24800-7-00405E26\n GetVersionExA@KERNEL32.DLL at 00026972-00002224-32257-1828-00428574\n GetVersion@KERNEL32.DLL at 00028467-00002764-35770-1-00403334\n GetVersion@KERNEL32.DLL at 00029308-00002844-30546-4-10001112\n GetVersion@KERNEL32.DLL at 00029452-00002888-32270-1-00403334\n GetVersion@KERNEL32.DLL at 00029452-00002888-32270-6-00406106\n GetVersion@KERNEL32.DLL at 00030665-00003268-39036-1-00403334\n GetVersion@KERNEL32.DLL at 00030665-00003268-39036-6-00406106","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-3","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to query volume size","description":"GetDiskFreeSpaceW@KERNEL32.DLL at 00014579-00002884-24800-73-004044F1\n GetDiskFreeSpaceW@KERNEL32.DLL at 00029452-00002888-32270-79-00404643\n GetDiskFreeSpaceW@KERNEL32.DLL at 00030665-00003268-39036-79-00404643","origin":"Hybrid Analysis Technology","relevance":3,"id":"stream-37","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Environment Awareness","name":"Makes a code branch decision directly after an API that is environment aware","description":"$27","origin":"Hybrid Analysis Technology","relevance":10,"id":"stream-39","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Environment Awareness","name":"Possibly tries to detect the presence of a debugger","description":"GetProcessHeap@KERNEL32.DLL at 00014301-00003184-14813-303-00421E50\n GetProcessHeap@KERNEL32.DLL at 00014301-00003184-14813-289-00421990\n GetProcessHeap@KERNEL32.DLL at 00029715-00002896-34752-861-003040CD\n GetProcessHeap@KERNEL32.dll at 1142-1163-004140CD","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-31","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Environment Awareness","name":"Reads the registry for installed applications","description":"$28","origin":"Registry Access","relevance":10,"id":"registry-55","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Accesses Software Policy Settings","description":"$29","origin":"Registry Access","relevance":10,"id":"registry-18","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Accesses System Certificates Settings","description":"$2a","origin":"Registry Access","relevance":10,"id":"registry-17","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Contacts domains","description":"\"detectportal.firefox.com\"\n \"a1089.d.akamai.net\"\n \"shavar.prod.mozaws.net\"\n \"d1zkz3k4cclnv6.cloudfront.net\"\n \"2643d04b7202082d53be67ee8099079c.cvl.name\"\n \"d6wjo2hisqfy2.cloudfront.net\"\n \"consent.google.fr\"\n \"www.mozilla.org.cdn.cloudflare.net\"\n \"en.wikipedia.org\"\n \"olympia.prod.mozaws.net\"\n \"cs9.wac.phicdn.net\"\n \"www.google.fr\"\n \"drcwo519tnci7.cloudfront.net\"\n \"shield-normandy-elb-prod-2099053585.us-west-2.elb.amazonaws.com\"\n \"www.gstatic.com\"\n \"a19.dscg10.akamai.net\"\n \"dcky6u1m8u6el.cloudfront.net\"\n \"locprod1-elb-eu-west-1.prod.mozaws.net\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"188.165.26.166:443\"\n \"216.58.213.164:80\"\n \"216.58.213.164:443\"\n \"52.39.147.36:443\"\n \"52.31.166.48:443\"\n \"104.86.111.161:80\"\n \"52.85.69.174:443\"\n \"54.192.1.94:443\"\n \"52.39.210.199:443\"\n \"52.85.69.100:443\"\n \"52.85.69.197:443\"\n \"216.58.198.195:443\"\n \"216.58.198.206:443\"\n \"216.58.213.163:443\"\n \"35.163.114.185:56550\"\n \"104.86.110.99:56551\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Contains PDB pathways","description":"\"SWerdvvcz.pdb\"\n \"c:\\builds\\moz2_slave\\m-rel-w32-00000000000000000000\\build\\src\\obj-firefox\\toolkit\\components\\maintenanceservice\\maintenanceservice.pdb\"\n \"api-ms-win-core-memory-l1-1-0.pdb\"\n \"api-ms-win-core-errorhandling-l1-1-0.pdb\"\n \"api-ms-win-core-file-l1-2-0.pdb\"\n \"api-ms-win-core-handle-l1-1-0.pdb\"\n \"api-ms-win-crt-environment-l1-1-0.pdb\"\n \"api-ms-win-core-util-l1-1-0.pdb\"\n \"c:\\builds\\moz2_slave\\m-rel-w32-00000000000000000000\\build\\src\\obj-firefox\\media\\gmp-clearkey\\0.1\\clearkey.pdb\"\n \"api-ms-win-crt-utility-l1-1-0.pdb\"\n \"api-ms-win-core-libraryloader-l1-1-0.pdb\"\n \"api-ms-win-core-processenvironment-l1-1-0.pdb\"\n \"api-ms-win-core-debug-l1-1-0.pdb\"\n \"c:\\builds\\moz2_slave\\m-rel-w32-00000000000000000000\\build\\src\\obj-firefox\\security\\nss\\lib\\ckfw\\builtins\\builtins_nssckbi\\nssckbi.pdb\"","origin":"File/Memory","relevance":1,"id":"string-7","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Contains SQL queries","description":"$2b","origin":"File/Memory","relevance":2,"id":"string-16","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Creates a writable file in a temporary directory","description":"\"\" created file \"%TEMP%\\3792.bat\"\n \"\" created file \"%TEMP%\\7zS39BA.tmp\\setup-stub.exe\"\n \"setup-stub.exe\" created file \"%TEMP%\\nsn3E8A.tmp\\System.dll\"\n \"setup-stub.exe\" created file \"%TEMP%\\nsn3E8A.tmp\\UAC.dll\"\n \"setup-stub.exe\" created file \"%TEMP%\\nsn3E8A.tmp\\bgintro.bmp\"\n \"setup-stub.exe\" created file \"%TEMP%\\nsn3E8A.tmp\\appname.bmp\"\n \"setup-stub.exe\" created file \"%TEMP%\\nsn3E8A.tmp\\clock.bmp\"","origin":"API Call","relevance":1,"id":"api-4","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZoneAttributeCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\ZoneAttributeCacheCounterMutex\"\n \"Local\\ZonesCounterMutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\_!MSFTHISTORY!_\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\c:!users!qed2fgp!appdata!roaming!microsoft!windows!cookies!\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\c:!users!qed2fgp!appdata!local!microsoft!windows!history!history.ie5!\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\WininetStartupMutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"$2c","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"GETs files from a webserver","description":"\"GET /success.txt HTTP/1.1\nHost: detectportal.firefox.com\nUser-Agent: Mozilla/5.0 (Windows NT 6.1; rv:54.0) Gecko/20100101 Firefox/54.0\nAccept: */*\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate\nCache-Control: no-cache\nPragma: no-cache\nConnection: keep-alive\"","origin":"Network Traffic","relevance":5,"id":"network-2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Launches a browser","description":"Launches browser \"firefox.exe\" (UID: 00030766-00003264)","origin":"Monitored Target","relevance":3,"id":"target-21","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Loads rich edit control libraries","description":"\"setup-stub.exe\" loaded module \"%WINDIR%\\System32\\riched20.dll\" at 68100000","origin":"Loaded Module","id":"module-2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"ns7A77.tmp\" (UID: 00029308-00002844) was launched with new environment variables: \"__PROCESS_HISTORY=\"%TEMP%\\7zS2A9C.tmp\\setup.exe\"\"\n Process \"PING.EXE\" (UID: 00029580-00003980) was launched with missing environment variables: \"__PROCESS_HISTORY\"\n Process \"maintenanceservice_tmp.exe\" (UID: 00029715-00002896) was launched with new environment variables: \"__PROCESS_HISTORY=\"%TEMP%\\7zS2A9C.tmp\\setup.exe\"\"\n Process \"PING.EXE\" (UID: 00029923-00003072) was launched with missing environment variables: \"__PROCESS_HISTORY\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Reads Windows Trust Settings","description":"\"setup-stub.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\"; Key: \"STATE\")","origin":"Registry Access","relevance":5,"id":"registry-20","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Runs shell commands","description":"\"\"cmd /c \"\"%TEMP%\\3792.bat\" \"C:\\f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a.exe\"\"\"\" on 2017-8-6.08:48:33.946","origin":"Monitored Target","relevance":5,"id":"target-3","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Scanning for window names","description":"\"setup-stub.exe\" searching for class \"Shell_TrayWnd\"\n \"setup-stub.exe\" searching for class \"#32770\"","origin":"API Call","relevance":10,"id":"api-70","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"$2d","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"The input sample is signed with a certificate","description":"$2e","origin":"Certificate Data","relevance":10,"id":"certificate-0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"General","name":"The input sample is signed with a valid certificate","description":"The entire certificate chain of the input sample was validated successfully.","origin":"Certificate Data","relevance":10,"id":"certificate-2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Installation/Persistance","name":"Connects to LPC ports","description":"\"\" connecting to \"\\ThemeApiPort\"\n \"setup-stub.exe\" connecting to \"\\ThemeApiPort\"\n \"setup.exe\" connecting to \"\\ThemeApiPort\"\n \"maintenanceservice_installer.exe\" connecting to \"\\ThemeApiPort\"\n \"helper.exe\" connecting to \"\\ThemeApiPort\"","origin":"API Call","relevance":1,"id":"api-16","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"$2f","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Installation/Persistance","name":"Touches files in the Windows directory","description":"$30","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$31","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found a reference to a known community page","description":"\"oosa/M\nTuscan/M\nTuscany/M\nTuscarora/MS\nTuscon/M\nTuskegee/M\nTussaud/M\nTut/M\nTutankhamen/M\nTutsi/M\nTutu/M\nTuvalu/M\nTuvaluan\nTwain/M\nTweed/M\nTweedledee/M\nTweedledum/M\nTwila/M\nTwinkies/M\nTwitter/M\nTwizzlers/M\nTwp\nTwyla/M\nTy/M\nTybalt/M\nTycho/M\nTye/M\nTylenol/M\nTyler\" (Indicator: \"twitter\")","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"System Security","name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\"\" opened \"\\Device\\KsecDD\"\n \"setup-stub.exe\" opened \"\\Device\\KsecDD\"\n \"setup.exe\" opened \"\\Device\\KsecDD\"\n \"maintenanceservice_installer.exe\" opened \"\\Device\\KsecDD\"\n \"helper.exe\" opened \"\\Device\\KsecDD\"","origin":"API Call","relevance":10,"id":"api-37","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"informative","category":"Unusual Characteristics","name":"Matched Compiler/Packer signature","description":"$32","origin":"Static Parser","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Anti-Reverse Engineering","name":"PE file has unusual entropy sections","description":".data\n DATA with unusual entropies 7.98957534427\n 7.86894273397","origin":"Static Parser","relevance":10,"id":"static-6","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Cryptographic Related","name":"Found a cryptographic related string","description":"\"RC4\" (Indicator: \"rc4\"; File: \"nss3.dll.59401900\")\n \"DES\" (Indicator: \"des\"; File: \"nss3.dll.59401900\")\n \"ECDSA\" (Indicator: \"ecdsa\"; File: \"nss3.dll.59401900\")","origin":"File/Memory","relevance":10,"id":"string-57","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the cryptographic machine GUID","description":"\"svchost.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")\n \"setup-stub.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")\n \"setup.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")\n \"maintenanceservice_installer.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")\n \"firefox.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","origin":"Registry Access","relevance":10,"id":"registry-1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the windows installation date","description":"\"firefox.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\"; Key: \"INSTALLDATE\")","origin":"Registry Access","relevance":10,"id":"registry-13","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"External Systems","name":"Detected Emerging Threats Alert","description":"Detected alert \"ET POLICY Executable served from Amazon S3\" (SID: 2013414, Rev: 10, Severity: 2) categorized as \"Potentially Bad Traffic\"","origin":"Suricata Alerts","relevance":10,"id":"suricata-1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"External Systems","name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"1/65 reputation engines marked \"http://crl4.digicert.com\" as malicious (1% detection rate)","origin":"External System","relevance":10,"id":"avtest-6","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"General","name":"Opened the service control manager","description":"\"setup-stub.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)\n \"setup.exe\" called \"OpenSCManager\" requesting access rights \"0X3F\"\n \"maintenanceservice_tmp.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_ALL_ACCESS\" (0xf003f)\n \"maintenanceservice_tmp.exe\" called \"OpenSCManager\" requesting access rights \"0X5\"\n \"firefox.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)","origin":"API Call","relevance":10,"id":"api-77","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"General","name":"Reads configuration files","description":"\"\" read file \"%TEMP%\\nsn3E8A.tmp\\config.ini\"\n \"setup.exe\" read file \"%TEMP%\\nsn3E8A.tmp\\config.ini\"","origin":"API Call","relevance":4,"id":"api-6","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"General","name":"Requested access to a system service","description":"$33","origin":"API Call","relevance":10,"id":"api-76","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"General","name":"Sent a control code to a service","description":"\"svchost.exe\" called \"ControlService\" and sent control code \"0X24\" to the service \"gpsvc\"\n \"svchost.exe\" called \"ControlService\" and sent control code \"0XFC\" to the service \"gpsvc\"\n \"setup-stub.exe\" called \"ControlService\" and sent control code \"0X400\" to the service \"CryptSvc\"\n \"setup-stub.exe\" called \"ControlService\" and sent control code \"0X24\" to the service \"gpsvc\"\n \"setup-stub.exe\" called \"ControlService\" and sent control code \"0XFC\" to the service \"gpsvc\"\n \"maintenanceservice_tmp.exe\" called \"ControlService\" and sent control code \"0X24\" to the service \"MozillaMaintenance\"\n \"maintenanceservice_tmp.exe\" called \"ControlService\" and sent control code \"0X116\" to the service \"MozillaMaintenance\"\n \"maintenanceservice_tmp.exe\" called \"ControlService\" and sent control code \"SERVICE_CONTROL_STOP\" (0X1) to the service \"MozillaMaintenance\"","origin":"API Call","relevance":10,"id":"api-75","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Drops executable files","description":"$34","origin":"Binary File","relevance":10,"id":"binary-1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Remote Access Related","name":"Reads terminal service related keys (often RDP related)","description":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\TERMINAL SERVER\"; Key: \"TSUSERENABLED\")\n \"download.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\TERMINAL SERVER\"; Key: \"TSUSERENABLED\")\n \"ns7A77.tmp\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\TERMINAL SERVER\"; Key: \"TSUSERENABLED\")","origin":"Registry Access","relevance":10,"id":"registry-61","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Spyware/Information Retrieval","name":"Accesses potentially sensitive information from local browsers","description":"\"setup-stub.exe\" had access to \"%APPDATA%\\Microsoft\\Windows\\Cookies\\index.dat\" (Type: \"FileHandle\")\n \"setup-stub.exe\" had access to \"%APPDATA%\\Microsoft\\Windows\\IETldCache\\index.dat\" (Type: \"FileHandle\")","origin":"Touched Handle","relevance":7,"id":"handle-0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Spyware/Information Retrieval","name":"Checks network status using ping","description":"$35","origin":"Monitored Target","relevance":5,"id":"target-22","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Spyware/Information Retrieval","name":"Contains ability to enumerate processes/modules/threads","description":"CreateToolhelp32Snapshot@KERNEL32.DLL at 00029715-00002896-34752-354-002F509B","origin":"Hybrid Analysis Technology","relevance":5,"id":"stream-20","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Spyware/Information Retrieval","name":"Contains ability to open the clipboard","description":"OpenClipboard@USER32.DLL at 00014579-00002884-24800-82-004051ED\n OpenClipboard@USER32.DLL at 00029452-00002888-32270-89-00405382\n OpenClipboard@USER32.DLL at 00030665-00003268-39036-89-00405382","origin":"Hybrid Analysis Technology","relevance":10,"id":"stream-0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"System Destruction","name":"Marks file for deletion","description":"$36","origin":"API Call","relevance":10,"id":"api-26","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"System Destruction","name":"Opens file with deletion access rights","description":"\"\" opened \"C:\\non-exists.txt\" with delete access","origin":"API Call","relevance":7,"id":"api-25","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"System Security","name":"Modifies proxy settings","description":"\"\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")\n \"\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")\n \"setup-stub.exe\" (Access type: \"SETVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYENABLE\"; Value: \"00000000\")\n \"setup-stub.exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYSERVER\")\n \"setup-stub.exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYOVERRIDE\")\n \"setup-stub.exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")\n \"setup-stub.exe\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")","origin":"Registry Access","relevance":10,"id":"registry-27","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"CRC value set in PE header does not match actual value","description":"$37","origin":"Static Parser","relevance":10,"id":"static-0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Imports suspicious APIs","description":"$38","origin":"Static Parser","relevance":1,"id":"static-1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Installs hooks/patches the running process","description":"$39","origin":"Hook Detection","relevance":10,"id":"hooks-8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Reads information about supported languages","description":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")\n \"cmd.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")\n \"setup-stub.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")\n \"firefox.exe\" (Path: \"HKCU\\CONTROL PANEL\\INTERNATIONAL\\GEO\"; Key: \"NATION\")\n \"firefox.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","origin":"Registry Access","relevance":3,"id":"registry-25","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"Anti-Reverse Engineering","name":"Uses ping excessively (often used to bypass analysis)","description":"Process \"PING.EXE\" spawned very often","origin":"Monitored Target","relevance":7,"id":"target-45","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by a large number of Antivirus engines","description":"11/64 Antivirus vendors marked sample as malicious (17% detection rate)","origin":"External System","relevance":10,"id":"avtest-3","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by at least one Antivirus engine","description":"11/64 Antivirus vendors marked sample as malicious (17% detection rate)","origin":"External System","relevance":8,"id":"avtest-0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"General","name":"The analysis extracted a file that was identified as malicious","description":"1/87 Antivirus vendors marked dropped file \"api-ms-win-core-memory-l1-1-0.dll\" as malicious (classified as \"W32.Farfli.PZ.oaue\" with 1% detection rate)\n 1/64 Antivirus vendors marked dropped file \"Uninstall.exe\" as malicious (classified as \"Unsafe\" with 1% detection rate)","origin":"Binary File","relevance":10,"id":"binary-11","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"Installation/Persistance","name":"Writes data to a remote process","description":"$3a","origin":"API Call","relevance":6,"id":"api-0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"Network Related","name":"Contacts very many different hosts","description":"Contacted 16 (or more) hosts in at least 2 different countries","origin":"Network Traffic","relevance":9,"id":"network-17","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"Network Related","name":"Malicious artifacts seen in the context of a contacted host","description":"$3b","origin":"Network Traffic","relevance":10,"id":"network-21","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"Network Related","name":"Multiple malicious artifacts seen in the context of different hosts","description":"$3c","origin":"Network Traffic","relevance":10,"id":"network-27","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"Network Related","name":"Uses network protocols on unusual ports","description":"TCP traffic to 35.163.114.185 on port 56550\n TCP traffic to 104.86.110.99 on port 56551","origin":"Network Traffic","relevance":7,"id":"network-7","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"System Security","name":"Modifies System Certificates Settings","description":"\"setup-stub.exe\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\CERTIFICATES\"; Key: \"B94294BF91EA8FB64BE61097C7FB001359B676CB\")\n \"setup-stub.exe\" (Access type: \"SETVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\CERTIFICATES\\B94294BF91EA8FB64BE61097C7FB001359B676CB\"; Key: \"BLOB\")","origin":"Registry Access","relevance":8,"id":"registry-38","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"System Security","name":"Requested access to a critical system service","description":"\"setup.exe\" called \"OpenService\" to access the \"MpsSvc\" service (\"Windows Firewall\") requesting \"SERVICE_QUERY_CONFIG\" (0X1) access rights\n \"setup.exe\" called \"OpenService\" to access the \"MpsSvc\" service (\"Windows Firewall\") requesting \"SERVICE_QUERY_STATUS\" (0X4) access rights","origin":"API Call","relevance":10,"id":"api-79","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Contains ability to reboot/shutdown the operating system","description":"ExitWindowsEx@USER32.DLL at 00014579-00002884-24800-1-0040322E\n ExitWindowsEx@USER32.DLL at 00028467-00002764-35770-1-00403334\n ExitWindowsEx@USER32.DLL at 00029452-00002888-32270-1-00403334\n ExitWindowsEx@USER32.DLL at 00030665-00003268-39036-1-00403334","origin":"Hybrid Analysis Technology","relevance":5,"id":"stream-23","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"Unusual Characteristics","name":"References suspicious system modules","description":"\"AccessibleMarshal.dll\"","origin":"File/Memory","relevance":5,"id":"string-24","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Spawns a lot of processes","description":"$3d","origin":"Monitored Target","relevance":8,"id":"target-14","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]}],"incidents":[{"name":"Remote Access","details_count":2,"details":[{"detail":"Uses network protocols on unusual ports"},{"detail":"Reads terminal service related keys (often RDP related)"}],"sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Spyware","details_count":1,"details":[{"detail":"Accesses potentially sensitive information from local browsers"}],"sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Persistence","details_count":3,"details":[{"detail":"Writes data to a remote process"},{"detail":"Modifies System Certificates Settings"},{"detail":"Spawns a lot of processes"}],"sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Fingerprint","details_count":3,"details":[{"detail":"Reads the cryptographic machine GUID"},{"detail":"Reads the windows installation date"},{"detail":"Reads the active computer name"}],"sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Spreading","details_count":1,"details":[{"detail":"Opens the MountPointManager (often used to detect additional infection locations)"}],"sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 18 domains and 18 hosts"}],"sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]}]},"activity":{"stats":{"process_count":63,"spawned_processes_count":63,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":31,"imported_dlls_count":179,"dropped_files_count":0,"extracted_files_count":111,"files_written_count":693,"files_deleted_count":0,"registry_keys_created_count":118,"registry_keys_modified_count":0,"registry_keys_deleted_count":9,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":127,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":16,"dns_resolutions_count":18,"contacted_urls_count":1,"http_requests_count":1},"behavior_tags":["dreambot","gozi","isfb","papras","ursnif"],"sample_flags":["Multi-Process","Network Traffic","Extracted Files"],"sandbox_reports":[{"id":"5986c9f57ca3e137b41a7cb4","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"malware_family":"Ursnif.BF","contacted_countries":["EU","FRA","NLD","USA"],"submit_name":"f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a.exe","analysis_start_time":"2017-08-06T08:48:28+00:00","indicators_count":{"informative":34,"suspicious":40,"malicious":18},"tags":["Multi-Process","Network Traffic","Extracted Files"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"188.165.26.166","port":443,"protocol":"TCP","country":"France","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"216.58.213.164","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"216.58.213.164","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"52.39.147.36","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"52.31.166.48","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"104.86.111.161","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"52.85.69.174","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"54.192.1.94","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"52.39.210.199","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"52.85.69.100","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"52.85.69.197","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"216.58.198.195","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"216.58.198.206","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"216.58.213.163","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"35.163.114.185","port":56550,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"address":"104.86.110.99","port":56551,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]}],"dns_resolutions":[{"domain":"a1089.d.akamai.net","address":"104.86.111.161","country":"United States","registrar_organization":"Akamai Technologies, inc.","registrar_name_servers":"NS1-1.AKAMAITECH.NET","registrar_creation_date":"1999-03-03T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"shavar.prod.mozaws.net","address":"52.24.49.107","country":"United States","registrar_name":"GANDI SAS","registrar_organization":"Mozilla","registrar_name_servers":"NS-1084.AWSDNS-07.ORG","registrar_creation_date":"2013-06-18T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"d1zkz3k4cclnv6.cloudfront.net","address":"52.85.69.41","country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Amazon.com, Inc.","registrar_creation_date":"2008-04-25T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"2643d04b7202082d53be67ee8099079c.cvl.name","country":"-","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"d6wjo2hisqfy2.cloudfront.net","country":"-","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Amazon.com, Inc.","registrar_creation_date":"2008-04-25T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"consent.google.fr","address":"216.58.213.174","country":"United States","registrar_name":"MARKMONITOR Inc.","registrar_name_servers":"ns1.google.com","registrar_creation_date":"2000-07-27T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"www.mozilla.org.cdn.cloudflare.net","address":"104.16.41.2","country":"United States","registrar_organization":"CloudFlare, Inc.","registrar_name_servers":"NS1.CLOUDFLARE.NET","registrar_creation_date":"2009-02-17T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"en.wikipedia.org","address":"91.198.174.192","country":"Netherlands","registrar_name":"MarkMonitor Inc.","registrar_organization":"Wikimedia Foundation, Inc.","registrar_name_servers":"NS0.WIKIMEDIA.ORG","registrar_creation_date":"2001-01-13T00:12:14+00:00","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"olympia.prod.mozaws.net","address":"52.39.173.239","country":"United States","registrar_name":"GANDI SAS","registrar_organization":"Mozilla","registrar_name_servers":"NS-1084.AWSDNS-07.ORG","registrar_creation_date":"2013-06-18T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"cs9.wac.phicdn.net","address":"93.184.220.29","country":"European Union","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"detectportal.firefox.com","address":"104.86.111.161","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"www.google.fr","address":"216.58.213.163","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"drcwo519tnci7.cloudfront.net","address":"54.192.217.224","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"shield-normandy-elb-prod-2099053585.us-west-2.elb.amazonaws.com","address":"52.39.237.157","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"www.gstatic.com","address":"216.58.213.163","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"a19.dscg10.akamai.net","address":"104.86.110.98","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"dcky6u1m8u6el.cloudfront.net","address":"54.192.219.116","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"domain":"locprod1-elb-eu-west-1.prod.mozaws.net","address":"52.31.166.48","country":"United States","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]}],"http_requests":[{"host":"detectportal.firefox.com","host_ip":"104.86.111.161:80","url":"/success.txt","method":"GET","response_code":"200","response_phrase":"OK","header":"GET /success.txt HTTP/1.1\nHost: detectportal.firefox.com\nUser-Agent: Mozilla/5.0 (Windows NT 6.1; rv:54.0) Gecko/20100101 Firefox/54.0\nAccept: */*\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate\nCache-Control: no-cache\nPragma: no-cache\nConnection: keep-alive","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}],"processes":[{"pid":3184,"ppid":0,"name":"f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a.exe","command_line":"","sha256":"f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a","normalized_path":"C:\\f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a.exe","uid":"00014301-00003184","icon":"$3e"},{"pid":3596,"ppid":3184,"name":"cmd.exe","command_line":"\"cmd /c \"\"%TEMP%\\3792.bat\" \"C:\\f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a.exe\"\"\"","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","normalized_path":"%WINDIR%\\System32\\cmd.exe","parent_uid":"00014301-00003184","uid":"00014546-00003596","icon":"$3f"},{"pid":2920,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00014586-00002920","icon":"$40"},{"pid":3724,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00014907-00003724","icon":"$41"},{"pid":3776,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00015213-00003776","icon":"$42"},{"pid":3932,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00015521-00003932","icon":"$43"},{"pid":2932,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00015826-00002932","icon":"$44"},{"pid":1032,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00016136-00001032","icon":"$45"},{"pid":3192,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00016445-00003192","icon":"$46"},{"pid":3188,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00016753-00003188","icon":"$47"},{"pid":3340,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00017062-00003340","icon":"$48"},{"pid":3212,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00017371-00003212","icon":"$49"},{"pid":3328,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00017680-00003328","icon":"$4a"},{"pid":3420,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00017989-00003420","icon":"$4b"},{"pid":3388,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00018299-00003388","icon":"$4c"},{"pid":3412,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00018608-00003412","icon":"$4d"},{"pid":3396,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00018916-00003396","icon":"$4e"},{"pid":3424,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00019226-00003424","icon":"$4f"},{"pid":3460,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00019535-00003460","icon":"$50"},{"pid":3500,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00019844-00003500","icon":"$51"},{"pid":2832,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00020154-00002832","icon":"$52"},{"pid":3556,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00020463-00003556","icon":"$53"},{"pid":2772,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00020774-00002772","icon":"$54"},{"pid":3672,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00021090-00003672","icon":"$55"},{"pid":3760,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00021399-00003760","icon":"$56"},{"pid":3752,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00021708-00003752","icon":"$57"},{"pid":2988,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00022018-00002988","icon":"$58"},{"pid":284,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00022328-00000284","icon":"$59"},{"pid":3668,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00022638-00003668","icon":"$5a"},{"pid":820,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00022947-00000820","icon":"$5b"},{"pid":3680,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00023256-00003680","icon":"$5c"},{"pid":100,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00023567-00000100","icon":"$5d"},{"pid":3996,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00023878-00003996","icon":"$5e"},{"pid":604,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00024187-00000604","icon":"$5f"},{"pid":3880,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00024496-00003880","icon":"$60"},{"pid":4008,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00024807-00004008","icon":"$61"},{"pid":1568,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00025123-00001568","icon":"$62"},{"pid":4068,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00025455-00004068","icon":"$63"},{"pid":428,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00025797-00000428","icon":"$64"},{"pid":252,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00026123-00000252","icon":"$65"},{"pid":2284,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00026438-00002284","icon":"$66"},{"pid":2472,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00026773-00002472","icon":"$67"},{"pid":2236,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00027122-00002236","icon":"$68"},{"pid":2304,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00027550-00002304","icon":"$69"},{"pid":2564,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00027886-00002564","icon":"$6a"},{"pid":2584,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00028234-00002584","icon":"$6b"},{"pid":2756,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00028581-00002756","icon":"$6c"},{"pid":2784,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00028903-00002784","icon":"$6d"},{"pid":2856,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00029240-00002856","icon":"$6e"},{"pid":3980,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00029580-00003980","icon":"$6f"},{"pid":3072,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00029923-00003072","icon":"$70"},{"pid":1628,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00030245-00001628","icon":"$71"},{"pid":3308,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00030563-00003308","icon":"$72"},{"pid":3368,"ppid":3596,"name":"PING.EXE","command_line":"ping localhost","sha256":"4ca10dba7ff487fdb3f1362a3681d7d929f5aa1262cdfd31b04c30826983fb1d","normalized_path":"%WINDIR%\\System32\\PING.EXE","parent_uid":"00014546-00003596","uid":"00030909-00003368","icon":"$73"},{"pid":3612,"ppid":3184,"name":"svchost.exe","command_line":"","sha256":"121118a0f5e0e8c933efd28c9901e54e42792619a8a3a6d11e1f0025a7324bc2","normalized_path":"%WINDIR%\\System32\\svchost.exe","parent_uid":"00014301-00003184","uid":"00014565-00003612","icon":"$74"},{"pid":2884,"ppid":3184,"name":"setup-stub.exe","command_line":".\\setup-stub.exe","sha256":"d4cd1c491d8549b0ae1929b325b58e30aa513f7417ca6a745a760311c7deab83","normalized_path":"%TEMP%\\7zS39BA.tmp\\setup-stub.exe","parent_uid":"00014301-00003184","uid":"00014579-00002884","icon":"$75"},{"pid":2224,"ppid":2884,"name":"download.exe","command_line":"/INI=%TEMP%\\nsn3E8A.tmp\\config.ini","sha256":"5973a3910c81ec755ea63907f811fcc800865bb91fbdba989b2f1fdcb29606ac","normalized_path":"%TEMP%\\nsn3E8A.tmp\\download.exe","parent_uid":"00014579-00002884","uid":"00026972-00002224"},{"pid":2764,"ppid":2224,"name":"setup.exe","command_line":".\\setup.exe /INI=%TEMP%\\nsn3E8A.tmp\\config.ini","sha256":"236a6fe7bf8b9a1bae98a12e528066f1bff73d8b0739a37cbcb6ac4739eb2e70","normalized_path":"%TEMP%\\7zS2A9C.tmp\\setup.exe","parent_uid":"00026972-00002224","uid":"00028467-00002764"},{"pid":2844,"ppid":2764,"name":"ns7A77.tmp","command_line":"\"%PROGRAMFILES%\\Mozilla Firefox\\maintenanceservice_installer.exe","sha256":"f320491b503bd30990a16dada0d5ab11c0edce1cd2194ed6c3046f276b5c0552","normalized_path":"%TEMP%\\nsw612F.tmp\\ns7A77.tmp","parent_uid":"00028467-00002764","uid":"00029308-00002844"},{"pid":2888,"ppid":2844,"name":"maintenanceservice_installer.exe","command_line":"","sha256":"b595567457853bda4968d42c508499ad2be6e5a2e9ec876cd5113155708ff635","normalized_path":"%PROGRAMFILES%\\Mozilla Firefox\\maintenanceservice_installer.exe","parent_uid":"00029308-00002844","uid":"00029452-00002888"},{"pid":2896,"ppid":2888,"name":"maintenanceservice_tmp.exe","command_line":"install","sha256":"907a156aadc880f06eb7bbbc0c57ec14a205cee43a2ad509f6bd4040ca4f327d","normalized_path":"%PROGRAMFILES%\\Mozilla Maintenance Service\\maintenanceservice_tmp.exe","parent_uid":"00029452-00002888","uid":"00029715-00002896"},{"pid":3268,"ppid":2884,"name":"helper.exe","command_line":"/SetAsDefaultAppUser","sha256":"95a69a798ee5fbcc9095f6e2b7ba2b667d69b3aca33fe90d6b7ddd071b6f704e","normalized_path":"%PROGRAMFILES%\\Mozilla Firefox\\uninstall\\helper.exe","parent_uid":"00014579-00002884","uid":"00030665-00003268"},{"pid":3264,"ppid":2884,"name":"firefox.exe","command_line":"","sha256":"0fff6b17eb116a7a5d4aec246d7d5c690f6a19dcf0e0f56bffc58ed65fdf32be","normalized_path":"%PROGRAMFILES%\\Mozilla Firefox\\firefox.exe","parent_uid":"00014579-00002884","uid":"00030766-00003264"}],"all_imported_dlls":["msimg32.dll","DWrite.dll","msmpeg2adec.dll","imm32.dll","npmproxy.dll","api-ms-win-crt-runtime-l1-1-0.dll","api-ms-win-core-file-l1-2-0.dll","wsock32.dll","pdh.dll","mscms.dll","evr.dll","ole32.dll","rpcss.dll","iertutil.dll","sspicli.dll","rasapi32.dll","dbghelp.dll","api-ms-win-crt-convert-l1-1-0.dll","api-ms-win-crt-environment-l1-1-0.dll","oleaut32.dll","comctl32.dll","winbrand.dll","dhcpcsvc.dll","avrt.dll","wbemprox.dll","npjp2.dll","mf.dll","KernelBase.dll","user32.dll","msasn1.dll","nss3.dll","mozavcodec.dll","clbcatq.dll","profapi.dll","setupapi.dll","ncrypt.dll","shfolder.dll","msvcp140.dll","KBDUS.DLL","wbemsvc.dll","dnsapi.dll","wshqos.dll","cscapi.dll","api-ms-win-core-timezone-l1-1-0.dll","dxva2.dll","pnrpnsp.dll","cryptnet.dll","api-ms-win-crt-math-l1-1-0.dll","api-ms-win-crt-time-l1-1-0.dll","samlib.dll","d2d1.dll","userenv.dll","InetBgDL.dll","atl.dll","sechost.dll","devobj.dll","rasadhlp.dll","imagehlp.dll","netutils.dll","WSHTCPIP.DLL","webio.dll","api-ms-win-crt-heap-l1-1-0.dll","sqmapi.dll","winrnr.dll","NPSWF32_24_0_0_221.dll","advapi32.dll","usp10.dll","credssp.dll","gpapi.dll","api-ms-win-crt-string-l1-1-0.dll","wtsapi32.dll","softokn3.dll","npdeployJava1.dll","rtutils.dll","SensApi.dll","CityHash.dll","api-ms-win-core-localization-l1-2-0.dll","api-ms-win-crt-stdio-l1-1-0.dll","nssdbm3.dll","msmpeg2vdec.dll","cryptbase.dll","RpcRtRemote.dll","AccessibleMarshal.dll","AudioSes.dll","npGoogleUpdate3.dll","wininet.dll","mswsock.dll","api-ms-win-crt-multibyte-l1-1-0.dll","xul.dll","fastprox.dll","msvcrt.dll","oleaccrc.dll","Wldap32.dll","devrtl.dll","wevtapi.dll","FWPUCLNT.DLL","bcrypt.dll","srvcli.dll","secur32.dll","mpr.dll","gdi32.dll","rpcrt4.dll","crypt32.dll","schannel.dll","version.dll","api-ms-win-crt-filesystem-l1-1-0.dll","wbemcomn.dll","comdlg32.dll","IPHLPAPI.DLL","winnsi.dll","nsDialogs.dll","wintrust.dll","AppAssocReg.dll","sfc.dll","api-ms-win-core-processthreads-l1-1-1.dll","ntdll.dll","wship6.dll","winhttp.dll","normaliz.dll","NPAUTHZ.DLL","mozavutil.dll","powrprof.dll","NapiNSP.dll","ShellLink.dll","api-ms-win-core-file-l2-1-0.dll","ksuser.dll","uxtheme.dll","ws2_32.dll","msxml3r.dll","propsys.dll","bcryptprimitives.dll","riched20.dll","nssckbi.dll","nppdf32.dll","shlwapi.dll","nlaapi.dll","netprofm.dll","dhcpcsvc6.dll","AcGenral.dll","MMDevAPI.dll","lpk.dll","oleacc.dll","ntmarta.dll","nsi.dll","samcli.dll","api-ms-win-core-synch-l1-2-0.dll","api-ms-win-crt-locale-l1-1-0.dll","apphelp.dll","urlmon.dll","rasman.dll","slc.dll","ucrtbase.dll","lgpllibs.dll","mfplat.dll","ExplorerFrame.dll","dui70.dll","cabinet.dll","sfc_os.dll","winsta.dll","Wpc.dll","cryptsp.dll","System.dll","duser.dll","msacm32.dll","linkinfo.dll","mozglue.dll","freebl3.dll","ntdsapi.dll","kernel32.dll","shell32.dll","msctf.dll","dwmapi.dll","cfgmgr32.dll","rsaenh.dll","vcruntime140.dll","api-ms-win-crt-utility-l1-1-0.dll","msxml3.dll","winmm.dll","ntshrui.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"Uninstall.exe","sha256":"d12735eba8179431ab6ef1e18ae14cbaa705eb4e936219facd9eba4d1601bf8f","verdict":"malicious","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-memory-l1-1-0.dll","sha256":"50bf87da10ae3f442c457e42d6666993b0fca7c5d4df521e8cd0959995fbcddc","verdict":"malicious","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"maintenanceservice.exe","sha256":"907a156aadc880f06eb7bbbc0c57ec14a205cee43a2ad509f6bd4040ca4f327d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-console-l1-1-0.dll","sha256":"bce066193feb60b08edf4cbeb490aaaa5dffeb8a63a720cadf948748a9af4b8f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-handle-l1-1-0.dll","sha256":"5089484c8c56ac8e095cadc3dc971df71edeb52f856940632821fd37e81ae5ca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-namedpipe-l1-1-0.dll","sha256":"2f4690b3c2587c0bfb81ab701d50e497406994613151faf007423c59ca5e2281","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-processthreads-l1-1-0.dll","sha256":"979ff0e25e7ea00b8714c9ef2dc8417e69afac137ea88f77f8f5a9ffeaa31923","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-utility-l1-1-0.dll","sha256":"fa10f7e2ab54c2ebcd4688e39bc4af1544fa21b73be7fd0562b3ff7cff041f7a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"lgpllibs.dll","sha256":"bc4ee9f295c825c47dfb73ce69182b49ae1912d353f1ff0a0db823e690b22252","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"updater.exe","sha256":"0bd5ebf923a28bd2814ec86db99777d56f975a676151eec969f58b5de3943fbd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"setup.exe","sha256":"236a6fe7bf8b9a1bae98a12e528066f1bff73d8b0739a37cbcb6ac4739eb2e70","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"ServicesHelper.dll","sha256":"6d2f1df00e70097a667f6020205bbfea67a4fd5e0c244f0400752b4671c0a3f3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"UserInfo.dll","sha256":"2862c7bc7f11715cebdea003564a0d70bf42b73451e2b672110e1392ec392922","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"ApplicationID.dll","sha256":"d43896c0c02bec598b7513b9a8815bb301c6b73da0fb2e0aee99146b4bd5e287","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"maintenanceservice_tmp.exe","sha256":"907a156aadc880f06eb7bbbc0c57ec14a205cee43a2ad509f6bd4040ca4f327d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"3792.bat","sha256":"8052238ed22296d47035baa2883dcecd491eb461a37916cf382c8e3855e3a870","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"maintenanceservice_installer.exe","sha256":"b595567457853bda4968d42c508499ad2be6e5a2e9ec876cd5113155708ff635","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"setup-stub.exe","sha256":"d4cd1c491d8549b0ae1929b325b58e30aa513f7417ca6a745a760311c7deab83","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"GG9U9490Q0YVN6VH6DAD.temp","sha256":"5cb9b6577d65e7c2941d4047bf914b741e46a570c62bfe2064249ca0525be249","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"InstallTime20170628075643","sha256":"376013eaa5a5d7a1db6a5c1d867a52f3fcfa4762bb2a4866cd75d4b2bee7c913","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"cert8.db","sha256":"ee13c22661218a19a56a38310aa008c57f2d2896d78a91dab9480bc32c997ebb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"addons.json.tmp","sha256":"a8546b691125a5c9f033d25e3e0c97f44450d6671e5eca3a3d5174581060e77a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"blocklist.xml","sha256":"df6d2ea8a97b35d3ccc99883f55aafb44ad67996b16a474f65209d4641fd5253","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"compatibility.ini","sha256":"722f8eb5da0092dab4075fbad31acbb6fe03e1a689a4b8e02e47f699d3f5bf66","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"containers.json.tmp","sha256":"630fcf3d7961caa56fc6f698dfe770fde2af1f8e51a3cda757253bf8a6d5a09a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"cookies.sqlite","sha256":"ca8a4596393a6a36076c87a614ed32d881a5a6916bd97562699cdf96f4bc7402","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"cookies.sqlite-wal","sha256":"be634d71554699cfe1845ff4dae747602e970312cbd655bbcc12bfdc045c70da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"store.json.mozlz4.tmp","sha256":"078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"aborted-session-ping.tmp","sha256":"39a0cd94d643549171d0170164626a7e4ebd2e0530b37bc0bf70ba609b1560e6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"session-state.json.tmp","sha256":"11d476b22a000ac0ffe00476dd2dbb3d6c6252778730498e17238e044e791576","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"extensions.ini.tmp","sha256":"132a787375decfe33100593be77a886d4f4be6bf611ea0ede3c7ad0bc64f9c63","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"extensions.json.tmp","sha256":"48c256122785276762d9bead691c5410f37f8d0a7d9224f5a8ad8955ccbc88b3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"gmpopenh264.info","sha256":"194cd651f762b40d27d6897b57e5d2cac112fecf18d2e864fd692f84d210e8d7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"LICENSE.txt","sha256":"2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"manifest.json","sha256":"3060a4d7eb18598ab5127ed9b555a744201fbcbbeea6feca2f2ca74308426c5b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"widevinecdm.dll","sha256":"b2fff0c42f6ccc2da4921730d0a12bb85e869602ba553dbbd4773410426fb9da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"widevinecdm.dll.lib","sha256":"08ee2743d27e6564aa64a027f2238c57a43591ace53d7b32f157b2c69c77e12c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"mimeTypes-1.rdf","sha256":"999b0eb3e926a18608c34294b14e51f22afd5dd866e45ca6f8b55c459bef5f72","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"AccessibleMarshal.dll","sha256":"c025faedee75a869f72ecd3cb05068a6be52a1307d32f6293a0d1825b8e28e73","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"IA2Marshal.dll","sha256":"b50776568794f9f49bc52a52be61ac3ddc5e5f2cc6f82d0cae41792935e0d771","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-datetime-l1-1-0.dll","sha256":"29b23370474be0c459cc47863603167cc7191f58318bd29877225fcbf2454215","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-debug-l1-1-0.dll","sha256":"f654e56c4299f507bc34271b6baa29290fd4919b853e17d7470596cad779f063","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-errorhandling-l1-1-0.dll","sha256":"891ccfeb349116283326262c27b8894b43cdc89b8afd5ba7d21b891814a68075","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-file-l1-1-0.dll","sha256":"71c87c14bc1bd0b20d9f68d4943e93c4c6ddc1b6cf252938bb15fe562552f93e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-file-l1-2-0.dll","sha256":"668f91e94e76db4457184909e6a1ab4655e81a8ef37dc37b4ecfe93146c29a88","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-file-l2-1-0.dll","sha256":"a11c772b2451b0c9c706b03381819e4a1def3e2fbbba8362509bbe57dbd5c666","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-heap-l1-1-0.dll","sha256":"9a5952c82cbcb1a8ece9c51c258667d9ab96d13ec6455873999ff0bf78c3cab0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-interlocked-l1-1-0.dll","sha256":"ff482f69f2183b5fd3c1b45d9006156524b8f8a5f518e33d6e92ea079787e64d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-libraryloader-l1-1-0.dll","sha256":"d8d74fb87f94a587582d56934816362b992b712e47c39f13d957058f17724886","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-localization-l1-2-0.dll","sha256":"4f11443a2fa6c714d3e33597f0d08de4e11a6a2fdb7de2e4a01addd5977665c5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-processenvironment-l1-1-0.dll","sha256":"9b5a5536aed84d45a00da1056af4762fec805eaba742c6bf2d2fca60993711bb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-processthreads-l1-1-1.dll","sha256":"5bacbbe62e36ad0f6d7742e70361f26bc56a44dbd28cc0291f588420e0c218a6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-profile-l1-1-0.dll","sha256":"619e5120bfdd11461672ce8798da00166e57c528b9afd80404d2c9cbe87e2c07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-rtlsupport-l1-1-0.dll","sha256":"6d541b215cfa452e54dc6af9317a7fc24043fa465ef2b561e0f245a4870b2705","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-string-l1-1-0.dll","sha256":"550d4fc902f25f2a0c09f475b5cecee43fb3a0a042126479560b0001db5c4891","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-synch-l1-1-0.dll","sha256":"bff7ea28e198c7dbee45d35fd98ae03696e9e252d46bec9ff7b7823cba1681f1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-synch-l1-2-0.dll","sha256":"e29eaa099be15958cb65d03d47959cae2dac342402856c5f0e4da672193c329d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-sysinfo-l1-1-0.dll","sha256":"81926c2b97a7b01061c5042da0005f0b64fe9e07852478b2a65e8a8eb5560b1f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-timezone-l1-1-0.dll","sha256":"a5453cd2b5e98d40ca17dd20a8f5974f29de7236a076867a3bc3cbca441be928","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-core-util-l1-1-0.dll","sha256":"48d491b08d395a8ac47cc22a70d1c3f5e84d716afe2678e825f24492e8ff2ed4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-conio-l1-1-0.dll","sha256":"3737d7875668eb4812ab01fe82226d758d480128c76bc234806bfd40694cf048","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-convert-l1-1-0.dll","sha256":"d16c5b0e19870e86354b5e6cdc4c81e80777749f6bbe6b675f680cec0ffae35d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-environment-l1-1-0.dll","sha256":"9fc2486ed5d3fff78deb69a7386f4575451d43b67f759afb056ac66b82041e3d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-filesystem-l1-1-0.dll","sha256":"136e5de4b535aabf6368c06f82339d2ef6c34165661f40433bcef4ebb90b30fe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-heap-l1-1-0.dll","sha256":"b90bffa9e03ffd4ecf1d0d709c60f61d13490e84c4550ef06586bc9b1024ed00","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-locale-l1-1-0.dll","sha256":"be19250a19ed49ce247999d6f0b953edc2ab7c66b46f1cfbd0c24be91b84b297","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-math-l1-1-0.dll","sha256":"69c637c0be7ddfe0690d8c642ec6d0850085617c3c3dda9531cac818f06f66e8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-multibyte-l1-1-0.dll","sha256":"414a2bd84b042e2ccf758270647bcfa02d78eb0125c0584dd53f7245481d66b9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-private-l1-1-0.dll","sha256":"5710e3ed5819ccaa9cf558ab57534bc880c610c06f2a44adfafbfab5bfc38c2b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-process-l1-1-0.dll","sha256":"3a2355a23874342777391b4a06c5cdcd990ded287cc4a27fdf0a071ac3b229ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-runtime-l1-1-0.dll","sha256":"882da90b6368056908e9cd21c4719a016e9a3ca597eca9183892a5806b4a8d4a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-stdio-l1-1-0.dll","sha256":"44bbb2aec747e1cbc63fc7c4d2e8c5ec1ca9f9d026835ac2ccb0d60971b6107a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-string-l1-1-0.dll","sha256":"034a8abf2bf027ad950fdf8fbdf488188c8d02eba8e160aa95de376ff1f32fe6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"api-ms-win-crt-time-l1-1-0.dll","sha256":"9766c4200b3f51630097fce8d4f10b33383e663601802ada72660604876c99e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"breakpadinjector.dll","sha256":"13af53934d229c55ab25a114ab22cf3de0f37b0b7bbc2c5d6da767f67c18d0cf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"crashreporter.exe","sha256":"56041fe09596ddf7143a92fc02c2bd9eb0b0acbc51afd424ef3a176ce6fb7e50","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"d3dcompiler_47.dll","sha256":"3a010ee7186086a7f77b6aec3644e05f8495a84895b90572cab8d4f14efa088e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"firefox.exe","sha256":"0fff6b17eb116a7a5d4aec246d7d5c690f6a19dcf0e0f56bffc58ed65fdf32be","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"freebl3.dll","sha256":"83662ac21d3599ea484124d05bd6bee0d7a7d6622cc8d16475f498eb0255946c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"clearkey.dll","sha256":"9af408a13605a42de43404fe382a051db41a56638f3d0cac49081c335084e71a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"libEGL.dll","sha256":"bb99ccd870d24a306ffcfeb82c6c1d71df578b3b42aabde2948c42d23b82aed4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"libGLESv2.dll","sha256":"eb0da43d3e63be7385b770631a2032e8e3c6bb25e20a68358ac9c6942cbcc727","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"minidump-analyzer.exe","sha256":"2451cee0eacf870cb0693a35ca1bb6582db4110126c90ac71212d9f5b8f38ebc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"mozavcodec.dll","sha256":"ceb62818ebbf581f217bd58f7692bfba485e71710fa9bad285b857bd80518f23","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"mozavutil.dll","sha256":"c7459e4b3473a4a45decbbcbafeaea63365d6c6aee4db02188276b62f7257c24","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"mozglue.dll","sha256":"2035023b16b9b1de4abc175dcd7d916ce88f5564ba26242d298e4bb64680f3b1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"msvcp140.dll","sha256":"9c1dc36d319382e1501cdeaae36bad5b820ea84393ef6149e377d2fb2fc361a5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"nss3.dll","sha256":"30b0882e61475385a2ea5a6f99f89322cb5bc2da41eb0b974be0ad7f743d1aac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"nssckbi.dll","sha256":"b51d874ef28b8f5abe2bb40a959fac99b80f120545dc7d0b0daa8f7be0efb9f0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"nssdbm3.dll","sha256":"5d13786dc178371f40ce7b627a2e6f5ee53e2de749311d3d7c743ee1f0fb15ae","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"pingsender.exe","sha256":"a3bed92310c36b0d07b8c25111b005f6b68ca3b43204b676efb26928880f7514","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"plugin-container.exe","sha256":"891258f1ac8e217edbbe70fb89fe20090cee946cefc9737df6f4f01a04573932","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"plugin-hang-ui.exe","sha256":"a7a95ba1d209744ccacb8a183410da990f772ce54d55b4ba72ca3e53e50fe7e0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"qipcap.dll","sha256":"651c37c4f83df36fe48894fa8ff50f4cc7558985ab82731ee69031521680082c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"softokn3.dll","sha256":"cf656e42e04a39b3e6b00a19bc88b1b9b44b810473e23cee6a4b12209eebb6a3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"ucrtbase.dll","sha256":"f085b1b009ab89049ba95dd4ffde276d5b1f6fa0055f58dc3fc0d4b03ae8116d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"helper.exe","sha256":"95a69a798ee5fbcc9095f6e2b7ba2b667d69b3aca33fe90d6b7ddd071b6f704e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"vcruntime140.dll","sha256":"6823b98c3e922490a2f97f54862d32193900077e49f0360522b19e06e6da24b4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"voucher.bin","sha256":"ae2fdba8a26d07c83e24b7c8840b122217c2b2252f0f37a1d3724bde165a7174","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"xul.dll","sha256":"03ebe0338c3eff2c12bbd001bc9bfc210165039c9937326cee98481d4379183c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"CertCheck.dll","sha256":"9e1831bf44b75980903eff8446960f21ab323b9f8249ddb49519718d873135d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"InetBgDL.dll","sha256":"1d18b65659d3febf7bf806df4660a33e0c614f85bafafb7a3d30c6bf2948875d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"download.exe","sha256":"1fd7486230091e9df43e435e72c86364c124f0c4a8660d1679c2ea722edbab70","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"nsDialogs.dll","sha256":"be60a00f32924ccbe03f9914e33b8e1ad8c8a1ca442263a69896efba74925b36","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"UAC.dll","sha256":"0d21041a1b5cd9f9968fc1d457c78a802c9c5a23f375327e833501b65bcd095d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"CityHash.dll","sha256":"d3d7b3d7a7941d66c7f75257be90b12ac76f787af42cd58f019ce0280972598a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"System.dll","sha256":"4ff9b2678d698677c5d9732678f9cf53f17290e09d053691aac4cc6e6f595cbe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"ShellLink.dll","sha256":"5d103419245e2a5f124a96cace25d6836b2398edc0aa3919829b0fd6ad8b5d6a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"AppAssocReg.dll","sha256":"386c19010f04c04a3a0071cce09f7a2c10393392c7ca5877becc437ad9d31d37","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Mozilla Firefox.lnk","sha256":"4f34fdce05a5de92dc1c51d7884a4817e9da1497cc6b544e9133f69bfc5bc785","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"nsExec.dll","sha256":"c4c6fe032f3cd8b31528d7b99661f85ee22cb78746aee98ec568431d4f5043f7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]}],"files_written":[{"path":"%TEMP%\\3792.tmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\PROPSYS.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"C:\\non-exists.txt","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\SYSTEM32\\ntdll.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\svchost.exe.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\cmd.exe.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\PING.EXE","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS39BA.tmp\\setup-stub.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsn3E8A.tmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsn3E8A.tmp\\bgintro.bmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\nsxE737.tmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsn3E8A.tmp\\clock.bmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsn3E8A.tmp\\particles.bmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsn3E8A.tmp\\pencil.bmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsn3E8A.tmp\\appname.bmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\urlmon.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\System32\\msxml3r.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IETldCache\\index.dat","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsn3E8A.tmp\\InetBgDL.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsn3E8A.tmp\\nsDialogs.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\CRYPT32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_AB5EAAA21DF673505B87D680AC76B6E1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\782D7E2BFB036A849A99FFA65C652D39","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\616AD1AB067CFD351D6C0EF6F3E12F40","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_AF71C1BB2E04981CC28D0E1D27405C45","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\0E506CEBBC8B162CFB2D72DB4891DCAE","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\F4EA555947766F67C3BB52DEDFD509C5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{9C9C1D9A-E45A-41F9-8D98-D3B6EA5D768D}","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{72D885C2-0AEC-4510-95D5-BF120A963535}","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\Cab1436.tmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\tobedeleted","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\tobedeleted\\nsc14E2.tmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsn3E8A.tmp\\System.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsn3E8A.tmp\\download.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\SYSTEM32\\en-US\\ntdll.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\setup.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsw612F.tmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsw612F.tmp\\summary.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsw612F.tmp\\options.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsw612F.tmp\\shortcuts.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsw612F.tmp\\components.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\AccessibleMarshal.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-console-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-datetime-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-debug-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-errorhandling-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-file-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-file-l1-2-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-file-l2-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-handle-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-heap-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-interlocked-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-libraryloader-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-localization-l1-2-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-memory-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-namedpipe-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-processenvironment-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-processthreads-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-processthreads-l1-1-1.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-profile-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-rtlsupport-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-string-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-synch-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-synch-l1-2-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-sysinfo-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-timezone-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-core-util-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-conio-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-convert-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-environment-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-filesystem-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-heap-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-locale-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-math-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-multibyte-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-private-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-process-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-runtime-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-stdio-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-string-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-time-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\api-ms-win-crt-utility-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\application.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\breakpadinjector.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\chrome.manifest","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\crashreporter.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\crashreporter.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\d3dcompiler_47.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\dependentlibs.list","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\firefox.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\firefox.VisualElementsManifest.xml","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\freebl3.chk","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\freebl3.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\IA2Marshal.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\lgpllibs.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\libEGL.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\libGLESv2.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\maintenanceservice.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\maintenanceservice_installer.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\minidump-analyzer.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\mozavcodec.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\mozavutil.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\mozglue.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\msvcp140.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\nss3.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\nssckbi.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\nssdbm3.chk","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\nssdbm3.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\omni.ja","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\pingsender.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\platform.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\plugin-container.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\plugin-hang-ui.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\precomplete","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\qipcap.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\removed-files","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\softokn3.chk","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\softokn3.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\ucrtbase.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\update-settings.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\updater.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\updater.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\vcruntime140.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\voucher.bin","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\xul.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\uninstall\\helper.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\gmp-clearkey\\0.1\\clearkey.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\gmp-clearkey\\0.1\\manifest.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\fonts\\EmojiOneMozilla.ttf","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\dictionaries\\en-US.aff","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\dictionaries\\en-US.dic","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\defaults\\pref\\channel-prefs.js","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\browser\\blocklist.xml","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\browser\\chrome.manifest","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\browser\\crashreporter-override.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\browser\\omni.ja","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\browser\\VisualElements\\VisualElements_150.png","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\browser\\VisualElements\\VisualElements_70.png","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\browser\\features\\aushelper@mozilla.org.xpi","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\browser\\features\\e10srollout@mozilla.org.xpi","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\browser\\features\\firefox@getpocket.com.xpi","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\browser\\features\\screenshots@mozilla.org.xpi","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\browser\\features\\webcompat@mozilla.org.xpi","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\uninstall","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsw612F.tmp\\System.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp\\core\\Accessible.tlb","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\Accessible.tlb","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\install.log","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\uninstall\\uninstall.log","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\7zS2A9C.tmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\maintenanceservice_installer.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nse8717.tmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\SHELL32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\maintenanceservice.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\updater.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"\\SystemRoot\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Maintenance Service\\logs","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Maintenance Service\\updater.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Maintenance Service\\maintenanceservice.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Maintenance Service\\Uninstall.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\dependentlibs.list","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\MSVCP140.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\api-ms-win-crt-runtime-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\api-ms-win-crt-string-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\api-ms-win-crt-heap-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\api-ms-win-crt-stdio-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\api-ms-win-crt-convert-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\VCRUNTIME140.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\api-ms-win-crt-math-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\api-ms-win-crt-filesystem-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\api-ms-win-crt-environment-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\mozglue.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\api-ms-win-crt-time-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\api-ms-win-crt-utility-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\api-ms-win-crt-multibyte-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\api-ms-win-crt-locale-l1-1-0.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\OLEACCRC.DLL","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\SETUPAPI.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\KBDUS.DLL","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000c.db","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Crash Reports","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Pending Pings","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170628075643","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\updates\\308046B0AF4A39CB\\updates\\0\\update.version","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\profiles.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\parent.lock","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\omni.ja","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\tzres.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\chrome.manifest","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\browser\\chrome.manifest","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\uninstall\\helper.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{D0B53124-E232-49FC-9EA9-75FA32C7C6C3}","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\startupCache","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\System32\\en-US\\wshtcpip.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\System32\\en-US\\wship6.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\System32\\en-US\\wshqos.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%USERPROFILE%\\Desktop","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Start Menu","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\nsyB82F.tmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\user.js","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\PING.EXE.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\sortdefault.nls","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\browser\\blocklist.xml","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\A0U7KZ~1.DEF\\secmod.db","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\A0U7KZ~1.DEF\\cert8.db","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\A0U7KZ~1.DEF\\key3.db","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\SiteSecurityServiceState.txt","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cert_override.txt","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\SecurityPreloadState.txt","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\extensions.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\blocklist.xml","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\MSCTF.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\places.sqlite-shm","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"PIPE\\samr","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\permissions.sqlite","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\xulstore.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\spool\\drivers\\color\\sRGB Color Space Profile.icm","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\Fonts\\staticcache.dat","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\USER32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\extensions.json.tmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\addons.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cookies.sqlite-shm","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\etilqs_HYkavaHIGDgdQva","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\index.dat","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\History.IE5\\index.dat","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\WININET.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\AlternateServices.txt","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\bookmarkbackups","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\6732BED45A05C23CB979F758C8D14014C96E5793","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\346802E16B20201F00C8CE9DCF0F9F909DC9A0CF","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\compatibility.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\browser\\features\\aushelper@mozilla.org.xpi","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\browser\\features\\e10srollout@mozilla.org.xpi","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\browser\\features\\screenshots@mozilla.org.xpi","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\browser\\features\\webcompat@mozilla.org.xpi","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\gmp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\extensions.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\gmp-clearkey\\0.1\\manifest.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Mozilla","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\ow\\Mozilla\\Temp-{15e80548-17c9-4e33-9eb6-b8f6c4aad0c2}","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\content-prefs.sqlite","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\distribution\\distribution.ini","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\3792.bat","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\sessionCheckpoints.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\browser\\features\\firefox@getpocket.com.xpi","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\Macromed\\Flash\\NPSWF32_24_0_0_221.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_25\\bin\\dtplugin\\npdeployJava1.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_25\\bin\\plugin2\\npjp2.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\MICROS~3\\Office14\\NPSPWRAP.DLL","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\MICROS~3\\Office14\\NPAUTHZ.DLL","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Google\\Update\\1.3.32.7\\npGoogleUpdate3.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Reader 11.0\\Reader\\AIR\\nppdf32.dll","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\firefox\\postSigningData","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\experiments.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Temp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\mozilla-temp-files","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\mozilla-temp-files\\mozilla-temp-41","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\times.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\containers.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\frequencyCap.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\search.json.mozlz4","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%WINDIR%\\system32\\en-US\\KERNELBASE.dll.mui","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\search-metadata.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\9A05F400365456846A0E5B0191793E6BA3E3084C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Reader 11.0\\Reader\\AcroRd32.exe","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\MICROS~3\\Office14\\OUTLOOK.EXE","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\mimeTypes.rdf","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\signedInUser.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\places.sqlite","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\initialMigrationMetadata.jsonlz4","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\persistent\\moz-safe-about+home\\.metadata","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\webappsstore.sqlite-shm","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\etilqs_ruFTnuViL0c8JGn","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\BFF5CBBA948FDAA497E68BFB82BC2A881F7D9AD3","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\moz-safe-about+home\\.metadata","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\directoryLinks.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\webappsstore.sqlite","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage.sqlite","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\chrome\\.metadata","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\chrome\\.metadata-v2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\02DD946494DA39281E9A180FA4EBEA2D8AE42304","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\chrome","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\chrome\\idb","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\moz-safe-about+home\\.metadata-v2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\ShutdownDuration.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\etilqs_dplGHfEzydOWndp","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\etilqs_aDtbfEzaB0GGszy","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\A9AED006CB0BFDFE5067DFE6B81081875E9B84E2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%TEMP%\\etilqs_xgyzh9sExQIe0Oj","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%PROGRAMFILES%\\Mozilla Firefox\\browser\\omni.ja","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"C:\\Users","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"C:\\Users\\QEd2FgP","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%USERPROFILE%\\AppData","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\moz-safe-about+home","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\moz-safe-about+home\\idb","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\9295657E07676B85DDCE8B95D2EE090030FCF94B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\sessionstore-backups","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\sessionstore-backups\\previous.js","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\sessionstore-backups\\upgrade.js-20170628075643","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\EFF518FAB9123150D7E52BF0241580FEBF5F889D","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\46C2705A6147D05E8D2B0506D2EB375592DCC75B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\749970A373F3CF85EBE85C0E6501CDF906CD298C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\8A9C6CB4E3B621FA03A66FF492ADA38CB6277F7B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\F7DB084DCDF8BE2CAFE7D30F43E10037692F6010","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\1E7013E281E9F8E75ABE6581143F9AB3E0345400","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\logins.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\05EEAB3D9926847A313CFF45AFAFD964A5CE1CF7","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\DD4EBC47E4465F91333BAECBE901F6F7DD690E2F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\F9F97D3FA167354464259FC28B0806009E32C3A0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\downloads.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\F1B5C3EDE100D4A38A0A28F1CEF6FAEFB619EC1B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7CEDB898FAF4F00E03A8AA5583491F10EDC1BEB7","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\webappsstore.sqlite-wal","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\prefs.js","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\B4C2011605066E4ECBEC8E94F8B89746D886A062","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cookies.sqlite","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\C47D94BDFAE3688C5E44D0868EB9B309F90E0F14","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\FAAD714F07D5AC654120A4B2B44BFDFF657A1CFE","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\places.sqlite-wal","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\46AF5DA8EE76D0589974BDAA0845365767C46647","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\D7D96F1FD83536D21C8D9975C9E68F9EB50AEE95","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\E63925F715E02528EF997CCF1BEB879F6AE6F0E2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\6143EE0132EC48267C606C99FE2DFCFB5AC92D50","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\49087C49A855F9C02E0B1D3A31969D682EF9AC4A","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\FD1252F078C393878FCAC161E709F7269F4267F3","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\38345CCD300DCE9CA39AF08AFC58F96892F23107","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\thumbnails","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\thumbnails\\4ecabfdd5c4518806509c44231236e69.png","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\thumbnails\\fb61b0f18715c416c1d5ad4a8cd72b07.png","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\28E41A7BAA7A09C51131C65D45A439732B2A8C1D","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2A2D8956827124C17EE88DDD6261B6B00AE91144","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\97B8FE7F14F7851A1918ACD5C9A3D8365E7CE7C4","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\FC3F25186AA6B4B5C6F555D939267A058BA3EFE5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\611485B346C1D10EAFD2A9C16CA241C5F6873921","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\006416BA025F19F466F0550CD4ACF0661FCC9F5E","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\00FB7E835F7E9D8EA3C91E10ACAEBC3CBEB6F319","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\0162A207F8030152A71B4540EA07851350167141","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\03E27938A4BD55FAABCC8F86F76523107C32F096","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\0465F1BE81842BF190E758CDCD7D7F7624ECA2E4","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\04F4E02F65ED8630D7BC592B6D36376DF46FCD72","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\05226AC7374E745CB49D655CEBBB42B7D43D2C65","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\05DC37A0E58ED2C012FF4DB75EFEA673B4B62911","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\066BC5B0BB8D8D509C9E478FB8EE1643777E2E9C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\06CCDA09A7CD309D452F564A366677EFFA261BF6","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\097AB6D35DC842A8EE63953376B8D9D3486D7DCB","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\0B6C197551045B068B7339C84B3703A97181564B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\0CADC78C46BE7A5612780FC958D945A6B80DE4AF","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\0D6A463CA85FBEB41A8ED88BDB87527AF5F08633","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\0D6FDB52982A79E3B353A03896DAD3A49226E04E","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\0E04B803C3E03DCC860947A7CC7909866FAAAE72","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\0E1AA0B656DFD7D8E2E0F591C6FBECE42B260C44","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\0E88A8084D97F063E51EDF49ACDD3F482D758767","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\105D3A9432C01FB6F8166B336A22A16EC9BD32F9","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\1242184E2E0877DC23765B2E94120EF39ECB2FA7","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\12751567EE341A0A3607657604921DF3F7F07DC0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\129518677723B0A053599EE4A18409F4097A74D8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\136CC934023D9195084FD2225E83B818FA7C7BA8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\13818EEEA9FFED85E7C4B269439ED4084804E6E5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\14D0E5332393CAB88B3E790F42E0C7B541E2538D","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\174A981CAF5149AB36D430CC3B81E726B2DCFEED","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\1974E1FA52908FE2C537708B973C70F1059495C3","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\1AE60CB10E3CFC4EB4B7CB957123D86752E6E4C5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\1B1D639857BDB036BC82E5FA867F24B47E07F3DD","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\1C29429731F63C06308D820434D2CD29BDD3BA06","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\1ED22E6023DE3861DF916105B08793703EA187BA","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\1EE4BA35A23C3C40FEB400CED3A71B574E426753","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\1F46ACB21B85A98602169DB8CE5BEB7B0E32399C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\1F7512783D6579EE374646C3966BE1339A171863","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\1F94FF97F14F7069A0281E9DD371D85853F633B1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\20A0B5CFFB164D220BB26CF7B1B281C4528BF7BE","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\21A823D16A76262B80CA174B01EABF58B09603A5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2225C11E0A4957C3CCE034FC178F517B3B8BBFCC","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\240C956D11DAACC42F782430535FFC1AE01839F3","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\25DFD13EC574514F96A829EB97492CDC40882F50","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2978475260F1E2E21A59F5A659CD742721998BB2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2A57B8B6746E10488C5DA17729B4B9DC68B590DE","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2AB51400514DEEF95B5F9FED1F764E88635873DE","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2D54F056066AFCB773375626114E4FE638CA851E","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2E0C4058E084A83FFD5E59DF25634B4708213893","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2E3AA54756007309B4045F5A901E712F2CD08C7F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2E3CB874702C1D5349B27C8399A6E3FCF8D8224F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2EC7F0910BAF664518D0D625A8CDE292D53D2E97","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2EDD81D8671D52A48844C65B26BF53181FBB841A","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2F2D5C85951F8DD45C5EE29DCAB3EFFADB02DAD0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2F7AA022C3033A49733E4ACACB790B0AEA33EE06","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\2FFB54B8BC074FD0461F56092C885213BD24DDFF","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\30088D5D85648DB1D8C4B6BD16379983DD45F675","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\301AC4A68A1B88E805A8B43E846F037D3AEA2138","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\304D767D3EF5A2CBF6F74CCFE401517E95692A2C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\309C0741FE5C2EF0AB05F4552FD5F3A228DFD841","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\30FD3153020EC77A1653849D46E42E0B4006C633","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\32E847CBC2079ACB3110B7EBA72E543D4F0D1C68","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\352FFEDD2461749BC5A2B2281CBCDBD97361D5A8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\3538334840B7406FC2F4270D5AE6EB035962AC2F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\353B172F0EAF86EFA9203B76EC8BAECD317F6F6F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\370E8064FD17CBCCAE8437A1885B7DCF9B6E0B12","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\371BD8867654493BF84E4D7444C89957753D3613","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\38656A8FEC54BAFA5EE4237E78E3958072567078","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\3880321EFEC4B670DBEF674079F6D91C515BC7FF","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\3929AB1396BEB5C8711611148BD6D53FFE286C19","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\3CBA8E27010FAB192E82890AA7F8FC12B88F0AD8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\3CBCEC1C77873B018434B7D6CCD9452D4EF21E95","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\3CE9BB8DB79F4ECD9F992B817027057E268D9C85","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\3D468CCD5CF052ADEB90CA7E19F88DB7624A82A8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\3DD95C5B94B60B8EAC8D15C50B4DE3EF45A9D2A8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\3EED435B3241E216CAE28B301DFDDB3718BBDFF0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\3EF180C323F656BE475737B4C7BEBE91E5406B3F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\4020E70F572703CD8EE88FAE1C2D98E4D112A135","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\40B3EA222D2040213EB24EF69944B5F903CF34B5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\434B22F05630088EC7BC33A1723255BBF9579E5F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\447A80CE277350756F838E0A8161628BED64CF78","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\4626F365C8263443608A9CF7183BB8B54A0FAB99","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\474B042F28F7096D3A3E1782368560B58A64CE57","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\48AD1F20753B6AE0CBF91C027BB14E84FA90A0F0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\48C1474958A4DE1F1C13E433352B9CCDDB3510D0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\4972A306778C47F464CD59D7AD7BDF15C05CA36E","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\4BE25F13AAA9A749812F3CF48ADD8F6F6EF62E48","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\4C5BA9BC62328203ABA3C351469D46DE8C262D63","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\4D28B85DF744914FD870D585CB6858B7214C5EF5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\4D3D5BF7406AD28F332412D49454A6EDD84FC4E6","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\4DAE079A398A747540A71560EB6DFB5D7DF489A2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\4ECB89424430E2F2E55082743FAE5F80053C7437","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\4F6AEE0B2336FC2D32934E5A0D1363A7C229C7CC","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\4FEF67DB9162C4577485CC3B2E848ABE708A8A6C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\50226D8ED454E3A1FDDD135BB73708923C8C8B0D","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\51F1D2C71B78BF7ECCBCC4E4084E50213562B51B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\5241458D277F85734FFE9D3374DF68932989F3D0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\529E1147F6CF737D4AF5A9922FE78A12789EBEA8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\52C0C1A51470FC7CA19F7465313DA4FF48BFA363","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\533880D31FD5327CA77924436876812BC8F3D7E9","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\5429450E2E294B8E09159087D4A501B12FFEC93E","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\542B42060FEE8A44B723A2D5075DDCF81B2DEFE0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\5485C935CC30BC107CA333E40B0139C57BCDAB12","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\553B387D3B083C8E0AD9493A5DE50F3A3BBAACF8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\555828B93E32D75FABFE0BACD99384ED715DCC85","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\5608080939CBE2932FDA5B5E1D54BD2D1DE50B66","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\57E9D595061288F3914C46A0D0EFDC239404553F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\590907C9A33CF61DBC08F99143DCEE1C1119751A","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\5AC565FD91A0D787A771C2B23CEDC0AA77BEFD7C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\5D76316655A546A9E17E9D8216528203BF0821A9","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\5F82ED02F0BDF74AF2F3230DB0329AFBA1CD39A6","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\5FAC2B51FD76043D24AF5FE3A0042094F9402CD2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\61DA28BB9ADE7B79B9A7641F8969969A21125951","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\628355FF3F56275FE1F9DB075CE9939395372BE1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\638E2612BBEBE3B29274D8A7D8E048124FB05080","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\676ADB2097AAFE4CA0B991D27193308C0E35EF1B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\67A755F1F03FBECF754070FFED2EAA2EEA73D3BD","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\67EDA5829C6ECDFC340C5D6FFF732E9EC1286D8A","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\681F82A39945572A06375C7584B5C2718F76072C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\69992ACAF5F252D9AAE87D1E83837B752B665C5F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\6DF4C247EB188DBE3AA7FEFB8B83F5C21339C17F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\704FDD0ADBE88879909251B18BCDA324E5C0C6FF","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\707490809D71C6F93E98FFDC7700F67715D51854","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\708FF29D7D9CBC05733F334E3C64555866512C03","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\721055BD6E99E1440093EFE6CCA2C121613F7710","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7320F6EF44EFC6D47576E00793A3A52B4C0B0ED2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\73460A701FF1F49FAD2A187BFF88ACD24D73DC22","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7502948527EFBD43C07BBA55A30D92AA74146DEF","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\76797554FCFEF85503E570F4FBE5ACC09B95DAC2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\76C0F2232838AC5E8D430BBAEC986DFE5F69CF20","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\77F705597195ADD6EF647F98B4DCB3EF8BF8B7CB","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7896FA9FE4B2FCEB138E6566AF70022C20BA950B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7A5B7BB41EB5F8642C3CC0D4E77214F6F1596A5C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7AB3145DD5FC43249115F777B323BBC7BD48D8C5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7AC434CD10C735364DFC8BF9AC210FC86607D419","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7C1F728C888643340F6BFF77FCFCC33956677562","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7E766EFF450C1A09D1BE673F808C44C1DC716CF5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7ECF1B7C23F6650D0A553829D9F753FE0A072515","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7EFA14F5595E6516DE7F10F56A4E508D85687E70","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7F12A27AC17BC481D93CD9C0AE94CB8148A1FA0D","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\7FE344483E70C4328A758F0E42CF02ED5DFDE964","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\817E4769CDAE452B81442549D2F9968F739715A8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\81A6829B07CED4AAA179B90710FA7E1CAF865703","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\8289505E777C3ACDC40F8CA2492B08006C5861E8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\82AEBA6BEA51299D2C9943D844AAFF9CED18F9CD","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\8321793CE0669F6623B650DC53CFC5C3401E64C2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\839F5FD66E2FE126F818F0906DCE485A15860317","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\8570BAC7E9E80CD01BB4F3C1A7F318E45CDA7494","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\85E2A545053BEF7DDBF9F8C33D187358F258ED46","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\87D21E588A758F55C79B1A80AF53F5DE8F97BD07","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\89134A5DF03F2AAA554E139061E11D15B53A683D","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\8A38757F5789C20D90BD227D45F2FF57C03A04D1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\8B2F1DA32829D8FA2C7D3870B22BA5121A24A273","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\8C0FDCA4DC1D3CC4A01D5AECDB6033424805BA4C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\8D2EAF9A088E2EE4277C2E297CFC26C1D6377041","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\8D5C460ADDC2F1F7EE333834D1754B11BAE09C21","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\8E9D26FC6DAE7109018A50C04422A5706F7BBDD7","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\90315B08C7EA5741C86D44F3C1B5420F168BAC3F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\903A7949C3D035AE628FB39A1A514FCB1D295F1B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\9276FE696600CB50F895AE7C9174CFCFFE07D923","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\92A3C973FACB33FF0162AF2202B1ABF0428228FA","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\931F4A22FACB88129776074AAF555C2C5A045EE4","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\94819098B9D2C4279A6112A11E3358BE68580958","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\94BCDC414BD7333C8BABCD41CECC8957E10ABD28","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\952D5DCA2A6AF0FF16F907692A6126375E49B87F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\95E30605786E73CC205725268CB638D76F46E4F2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\95EA667D4D2DE43B5E8CEEE88E517AAA028F72EC","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\96BC283800385EA51B5A0C9CA8055A144AEBF24A","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\97B8276E1B45E6C0C01BFE8C091D416310B3D7FB","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\9853075C537CBFEA62986DC1D8F49E3E02DA5019","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\9A07B5BA4FDCEED8E6D42A3C90768F04B2A9C8AE","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\9B88667989979AE835EE3C835C692F5FF8200E3A","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\9BA264230ECD74C2464C963D11CBD26E35B0FEE9","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\9E4E7E386AEC976FED6DD951010308D86BC279D9","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\9EB137C27E154473C8B2CE644FB341C02FA828C5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\9EE02001B4F4CADACC54DF5B2E91317FB81ADAEA","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\9FC0EF46986B7D2B09E5544389FEADE08BF5A2B7","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\A350F82A64F2880D28FB1921E92057E4A610BFD1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\A5AE7C975DF0B182D35B945F55504D011B8004D0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\A6158820868096C47EA71CED39728F941D77E6D5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\A7EF5BDDF4E921D70CE72181081E95B2C427FAC9","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\A970FC46D71B59CE43234D751C58B39644A5FB61","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\AA205CCED9733A5A0858204677C8FE8219C24CF4","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\AA5588C93D95518EF899D6C5A9FE354E92238BCD","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\AB50DBA84A867E9D210E8218215EF7C2C80FE1F9","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\AB717EEFDA86DDEC2C4849CFE36002C3041CC276","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\ADE7FE8B54FE1486BC6F4943646E63820C8648FB","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\B053E3AD2CAA0768C4EB7584A171C603331CD93A","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\B118B0F3470E4A8BC7E6C9392A52EB781203C7A9","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\B20BF410AEE199A12708CA21DABF65AD2AE2BCF8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\B31A58FFB3C702AAC04131FCAE7D383C948F3872","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\B41B1C96E501848F706995DE28CD18EA8910D7E7","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\B4EDFCD3284F63E985B48051C9107908A46226E4","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\B7A8C032600BC49E58C241B66C26C657467862A7","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\B9403F5B1405E5000246F2AC6EF5A6886E312511","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\BB1913A2380BABE37897EA2B94E177C717530A5B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\BB7456C8D68B3D4A2EB2E4554D63E2CFE4EEC90D","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\BC84AA1DE91E102FE8821F76E4D3382C5478F8C8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\BCA3931218FA68066E7D851877F37B14DE8B2E93","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\BDE559B2A20D0B6060B6D15A89A4F4BED8274784","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\BEBEE734DC8E94FA255A22C5E3CA667757BE30D8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\BEF63F97F71995B9F8AB0795D907C2C618F371DA","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\C094437F984D96F2D01C36CFABCBF9CA4F2EBBA6","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\C304A01B70FA48AFE3DC36261831A7526B04A80C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\C556098440C50BBFD5F33013A18A947F8CFAE4D7","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\C561F4E351BD1DE6176193D67A2B6DE45C691727","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\C8BE3BBD215F0457C0AF18601EB2AB9102D9DD08","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\CA4F25875964D450C5FBF76879D36F344D28C2D5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\CAB3E39518A691E4EA882D8EDEEA17104A33CBA2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\CADE55E969FAEEC35F2A22A08F146E1965C33911","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\CB05A88751F6B2B79CA839255A4890B427F23AA1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\CB7F7D158D73C64D68B7E5A3E0B5D15E8E758236","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\CBEC613E5CFAB507A1C654E90F59982CE8EAC680","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\CC5383081CDB993E393091792FFE88CDD5D0C4D5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\CE95114622634B41823E2186167B85810C065D80","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\CEAAE4DC7D7D6E097B294B1DA1285FC4E546613B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\D057BD0D21CBA6CDCECA79A5F78A0163EF348BC6","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\D0C1A3AF58C11DCD0275FAB5BF20348A65892BED","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\D1DD34E8641EA828676BD98C89DC0434EF10B0F8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\D36FD0721F11A7AE28A82198D72211B81B3A7CD3","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\D37A5F8E64C609CDEBE714E3412E8AF88334504E","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\D42FD60FBF95B9FE1D02FB6197FF24B81AE234D1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\D44BD2282850C5677731142E8E41A4715B1D2173","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\D617B4A50D4DF9418CC46991A46B46457FA08387","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\D722140DDF52CDE458310D0700B5BB52FE5CB323","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\D8DF957C2A0EDB79F6B0B7FCCAF8A1BD1021C282","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\DA5409CB3AF4DD70D92B3768AB1C0889AE8DA877","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\DB2012FA1EEB48278BE39A073A4C19541807393D","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\DB83FC691E21BC77F6D161A9BD5015D7D63E2BB4","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\DC1863701DE3B4BF3A49F4CA7C2389E27D26955F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\DDE05E6CD4B04C1396A7C1C978F92FA7B82DC8E1","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\DE6F2EA50E4D5FE5ACB8C8C33CE12306F6A1685D","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\DF10B8ECDD7BB599F8BE92D16E050F179CF78291","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\DF1806B897075EB9FE6EAEB61E0809C3242533D5","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\DF8288208B71302823466AFC0C55FC462241566C","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\DFA43D30A714AA169350273B86EAF29F625A85DD","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\DFD1C2C4553F5E655521E5BE8AB71DCA244318F7","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\E071FB500DBE3B8E9C2DB2464A7B5E090139BBF9","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\E1884D9BEBEF9545BC8C8F00719085B071C60582","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\E190DB789DC1C308BBF565F2277C09949CB02650","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\E245013D019AE596820CB52129E842FBD0054F1E","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\E2A5CF713D0652640DBAA52D86AD61975285155D","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\E6913B75D6EEB6FE59DCD485FC9C54BB751E4061","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\EC704D06E5277E22B5179F13A1761CB068985AAC","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\ED45A53F28C4DFFBD13C9CB5EC0FE382BDD2FA6A","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\EF31F4F06DBFD9469F03AA2C92191DFB5075F65A","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\EF6776722884E7D4E225C23DC9E5605501416DEC","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\F0DB25964F0656194F3B6C525F46673BC112ADE7","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\F225AD6665449B8D9BB9249BD9F2F3CFD3DE58CD","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\F277DBFB73069EA798E618645936AA6A1B8AD356","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\F28D155B2554E7AB43A6BBE4F40725A5EE902EAF","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\F38E4B9A790701B7B838E3C791181F6E8E85E3D6","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\F4289F4DB3103AA2D9EEACDEA4B88CF78B9D8F1B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\F97FA1CF1701D4072416FBA46D6299BAE38B62A8","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\FC1ACC47459A1C5DDEB33199E979D2351D3913F0","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\FC76DB64CEB451B525FC926603EDC28E6F37A15F","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\FE582363364A5991E97E5ACBE5B585AACB9A6DF2","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\FFFD6AA0D204EB69D06C7214F108977D3AD33E3B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cookies.sqlite-wal","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\cache2\\entries\\1F4F1F08CF2228FAB9B31D487DA2678BD08E139B","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\base-track-digest256.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-badbinurl-shavar.cache","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-badbinurl-shavar.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-downloadwhite-digest256.cache","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-downloadwhite-digest256.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-malware-shavar.cache","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-malware-shavar.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-phish-shavar.cache","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-phish-shavar.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\mozplugin-block-digest256.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\mozstd-trackwhite-digest256.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-block-simple.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-flash-simple.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-flashallow-simple.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-flashsubdoc-simple.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-malware-simple.cache","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-malware-simple.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-phish-simple.cache","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-phish-simple.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-track-simple.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-trackwhite-simple.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-unwanted-simple.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\testexcept-flash-simple.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\testexcept-flashallow-simple.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\testexcept-flashsubdoc-simple.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing-updating\\goog-unwanted-shavar.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\crashes\\events","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\crashes","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\crashes\\store.json.mozlz4","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\datareporting\\state.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\datareporting\\session-state.json","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\datareporting\\aborted-session-ping","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\datareporting","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\datareporting\\archived","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing-updating\\goog-unwanted-shavar.pset","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\base-track-digest256.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-badbinurl-shavar.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-downloadwhite-digest256.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-malware-shavar.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-phish-shavar.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\goog-unwanted-shavar.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\mozplugin-block-digest256.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\mozstd-trackwhite-digest256.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-block-simple.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-flash-simple.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-flashallow-simple.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-flashsubdoc-simple.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-malware-simple.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-phish-simple.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-track-simple.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-trackwhite-simple.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\test-unwanted-simple.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\testexcept-flash-simple.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\testexcept-flashallow-simple.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"path":"%LOCALAPPDATA%\\Mozilla\\Firefox\\Profiles\\a0u7kz53.default-1460755681908\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\TCPIP\\PARAMETERS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SYSTEM\\CURRENTCONTROLSET\\CONTROL\\SECURITYPROVIDERS\\SCHANNEL\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\MY\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\ROOT\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\ROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\ROOT\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\ROOT\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\SMARTCARDROOT\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\SMARTCARDROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\SMARTCARDROOT\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\SMARTCARDROOT\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\SMARTCARDROOT\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\SMARTCARDROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MOZILLA\\FIREFOX\\TASKBARIDS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SYSTEM\\CURRENTCONTROLSET\\CONTROL\\SESSION MANAGER\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLIENTS\\STARTMENUINTERNET\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\.PDF\\OPENWITHPROGIDS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\.PDF\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\.PDF\\OPENWITHPROGIDS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\.OGA\\OPENWITHPROGIDS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\.OGG\\OPENWITHPROGIDS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\.OGV\\OPENWITHPROGIDS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\.WEBM\\OPENWITHPROGIDS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FIREFOXHTML-308046B0AF4A39CB\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FIREFOXHTML-308046B0AF4A39CB\\DEFAULTICON\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FIREFOXHTML-308046B0AF4A39CB\\SHELL\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FIREFOXHTML-308046B0AF4A39CB\\SHELL\\OPEN\\COMMAND\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\FIREFOXHTML-308046B0AF4A39CB\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\FIREFOXHTML-308046B0AF4A39CB\\SHELL\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\FIREFOXHTML-308046B0AF4A39CB\\SHELL\\OPEN\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\FIREFOXHTML-308046B0AF4A39CB\\SHELL\\OPEN\\COMMAND\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FIREFOXHTML-308046B0AF4A39CB\\SHELL\\OPEN\\DDEEXEC\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FIREFOXURL-308046B0AF4A39CB\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FIREFOXURL-308046B0AF4A39CB\\DEFAULTICON\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FIREFOXURL-308046B0AF4A39CB\\SHELL\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FIREFOXURL-308046B0AF4A39CB\\SHELL\\OPEN\\COMMAND\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\FIREFOXURL-308046B0AF4A39CB\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\FIREFOXURL-308046B0AF4A39CB\\SHELL\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\FIREFOXURL-308046B0AF4A39CB\\SHELL\\OPEN\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\FIREFOXURL-308046B0AF4A39CB\\SHELL\\OPEN\\COMMAND\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FIREFOXURL-308046B0AF4A39CB\\SHELL\\OPEN\\DDEEXEC\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FTP\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FTP\\DEFAULTICON\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FTP\\SHELL\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FTP\\SHELL\\OPEN\\COMMAND\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\FTP\\SHELL\\OPEN\\DDEEXEC\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\HTTP\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\HTTP\\DEFAULTICON\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\HTTP\\SHELL\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\HTTP\\SHELL\\OPEN\\COMMAND\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\HTTP\\SHELL\\OPEN\\DDEEXEC\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\HTTPS\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\HTTPS\\DEFAULTICON\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\HTTPS\\SHELL\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\HTTPS\\SHELL\\OPEN\\COMMAND\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\CLASSES\\HTTPS\\SHELL\\OPEN\\DDEEXEC\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\TRACING\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\FIREFOXHTML-308046B0AF4A39CB\\EDITFLAGS\\EDITFLAGS","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\FIREFOXURL-308046B0AF4A39CB\\EDITFLAGS\\EDITFLAGS","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\FTP\\SHELL\\OPEN\\DDEEXEC\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\HTTP\\SHELL\\OPEN\\DDEEXEC\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"key":"HKCU\\HTTPS\\SHELL\\OPEN\\DDEEXEC\\","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCounterMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZoneAttributeCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\ZoneAttributeCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\ZonesCounterMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\!IETld!Mutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\WininetConnectionMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\c:!users!qed2fgp!appdata!local!microsoft!windows!history!history.ie5!","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"RasPbFile","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"IESQMMUTEX_0_208","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\_!MSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\WininetProxyRegistryMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\WininetStartupMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\c:!users!qed2fgp!appdata!roaming!microsoft!windows!cookies!","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\c:!users!qed2fgp!appdata!roaming!microsoft!windows!ietldcache!","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"Local\\c:!users!qed2fgp!appdata!local!microsoft!windows!temporary internet files!content.ie5!","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\_!MSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\c:!users!qed2fgp!appdata!roaming!microsoft!windows!cookies!","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\c:!users!qed2fgp!appdata!local!microsoft!windows!history!history.ie5!","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\WininetStartupMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\WininetConnectionMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\WininetProxyRegistryMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\RasPbFile","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\c:!users!qed2fgp!appdata!local!microsoft!windows!temporary internet files!content.ie5!","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!IETld!Mutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\c:!users!qed2fgp!appdata!roaming!microsoft!windows!ietldcache!","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IESQMMUTEX_0_208","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\FirefoxStartupMutex","sources":[{"report_type":"sandbox","report_id":"5986c9f57ca3e137b41a7cb4"}]}]}},"report_ids":{"sandbox_job_ids":["5986c9f57ca3e137b41a7cb4"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Malicious Trojan.Generic Sample f5be76831cba… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample f5be76831cba…. Malware family: Trojan.Generic. Threat score 100/100. 17/26 AV engines flagged this file. 14 malicious and 23 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a"}],["$","meta","4",{"property":"og:title","content":"Malicious Trojan.Generic Sample f5be76831cba… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample f5be76831cba…. Malware family: Trojan.Generic. Threat score 100/100. 17/26 AV engines flagged this file. 14 malicious and 23 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/f5be76831cba4e60509a6c2241991d317281f019089a77d1a54c8cc2a299a15a"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Trojan.Generic Sample f5be76831cba… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample f5be76831cba…. Malware family: Trojan.Generic. Threat score 100/100. 17/26 AV engines flagged this file. 14 malicious and 23 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L76","11",{}]]