26:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 38:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 25:T482,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Sample 728efd7a9838… — Score 85/100 — Hybrid Analysis","description":"Malicious verdict for sample 728efd7a9838…. Threat score 85/100. 0/4 AV engines flagged this file. 2 malicious and 8 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/728efd7a98381720e295b8fbb1591a800fbbdca446d9ecdc0d5f66956a453575","keywords":["Malicious","malware analysis","sandbox report","threat intelligence","728efd7a98381720e295b8fbb1591a800fbbdca446d9ecdc0d5f66956a453575"],"about":{"@type":"SoftwareApplication","name":"https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3","applicationCategory":["url"],"identifier":"728efd7a98381720e295b8fbb1591a800fbbdca446d9ecdc0d5f66956a453575","additionalType":"Malicious sample"},"threatScore":85,"antivirusDetections":{"malicious":0,"total":4},"behavioralIndicators":{"malicious":2,"suspicious":8},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T4ad,"\Sessions\1\BaseNamedObjects\IsoScope_a58_IESQMMUTEX_0_519" "Local\InternetShortcutMutex" "{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "IsoScope_a58_IESQMMUTEX_0_331" "IsoScope_a58_ConnHashTable<2648>_HashTable_Mutex" "IsoScope_a58_IESQMMUTEX_0_519" "IsoScope_a58_IESQMMUTEX_0_303" "Local\URLBLOCK_FILEMAPSWITCH_MUTEX_2648" "Local\ZonesCacheCounterMutex" "Local\!BrowserEmulation!SharedMemory!Mutex" "{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}" "Local\VERMGMTBlockListFileMutex" "IsoScope_a58_IE_EarlyTabStart_0x8dc_Mutex" "Local\URLBLOCK_HASHFILESWITCH_MUTEX" "Local\URLBLOCK_DOWNLOAD_MUTEX" "UpdatingNewTabPageData" "Local\ZonesLockedCacheCounterMutex" "\Sessions\1\BaseNamedObjects\UpdatingNewTabPageData" "\Sessions\1\BaseNamedObjects\Local\!BrowserEmulation!SharedMemory!Mutex" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_FILEMAPSWITCH_MUTEX_2648" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_HASHFILESWITCH_MUTEX" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_DOWNLOAD_MUTEX" "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex" "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex" "\Sessions\1\BaseNamedObjects\IsoScope_a58_IE_EarlyTabStart_0x8dc_Mutex"28:T792,Found string "" (Indicator: "twitter"; File: "urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3")29:T810,file/memory contains long string with (Indicator: "text/javascript"; File: "api_1_.js") Found string "" (Indicator: "text/javascript"; File: "urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3") Found string "" (Indicator: "text/javascript"; File: "WZ17PTAF.htm") Found string "" (Indicator: "text/javascript"; File: "WZ17PTAF.htm") Found string "" (Indicator: "text/javascript"; File: "WZ17PTAF.htm") Found string "" (Indicator: "text/javascript"; File: "WZ17PTAF.htm")2a:T2037,"logo_1_.svg" has type "SVG Scalable Vector Graphics image"- [targetUID: N/A] "privacy-options_1_.svg" has type "SVG Scalable Vector Graphics image"- [targetUID: N/A] "clippy_1_.svg" has type "SVG Scalable Vector Graphics image"- [targetUID: N/A] "urlblockindex_1_.bin" has type "data"- [targetUID: N/A] "urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3" has type "HTML document ASCII text with very long lines"- [targetUID: N/A] "6472341bee4a9f89c40ecbb3_1_.htm" has type "HTML document ASCII text with very long lines"- [targetUID: N/A] "48383142a884697477a027d292e9a85361e9c93599ad7ef7fe0b5d9e2ad3ba6c.min_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "76a4a774670d36d006376bf08ab3a0064be22e7a5a07347197ceecf62e1c1ce7.min_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "otBannerSdk_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "67ee809d98b4fbb930a8e120f01d360bb9f6b721ec15083f8e4378fe1495ba9e.min_1_.css" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "fa-solid-900_1_.eot" has type "Embedded OpenType (EOT) Font Awesome 5 Free Solid family"- [targetUID: N/A] "WZ17PTAF.htm" has type "HTML document UTF-8 Unicode text with very long lines with CRLF NEL line terminators"- Location: [%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\QQW0X29Y\WZ17PTAF.htm]- [targetUID: 00000000-00002648] "e1f54aab397645fc5c44fb367f5af880c16ac573d3f08481e1df77bf11408262.min_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "fa-brands-400_1_.eot" has type "Embedded OpenType (EOT) Font Awesome 5 Brands Regular family"- [targetUID: N/A] "otPcTab_1_.json" has type "JSON data"- [targetUID: N/A] "imagestore.dat" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\imagestore\3mt7jhv\imagestore.dat]- [targetUID: 00000000-00002648] "en_1_.js" has type "HTML document UTF-8 Unicode text with very long lines with no line terminators"- [targetUID: N/A] "fa-regular-400_1_.eot" has type "Embedded OpenType (EOT) Font Awesome 5 Free Regular family"- [targetUID: N/A] "favicon_3_.ico" has type "MS Windows icon resource - 4 icons 16x16 32 bits/pixel 32x32 32 bits/pixel"- [targetUID: N/A] "sprite_1_.png" has type "PNG image data 39 x 1522 8-bit/color RGBA non-interlaced"- [targetUID: N/A] "otSDKStub_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "otCommonStyles_1_.css" has type "ASCII text with very long lines with no line terminators"- [targetUID: N/A] "glyphicons-halflings-regular_1_.eot" has type "Embedded OpenType (EOT) GLYPHICONS Halflings family"- [targetUID: N/A] "cabin-400-normal_2_.woff" has type "Web Open Font Format TrueType length 19864 version 1.1"- [targetUID: N/A] "cabin-700-normal_2_.woff" has type "Web Open Font Format TrueType length 19392 version 1.1"- [targetUID: N/A] "en-US.4" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\DomainSuggestions\en-US.4]- [targetUID: 00000000-00002648] "RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "~DF507720DB113621A4.TMP" has type "data"- Location: [%TEMP%\~DF507720DB113621A4.TMP]- [targetUID: 00000000-00002648] "~DF453A12BD2AF9B9EC.TMP" has type "data"- Location: [%TEMP%\~DF453A12BD2AF9B9EC.TMP]- [targetUID: 00000000-00002648] "~DF23889396926C2D16.TMP" has type "data"- Location: [%TEMP%\~DF23889396926C2D16.TMP]- [targetUID: 00000000-00002648] "~DFE954FDC596D70604.TMP" has type "data"- Location: [%TEMP%\~DFE954FDC596D70604.TMP]- [targetUID: 00000000-00002648] "~DF6525DAEED3955687.TMP" has type "data"- Location: [%TEMP%\~DF6525DAEED3955687.TMP]- [targetUID: 00000000-00002648] "otFlat_1_.json" has type "JSON data"- [targetUID: N/A] "8017b792fe6ae24022a3b57070bfc5944f4052e826fd14838f4838aa38fb43cb.min_1_.css" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "_134C8F91-52B8-11EE-88A1-080027C9DEA2_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "RecoveryStore._134C8F8F-52B8-11EE-88A1-080027C9DEA2_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "_1DB662BA-52B8-11EE-88A1-080027C9DEA2_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "_4F8B2F71-52C7-11EE-88A1-080027C9DEA2_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "8f169b8c-2bc5-4bd8-ae41-f76f629e0575_1_.js" has type "ASCII text with very long lines with no line terminators"- [targetUID: N/A] "favicon_1_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "datD9FB.tmp" has type "Web Open Font Format TrueType length 2892 version 1.0"- Location: [%TEMP%\datD9FB.tmp]- [targetUID: 00000000-00002320] "api_1_.js" has type "ASCII text with very long lines with no line terminators"- [targetUID: N/A] "icon_dummy_1_.png" has type "PNG image data 32 x 32 8-bit/color RGBA non-interlaced"- [targetUID: N/A] "HPC72WRK.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\HPC72WRK.txt]- [targetUID: 00000000-00002648] "FSPDIXEG.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\FSPDIXEG.txt]- [targetUID: 00000000-00002648] "RH171V8U.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\RH171V8U.txt]- [targetUID: 00000000-00002648] "MPCHGMMB.txt" has type "ASCII text with very long lines"- Location: [%APPDATA%\Microsoft\Windows\Cookies\MPCHGMMB.txt]- [targetUID: 00000000-00002320] "NS5F8LPM.txt" has type "ASCII text with very long lines"- Location: [%APPDATA%\Microsoft\Windows\Cookies\NS5F8LPM.txt]- [targetUID: 00000000-00002320] "1DSCC7L3.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\1DSCC7L3.txt]- [targetUID: 00000000-00002648] "YUKEAJD7.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\YUKEAJD7.txt]- [targetUID: 00000000-00002648] "CK6MALCK.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\CK6MALCK.txt]- [targetUID: 00000000-00002320] "H6HHAQLW.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\H6HHAQLW.txt]- [targetUID: 00000000-00002320] "PBWX443F.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\PBWX443F.txt]- [targetUID: 00000000-00002648] "ULE0A690.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\ULE0A690.txt]- [targetUID: 00000000-00002320] "LKTC69C4.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\LKTC69C4.txt]- [targetUID: 00000000-00002320] "TC1F2X6N.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\TC1F2X6N.txt]- [targetUID: 00000000-00002648] "VKCIPXXP.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\VKCIPXXP.txt]- [targetUID: 00000000-00002320] "BE22EN45.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\BE22EN45.txt]- [targetUID: 00000000-00002320] "BK1SZX0W.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\BK1SZX0W.txt]- [targetUID: 00000000-00002648] "WVGDO7LH.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\WVGDO7LH.txt]- [targetUID: 00000000-00002648] "lastnode_1_.png" has type "PNG image data 8 x 20 1-bit colormap non-interlaced"- [targetUID: N/A] "vline_1_.png" has type "PNG image data 1 x 10 1-bit colormap non-interlaced"- [targetUID: N/A] "JUKNUYGA.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\JUKNUYGA.txt]- [targetUID: 00000000-00002648] "LZZ1HBAW.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\LZZ1HBAW.txt]- [targetUID: 00000000-00002648] "location_1_.json" has type "JSON data"- [targetUID: N/A] "favicon_2_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A]2b:T2ff7,Found requests in header "GET /sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3 HTTP/1.1Accept: text/html, application/xhtml+xml, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /assets/67ee809d98b4fbb930a8e120f01d360bb9f6b721ec15083f8e4378fe1495ba9e.min.css HTTP/1.1Accept: text/css, */*Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /assets/48383142a884697477a027d292e9a85361e9c93599ad7ef7fe0b5d9e2ad3ba6c.min.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /img/logo.svg HTTP/1.1Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /img/clippy.svg HTTP/1.1Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /assets/76a4a774670d36d006376bf08ab3a0064be22e7a5a07347197ceecf62e1c1ce7.min.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /images/icon_dummy.png HTTP/1.1Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /assets/8017b792fe6ae24022a3b57070bfc5944f4052e826fd14838f4838aa38fb43cb.min.css HTTP/1.1Accept: text/css, */*Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /assets/e1f54aab397645fc5c44fb367f5af880c16ac573d3f08481e1df77bf11408262.min.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /lib/google-fonts/fonts/cabin-400-normal.woff HTTP/1.1Accept: */*Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.hybrid-analysis.comAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /lib/google-fonts/fonts/cabin-700-normal.woff HTTP/1.1Accept: */*Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.hybrid-analysis.comAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /lib/font-awesome/webfonts/fa-regular-400.eot? HTTP/1.1Accept: */*Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.hybrid-analysis.comAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /lib/font-awesome/webfonts/fa-solid-900.eot? HTTP/1.1Accept: */*Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.hybrid-analysis.comAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /lib/bootstrap/fonts/glyphicons-halflings-regular.eot? HTTP/1.1Accept: */*Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.hybrid-analysis.comAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /lib/font-awesome/webfonts/fa-brands-400.eot? HTTP/1.1Accept: */*Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.hybrid-analysis.comAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /img/sprite.png HTTP/1.1Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /images/lastnode.png HTTP/1.1Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /images/vline.png HTTP/1.1Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /lib-custom/fontello/font/fontello.eot?22134540 HTTP/1.1Accept: */*Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.hybrid-analysis.comAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /img/privacy-options.svg HTTP/1.1Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /favicon.ico HTTP/1.1Accept: */*Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoHost: www.hybrid-analysis.comDNT: 1Connection: Keep-AliveCookie: id=avvcrr5dopaifb4fe6vevpocm7"; in File: "SSL") Found requests in header "GET /scripttemplates/otSDKStub.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: cdn.cookielaw.orgDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /consent/8f169b8c-2bc5-4bd8-ae41-f76f629e0575/8f169b8c-2bc5-4bd8-ae41-f76f629e0575.json HTTP/1.1Accept: */*Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USOrigin: https://www.hybrid-analysis.comAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoHost: cdn.cookielaw.orgDNT: 1Connection: Keep-AliveCache-Control: no-cache"; in File: "SSL") Found requests in header "GET /scripttemplates/202304.1.0/otBannerSdk.js HTTP/1.1Accept: application/javascript, */*;q=0.8Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: cdn.cookielaw.orgDNT: 1Connection: Keep-Alive"; in File: "SSL") Found requests in header "GET /consent/8f169b8c-2bc5-4bd8-ae41-f76f629e0575/e707ec79-97bc-46fd-8adb-adb5851b7f24/en.json HTTP/1.1Accept: */*Referer: https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language: en-USOrigin: https://www.hybrid-analysis.comAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like GeckoHost: cdn.cookielaw.orgDNT: 1Connection: Keep-AliveCache-Control: no-cache"; in File: "SSL")2c:T75a,Observed email domain:"0fbbi6mx.space^" [Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3] Observed email domain:"aterroppop.com^" [Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3] Observed email domain:"bngpop.com^" [Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3] Observed email domain:"e.mail.ru" [Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3] Observed email domain:"kioskas.lt^*/pop.php?" [Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3] Observed email domain:"my.mail.ru" [Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3] Observed email domain:"octavius.mail.ru" [Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3] Observed email domain:"pulse.mail.ru/pulse-widget*" [Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3] Observed email domain:"r.me/js/pop.js" [Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3]2d:T914e,Pattern match: "https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3" Pattern match: "https://www.hybrid-analysis.com" Pattern match: "http://www.w3.org/2000/svg" Pattern match: "https://fontawesome.comFont" Pattern match: "uqsXi2..PN//+\'[+W5J$IK[oathYhv9jh\$5PC^%2$F5t{!/\gI&jf{8~4T1?Q" Pattern match: "www.bing.com" Pattern match: "https://www.datatables.net/examples/resources/details_open.png" Pattern match: "https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location,BulkDomainCheckUrl:https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck,RuleSet:[{Id:e707ec79-97bc-46fd-8adb-adb5851b7f24,Name:California" Pattern match: "https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']||[]).push('onload');w['__google_recaptcha_client']=true;var" Pattern match: "NOFORMmicrosoft.com/102433237894403108561027971357230938743SRCHUIDV=2&GUID=426377958C8445E3B4EA69482BD0E747&dmnchg=1microsoft.com/102433237894403108561027971357230938743SRCHUSRDOB=20220131microsoft.com/102433237894403108561027971357230938743SRCHHPGUSRSRCHL" Pattern match: "IESS4Abing.com/1024294378944031085610419731758630938742SRCHUIDV=2&GUID=DD3EB05AD9C54D24A2443E918EB9AD6D&dmnchg=1bing.com/1024294378944031085610419731758630938742SRCHUSRDOB=20220131&T=1643622536000bing.com/1088404823347231085593429095039930938742bing.com/10" Pattern match: "2F6472341bee4a9f89c40ecbb3hybrid-analysis.com/1088378469568031131045176824104331057620" Pattern match: "2F6472341bee4a9f89c40ecbb3hybrid-analysis.com/1088150920512031131030377878027931057604" Pattern match: "0hybrid-analysis.com/1088150920512031131030377862402931057604" Pattern match: "a8956264-038b-484e-801c-afae43a8698fhybrid-analysis.com/1088150920512031131030377862402931057604" Pattern match: "14Zwww.msn.com/1024372262579231204673305982752331057615MUIDB27798F487A9E616614589CC47BD260F1www.msn.com/9216159422950431136076305982752331057615" Pattern match: "hybrid-analysis.com/1088150920512031131030377846777931057604" Pattern match: "falsehybrid-analysis.com/1088150920512031131030377846777931057604" Pattern match: "9216159422950431136076305998377331057615MUID27798F487A9E616614589CC47BD260F1msn.com/1025159422950431136076305982752331057615USRLOCmsn.com/9217372262579231204673306029627331057615" Pattern match: "0hybrid-analysis.com/1088150920512031131030377846777931057604" Pattern match: "202304.1.0hybrid-analysis.com/1088150920512031131030377831152931057604" Pattern match: "14Zwww.msn.com/1024372262579231204673305982752331057615" Pattern match: "9216159422950431136076305998377331057615MUID27798F487A9E616614589CC47BD260F1msn.com/1025159422950431136076305982752331057615" Pattern match: "MUIDB1FAE345C986E638C2D5527D0992262E0ieonline.microsoft.com/9216158422950431136076305701502331057615" Pattern match: "MUID27798F487A9E616614589CC47BD260F1msn.com/1025159422950431136076305982752331057615" Pattern match: "https://deff.nelreports.net/api/report?cat=msn}]},{group:csp-endpoint,max_age:86400,endpoints:[{url:https://deff.nelreports.net/api/report" Pattern match: "NOFORMmicrosoft.com/102433237894403108561027971357230938743*SRCHUIDV=2&GUID=426377958C8445E3B4EA69482BD0E747&dmnchg=1microsoft.com/102433237894403108561027971357230938743*SRCHUSRDOB=20220131microsoft.com/102433237894403108561027971357230938743*SRCHHPGUSRSR" Pattern match: "https://www.crowdstrike.com/privacy-notice/\" Heuristic match: "cdn.cookielaw.org" Heuristic match: "geolocation.onetrust.com" Pattern match: "www.google.com" Pattern match: "www.hybrid-analysis.com" Pattern match: "2F6472341bee4a9f89c40ecbb3hybrid-analysis.com/1088150920512031131030377878027931057604*" Pattern match: "https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" Pattern match: "www.hybrid-analysis.comDNT" Pattern match: "http://www.enable-javascript.com/" Pattern match: "https://www.crowdstrike.com/endpoint-security-products/falcon-sandbox-malware-analysis/" Pattern match: "https://www.crowdstrike.com/endpoint-security-products/falcon-cyber-threat-search-engine/" Pattern match: "https://go.crowdstrike.com/HybridAnalysisRequest.html" Pattern match: "https://hybrid-analysis.blogspot.de/" Pattern match: "https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept-Language" Pattern match: "https://www.virustotal.com/#/file/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/detection" Pattern match: "https://otx.alienvault.com/indicator/file/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/" Pattern match: "https://attack.mitre.org" Pattern match: "https://attack.mitre.org/techniques/T1106" Pattern match: "https://attack.mitre.org/techniques/T1129" Pattern match: "https://attack.mitre.org/techniques/T1574/002" Pattern match: "https://attack.mitre.org/techniques/T1055" Pattern match: "https://attack.mitre.org/techniques/T1134" Pattern match: "https://attack.mitre.org/techniques/T1055/012" Pattern match: "https://attack.mitre.org/techniques/T1055/003" Pattern match: "https://attack.mitre.org/techniques/T1497" Pattern match: "https://attack.mitre.org/techniques/T1027" Pattern match: "https://attack.mitre.org/techniques/T1480" Pattern match: "https://attack.mitre.org/techniques/T1555" Pattern match: "https://attack.mitre.org/techniques/T1083" Pattern match: "https://attack.mitre.org/techniques/T1010" Pattern match: "https://attack.mitre.org/techniques/T1012" Pattern match: "https://attack.mitre.org/techniques/T1082" Pattern match: "https://attack.mitre.org/techniques/T1518/001" Pattern match: "https://attack.mitre.org/techniques/T1071" Pattern match: "https://attack.mitre.org/techniques/T1071/003" Pattern match: "https://attack.mitre.org/techniques/T1573" Pattern match: "https://attack.mitre.org/techniques/T1489" Pattern match: "https://hybrid-analysis.com/sample/cb98b0644687ca3fbfd5ef1dd125888f15e07b8a692df8576371f7452d72d660" Pattern match: "https://www.hybrid-analysis.com/sample/16252dcf09010912ddfa4951319fba06b0a4b9ded4da30fe4055c13ed346d3d3" Pattern match: "hybrid-analysis.com/sample/db695a96adb70d5f6246273f4e6c2" Pattern match: "https://www.falcon-sandbox.com/" Pattern match: "numbers.md/banners/"" Pattern match: "0.uu/�/P�%��;�.�K]�Ӕ5\��Vp�Ò|��\��1֭�Ww|��0.yu/��W�ua\��9�Y��Ľ��\�%��z��f��UO�I��pm-o�K��,9ԅp��s%�A�p�{��L��w�s-��`�Kܝ��{��" Pattern match: "r.me/js/pop.js"" Pattern match: "R.me/js/pop.js"" Pattern match: "https://download.cdn.yandex.net"" Pattern match: "topclicks.club/"" Pattern match: "redir.wargaming.net/"" Pattern match: "go.click2bit.net/r/"" Pattern match: "landingtracker.com/"" Pattern match: "ufiler-download.ru/"" Pattern match: "vse-sdal.com/promo/"" Pattern match: "amigo-biz.ru/ads/click"" Pattern match: "binomo.com/promo"" Pattern match: "lentainform.com/pnews/"" Pattern match: "http://reals-story.ru/"" Pattern match: "new.torrent-pack.ru/"" Pattern match: "homework.ru/?partnerId="" Pattern match: "joycasino.com/?partner="" Pattern match: "ab.adpro.com.ua/"" Pattern match: "zhitomir.info/price"" Pattern match: "101xp.com/?utm_source=ad"" Pattern match: "http://apytrc.com/click/"" Pattern match: "http://browserload.info/"" Pattern match: "ogclick.com/api/redirect"" Pattern match: "101partners-stat2.com/"" Pattern match: "http://advert.mirtesen.ru/"" Pattern match: "amigo-browser.ru/dkit-"" Pattern match: "rexchange.begun.ru/rclick?"" Pattern match: "tovar.helloprice.ru/click/"" Pattern match: "wow-partners.com/click.php"" Pattern match: "http://amigo-free.website/"" Pattern match: "http://glprt.ru/affiliate/"" Pattern match: "carta.ua/ajax/widget."" Pattern match: "simpalsid.com/ad/click?id"" Pattern match: "offergate-apps-phkr.com/"" Pattern match: "http://amigo-source.website/"" Pattern match: "https://kshop"][href*=".pro/"" Pattern match: "am15.net/img/player_skins"" Pattern match: "litres.ru/static/widgets"" Pattern match: "cp.beget.com/promo_data/"" Pattern match: "hit.all-in-one.pp.ua/search?"" Pattern match: "www.meendoru.net/?partner="" Pattern match: "http://putanapartners.com/go."" Pattern match: "http://luckiestclick.com/goto."" Pattern match: "http://traderstart.mirtesen.ru"" Pattern match: "fwdcdn.com/frame/partners/"" Pattern match: "onvix.co/promo/"][target=_blank" Pattern match: "onvix.me/promo/"][target=_blank" Pattern match: "onvix.tv/promo/"][target=_blank" Pattern match: "https://www.juicer.io?referrer="" Pattern match: "https://www.favorit.com.ua/"" Pattern match: "9.mmW/��h�yp��cs]��zo\�ޤ��Mko\��:&1\��%MZ�e.��yz~v��\��/P�B\��*��ٸCKr.qw�C�ҪD��U쬋��r��|3�qC�^�K�+��OtSB\��bd��UZ�JX�@]�K\��Uz}��]^��q��+��s\��n�Br��س�5��7�刐�/ĥ��+ͭU�c��õ`z" Pattern match: "http://amigodistrib.ru/dkit-hps/"" Pattern match: "partner-widget.vsesdal.com/"" Pattern match: "match-center.playmaker24.ru/"" Pattern match: "partner-widget.vse-sdal.com/"" Pattern match: "ru.com/script.js" Pattern match: "Ads.asmx/GetInfo" Pattern match: "bannerex.cgi/getbanner.js?id=" Pattern match: "tureckiy-serial.ru/"][src$=".php"" Pattern match: "https://bongacams"][href*="com/track?"" Pattern match: "12go.asia/dist/prod/build.*.js#" Pattern match: "12go.asia/tools/form/" Pattern match: "1k.by/informers/%" Pattern match: "1k.by/user/informers/*" Pattern match: "24au.ru/*/24au_informer.js" Pattern match: "24au.ru/auctioninformer/" Pattern match: "24smi.org/i/" Pattern match: "https://relap.io/"][href*="promo_ad_link"" Pattern match: "66.ru/mod/news2/" Pattern match: "12go.asia/"][target="_blank"" Pattern match: "https://download.cdn.yandex.net/yandex-tag/weboffer/"" Pattern match: "drp.su/"" Pattern match: "loadbrowser.ru/"" Pattern match: "uni-tds.com/"" Pattern match: "browseit.ru/"" Pattern match: "click.1k3pub.com/"" Pattern match: "click.1k3web.com/"" Pattern match: "click.1k3web.net/"" Pattern match: "clickpzk.com/"" Pattern match: "edgrmtracking.com/"" Pattern match: "larchfury.com/"" Pattern match: "morelnk.ru/"" Pattern match: "driverpack.io/"" Pattern match: "msetup.pro/"" Pattern match: "am15.net/?"" Pattern match: "a24help.ru/_partners.js"" Pattern match: "a24help.ru/assets/"" Pattern match: "braun634.com/"" Pattern match: "12traffic.ru/"" Pattern match: "1xbetlk.site/"" Pattern match: "admag.pro/"" Pattern match: "adoffer.pro/"" Pattern match: "adretarget.net/"" Pattern match: "advtise.ru/"" Pattern match: "avertise.ru/"" Pattern match: "baldervain.com/"" Pattern match: "bestonewos.com/"" Pattern match: "do-rod.com/"" Pattern match: "febrare.ru/"" Pattern match: "fofuvipibo.com/"" Pattern match: "gerocenius.com/"" Pattern match: "getmybrowser.ru/"" Pattern match: "go.webredir.net/r/"" Pattern match: "historategory.com/"" Pattern match: "lis-gor.com/"" Pattern match: "mobiads.ru/"" Pattern match: "newbrowser.me/"" Pattern match: "offergate.pro/"" Pattern match: "parandeya.com/"" Pattern match: "portakamus.com/"" Pattern match: "refpabjgth.top/"" Pattern match: "refpaewsbc.top/"" Pattern match: "reruniversal.com/"" Pattern match: "rotatemysoft.ru/"" Pattern match: "spishi.vip/"" Pattern match: "tdsrotate.ru/"" Pattern match: "tekaners.com/"" Pattern match: "tiruniversal.com/"" Pattern match: "tranqvilius.com/"" Pattern match: "universalice.info/"" Pattern match: "universalie.info/"" Pattern match: "universalies.info/"" Pattern match: "universalin.info/"" Pattern match: "universalini.info/"" Pattern match: "universalse.info/"" Pattern match: "universalut.info/"" Pattern match: "utimg.ru/"" Pattern match: "viruniversal.com/"" Pattern match: "webbrowser.club/"" Pattern match: "afftraf.co/"" Pattern match: "go.1k3.net/"" Pattern match: "loaderu.ru/"" Pattern match: "mosday.ru/ad/"" Pattern match: "myuniversalnk.com/"" Pattern match: "myuniversalnk.net/"" Pattern match: "newbrowser.club/"" Pattern match: "relap.io/adv/"" Pattern match: "sarimsolus.com/"" Pattern match: "u-load.ru/"" Pattern match: "u-loads.ru/"" Pattern match: "uloads.ru/"" Pattern match: "uni-lnk.com/"" Pattern match: "universal-lnk.net/"" Pattern match: "universallnk.net/"" Pattern match: "universalsrc.com/"" Pattern match: "universalsrc.net/"" Pattern match: "24sm.in/top/"" Pattern match: "24smi.host/top/"" Pattern match: "24smi.one/top/"" Pattern match: "24smi.site/top/"" Pattern match: "24smi.ws/top/"" Pattern match: "24smi.xyz/top/"" Pattern match: "bestnewsoft.ru/"" Pattern match: "bubblevard.com/"" Pattern match: "click2soft.ru/"" Pattern match: "clickbytes.ru/"" Pattern match: "clickfrm.com/"" Pattern match: "clickio.com/"" Pattern match: "clickrpk.com/"" Pattern match: "clickstats.fun/"" Pattern match: "clickstats.pw/"" Pattern match: "cozibaneco.com/"" Pattern match: "dafeb.ru/"" Pattern match: "dmtech05.com/"" Pattern match: "edugrampromo.com/"" Pattern match: "et-cod.com/"" Pattern match: "etcodes.com/"" Pattern match: "extlinka.ru/"" Pattern match: "fast2click.ru/"" Pattern match: "filesmytop.ru/"" Pattern match: "filetaker.ru/"" Pattern match: "gdz-ru.work/"" Pattern match: "getbrauzer.ru/"" Pattern match: "getfiletds.ru/"" Pattern match: "getyoursoft.ru/"" Pattern match: "getyousoft.ru/"" Pattern match: "lapina.best/"" Pattern match: "lapina.xyz/"" Pattern match: "manysoftlink.ru/"" Pattern match: "myrotations.ru/"" Pattern match: "mysoftrotate.ru/"" Pattern match: "newbrowserme.ru/"" Pattern match: "newtdslink.ru/"" Pattern match: "r.advmusic.com/"" Pattern match: "refpamjeql.top/"" Pattern match: "reidancis.com/"" Pattern match: "riaccaw.com/"" Pattern match: "rotagmbetdog.xyz/"" Pattern match: "rotationlinks.ru/"" Pattern match: "ruonline.bar/"" Pattern match: "ruprivate.club/"" Pattern match: "search-cdn.ru/r/"" Pattern match: "searchlnk.ru/r/"" Pattern match: "segodnia.club/"" Pattern match: "shusnarmuk.com/"" Pattern match: "softmediya.ru/"" Pattern match: "softperehod.ru/"" Pattern match: "sugisatomi.com/"" Pattern match: "takenewsoft.ru/"" Pattern match: "tdsrotations.ru/"" Pattern match: "techdmn.com/"" Pattern match: "tele.gg/"" Pattern match: "torrent-repa.site/"" Pattern match: "vpnbrowser.ru/"" Pattern match: "vsesdal.com/promo/"" Pattern match: "womens-journal.ru/"" Pattern match: "ya-cdn.ru/r/"" Pattern match: "ya-distrib.ru/r/"" Pattern match: "yadistr.ru/"" Pattern match: "zutcreet.com/"" Pattern match: "adpool.bet/"" Pattern match: "https://relap.io/r?"" Pattern match: "marketgid.com/"" Pattern match: "sviruniversal.com/"" Pattern match: "thor-media.ru/click/"" Pattern match: "twtn.ru/"" Pattern match: "webdiana.ru/click"" Pattern match: "www.nnn.ru"" Pattern match: "http://amigodistr.ru/"" Pattern match: "http://amigoman.pw/"" Pattern match: "http://amigone.pw/"" Pattern match: "http://datxxx.com"" Pattern match: "http://eaplay.ru/"" Pattern match: "http://fly-shops.ru"" Pattern match: "http://kshop.biz/"" Pattern match: "http://olivka.biz/"" Pattern match: "http://tds-2.ru"" Pattern match: "http://trafmaster.com"" Pattern match: "https://bither.one/"" Pattern match: "https://homyanus.com"" Pattern match: "https://msetup.pro"" Pattern match: "abelus.ru/index/ms_reklam_"" Pattern match: "ad.ir.ru/bb.cgi?"" Pattern match: "ad.or.ru/inner?block=#" Pattern match: "addmefast.com/images/banners/" Pattern match: "afishamedia.net/*banner.*" Pattern match: "afishamedia.net/*branding."" Pattern match: "afishamedia.uz/*banner" Pattern match: "afishamedia.uz/*branding" Pattern match: "agava.ru/b/%" Pattern match: "agentbilet.com/sites/" Pattern match: "aif.ru/iframes/" Pattern match: "alawar.ru/onlinegames/*&link=" Pattern match: "alfabank.ru/api/banners/" Pattern match: "allsportstat.ru/1xbet/" Pattern match: "alpari.ru/static/" Pattern match: "amazonaws.com/*leadia1" Pattern match: "amazonaws.com/fotomag/1" Pattern match: "analyzethis.ru/informer.cgi?7" Pattern match: "anvaga.ru/partners_block/" Pattern match: "api.hh.ru/widgets/" Pattern match: "appintop.com/widget/" Pattern match: "athotel.net/vst.xml#" Pattern match: "autospot.ru/widget/" Pattern match: "aviasales.ru/promo/" Pattern match: "bambun.ru/images/" Pattern match: "banki.ru/_export/informers/" Pattern match: "battlespace.ru/ad/" Pattern match: "belta.by/jscript/*&informer_" Pattern match: "bestnews.biz/js/out/%" Pattern match: "bget.ru/adblock" Pattern match: "bigbuzzy.ru/m/proposal/banner/-" Pattern match: "bigmir.net/?_module=informers" Pattern match: "bigmir.net/informers/" Pattern match: "bomb-club.com/aff/$" Pattern match: "bongacams.com/promo" Pattern match: "bqhost.net/_rootimages/banners/&" Pattern match: "bravohost.ru/volgaban.$" Pattern match: "carambis.ru/images/promo_b/%" Pattern match: "carta.ua/ajax/widget" Pattern match: "cdn.bescore.com/libs/e.js%" Pattern match: "cdn.leon.ru/*/*banners/" Pattern match: "co.cc/img/affiliates/" Pattern match: "comon.ru/data/js/" Pattern match: "cosmo.ru/cosmo_informers/" Pattern match: "cosmorelax.ru/tmp/&" Pattern match: "costaction.com/refers/" Pattern match: "cp.beget.com/promo_data/" Pattern match: "cry.ru/sexclub/" Pattern match: "dengi.ua/?_module=informers_-" Pattern match: "depositfiles.com/img/banners/1" Pattern match: "dnr.kz/test/#" Pattern match: "dns-shop.ru/export/" Pattern match: "docinfo.ru/scripts/context" Pattern match: "doramy.net/informer/&" Pattern match: "doublecapital.org/object/" Pattern match: "dozatv.net/foto/" Pattern match: "dragon.lt/baneris" Pattern match: "drweb.com/pix/" Pattern match: "duty.webbia.ru/change/" Pattern match: "dverizamki.org/bshow/" Pattern match: "ecosigara.com.ua/partners/" Pattern match: "elvengold.com/images/banner" Pattern match: "embed.twitch.tv/?channel=xop0" Pattern match: "ep.umobile.pl/js_banner" Pattern match: "eradio.net.ua/ban/" Pattern match: "eserver.ru/img/b/$" Pattern match: "eskhosting.ru/img/b/" Pattern match: "eurosmi.ru/ad/" Pattern match: "evviva.com.ua/images/b/"" Pattern match: "ex-load.com/promo/" Pattern match: "exo.kiev.ua/?zone=" Pattern match: "extool.biz/banners/" Pattern match: "fair.ru/*/i.php?&" Pattern match: "fanat.ru/versus/*" Pattern match: "fanshop.ru/images/__nners/%" Pattern match: "fantasy.d2.ru/showban" Pattern match: "fark.ru/js/bannerLink" Pattern match: "fatal.ru/adfatal.js" Pattern match: "fedsp.com/showcase/banner?%" Pattern match: "fermasosedi.biz/reflink/" Pattern match: "fictionbook.ru/static/imgb/" Pattern match: "finam.ru/data/js/#" Pattern match: "fishki.net/informer/" Pattern match: "fleshlight-russia.com/fbn/" Pattern match: "forbes.kz/informer/" Pattern match: "forex-i-love-you.ru/files/-" Pattern match: "forex4you.org/flash/partners/%" Pattern match: "forexstart.org/banner" Pattern match: "fotostrana.ru/promo/" Pattern match: "fresher.ru/widget/" Pattern match: "fsimg.ru/elephant/" Pattern match: "funkit.ru/i/partner_banners/" Pattern match: "g2a.com/widget_" Pattern match: "gazetavv.com/informer-" Pattern match: "gde-luchshe.ru/widget/" Pattern match: "getplr.xyz/embed" Pattern match: "giveawayoftheday.com/ticker/" Pattern match: "go.bb.ru/images/-" Pattern match: "go.sampo.ru/splash/js/loader.js"" Pattern match: "goodgame.ru/candy/" Pattern match: "gorodnews.ru/bb/" Pattern match: "grattis.ru/promo/" Pattern match: "gzonline.ru//upload/iblock/&" Pattern match: "heroeswm.ru/some_junk/" Pattern match: "hideme.ru/images/static-" Pattern match: "hmn.ru/mhmb_bs/viewb.js" Pattern match: "horror-web.net/uploads/-" Pattern match: "host.ru/images/txt_iframe.php" Pattern match: "hostweek.net/manimg/userdata/*" Pattern match: "hotelliveeb.ee/htmlbanner/0" Pattern match: "http://*.biz/js/sys.js%" Pattern match: "http://*.link/js/sys.js&" Pattern match: "http://*.vzlomko.ru^" Pattern match: "http://u.to/" Pattern match: "sass.com.ua/"" Pattern match: "promo-bc.com/"" Pattern match: "rstbtmd.com/"" Pattern match: "vidroll.ru/"" Pattern match: "fncdev.in.ua/"" Pattern match: "giraff.io/"" Pattern match: "hd.gg33.top/"" Pattern match: "laim.tv/rotator/"" Pattern match: "steambets.net/"" Pattern match: "igromagaz.ru/partner/" Pattern match: "igrushek.net/ad/'" Pattern match: "ihor.ru/images/banners/" Pattern match: "img.carnage.ru/i/main/" Pattern match: "img.ruclicks.com/ruclicks" Pattern match: "inferno.name/banner.&" Pattern match: "info-dvd.ru/*/rotator/" Pattern match: "info-dvd.ru/bbm/informer/" Pattern match: "infocar.ru/media/" Pattern match: "insalea.ru/bannerfans_" Pattern match: "intermedia.ru/NewsInformer/&" Pattern match: "internetportal.ru/*.gif" Pattern match: "intim-magazin.com.ua/bn/G" Pattern match: "invi.tv/player.php?pid=&" Pattern match: "invictory.org/banners/" Pattern match: "invitemaster.ru/widget.js" Pattern match: "ipz.ru/cgi-bin/$" Pattern match: "jet3.ayola.net/cn.php" Pattern match: "jhf.ru/informer/-" Pattern match: "karambas.ru/flash-" Pattern match: "kartinka.com.ua/partner/load?8" Pattern match: "kavkazweb.net/tc.cgi" Pattern match: "kinobzor.tv/_cron/js/informer%" Pattern match: "kolobok.us/button/+" Pattern match: "komisite.ru/images/ban*.gif" Pattern match: "kontur.ru/Files/Modules/ban/" Pattern match: "kontur.ru/partnership/" Pattern match: "kp.ru/_ajax/informer_#" Pattern match: "kvasu.net/*/*" Pattern match: "kwork.ru/js/" Pattern match: "labirint.ru/design/partner/" Pattern match: "leporno.org/img/#" Pattern match: "letitfile.ru/images/" Pattern match: "linkzilla.ru/seo/" Pattern match: "litres.ru/pages/get_vidget/" Pattern match: "litres.ru/static/widgets" Pattern match: "lpgenerator.ru/partners/" Pattern match: "m2k.ru/cgi-bin/" Pattern match: "makeup.com.ua/informer/" Pattern match: "mamyshev.ru/bn/" Pattern match: "marathonbet.com/view.php?7" Pattern match: "media.online.ua/all/gft/" Pattern match: "megaline.kz/images/7" Pattern match: "meta.ua/*/block.js#" Pattern match: "meta.ua/*/partn.$" Pattern match: "meta.ua/informers/" Pattern match: "metabar.ru/static/api/" Pattern match: "mgnc.org/external-banners/" Pattern match: "mir-games.org/uploads/" Pattern match: "mlgame.ru/wiki/attach/Referal/" Pattern match: "mlsn.ru/specials/"" Pattern match: "moifoto.ru/rek_" Pattern match: "molokovo.my1.ru/promo/*" Pattern match: "monetti.ru/images/banners/" Pattern match: "money.loveplanet.ru/nb/" Pattern match: "moonbit.co.in/img/" Pattern match: "moovy.ru/b*.php?$" Pattern match: "moshoster.ru/images/%" Pattern match: "mostinfo.net/img/top/" Pattern match: "mrringo.com/images/banners/" Pattern match: "musicrank.ru/js.php" Pattern match: "my-friends.ru/campaign/" Pattern match: "myhosti.ru/manimg/userdata/" Pattern match: "myvi.xyz/embed/" Pattern match: "nasf.ru/ad/$" Pattern match: "news.te.ua/widget/" Pattern match: "newsprom.ru/img/+" Pattern match: "nextonmarket.com/i/banners/" Pattern match: "nic.ua/i/b/" Pattern match: "nline.net.ua/nl_banner/"" Pattern match: "noi.md/newsbar.php" Pattern match: "noteru.com/generateposts/" Pattern match: "nyx.su/informers/#" Pattern match: "oberegi-runi.ru/assets/-" Pattern match: "ads.com/clk.swf"" Pattern match: "offers.sidex.ru/promo/%" Pattern match: "ogorodniki.com/banner" Pattern match: "onlineresume.ru/banner*" Pattern match: "onlygip.tech/ssp.js"" Pattern match: "onlytrailer.ru/embed/" Pattern match: "oowl.ru/ab/" Pattern match: "or.ru/inner" Pattern match: "otvali.ru/informer/%" Pattern match: "palantir.in/showban*.php" Pattern match: "parimatch.com/jss/" Pattern match: "partner.ozon.ru/widgets/$" Pattern match: "passport-rk.ru/widgets/partner/"" Pattern match: "pc-newcomer.ru/partner/%" Pattern match: "pc-user-shop.com/aff/" Pattern match: "pcmag.ru/upload/*" Pattern match: "pcweek.ru/upload/*/160x100" Pattern match: "pinkintim.com/image/" Pattern match: "piter.tv/widget_news/"" Pattern match: "pix-cdn.org/image/banner/%" Pattern match: "pix-cdn.org/image/ts/%" Pattern match: "pix-cdn.org/image/vk/" Pattern match: "play-in-flash.com/wp-content/" Pattern match: "plesen.net/kp*" Pattern match: "podfm.ru/informer/$" Pattern match: "poisk.su/img.php" Pattern match: "poisk.su/top.php" Pattern match: "pomogi.org/i/pomogi-$" Pattern match: "pomogi.org/urgent/1/" Pattern match: "popularsite.ru/*.php" Pattern match: "porno4you.org/uploads/" Pattern match: "portak.net/informer/" Pattern match: "porter.vip/ban" Pattern match: "pravda.ru/cache/cqc/1" Pattern match: "pressball.by/files/" Pattern match: "prodnepr.dp.ua/informermp.phpJ" Pattern match: "promag.com.ua/images/banner/" Pattern match: "pronskaya.ru/b/" Pattern match: "prostootdam.ru/modules/about/&" Pattern match: "protect-lab.com/promo/" Pattern match: "protoplex.ru/images/rating/&" Pattern match: "pulse.mail.ru/pulse-widget*" Pattern match: "pult.ru/pictures/p_banner/" Pattern match: "qle.ru/cgi-bin/+" Pattern match: "hwcdn.net/s/*-*-*-*-*.js" Pattern match: "als-test.xyz/finserv/zgv/votezgv1" Pattern match: "feisovet.ru/js/partner-widget.js" Pattern match: "globus-inter.com/images/banners/" Pattern match: "hotels.ru/content/images/poster/" Pattern match: "myshopthings.com/partner-rtb.js" Pattern match: "ruspravda.info/resources/images/+" Pattern match: "win2profit1.com/upload_dynamics/" Pattern match: "wpshop.ru/tools/widget/widget.js" Pattern match: "zapato.ru/upload/affiliate_pics/" Pattern match: "amazonaws.com/bucket-files-widget" Pattern match: "amazonaws.com/widget-bucket-files" Pattern match: "apptoday.ru/videowidget/autoplay/" Pattern match: "protoplex.ru/cgi-bin/informer.pl?+" Pattern match: "sb.google.com/safebrowsing/update" Pattern match: "stat.webtrack.biz/api/impression/" Pattern match: "cnews.ru/inc/partners/rotator.php" Pattern match: "out.pladform.ru/getVast?*adformat=" Pattern match: "westbyte.com/scripts/bs/bc.php?bi=" Pattern match: "als-test.xyz/finserv/zgv/zgvresults" Pattern match: "travelpayouts.com/content?promo_id=" Pattern match: "numbers.md/banners/" Pattern match: "casino-piramida.com/partner/banners/" Pattern match: "festival-leonardo.ru/images/banners/" Pattern match: "chessmatenok.ru/wp-content/uploads/b/" Pattern match: "diamondelectric.ru/partner_block.php" Pattern match: "finmonitor.com.ua/freenet/go.php?sid=" Pattern match: "karabalikelektronik.com/images/reklam" Pattern match: "penza-online.ru/cgi-bin/userstats.pl" Pattern match: "secure-it.imrworldwide.com/cgi-bin/m" Pattern match: "partners.author24.ru/assets/img/promo/%" Pattern match: "autonet.ru/extra/autoclub_informer.aspx+" Pattern match: "ispmega.ru/billing/_rootimages/banners/" Pattern match: "market.autoua.net/partnership/uxi/?ref=" Pattern match: "studio-moderna.com/upload/uploadTopshop=" Pattern match: "factor-vesa.net/enter/?url=dont_go_away/" Pattern match: "kaspersky.ru/images/miscellaneouses/468-" Pattern match: "shopnow.com.ua/media/openmedia_informer/&" Pattern match: "wambacdn.net/images/*/promo_search_form/" Pattern match: "sorcerers.net/includes/butler/butler.php" Pattern match: "infosec.ru/common/data/pub/images/articles/" Pattern match: "printbar.ru/upload/partners/images/banners/" Pattern match: "thebestphotos.ru/wp-content/uploads/banners/" Pattern match: "R-s.s-ports.ru/sites/default/files/i/brandings/" Pattern match: "R-studlancer.net/images/chat/studlancer_form.js#" Pattern match: "R.me/js/pop.js" Pattern match: "R.webtransfer-finance.com/upload/partner_banner/&" Pattern match: "R0denezhnyie-rucheyki.ru/partner_programs/banners/" Pattern match: "R4-moto.ru/ad/#" Pattern match: "radio-tech.ru/pic/pages/"" Pattern match: "rambler.ru/xpromo_" Pattern match: "raptop.ru/images/img*.gif" Pattern match: "rate.7surf.ru/img.php?%" Pattern match: "rate.ee/pics/banners/" Pattern match: "Rbvf.ru/upchk/" Pattern match: "Rcex.io/rb/" Pattern match: "Rd.drive.ru/_/$" Pattern match: "recheck.12go.asia/*/recheck" Pattern match: "redsurf.ru/bn/" Pattern match: "reforum.ru/j/partner/" Pattern match: "reggun.ru/images/b*_%" Pattern match: "reklama.lv/promotion/" Pattern match: "Rfarle.ru/?bn=" Pattern match: "Rjob.ws/_bann/" Pattern match: "Rkset.kz/imgb/" Pattern match: "Rkv.by/img/" Pattern match: "Ropen.by/bnrs/" Pattern match: "rosinvest.com/informs/-" Pattern match: "rosphoto.com/img/&" Pattern match: "rot.rusoul.ru/rotator/" Pattern match: "Rqzx.ru/gf/" Pattern match: "Rred.by/redban" Pattern match: "rrru.ru/img.php" Pattern match: "rssnewser.ru/add" Pattern match: "rssportal.ru/getinformer.php" Pattern match: "ru-top.net/img/"" Pattern match: "ru.gg/werbemittel//" Pattern match: "ruinfosale.com/banner/" Pattern match: "Rumatno.ru/mm/" Pattern match: "ruskompas.ru/incs/" Pattern match: "rustarot.ru/pl/lite/widget/" Pattern match: "ruvideo.net/obzor/"" Pattern match: "ruwm.ru/links.php?"" Pattern match: "s-pl.ru/downloads/" Pattern match: "s.ladoshki.com/p/a/+" Pattern match: "s.ladoshki.com/pics/shirts/" Pattern match: "s.s-ports.ru/i/=" Pattern match: "sabrinavi.ru/external_list.js" Pattern match: "sape.ru/bn/'" Pattern match: "sape.ru/images/banners/" Pattern match: "saturn-plus.ru/downloads/" Pattern match: "seo-monster.ru/img_" Pattern match: "seoheep.com/affiliate/" Pattern match: "seotechnology.ru/imgseo.php" Pattern match: "seotechnology.ru/imgygpag.php" Pattern match: "seowebtools.ru/inform/infb.php?+" Pattern match: "sexfabrika.ru/*.gif" Pattern match: "shkolazhizni.ru/img/export/8" Pattern match: "sibhealth.by/informer/#" Pattern match: "simplechange.ru/promo/" Pattern match: "skinon.ru/uploads/media/bnr_"" Pattern match: "skylog.kz/img.php" Pattern match: "skymec.ru/image/banners/" Pattern match: "slavabogam.ru/catalog/partner/" Pattern match: "smigid.ru/informer/" Pattern match: "smsfiles.ru/ban*.gif" Pattern match: "http://www.westmister.eu/collection/"],noindex" Pattern match: "socialmart.ru/widget/" Pattern match: "soft-teleport.ru/uploads/ad/" Pattern match: "spbland.ru/bban/" Pattern match: "sppromo.com/feed.php" Pattern match: "sprotiv.com/bnr/" Pattern match: "staffcop.ru/rekl/"" Pattern match: "static.fortfs.com/images/bnrs/" Pattern match: "static.leadia.ru/widget/" Pattern match: "steambuy.com/banner/"" Pattern match: "sterno.ru/widget/"" Pattern match: "strana.az/banners/" Pattern match: "strobist.ua/strobist_" Pattern match: "super.md/?col=$" Pattern match: "tanygin.me/tmp/" Pattern match: "techdigest.ru/?ad&" Pattern match: "telderi.ru/img/banners/+" Pattern match: "telderi.ru/uploads/promote/" Pattern match: "telepark.ua/tpb.php?code='" Pattern match: "tengrinews.kz/informer/" Pattern match: "thebestphotos.ru/exper.jpg<" Pattern match: "tigame.ru/div/" Pattern match: "timeweb.ru/img/b/" Pattern match: "tn.kz/informer/" Pattern match: "tobe.tv/sda/" Pattern match: "tofun.ru/traff/" Pattern match: "topdownloads.ru/charts/" Pattern match: "torrentum.ru/images/brand/%" Pattern match: "trading-sys.com/affil/banner/" Pattern match: "traffim.com/informer/" Pattern match: "trusearch.net/affblock/" Pattern match: "tvmir.ru/tracks/%" Pattern match: "tvnet.lv/export_news/" Pattern match: "twevent.org.ua/bn/" Pattern match: "uaportal.com/bannes/" Pattern match: "ugly.ru/adv_frame" Pattern match: "uicp.ru/?bn=" Pattern match: "ukrbuy.com/partner/" Pattern match: "ulitka.ru/logo" Pattern match: "uniq-ip.com/via/np" Pattern match: "userator.ru/img/ban/" Pattern match: "v-kino.net/pay_click_" Pattern match: "video-tutorial.ucoz.ru/Foto/" Pattern match: "video.909.su/feeds/feed.php?$" Pattern match: "videoigr.net/includes/" Pattern match: "videoplaza.tv/creatives/assets/" Pattern match: "vredno.com.ua/img/" Pattern match: "vseokino.com/rotator/" Pattern match: "vtomske.ru/informer/" Pattern match: "vz.ru/inc/b/8" Pattern match: "warnet.ws/banners/+" Pattern match: "webhost1.ru/design/" Pattern match: "weblist.ru/images/weblist" Pattern match: "webmax.su/banner/" Pattern match: "webme.com/selfpromotion.&" Pattern match: "weboborona.ru/pic/wban" Pattern match: "websurf.ru/?>" Pattern match: "weclever.ru/block.php" Pattern match: "wm-help.net/b.php" Pattern match: "work.ua/i/press_kit/" Pattern match: "wqa.ru/show/?inf=" Pattern match: "www.kinopoisk.ru" Pattern match: "xchange.cc/banner/7" Pattern match: "yandex-games.ru/ok/banners/"" Pattern match: "yandex.net/banner/" Pattern match: "yandexo.ru/rek/" Pattern match: "yournewhosting.com/images/$" Pattern match: "yousticker.com/load/" Pattern match: "zez.su/ban/" Pattern match: "zhitomir.info/price" Pattern match: "zremcom.ru/anim" Pattern match: "www.bing.comDNT" Pattern match: "https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3Accept" Pattern match: "https://www.crowdstrike.com/blog/crowdstrike-adversary-universe-podcast-launch/?utm_source=ref&utm_medium=ha_report" Pattern match: "https://www.crowdstrike.com/blog/using-similarity-based-mapping-to-prevent-breaches/?utm_source=ref&utm_medium=ha_report" Pattern match: "https://www.crowdstrike.com/blog/how-crowdstrike-boosts-machine-learning-efficacy-against-adversarial-samples/?utm_source=ref&utm_medium=ha_report" Pattern match: "https://www.crowdstrike.com/blog/" Pattern match: "https://privacyportal.onetrust.com/ui/#/preferences/multipage/login/e5019602-7124-4242-8f7c-d1571d0c467d" Pattern match: "https://twitter.com/HybridAnalysis" Pattern match: "https://www.google.com/recaptcha/api.js" Pattern match: "2F6472341bee4a9f89c40ecbb3hybrid-analysis.com/1088378469568031131045176824104331057620*" Pattern match: "https://canvasjs.com/" Pattern match: "https://canvasjs.com/license/" Pattern match: "Math.PI/180*this.angle" Pattern match: "dataInfo.max/this._axes[h].dataInfo.min:this._axes[h].dataInfo.max-this._axes[h].dataInfo.min,this._axes[h].logarithmic" Pattern match: "g-d.size/2,y1:h-d.size/2,x2:g+d.size/2,y2:h+d.size/2},color:null" Pattern match: "Math.PI/x*Math.abs(g.y);g=(l.endAngle+l.startAngle)/2;g=(g+2*Math.PI)%(2*Math.PI);l.midAngle=g;if" Pattern match: "Math.PI/2-u&&l.midAngle" Pattern match: "Math.PI/180*Math.abs(this.labelAngle)" Pattern match: "Math.PI/180*Math.abs(k.textBlock.angle)" Pattern match: "Math.PI/180*Math.abs(l.textBlock.angle)" Pattern match: "Math.PI/180*this.labelAngle" Pattern match: "https://code.google.com/p/explorercanvas/" Pattern match: "h.size/1.75;break;case" Pattern match: "IESS4Abing.com/1024294378944031085610419731758630938742*SRCHUIDV=2&GUID=DD3EB05AD9C54D24A2443E918EB9AD6D&dmnchg=1bing.com/1024294378944031085610419731758630938742*SRCHUSRDOB=20220131&T=1643622536000bing.com/1088404823347231085593429095039930938742*_URD=0bi" Pattern match: "https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access" Pattern match: "https://assets.msn.com/config/v1/"" Pattern match: "https://+s+/OneCollector/1.0+function(t){return?+Object.keys(t).map" Pattern match: "https://assets.msn.com/bundles/v1/homePage/latest/midlevel/vendors.ef7dde432bed42c1b7db.js" Pattern match: "https://assets.msn.com/bundles/v1/homePage/latest/midlevel/microsoft.f0dc8bbbc7b4d116660b.js" Pattern match: "https://assets.msn.com/bundles/v1/homePage/latest/midlevel/common.86df0b8e6eb77be29184.js" Pattern match: "https://assets.msn.com/bundles/v1/homePage/latest/midlevel/experience.83e20dcb1c64455102e9.js" Pattern match: "http://datatables.net/tn/'+i};if(!n){var" Pattern match: "http://www.adobe.com/go/getflash/"2e:T100c,Potential IP "181.29.101.13" found in string "#181.29.101.13" Potential IP "193.106.191.223" found in string "#193.106.191.223" Potential IP "176.58.105.153" found in string "//176.58.105.153^%" Potential IP "176.9.245.25" found in string "//176.9.245.25/"" Potential IP "178.162.137.217" found in string "//178.162.137.217^!" Potential IP "188.120.246.210" found in string "//188.120.246.210/ad/" Potential IP "188.40.18.172" found in string "//188.40.18.172^!" Potential IP "188.72.225.106" found in string "//188.72.225.106^#" Potential IP "195.161.119.239" found in string "//195.161.119.239^&" Potential IP "212.150.34.115" found in string "//212.150.34.115^!" Potential IP "212.150.34.116" found in string "//212.150.34.116^!" Potential IP "213.151.2.195" found in string "//213.151.2.195/storage/!" Potential IP "213.163.70.183" found in string "//213.163.70.183^*" Potential IP "213.186.217.210" found in string "//213.186.217.210/banners/'" Potential IP "46.165.197.153" found in string "//46.165.197.153^!" Potential IP "46.165.197.231" found in string "//46.165.197.231^" Potential IP "46.165.197.87" found in string "//46.165.197.87^" Potential IP "5.149.255.132" found in string "//5.149.255.132^" Potential IP "78.140.145.178" found in string "//78.140.145.178^" Potential IP "80.91.178.234" found in string "//80.91.178.234^" Potential IP "80.93.49.192" found in string "//80.93.49.192^" Potential IP "80.93.56.187" found in string "//80.93.56.187^4" Potential IP "85.10.194.51" found in string "//85.10.194.51^" Potential IP "89.108.109.12" found in string "//89.108.109.12^" Potential IP "89.108.121.205" found in string "//89.108.121.205^$" Potential IP "90.156.144.98" found in string "//90.156.144.98^" Potential IP "91.194.251.66" found in string "//91.194.251.66^%" Potential IP "91.197.128.34" found in string "//91.197.128.34/key=!" Potential IP "95.168.161.173" found in string "//95.168.161.173/www/(" Potential IP "95.169.186.139" found in string "//95.169.186.139^!" Potential IP "95.211.125.226" found in string "//95.211.125.226^!" Potential IP "95.211.26.129" found in string "//95.211.26.129/banners/" Potential IP "185.180.196.178" found in string "185.180.196.178^" Potential IP "35.178.185.67" found in string "35.178.185.67^" Potential IP "5.101.115.170" found in string "5.101.115.170^" Potential IP "5.101.117.198" found in string "5.101.117.198^" Potential IP "62.109.18.206" found in string "62.109.18.206^" Potential IP "95.213.229.88" found in string "95.213.229.88^" Potential IP "95.213.231.34" found in string "95.213.231.34^" Potential IP "83.218.204.107" found in string "R$//83.218.204.107/numbers.md/banners/" Potential IP "185.87.50.147" found in string "ws*//*185.87.50.147^"" Potential IP "185.127.19.213" found in string "ws*://*185.127.19.213^"2f:T13d3,"ie_to_edge_stub.exe" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00001068) "ie_to_edge_stub.exe" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000 (UID: 00000000-00001068) "ie_to_edge_stub.exe" called "RtlGetVersion" with parameter 000000000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00001068) "rundll32.exe" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00005936) "rundll32.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005936) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00005936) "rundll32.exe" called "RtlGetVersion" with parameter 240100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00005936) "rundll32.exe" called "RtlGetVersion" with parameter 000000000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00005936)30:T49c,"rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\MICROSOFT EDGE\CAPABILITIES\URLASSOCIATIONS"; Key: ""; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\MICROSOFT EDGE\CAPABILITIES\URLASSOCIATIONS"; Key: "HTTPS"; Value: "") "rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\MICROSOFT EDGE\CAPABILITIES"; Key: ""; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\MICROSOFT EDGE\CAPABILITIES"; Key: "HIDDEN"; Value: "") "rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\INSTALLINFO"; Key: ""; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\INSTALLINFO"; Key: "SHOWICONSCOMMAND"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\INSTALLINFO"; Key: "ICONSVISIBLE"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\MICROSOFT EDGE\CAPABILITIES\URLASSOCIATIONS"; Key: "HTTP"; Value: "")31:T651,"ie_to_edge_stub.exe" touched "Computer" (Path: "HKCU\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\SHELLFOLDER") "ie_to_edge_stub.exe" touched "Memory Mapped Cache Mgr" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}") "ie_to_edge_stub.exe" touched "Sync root manager" (Path: "HKCU\CLSID\{F324E4F9-8496-40B2-A1FF-9617C1C9AFFE}\INSTANCE") "ie_to_edge_stub.exe" touched "Property System Both Class Factory" (Path: "HKCU\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\TREATAS") "ie_to_edge_stub.exe" touched "Security Manager" (Path: "HKCU\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\TREATAS") "ie_to_edge_stub.exe" touched "ShellItemArray Shell Namespace helper" (Path: "HKCU\CLSID\{CDC82860-468D-4D4E-B7E7-C298FF23AB2C}\TREATAS") "ie_to_edge_stub.exe" touched "ShellItem Shell Namespace helper" (Path: "HKCU\CLSID\{9AC9FBE1-E0A2-4AD6-B4EE-E212013EA917}\TREATAS") "rundll32.exe" touched "URL Shortcut PropSetStorage Mapping" (Path: "HKCU\CLSID\{06EEE834-461C-42C2-8DCF-1502B527B1F9}") "rundll32.exe" touched "INI Property Set Storage Handler" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{942BC614-676C-464E-B384-D3202AAA02DA}") "rundll32.exe" touched "Private Profile Object" (Path: "HKCU\CLSID\{4DFED3F9-B794-4D3C-973B-DDA1C28105A9}\TREATAS") "rundll32.exe" touched "Application Registration" (Path: "HKCU\CLSID\{591209C7-767B-42B2-9FBA-44EE4615F2C7}\TREATAS") "rundll32.exe" touched "Network" (Path: "HKCU\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\SHELLFOLDER") "rundll32.exe" touched "Microsoft Url History Service" (Path: "HKCU\CLSID\{3C374A40-BAE4-11CF-BF7D-00AA006946EE}\TREATAS")32:T645,"ie_to_edge_stub.exe" trying to access non-existent file "\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\107.0.1418.56\BHO\WININET.DLL" "ie_to_edge_stub.exe" trying to access non-existent file "\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\107.0.1418.56\BHO\URLMON.DLL" "ie_to_edge_stub.exe" trying to access non-existent file "\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\107.0.1418.56\BHO\IERTUTIL.DLL" "ie_to_edge_stub.exe" trying to access non-existent file "\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\107.0.1418.56\BHO\CRYPTBASE.DLL" "ie_to_edge_stub.exe" trying to access non-existent file "\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\107.0.1418.56\BHO\FLTLIB.DLL" "ie_to_edge_stub.exe" trying to access non-existent file "\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\107.0.1418.56\BHO\CLDAPI.DLL" "ie_to_edge_stub.exe" trying to access non-existent file "\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\107.0.1418.56\BHO\AEPIC.DLL" "ie_to_edge_stub.exe" trying to access non-existent file "\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\107.0.1418.56\BHO\BCRYPT.DLL" "ie_to_edge_stub.exe" trying to access non-existent file "\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\107.0.1418.56\BHO\PROPSYS.DLL" "ie_to_edge_stub.exe" trying to access non-existent file "\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\107.0.1418.56\BHO\EDPUTIL.DLL"33:T1000a,"{"aee_config":{"ar":{"price_regex":{"ae":"(((ae|aed|\\x{062F}\\x{0660}\\x{0625}\\x{0660}|\\x{062F}\\.\\x{0625}|dhs|dh)\\s*\\d{1 3})|(\\d{1,3}\\s*(ae|aed|\\x{062F}\\x{0660}\\x{0625}\\x{0660}|\\x{062F}\\.\\x{0625}|dhs|dh)))","dz":"(((dzd|da|\\x{062F}\\x{062C})\\s*\\d{1 3})|(\\d{1,3}\\s*(dzd|da|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}|egp)\\s*\\d{1 3})|(\\d{1,3}\\s*(e\\x{00a3}|egp)))","ma":"(((mad|dhs|dh)\\s*\\d{1 3})|(\\d{1,3}\\s*(mad|dhs|dh)))","sa":"((\\d{1,3}\\s*(sar\\s*\\x{fdfc}|sar|sr|\\x{fdfc}|\\.\\x{0631}\\.\\x{0633}))|((sar\\s*\\x{fdfc}|sar|sr|\\x{fdfc}|\\.\\x{0631}\\.\\x{0633})\\s*\\d{1 3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s*\\x{0625}\\x{0644}\\x{0649}\\s*\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})|(\\x{0623}\\x{0636}\\x{0641}\\s*\\x{0625}\\x{0644}\\x{0649}\\s*\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}\\x{0627}\\x{062A}\\s*\\x{0627}\\x{0644}\\x{062A}\\x{0648}\\x{0635}\\x{064A}\\x{0644})|(\\x{0627}\\x{0644}\\x{062A}\\x{0648}\\x{0635}\\x{064A}\\x{0644}\\s*\\x{0641}\\x{064A}\\s*\\x{0646}\\x{0641}\\x{0633}\\s*\\x{0627}\\x{0644}\\x{064A}\\x{0648}\\x{0645}\\s*\\x{0645}\\x{062A}\\x{0627}\\x{062D}))"},"bg":{"price_regex":{"bg":"((\\d{1,3}\\s*(bgn|\\x{043B}\\x{0432}|\\x{043B}\\x{0432}\\.))|((bgn|\\x{043B}\\x{0432}|\\x{043B}\\x{0432}\\.)\\s*\\d{1 3}))"},"product_terms":"((\\x{0414}\\x{043E}\\x{0431}\\x{0430}\\x{0432}\\x{0438}\\s*\\x{0432}\\s*\\x{043A}\\x{043E}\\x{0448}\\x{043D}\\x{0438}\\x{0446}\\x{0430}\\x{0442}\\x{0430})|(\\x{0414}\\x{043E}\\x{0431}\\x{0430}\\x{0432}\\x{0438}\\s*\\x{0432}\\s*\\x{043A}\\x{043E}\\x{043B}\\x{0438}\\x{0447}\\x{043A}\\x{0430}\\x{0442}\\x{0430})|(\\x{0414}\\x{0440}\\x{0443}\\x{0433}\\x{0438}\\s*\\x{043E}\\x{0444}\\x{0435}\\x{0440}\\x{0442}\\x{0438})|(\\x{041F}\\x{043E}\\x{0434}\\x{043E}\\x{0431}\\x{043D}\\x{0438}\\s*\\x{043F}\\x{0440}\\x{043E}\\x{0434}\\x{0443}\\x{043A}\\x{0442}\\x{0438})|(\\x{0412}\\s*\\x{043D}\\x{0430}\\x{043B}\\x{0438}\\x{0447}\\x{043D}\\x{043E}\\x{0441}\\x{0442})|(\\x{041E}\\x{043F}\\x{0438}\\x{0441}\\x{0430}\\x{043D}\\x{0438}\\x{0435}\\s*\\x{043D}\\x{0430}\\s*\\x{043F}\\x{0440}\\x{043E}\\x{0434}\\x{0443}\\x{043A}\\x{0442}\\x{0430}))"},"bs":{"price_regex":{"ba":"((\\d{1,3}\\s*(bam|km|,-\\s*km))|((bam|km|,-\\s*km)\\s*\\d{1 3}))"},"product_terms":"((dodajte\\s*u\\s*korpu)|(dodaj\\s*u\\s*korpu)|(u\\s*ko\\x{0161}aricu)|(sli\\x{010D}nim\\s*proizvodima)|(opcije\\s*dostave)|(u\\s*prodavnici))"},"character_cutoff":400,"citations":{"domains":{"academic":["nih.gov","sciencedirect.com","lww.com","acs.org","sagepub.com","arxiv.org","tandfonline.com","semanticscholar.org","jstor.org","ieee.org","rsc.org","sciencemag.org","frontiersin.org","iop.org","pnas.org","europepmc.org","scitation.org","scirp.org","acm.org","ashpublications.org","ascopubs.org","oclc.org","osapublishing.org","osti.gov","repec.org","annualreviews.org","spiedigitallibrary.org","iaea.org","ascelibrary.org","philpapers.org","cabdirect.org","bioone.org","aom.org","onepetro.org","scilit.net","ajol.info","iiste.org","doaj.org","paperity.org","escholarship.org","emeraldgrouppublishing.com","irena.org","indianjournals.com","safetylit.org","link.springer.com","onlinelibrary.wiley.com","rd.springer.com","econpapers.repec.org","academic.oup.com","iopscience.iop.org","papers.ssrn.com","hdl.handle.net","aip.scitation.org","link.aps.org","pubs.rsc.org","doi.ieeecomputersociety.org","muse.jhu.edu","insights.ovid.com","insights.ovid.com","proceedings.spiedigitallibrary.org","espace.library.uq.edu.au","discovery.ucl.ac.uk","lirias.kuleuven.be","doi.acm.org","jhu.pure.elsevier.com","psycnet.apa.org","biblio.ugent.be","lup.lub.lu.se","journals.plos.org","research.monash.edu","experts.umn.edu","asmedigitalcollection.asme.org","moh-it.pure.elsevier.com","agupubs.onlinelibrary.wiley.com","scholars.northwestern.edu","proceedings.asmedigitalcollection.asme.org","export.arxiv.org","journals.lww.com","mdanderson.elsevierpure.com","digital-library.theiet.org","digital.csic.es","experts.illinois.edu","research.vu.nl","kclpure.kcl.ac.uk","research-repository.uwa.edu.au","synapse.koreamed.org","eprints.qut.edu.au","vbn.aau.dk","repository.tudelft.nl","iovs.arvojournals.org","mayoclinic.pure.elsevier.com","eprints.gla.ac.uk","download.atlantis-press.com","repub.eur.nl","researchers.mq.edu.au","chemistry-europe.onlinelibrary.wiley.com","content.sciendo.com","zora.uzh.ch","researchportal.helsinki.fi","content.iospress.com","file.scirp.org","helda.helsinki.fi","findresearcher.sdu.dk","eprints.whiterose.ac.uk","repository.cam.ac.uk","biomedcentral.com","bmj.com","mdpi.com","jamanetwork.com","plos.org","thelancet.com","ssrn.com","emerald.com","springeropen.com","liebertpub.com","degruyter.com","scientific.net","brill.com","allenpress.com","publons.com","spandidos-publications.com","eurekaselect.com","ingentaconnect.com","thieme-connect.com","ores.su","inderscienceonline.com","jcreview.com","research.ed.ac.uk","cancerres.aacrjournals.org","dro.deakin.edu.au","publications.hse.ru","research-collection.ethz.ch","biomedcentral.com"],"books":["studocu.com","libguides.com","nap.edu","intechopen.com","oreilly.com","books.openedition.org","taylorfrancis.com"],"newspapers":["cnn.com","nytimes.com","usatoday.com","nypost.com","washingtonpost.com","usnews.com","cbsnews.com","nbcnews.com","cnbc.com","bbc.com","latimes.com","newsweek.com","snopes.com","thehill.com","chron.com","time.com","apnews.com","indiatimes.com","bizjournals.com","cbc.ca","mercurynews.com","ndtv.com","abc7news.com","indianexpress.com","hindustantimes.com","uci.edu","fortune.com","straitstimes.com","businessinsider.in","businessinsider.in","channelnewsasia.com","financialexpress.com","financialexpress.com","livemint.com","mustsharenews.com","theindependent.sg"],"websites":["searchenginejournal.com","unenvironment.org","wikipedia.org","msn.com","reddit.com","fandom.com","pinterest.com","webmd.com","stackoverflow.com","healthline.com","weather.com","drugs.com","ny.gov","quora.com","cnet.com","cdc.gov","britannica.com","merriam-webster.com","forbes.com","wikihow.com","wa.gov","coursehero.com","fivethirtyeight.com","github.com","noaa.gov","timeanddate.com","thefreedictionary.com","dictionary.com","investopedia.com","goodreads.com","stackexchange.com","huffpost.com","medicalnewstoday.com","weather.gov","history.com","thoughtco.com","businessinsider.com","howtogeek.com","wunderground.com","npr.org","khanacademy.org","sfgate.com","usda.gov","theguardian.com","bloomberg.com","ed.gov","politico.com","psychologytoday.com","medium.com","kaiserpermanente.org","worldometers.info","urbandictionary.com","brainly.in","oregon.gov","pbs.org","archive.org","nps.gov","clevelandclinic.org","thespruce.com","marketwatch.com","purdue.edu","enotes.com","fool.com","hunker.com","w3schools.com","wiley.com","fda.gov","yourdictionary.com","sparknotes.com","nextdoor.com","docusign.com","wsj.com","reuters.com","nasa.gov","tutorialspoint.com","thebalance.com","biography.com","consumerreports.org","elsevier.com","livestrong.com","lumenlearning.com","nasdaq.com","geeksforgeeks.org","medicinenet.com","epa.gov","nationalgeographic.com","usgs.gov","worldatlas.com","prezi.com","socratic.org","springer.com","mathworks.com","slack.com","slate.com","statista.com","census.gov","slideshare.net","rei.com","nerdwallet.com","pge.com","osha.gov","doordash.com","howstuffworks.com","livescience.com","oregonlive.com","theatlantic.com","shutterstock.com","collinsdictionary.com","joebiden.com","familyhandyman.com","thebalancesmb.com","who.int","theverge.com","sciencing.com","vox.com","wiktionary.org","variety.com","scribd.com","insider.com","bobvila.com","archives.gov","boredpanda.com","nwcg.gov","alltrails.com","computerhope.com","medscape.com","bls.gov","libretexts.org","medlineplus.gov","nymag.com","angieslist.com","seekingalpha.com","europa.eu","loc.gov","sec.gov","inc.com","unsplash.com","apa.org","wikimedia.org","wired.com","popularmechanics.com","worldpopulationreview.com","askubuntu.com","everydayhealth.com","smithsonianmag.com","aljazeera.com","nist.gov","mentalfloss.com","turnitin.com","worldcat.org","coursera.org","sciencedaily.com","gizmodo.com","nationalgeographic.org","superuser.com","issuu.com","techtarget.com","guru99.com","encyclopedia.com","codeproject.com","colorado.edu","ti.com","macrotrends.net","serverfault.com","phys.org","theculturetrip.com","ancient.eu","space.com","pewresearch.org","theconversation.com","atlassian.com","scribbr.com","uchicago.edu","c-sharpcorner.com","weforum.org","energy.gov","deloitte.com","entrepreneur.com","nature.com","jetbrains.com","towardsdatascience.com","engineeringtoolbox.com","cloudfront.net","fastcompany.com","scientificamerican.com","imgur.com","economist.com","prnewswire.com","pypi.org","tutsplus.com","hbr.org","actblue.com","ft.com","gatech.edu","udemy.com","worldbank.org","airnow.gov","toppr.com","android.com","fiverr.com","cmu.edu","vice.com","brookings.edu","axios.com","travelandleisure.com","mysql.com","barrons.com","tradingeconomics.com","uc.edu","ukessays.com","eia.gov","git-scm.com","lonelyplanet.com","javatpoint.com","freepik.com","ahajournals.org","businesswire.com","crunchbase.com","trane.com","atlasobscura.com","techcrunch.com","npmjs.com","cyberciti.biz","programiz.com","simplypsychology.org","hindawi.com","techopedia.com","digitalocean.com","cell.com","uakron.edu","calendly.com","asp.net","freecodecamp.org","physicsclassroom.com","globenewswire.com","baeldung.com","dzone.com","thomasnet.com","fao.org","w3resource.com","overleaf.com","iqair.com","flaticon.com","caltech.edu","universityofcalifornia.edu","purpleair.com","ourworldindata.org","fueleconomy.gov","mckinsey.com","treehugger.com","uchealth.com","allaboutcircuits.com","dev.to","nrc.gov","tecmint.com","amazonaws.com","getbootstrap.com","electrek.co","questia.com","spacex.com","gitlab.com","php.net","sciencealert.com","qz.com","linuxize.com","universetoday.com","envato.com","codepen.io","realpython.com","oecd.org","asme.org","webofknowledge.com","docusign.net","energysage.com","ebsco.com","sci-hub.se","softwaretestinghelp.com","earthsky.org","mendeley.com","edureka.co","sitepoint.com","css-tricks.com","owler.com","techonthenet.com","tensorflow.org","phoenixnap.com","newyorker.com","lennox.com","mongodb.com","insideevs.com","ethz.ch","cloudflare.com","worldwildlife.org","newscientist.com","jquery.com","doe.gov","oberlo.com","improvenet.com","energystar.gov","w3.org","greenbuildingadvisor.com","kaggle.com","codecademy.com","directenergy.com","g2.com","discovermagazine.com","fixr.com","wpbeginner.com","datacamp.com","influencermarketinghub.com","ebscohost.com","solarreviews.com","academic-accelerator.com","reactjs.org","ibisworld.com","proquest.com","fontawesome.com","timeshighereducation.com","cleantechnica.com","streetdirectory.com","journaldev.com","futurism.com","nwf.org","anl.gov","aqicn.org","constellation.com","wordstream.com","stackabuse.com","buffer.com","lbl.gov","machinelearningmastery.com","interestingengineering.com","pluralsight.com","monash.edu","analyticsvidhya.com","mysqltutorial.org","nrdc.org","igi-global.com","esa.int","electronics-tutorials.ws","scimagojr.com","yourstory.com","panopto.com","ornl.gov","modernize.com","gale.com","themeforest.net","nrel.gov","greencarreports.com","colorlib.com","teamtreehouse.com","cas.org","sgpbusiness.com","tutorialsteacher.com","scielo.br","intellipaat.com","templatemonster.com","ucsusa.org","beginnersbook.com","ahrefs.com","toptal.com","bitdegree.org","mongabay.com","pnnl.gov","orcid.org","explainthatstuff.com","sproutsocial.com","iea.org","clarivate.com","worldscientific.com","dribbble.com","compactappliance.com","asm-air.com","rug.nl","dovepress.com","editage.com","asiaone.com","mdbootstrap.com","laravel.com","archives-ouvertes.fr","a-z-animals.com","scopus.com","cloudways.com","libgen.rs","tutorialrepublic.com","energyvanguard.com","sanfoundry.com","ocbc.com","smashingmagazine.com","civilica.com","sci-hub.st","energyeducation.ca","greentechmedia.com","jsfiddle.net","cqvip.com","buildinggreen.com","solarpowerworldonline.com","wri.org","semrush.com","energycentral.com","theworldcounts.com","iucn.org","xspdf.com","gtmetrix.com","springernature.com","infona.pl","panda.org","edf.org","batteryuniversity.com","seaworld.org","singtel.com","world-nuclear.org","codecanyon.net","businessofapps.com","emarketer.com","heinonline.org","thesmartlocal.com","doi.org","letpub.com","greencarcongress.com","sgx.com","waset.org","power-technology.com","moz.com","laracasts.com","goodyfeed.com","iucnredlist.org","codegrepper.com","renewableenergyworld.com","resurchify.com","editorialmanager.com","pv-magazine.com","mewatch.sg","mothership.sg","dblp.org","defenders.org","taylorandfrancis.com","theseus.fi","inspirehep.net","todayonline.com","atlantis-press.com","cairn.info","narcis.nl","seia.org","openei.org","talis.com","saveonenergy.com","arxiv-vanity.com","computer.org","openathens.net","starhub.com","bbcollab.com","exlibrisgroup.com","solarpowerrocks.com","energyusecalculator.com","web.dev","crossref.org","earthled.com","awf.org","manuscriptcentral.com","issn.org","wikidata.org","educative.io","tnp.sg","tnp.sg","wikicn.top","aceee.org","inderscience.com","copyright.com","8days.sg","osf.io","awionline.org","pimido.com","capitaland.com","neliti.com","visitsingapore.com","seedly.sg","singaporelegaladvice.com","easychair.org","healthhub.sg","figshare.com","sginvestors.io","ntuclearninghub.com","sci-hub.tw","iaeme.com","dollarsandsense.sg","skillsfuture.sg","centralhtg.com","danielfooddiary.com","dsireusa.org","onlinecitizenasia.com","ilovephd.com","uobgroup.com","energydepot.com","burpple.com","thehoneycombers.com","cheric.org","ieice.org","serialssolutions.com","wappalyzer.com","myskillsfuture.sg","yuntsg.com","foodpanda.sg","karger.com","misstamchiak.com","list-manage.com","em-consulte.com","moneysmart.sg","gumtree.sg","emeraldinsight.com","edgeprop.sg","rikvin.com","sgpgrid.com","singaporelawwatch.sg","growkudos.com","thetopsites.net","sethlui.com","els-cdn.com","internauka.org","corporateservices.com","evise.com","ndsl.kr","ebsco.zone","medes.com","enets.sg","sphdigital.com","air-n-water.com","dissem.in","indexcopernicus.com","scirate.com","sciencedirectassets.com","libkey.io","mycareersfuture.sg","scopusfeedback.com","smeportal.sg","appointeze.com","ncbi.nlm.nih.gov","ui.adsabs.harvard.edu","dblp.uni-trier.de","patents.google.com","eric.ed.gov","trid.trb.org","pubag.nal.usda.gov","pure.mpg.de","ethos.bl.uk","meetings.aps.org","experts.umich.edu","research.manchester.ac.uk","hub.hku.hk","repository.ubn.ru.nl","orbi.uliege.be","shodhganga.inflibnet.ac.in","confit.atlas.jp","portal.research.lu.se","dspace.library.uu.nl","findanexpert.unimelb.edu.au","boris.unibe.ch","eprint.ncl.ac.uk","search.datacite.org"]}},"country_utf16_currency_map":{"AED":"\\x{062F}\\x{002E}\\x{0625}","AFN":"\\x{0041}\\x{0066}","ALL":"\\x{004C}","AMD":"\\x{0534}","AOA":"\\x{004B}\\x{007A}","AWG":"\\x{0192}","AZN":"\\x{043C}\\x{0430}\\x{043D}","BAM":"\\x{041A}\\x{041C}","BDT":"\\x{09F3}","BGN":"\\x{043B}\\x{0432}","BHD":"\\x{0628}\\x{002E}\\x{062F}","BIF":"\\x{20A3}","BOB":"\\x{0042}\\x{0073}\\x{002E}","BSD":"\\x{0024}","BWP":"\\x{0050}","BYN":"\\x{0042}\\x0072}","BZD":"\\x{0024}","CDF":"\\x{20A3}","CHF":"\\x{20A3}","CNY":"\\x{00A5}","CRC":"\\x{20A1}","CZK":"\\x{004B}\\x{010D}","DJF":"\\x{20A3}\\x{000A}","DKK":"\\x{006B}\\x{0072}","DZD":"\\x{062F}\\x{002E}\\x{062C}","EGP":"\\x{00a3}","ERN":"\\x{004E}\\x{0066}\\x{006B}","EUR":"\\x{20AC}","FKP":"\\x{00a3}","GBP":"\\x{00a3}","GEL":"\\x{10DA}","GHS":"\\x{20B5}","GIP":"\\x{00a3}","GMD":"\\x{0044}","GNF":"\\x{20A3}","GTQ":"\\x{0051}","HNL":"\\x{004c}","HRK":"\\x{004B}\\x{006E}","HTG":"\\x{0047}","HUF":"\\x{0046}\\x{0074}","IDR":"\\x{0052}\\x{0070}","ILS":"\\x{20AA}","INR":"\\x{20B9}","IQD":"\\x{0639}\\x{002E}\\x{062F}","IRR":"\\x{FDFC}","ISK":"\\x{04B}\\x{0072}","JOD":"\\x{062F}\\x{002E}\\x{0627}","JPY":"\\x{00A5}","KES":"\\x{0053}\\x{0068}","KHR":"\\x{17DB}","KPW":"\\x{20A9}","KRW":"\\x{20A9}","KWD":"\\x{062F}\\x{002E}\\x{0643}","KZT":"\\x{3012}","LAK":"\\x{20ad}","LBP":"\\x{0644}\\x{002E}\\x{0644}","LKR":"\\x{0052}\\x{0073}","LSL":"\\x{004C}","LYD":"\\x{0644}\\x{002E}\\x{062F}","MAD":"\\x{062F}\\x{002E}\\x{0645}\\x{002E}","MDL":"\\x{004C}","MKD", "{"config": {"token_limit": 1600 "page_cutoff": 4320 "default_locale_map": {"bg": "bg-bg" "bs": "bs-ba" "el": "el-gr" "en": "en-us" "es": "es-mx" "et": "et-ee" "cs": "cs-cz" "da": "da-dk" "de": "de-de" "fa": "fa-ir" "fi": "fi-fi" "fr": "fr-fr" "he": "he-il" "hr": "hr-hr" "hu": "hu-hu" "id": "id-id" "is": "is-is" "it": "it-it" "ja": "ja-jp" "ko": "ko-kr" "lv": "lv-lv" "lt": "lt-lt" "mk": "mk-mk" "nl": "nl-nl" "nb": "nb-no" "no": "no-no" "pl": "pl-pl" "pt": "pt-pt" "ro": "ro-ro" "ru": "ru-ru" "sk": "sk-sk" "sl": "sl-si" "sr": "sr-rs" "sv": "sv-se" "th": "th-th" "tr": "tr-tr" "ua": "ua-ua" "vi": "vi-vn" "zh": "zh-cn"} "picl_market_model_map": {"de": "de-de" "fr": "fr-fr" "ja": "ja-jp" "zh": "zh-cn" "es": "es-mx" "fr-be": "fr-fr" "de-at": "de-de"} "equivalent_locale_map": {"us-en": "en-us" "en-gb-gb": "en-gb" "en-gb-ca": "en-ca" "en-gb-au": "en-au" "en-gb-in": "en-in" "zh-hans-cn": "zh-cn" "zh-hant": "zh-tw" "-tw": "zh-tw"} "market_domain_regex_map": {"ae": "((\\.ae\\/)|(\\.com\\/ae\\/))" "ar": "((\\.ar\\/)|(\\.com\\/ar\\/))" "at": "((\\.at\\/)|(\\.com\\/at\\/)|(\\.com\\/de-at\\/)|(\\.com\\/de_at\\/))" "au": "((\\.au\\/)|(\\.com\\/au\\/)|(\\.com\\/en-au\\/)|(\\.com\\/en_au\\/))" "be": "((\\.be\\/)|(\\.com\\/be\\/)|(\\.com\\/fr-be\\/)|(\\.com\\/fr_be\\/)|(\\.com\\/nl-be\\/)|(\\.com\\/nl_be\\/))" "bg": "((\\.bg\\/)|(\\.com\\/bg\\/))" "br": "((\\.br\\/)|(\\.com\\/br\\/)|(\\.com\\/pt-br\\/)|(\\.com\\/pt_br\\/))" "ca": "((\\.ca\\/)|(\\.com\\/ca\\/)|(\\.com\\/fr-ca\\/)|(\\.com\\/fr_ca\\/)|(\\.ca\\/fr-ca\\/)|(\\.ca\\/fr_ca\\/)|(\\.com\\/en-ca\\/)|(\\.com\\/en_ca\\/))" "ch": "((\\.ch\\/)|(\\.com\\/ch\\/))" "cl": "((\\.cl\\/)|(\\.com\\/cl\\/))" "cn": "((\\.cn\\/)|(\\.com\\/cn\\/))" "co": "((\\.co\\/)|(\\.com\\/co\\/))" "cz": "((\\.cz\\/)|(\\.com\\/cz\\/))" "de": "((\\.de\\/)|(\\.com\\/de\\/)|(\\.com\\/de-de\\/)|(\\.com\\/de_de\\/))" "dk": "((\\.dk\\/)|(\\.com\\/dk\\/)|(\\.com\\/da-dk\\/)|(\\.com\\/da_dk\\/))" "eg": "((\\.eg\\/)|(\\.com\\/eg\\/))" "es": "((\\.es\\/)|(\\.com\\/es\\/)|(\\.com\\/es-es\\/)|(\\.com\\/es_es\\/))" "fi": "((\\.fi\\/)|(\\.com\\/fi\\/)|(\\.com\\/fi-fi\\/)|(\\.com\\/fi_fi\\/))" "fr": "((\\.fr\\/)|(\\.com\\/fr\\/)|(\\.com\\/fr-fr\\/)|(\\.com\\/fr_fr\\/))" "gb": "((\\.uk\\/)|(\\.com\\/uk\\/)|(\\.com\\/en-gb\\/)|(\\.com\\/en_gb\\/))" "gr": "((\\.gr\\/)|(\\.com\\/gr\\/)|(\\.com\\/el-gr\\/)|(\\.com\\/el_gr\\/))" "hr": "((\\.hr\\/)|(\\.com\\/hr\\/))" "hu": "((\\.hu\\/)|(\\.com\\/hu\\/)|(\\.com\\/hu-hu\\/)|(\\.com\\/hu_hu\\/))" "is": "((\\.is\\/)|(\\.com\\/is\\/))" "in": "((\\.in\\/)|(\\.com\\/in\\/)|(\\.com\\/en-in\\/)|(\\.com\\/en_in\\/))" "id": "((\\.id\\/)|(\\.com\\/id\\/))" "ie": "((\\.ie\\/)|(\\.com\\/ie\\/)|(\\.com\\/en-ie\\/)|(\\.com\\/en_ie\\/))" "il": "((\\.il\\/)|(\\.com\\/il\\/)|(\\.com\\/hw-il\\/)|(\\.com\\/hw_il\\/))" "it": "((\\.it\\/)|(\\.com\\/it\\/)|(\\.com\\/it-it\\/)|(\\.com\\/it_it\\/))" "jp": "((\\.jp\\/)|(\\.com\\/jp\\/)|(\\.com\\/ja-jp\\/)|(\\.com\\/ja_jp\\/))" "ke": "((\\.ke\\/)|(\\.com\\/ke\\/))" "kr": "((\\.kr\\/)|(\\.com\\/kr\\/)|(\\.com\\/ko-kr\\/)|(\\.com\\/ko_kr\\/))" "lt": "((\\.lt\\/)|(\\.com\\/lt\\/))" "ma": "((\\.ma\\/)|(\\.com\\/ma\\/))" "mx": "((\\.mx\\/)|(\\.com\\/mx\\/)|(\\.com\\/es-mx\\/)|(\\.com\\/es_mx\\/)|(\\.com\\/en-mx\\/)|(\\.com\\/en_mx\\/))" "my": "((\\.my\\/)|(\\.com\\/my\\/)|(\\.com\\/en-my\\/)|(\\.com\\/en_my\\/))" "nz": "((\\.nz\\/)|(\\.com\\/nz\\/))" "ng": "((\\.ng\\/)|(\\.com\\/ng\\/))" "nl": "((\\.nl\\/)|(\\.com\\/nl\\/)|(\\.com\\/nl-nl\\/)|(\\.com\\/nl_nl\\/))" "no": "((\\.no\\/)|(\\.com\\/no\\/)|(\\.com\\/no-no\\/)|(\\.com\\/no_no\\/))" "pe": "((\\.pe\\/)|(\\.com\\/pe\\/))" "pk": "((\\.pk\\/)|(\\.com\\/pk\\/))" "pl": "((\\.pl\\/)|(\\.com\\/pl\\/)|(\\.com\\/pl-pl\\/)|(\\.com\\/pl_pl\\/))" "pt": "((\\.pt\\/)|(\\.com\\/pt\\/)|(\\.com\\/pt-pt\\/)|(\\.com\\/pt_pt\\/))" "ro": "((\\.ro\\/)|(\\.com\\/ro\\/)|(\\.com\\/ro-ro\\/)|(\\.com\\/ro_ro\\/))" "rs": "((\\.rs\\/)|(\\.com\\/rs\\/))" "ru": "((\\.ru\\/)|(\\.com\\/ru\\/)|(\\.com\\/ru-ru\\/)|(\\.com\\/ru_ru\\/))" "si": "((\\.si\\/)|(\\.com\\/si\\/))" "sk": "((\\.sk\\/)|(\\.com\\/sk\\/))" "sa": "((\\.sa\\/)|(\\.com\\/sa\\/))" "se": "((\\.se\\/)|(\\.com\\/se\\/)|(\\.com\\/sv-se\\/)|(\\.com\\/sv_se\\/))" "sg": "((\\.sg\\/)|(\\.com\\/sg\\/)|(\\.com\\/en-sg\\/)|(\\.com\\/en_sg\\/))" "th": "((\\.th\\/)|(\\.com\\/th\\/))" "tr": "((\\.tr\\/)|(\\.com\\/tr\\/)|(\\.com\\/tr-tr\\/)|(\\.com\\/tr_tr\\/))" "tw": "((\\.tw\\/)|(\\.com\\/tw\\/))" "ua": "((\\.ua\\/)|(\\.com\\/ua\\/))" "vn": "((\\.vn\\/)|(\\.com\\/vn\\/))" "za": "((\\.za\\/)|(\\.com\\/za\\/))"} "en_us_price_regex": "(((\\$|usd)\\s*\\d{1,3})|(\\d{1,3}\\s*(\\$|usd))|((\\$|cdn|(c\\s*\\$))\\s*\\d{1,3})|(\\d{1,3}\\s*(\\$|cdn|(c\\s*\\$)))|(((\\x{00a3}|gbp)\\s*\\d{1,3})|(\\d{1,3}\\s*(\\x{00a3}|gbp))))" "en_gb_price_regex": "(((\\$|usd)\\s*\\d{1,3})|(\\d{1,3}\\s*(\\$|usd))|((\\$|cdn|(c\\s*\\$))\\s*\\d{1,3})|(\\d{1,3}\\s*(\\$|cdn|(c\\s*\\$)))|(((\\x{00a3}|gbp)\\s*\\d{1,3})|(\\d{1,3}\\s*(\\x{00a3}|gbp))))" "en_ca_price_regex": "(((\\$|usd)\\s*\\d{1,3})|(\\d{1,3}\\s*(\\$|usd))|((\\$|cdn|(c\\s*\\$))\\s*\\d{1,3})|(\\d{1,3}\\s*(\\$|cdn|(c\\s*\\$)))|(((\\x{00a3}|gbp)\\s*\\d{1,3})|(\\d{1,3}\\s*(\\x{00a3}|gbp))))" "en_au_price_regex": "(((\\$|au|aud)\\s*\\d{1,3})|(\\d{1,3}\\s*(\\$|au|aud)))" "en_in_price_regex": "(((\\x{20B9}|rs|rs\\.)\\s*\\d{1,3})|(\\d{1,3}\\s*(\\x{20B9}|rs|rs\\.)))" "de_de_price_regex": "((\\d{1,3}\\s*(\\x{20ac}))|((\\x{20ac})\\s*\\d{1,3}))" "fr_fr_price_regex": "((\\d{1,3}\\s*(\\x{20ac}))|((\\x{20ac})\\s*\\d{1,3}))" "ja_jp_price_regex": "((\\d{1,3}\\s*(yen|\\x{5186}))|((\\x{ffe5}|\\x{00a5})\\s*\\d{1,3}))" "zh_cn_price_regex": "((\\d{1,3}\\s*\\x{5143})|((\\x{ffe5}|\\x{00a5}|rmb|cny)\\s*\\d{1,3}))" "es_mx_price_regex": "((\\d{1,3}\\s*(mxn|\\x{0024}))|((\\x{0024}\\s*mxn|\\x{0024}|mxn|mex\\s*\\x{0024})\\s*\\d{1,3}))" "es_es_price_regex": "((\\d{1,3}\\s*(eur|\\x{20ac}))|((eur|\\x{20ac})\\s*\\d{1,3}))" "es_us_price_regex": "(((\\$|usd)\\s*\\d{1,3})|(\\d{1,3}\\s*(\\$|usd))|((\\$|cdn|(c\\s*\\$))\\s*\\d{1,3})|(\\d{1,3}\\s*(\\$|cdn|(c\\s*\\$)))|(((\\x{00a3}|gbp)\\s*\\d{1,3})|(\\d{1,3}\\s*(\\x{00a3}|gbp))))" "en_us_product_terms": "((add\\s*to\\s*cart)|(add\\s*to\\s*basket)|(add\\s*to\\s*bag)|(buy\\s*it\\s*now)|(buy\\s*now)|(free\\s*delivery)|(free\\s*shipping)|(estimated\\s*delivery)|(out\\s*of\\s*stock)|(in\\s*stock)|(sold\\s*out)|(add\\s*to\\s*wish\\s*list)|((fastest|express|truck|for|home)\\s*delivery)|(standard\\s*shipping)|(ship\\s*it)|(find\\s*in\\s*another\\s*store)|((curbside|for|store)\\s*pickup)|((curbside|store)\\s*pick\\s*up)|(add\\s*to\\s*(list|wishlist|registry))|(only\\s*\\d{1,3}\\s*left)|(product\\s*(information|details|overview|specifications))|(pick\\s*up\\s*at\\s*store)|(special\\s*offer\\s*available)|(available\\s*to\\s*ship)|(size\\s*chart)|(about\\s*product)|(you\\s*may\\s*also\\s*like)|(find\\s*in\\s*store)|(also\\s*available)|(in\\s*store)|(about\\s*this\\s*product)|(check\\s*availability)|(vehicle\\s*details)|(vehicle\\s*features)|(contact\\s*dealer)|(confirm\\s*availability)|(vehicle\\s*info))" "en_gb_product_terms": "((add\\s*to\\s*cart)|(add\\s*to\\s*basket)|(add\\s*to\\s*bag)|(buy\\s*it\\s*now)|(buy\\s*now)|(free\\s*delivery)|(free\\s*shipping)|(estimated\\s*delivery)|(out\\s*of\\s*stock)|(in\\s*stock)|(sold\\s*out)|(add\\s*to\\s*wish\\s*list)|((fastest|express|truck|for|home)\\s*delivery)|(standard\\s*shipping)|(ship\\s*it)|(find\\s*in\\s*another\\s*store)|((curbside|for|store)\\s*pickup)|((curbside|store)\\s*pick\\s*up)|(add\\s*to\\s*(list|wishlist|registry))|(only\\s*\\d{1,3}\\s*left)|(product\\s*(information|details|overview|specifications))|(pick\\s*up\\s*at\\s*store)|(special\\s*offer\\s*available)|(available\\s*to\\s*ship)|(size\\s*chart)|(about\\s*product)|(you\\s*may\\s*also\\s*like)|(find\\s*in\\s*store)|(also\\s*available)|(in\\s*store)|(about\\s*this\\s*product)|(check\\s*availability)|(vehicle\\s*details)|(vehicle\\s*features)|(contact\\s*dealer)|(confirm\\s*availability)|(vehicle\\s*info))" "en_ca_product_terms": "((add\\s*to\\s*cart)|(add\\s*to\\s*basket)|(add\\s*to\\s*bag)|(buy\\s*it\\s*now)|(buy\\s*now)|(free\\s*delivery)|(free\\s*shipping)|(estimated\\s*delivery)|(out\\s*of\\s*stock)|(in\\s*stock)|(sold\\s*out)|(add\\s*to\\s*wish\\s*list)|((fastest|express|truck|for|home)\\s*delivery)|(standard\\s*shipping)|(ship\\s*it)|(find\\s*in\\s*another\\s*store)|((curbside|for|store)\\s*pickup)|((curbside|store)\\s*pick\\s*up)|(add\\s*to\\s*(list|wishlist|registry))|(only\\s*\\d{1,3}\\s*left)|(product\\s*(information|details|overview|specifications))|(pick\\s*up\\s*at\\s*store)|(special\\s*offer\\s*available)|(available\\s*to\\s*ship)|(size\\s*chart)|(about\\s*product)|(you\\s*may\\s*also\\s*like)|(find\\s*in\\s*store)|(also\\s*available)|(in\\s*store)|(about\\s*this\\s*product)|(check\\s*availability)|(vehicle\\s*details)|(vehicle\\s*features)|(contact\\s*dealer)|(confirm\\s*availability)|(vehicle\\s*info))" "en_au_product_terms": "((add\\s*to\\s*cart)|(add\\s*both\\s*to\\s*cart)|(add\\s*to\\s*basket)|(add\\s*to\\s*bag)|(buy\\s*it\\s*now)|(buy\\s*now)|(free\\s*delivery)|(free\\s*in(-*|\\s*)store\\s*pickup)|(free\\s*shipping)|(estimated\\s*delivery)|(out\\s*of\\s*stock)|(in\\s*stock)|(sold\\s*out)|(add\\s*to\\s*wish\\s*list)|((fastest|express|truck|for|home)\\s*delivery)|((standard|express)\\s*freight)|(standard\\s*shipping)|(ship\\s*it)|(find\\s*in\\s*another\\s*store)|((curbside|for|store)\\s*pickup)|((curbside|store)\\s*pick\\s*up)|((add|save)\\s*to\\s*(list|wishlist|registry|watchlist))|(only\\s*\\d{1,3}\\s*left)|(product\\s*(information|details|overview|specifications|highlights))|(pick\\s*up\\s*at\\s*store)|(special\\s*offer\\s*available)|(available\\s*to\\s*ship)|(size\\s*chart)|(about\\s*product)|(you\\s*may\\s*also\\s*like)|(find\\s*in\\s*store)|(also\\s*available)|(in\\s*store)|(about\\s*this\\s*product)|(check\\s*availability)|(click\\s*&\\s*collect)|(preorder\\s*now))" "en_in_product_terms": "((add\\s*to\\s*cart)|(add\\s*to\\s*(basket|closet))|(add\\s*to\\s*bag)|(buy\\s*it\\s*now)|(buy\\s*now)|(free\\s*delivery)|(free\\s*shipping)|((estimated|cashon)\\s*delivery)|(delivery\\s*by)|(out\\s*of\\s*stock)|(in\\s*stock)|(sold\\s*out)|(add\\s*to\\s*wish\\s*list)|((fastest|express|truck|for|home)\\s*delivery)|(delivery\\s*options)|((standard|express)\\s*(shipping|delivery))|(ship\\s*it)|(find\\s*in\\s*another\\s*store)|((curbside|for|store)\\s*pickup)|((curbside|store)\\s*pick\\s*up)|((add|save)\\s*to\\s*(list|wishlist|registry|closet))|(only\\s*\\d{1,3}\\s*left)|(product\\s*(information|details|overview|specifications|description))|(pick\\s*up\\s*at\\s*store)|(special\\s*offer\\s*available)|(available\\s*to\\s*ship)|(size\\s*chart)|((about|rate)\\s*product)|(you\\s*may\\s*also\\s*like)|(similar\\s*products)|(find\\s*in\\s*store)|(also\\s*available)|(in\\s*store)|(about\\s*this\\s*product)|(check\\s*availability)|(how\\s*to\\s*use)|(inclusive\\s*of\\s*all\\s*taxes)|(contact\\s*dealer)|(confirm\\s*availability)|(connect\\s*to\\s*a\\s*store)|(delivery\\s*and\\s*payment)|(product\\s*background))" "de_de_product_terms": "((in den\\s*kaufswagen\\s*hinzuf\u00fcgen)|(inden\\s*einkaufswagen\\s*hinzuf\u00fcgen)|(zum\\s*tasche\\s*hinzuf\u00fcgen)|(kauft\\s*es\\s*jetzt)|(jetzt\\s*kaufen)|(kostenlose\\s*lieferung)|(gratisversand)|(voraussichtliche\\s*lieferung)|(vergriffen)|(auf\\s*lager)|(ausverkauft)|(auf\\s*die\\s*liste)|((schnellster|express|lkw|f\u00fcr|zu hause)|(standard\\s*versand)|(versand\\s*es)|(finden sie\\s*in\\s*einemanderen\\s*gesch\u00e4ft)|(( bordsteinkante | abholung|im)\\s*laden)|((abholung|am)\\s*stra\u00dfenrand)|(auf\\s*die\\s*(liste| wunchzettel | registrierung))|(nur\\s*\\d{1,3}\\s*noch)|(produkt\\s*(informationen|details| \u00fcbersicht | spezifikationen))|(abholung\\s*vor\\s*ort)|(spezielle \\s* angebote)|(versand\\s* verf\u00fcgbarkeit)|(gr\u00f6\u00dfentabelle)|(\u00fcber\\s*produkt)|(k\u00f6nnten\\s*ihnen\\s*auch\\s*gefallen)|(im\\s*gesch\u00e4ft\\s*finden)|(auch\\s* verf\u00fcgbar)|(auf\\s*lager)|(\u00fcber \\s*diese\\s*produkt)|(verf\u00fcgbarkeit\\s*pr\u00fcfen)|(fahrzeugdaten)|(fahrzeugeigenschaften)|(kontakt \\s*h\u00e4ndler)|(verf\u00fcgbarkeit\\s*best\u00e4tigen)|(fahrzeuginformationen)))" "fr_fr_product_terms": "((ajouter\\s*au\\s*panier)|(ajoutez\\s*au\\s*panier)|(ajoutez\\s*au\\s*sac)|(achetez\\s*le\\s*maintenant)|(achetez\\s*maintenant)|(livraison\\s*gratuite)|(exp\u00e9dition\\s*gratuite)|(livraison\\s*estim\u00e9e)|(produit\\s*\u00e9puis\u00e9)|(en\\s*stock)|(\u00e9puis\u00e9)|(ajoutez\\s*\u00e0\\s*la\\s*wish\\s*list)|(livraison\\s*standard)|(livrez\\s*le)|(trouvez\\s*en\\s*un\\s*autre\\s*boutique)|((ramassage\\s*en\\s*bordure\\s*de\\s*rue)\\s*pour|magasin)|((cueillette\\s*en\\s*bordure\\s*de\\s*rue)\\s*en\\s*boutique)|(ajoutez\\s*\u00e0\\s*votre\\s*(liste|votre\\s*wishlist|votre\\s*registre))|((information\\s*de\\s*produit)|(d\u00e9tails\\s*de\\s*Produit)|(aper\u00e7u\\s*de\\s*produit)|(sp\u00e9cifications\\s*de\\s*produit))|(cueillette\\s*\u00e0\\s*boutique)|(offres\\s*sp\u00e9ciales\\s*disponible)|(accessible\\s*\u00e0\\s*livrer)|(guides\\s*des\\s*tailles)|(description\\s*produit)|(vous\\s*pourriez\\s*aussi\\s*aimer)|(trouvez\\s*en\\s*boutique)|(aussi\\s*disponible)|(en\\s*magasin)|(a\\s*propos\\s*de\\s*ce\\s*produit)|(v\u00e9rifiez\\s*disponibilit\u00e9)|(d\u00e9tails\\s*de\\s*v\u00e9hicule)|(caract\u00e9ristiques\\s*de\\s*v\u00e9hicule)|(contactez\\s*marchand)|(affirmez\\s*disponibilit\u00e9)|(information\\s*de\\s*v\u00e9hicule))" "ja_jp_product_terms": "((\\x{30ab}\\x{30fc}\\x{30c8}\\x{306b}\\x{5165}\\x{308c}\\x{308b})|(\\x{4eca}\\x{3059}\\x{3050}\\x{8cb7}\\x{3046})|((\\x{8a73}\\x{7d30})(\\x{60c5}\\x{5831}|\\x{30c7}\\x{30fc}\\x{30bf}))|(((\\x{30a2}\\x{30a4}\\x{30c6}\\x{30e0})|(\\x{5546}\\x{54c1}(\\x{306e}){0,1})|(\\x{57fa}\\x{672c})|(\\x{5185}\\x{5bb9}))((\\x{8aac}\\x{660e})|(\\x{60c5}\\x{5831})|(\\x{4ed5}\\x{69d8})))|(\\x{3054}\\x{8cfc}\\x{5165}\\x{624b}\\x{7d9a}\\x{304d}\\x{3078})|(\\x{30ab}\\x{30fc}\\x{30c8}\\x{306b}\\x{8ffd}\\x{52a0})|(\\x{9001}\\x{6599}\\x{7121}\\x{6599})|(\\x{767a}\\x{9001}\\x{4e88}\\x{5b9a})|(\\x{30d0}\\x{30b9}\\x{30b1}\\x{30c3}\\x{30c8}\\x{306b}\\x{5165}\\x{308c}\\x{308b})|(\\x{6ce8}\\x{610f})|(\\x{8cfc}\\x{5165}\\x{624b}\\x{7d9a}\\x{304d}\\x{3078})|(\\x{30d0}\\x{30b9}\\x{30b1}\\x{30c3}\\x{30c8}\\x{3092}\\x{898b}\\x{308b})|(\\x{8fd4}\\x{54c1}\\x{6761}\\x{4ef6})|(\\x{5728}\\x{5eab}\\x{3042}\\x{308a})|(\\x{30ab}\\x{30b4}\\x{306b}\\x{5165}\\x{308c}\\x{308b})|(\\x{30d0}\\x{30c3}\\x{30b0}\\x{306b}\\x{8ffd}\\x{52a0})|(\\x{5546}\\x{54c1}\\x{0051}\\x{0026}\\x{0041})|(\\x{3044}\\x{307e}\\x{3059}\\x{3050}\\x{8cfc}\\x{5165})|(\\x{5546}\\x{54c1}\\x{30b9}\\x{30da}\\x{30c3}\\x{30af})|(\\x{304a}\\x{652f}\\x{6255}\\x{65b9}\\x{6cd5})|(\\x{6ce8}\\x{610f}\\x{4e8b}\\x{9805})|(\\x{4ed5}\\x{69d8})|(\\x{914d}\\x{9001}\\x{65b9}\\x{6cd5})|(\\x{304b}\\x{3054}\\x{306b}\\x{5165}\\x{308c}\\x{308b})|(\\x{9001}\\x{6599})|(\\x{5728}\\x{5eab}\\x{72b6}\\x{6cc1})|(\\x{4f5c}\\x{54c1}\\x{5185}\\x{5bb9})|(((\\x{5546}\\x{54c1}(\\x{306e}){0,1})|(\\x{30a2}\\x{30a4}\\x{30c6}\\x{30e0}))(\\x{8a73}\\x{7d30}))|(\\x{756a}\\x{53f7})|(\\x{30b7}\\x{30e7}\\x{30c3}\\x{30d4}\\x{30f3}\\x{30b0}\\x{30d0}\\x{30c3}\\x{30b0}\\x{306b}\\x{5165}\\x{308c}\\x{308b})|(\\x{304a}\\x{6c17}\\x{306b}\\x{5165}\\x{308a}\\x{306b}\\x{8ffd}\\x{52a0})|(\\x{4fa1}\\x{683c}\\x{3092}\\x{78ba}\\x{8a8d})|(\\x{30ab}\\x{30fc}\\x{30c8}\\x{3078}\\x{9032}\\x{3080})|(\\x{30b5}\\x{30fc}\\x{30d3}\\x{30b9})|(\\x{5546}\\x{54c1}\\x{306e}\\x{767a}\\x{9001})|(\\x{5185}\\x{5bb9}\\x{7d39}\\x{4ecb})|(\\x{30ab}\\x{30fc}\\x{30c8}\\x{3078}\\x{5165}\\x{308c}\\x{308b})|(\\x{8cfc}\\x{5165}\\x{306f}\\x{3053}\\x{3061}\\x{3089}))" "zh_cn_product_terms": "((\\x{52a0}\\x{5165}\\x{8d2d}\\x{7269}\\x{8f66})|(\\x{73b0}\\x{5728}\\x{8d2d}\\x{4e70})|(\\x{73b0}\\x{5728}\\x{6709}\\x{8d27})|(\\x{52a0}\\x{5165}\\x{5fc3}\\x{613f}\\x{5355})|(\\x{7ecf}\\x{5e38}\\x{4e00}\\x{8d77}\\x{8d2d}\\x{4e70}\\x{7684}\\x{5546}\\x{54c1})|(\\x{514d}\\x{8d39}\\x{914d}\\x{9001})|(\\x{9884}\\x{8ba1}\\x{6700}\\x{5feb}\\x{9001}\\x{8fbe})|(\\x{6dfb}\\x{52a0}\\x{5230}\\x{8d2d}\\x{7269}\\x{888b})|(\\x{9884}\\x{8ba1}\\x{53d1}\\x{8d27}\\x{65e5}\\x{671f})|(\\x{514d}\\x{8d39}\\x{9001}\\x{8d27})|(\\x{514d}\\x{8fd0}\\x{8d39})|(\\x{6536}\\x{85cf}\\x{5546}\\x{54c1})|(\\x{5356}\\x{5149}\\x{4e86})|(\\x{67e5}\\x{770b}\\x{76f8}\\x{4f3c}\\x{4ea7}\\x{54c" "{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13339146945574610","alternate_error_pages":{"backup":true},"autocomplete":{"retention_policy_last_version":107},"autofill":{"orphan_rows_removed":true},"browser":{"available_dark_theme_options":"All","editor_proofing_languages":{"en":{"Grammar":false,"Spelling":false},"en-US":{"Grammar":true,"Spelling":true}},"has_seen_welcome_page":false,"hub_toggle_time":"13339146952427944","should_reset_check_default_browser":false,"time_of_last_normal_window_close":"13339147303473352","toolbar_extensions_hub_button_visibility":0,"window_placement":{"bottom":561,"left":10,"maximized":true,"right":1014,"top":10,"work_area_bottom":571,"work_area_left":0,"work_area_right":1024,"work_area_top":0}},"browser_content_container_height":501,"browser_content_container_width":1024,"browser_content_container_x":0,"browser_content_container_y":70,"cached_fonts":{"search_results_page":{"fallback":[],"primary":["Roboto"]}},"collections":{"prism_collections":{"enabled":0,"policy":{"cached":0}},"rss_dev_feed":{"policy":{"cached":false}}},"commerce_daily_metrics_last_update_time":"13339146945575268","continuous_migration":{"advance_consent":{"browser_version":"100.0.1185.50","consented":0}},"countryid_at_install":21843,"custom_links":{"list":[]},"default_apps_install_state":3,"domain_diversity":{"last_reporting_timestamp":"13339146945575171"},"download":{"directory_upgrade":true,"last_complete_time":"13322933224658080"},"dual_engine":{"consumer_sitelist_location":"","consumer_sitelist_version":"","shared_cookie_data":{},"sitelist_data_2":{},"sitelist_has_consumer_data":false,"sitelist_has_enterprise_data":false,"sitelist_location":"","sitelist_source":0,"sitelist_version":""},"edge":{"msa_sso_info":{"allow_for_non_msa_profile":true},"profile_sso_info":{"aad_sso_algo_state":1,"is_first_profile":true,"is_msa_first_profile":true,"msa_sso_algo_state":1},"profile_sso_option":1,"services":{"signin_scoped_device_id":"04c15d06-2227-408c-8d6c-ae2c2f07ef37"},"vertical_tabs":{"feedback_do_not_show":true}},"edge_etree":{"task":{"status":"{\"tasks_status_update_time\":\"1694673352430\" \"tasks_update_time\":\"1694673352430\"}"}},"edge_rewards":{"cache_data":"CAA=","coachmark_muted_until_dict":{"amazon":"13303219003945806","lol":"13295640815542676","minecraft":"13295640815542678","natureConservancy":"13295640817776207","roblox":"13295640815542673","unicef":"13295640817776187","wikipedia":"13295640817776198"},"coachmark_promotions":{},"coachmark_shown_count_dict":{"amazon":0,"lol":0,"minecraft":0,"natureConservancy":0,"roblox":0,"unicef":0,"wikipedia":0},"coachmark_was_accepted_dict":{"amazon":false,"lol":false,"minecraft":false,"natureConservancy":false,"roblox":false,"unicef":false,"wikipedia":false},"hva_promotions":[],"opened_via_prototocol_launch":false,"refresh_status_muted_until":"13339751745213824"},"edge_vpn":{"available":true},"entity_extraction":{"aee_config":{"ar":{"price_regex":{"ae":"(((ae|aed|\\x{062F}\\x{0660}\\x{0625}\\x{0660}|\\x{062F}\\.\\x{0625}|dhs|dh)\\s*\\d{1 3})|(\\d{1,3}\\s*(ae|aed|\\x{062F}\\x{0660}\\x{0625}\\x{0660}|\\x{062F}\\.\\x{0625}|dhs|dh)))","dz":"(((dzd|da|\\x{062F}\\x{062C})\\s*\\d{1 3})|(\\d{1,3}\\s*(dzd|da|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}|egp)\\s*\\d{1 3})|(\\d{1,3}\\s*(e\\x{00a3}|egp)))","ma":"(((mad|dhs|dh)\\s*\\d{1 3})|(\\d{1,3}\\s*(mad|dhs|dh)))","sa":"((\\d{1,3}\\s*(sar\\s*\\x{fdfc}|sar|sr|\\x{fdfc}|\\.\\x{0631}\\.\\x{0633}))|((sar\\s*\\x{fdfc}|sar|sr|\\x{fdfc}|\\.\\x{0631}\\.\\x{0633})\\s*\\d{1 3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s*\\x{0625}\\x{0644}\\x{0649}\\s*\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})|(\\x{0623}\\x{0636}\\x{0641}\\s*\\x{0625}\\x{0644}\\x{0649}\\s*\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}\\x{0627}\\x{062A}\\s*\\x{0627}\\x{0644}\\x{062A}\\x{0648}\\x{0635}\\x{064A}\\x{0644})|(\\x{0627}\\x{0644}\\x{062A}\\x{0648}\\x{0635}\\x{064A}\\x{0644}\\s*\\x{0641}\\x{064A}\\s*\\x{0646}\\x{0641}\\x{0633}\\s*\\x{0627}\\x{0644}\\x{064A}\\x{0648}\\x{0645}\\s*\\x{0645}\\x{062A}\\x{0627}\\x{062D}))"},"bg":{"price_regex":{"bg":"((\\d{1,3}\\s*(bgn|\\x{043B}\\x{0432}|\\x{043B}\\x{0432}\\.))|((bgn|\\x{043B}\\x{0432}|\\x{043B}\\x{0432}\\.)\\s*\\d{1 3}))"},"product_terms":"((\\x{0414}\\x{043E}\\x{0431}\\x{0430}\\x{0432}\\x{0438}\\s*\\x{0432}\\s*\\x{043A}\\x{043E}\\x{0448}\\x{043D}\\x{0438}\\x{0446}\\x{0430}\\x{0442}\\x{0430})|(\\x{0414}\\x{043E}\\x{0431}\\x{0430}\\x{0432}\\x{0438}\\s*\\x{0432}\\s*\\x{043A}\\x{043E}\\x{043B}\\x{0438}\\x{0447}\\x{043A}\\x{0430}\\x{0442}\\x{0430})|(\\x{0414}\\x{0440}\\x{0443}\\x{0433}\\x{0438}\\s*\\x{043E}\\x{0444}\\x{0435}\\x{0440}\\x{0442}\\x{0438})|(\\x{041F}\\x{043E}\\x{0434}\\x{043E}\\x{0431}\\x{043D}\\x{0438}\\s*\\x{043F}\\x{0440}\\x{043E}\\x{0434}\\x{0443}\\x{043A}\\x{0442}\\x{0438})|(\\x{0412}\\s*\\x{043D}\\x{0430}\\x{043B}\\x{0438}\\x{0447}\\x{043D}\\x{043E}\\x{0441}\\x{0442})|(\\x{041E}\\x{043F}\\x{0438}\\x{0441}\\x{0430}\\x{043D}\\x{0438}\\x{0435}\\s*\\x{043D}\\x{0430}\\s*\\x{043F}\\x{0440}\\x{043E}\\x{0434}\\x{0443}\\x{043A}\\x{0442}\\x{0430}))"},"bs":{"price_regex":{"ba":"((\\d{1,3}\\s*(bam|km|,-\\s*km))|((bam|km|,-\\s*km)\\s*\\d{1 3}))"},"product_terms":"((dodajte\\s*u\\s*korpu)|(dodaj\\s*u\\s*korpu)|(u\\s*ko\\x{0161}aricu)|(sli\\x{010D}nim\\s*proizvodima)|(opcije\\s*dostave)|(u\\s*prodavnici))"},"character_cutoff":400,"citations":{"domains":{"academic":["nih.gov","sciencedirect.com","lww.com","acs.org","sagepub.com","arxiv.org","tandfonline.com","semanticscholar.org","jstor.org","ieee.org","rsc.org","sciencemag.org","frontiersin.org","iop.org","pnas.org","europepmc.org","scitation.org","scirp.org","acm.org","ashpublications.org","ascopubs.org","oclc.org","osapublishing.org","osti.gov","repec.org","annualreviews.org","spiedigitallibrary.org","iaea.org","ascelibrary.org","philpapers.org","cabdirect.org","bioone.org","aom.org","onepetro.org","scilit.net","ajol.info","iiste.org","doaj.org","paperity.org","escholarship.org","emeraldgrouppublishing.com","irena.org","indianjournals.com","safetylit.org","link.springer.com","onlinelibrary.wiley.com","rd.springer.com","econpapers.repec.org","academic.oup.com","iopscience.iop.org","papers.ssrn.com","hdl.handle.net","aip.scitation.org","link.aps.org","pubs.rsc.org","doi.ieeecomputersociety.org","muse.jhu.edu","insights.ovid.com","insights.ovid.com","proceedings.spiedigitallibrary.org","espace.library.uq.edu.au","discovery.ucl.ac.uk","lirias.kuleuven.be","doi.acm.org","jhu.pure.elsevier.com","psycnet.apa.org","biblio.ugent.be","lup.lub.lu.se","journals.plos.org","research.monash.edu","experts.umn.edu","asmedigitalcollection.asme.org","moh-it.pure.elsevier.com","agupubs.onlinelibrary.wiley.com","scholars.northwestern.edu","proceedings.asmedigitalcollection.asme.org","export.arxiv.org","journals.lww.com","mdanderson.elsevierpure.com","digital-library.theiet.org","digital.csic.es","experts.illinois.edu","research.vu.nl","kclpure.kcl.ac.uk","research-repository.uwa.edu.au","synapse.koreamed.org","eprints.qut.edu.au","vbn.aau.dk","repository.tudelft.nl","iovs.arvojournals.org","mayoclinic.pure.elsevier.com","eprints.gla.ac.uk","download.atlantis-press.com","repub.eur.nl","researchers.mq.edu.au","chemistry-europe.onlinelibrary.wiley.com","content.sciendo.com","zora.uzh.ch","researchportal.helsinki.fi","content.iospress.com","file.scirp.org","helda.helsinki.fi","findresearcher.sdu.dk","eprints.whiterose.ac.uk","repository.cam.ac.uk","biomedcentral.com","bmj.com","mdpi.com","jamanetwork.com","plos.org","thelancet.com","ssrn.com","emerald.com","springeropen.com","liebertpub.com","degruyter.com","scientific.net","brill.com","allenpress.com","publons.com","spandidos-publications.com","eurekaselect.com","ingentaconnect.com","thieme-connect.com","ores.su","inderscienceonline.com","jcreview.com","research.ed.ac.uk","cancerres.aacrjournals.org","dro.deakin.edu.au","publications.hse.ru","research-collection.ethz.ch","biomedcentral.com"],"books":["studocu.com","libguides.com","nap.edu","intechopen.com","oreilly.com","books.openedition.org","taylorfrancis.com"],"newspapers":["cnn.com","nytimes.com","usatoday.com","nypost.com","washingtonpost.com","usnews.com","cbsnews.com","nbcnews.com","cnbc.com","bbc.com","latimes.com","newsweek.com","snopes.com","thehill.com","chron.com","time.com","apnews.com","indiatimes.com","bizjournals.com","cbc.ca","mercurynews.com","ndtv.com","abc7news.com","indianexpress.com","hindustantimes.com","uci.edu","fortune.com","straitstimes.com","businessinsider.in","businessinsider.in","channelnewsasia.com","financialexpress.com","financialexpress.com","livemint.com","mustsharenews.com","theindependent.sg"],"websites":["searchenginejournal.com","unenvironment.org","wikipedia.org","msn.com","reddit.com","fandom.com","pinterest.com","webmd.com","stackoverflow.com","healthline.com","weather.com","drugs.com","ny.gov","quora.com","cnet.com","cdc.gov","britannica.com","merriam-webster.com","forbes.com","wikihow.com","wa.gov","coursehero.com","fivethirtyeight.com","github.com","noaa.gov","timeanddate.com","thefreedictionary.com","dictionary.com","investopedia.com","goodreads.com","stackexchange.com","huffpost.com","medicalnewstoday.com","weather.gov","history.com","thoughtco.com","businessinsider.com","howtogeek.com","wunderground.com","npr.org","khanacademy.org","sfgate.com","usda.gov","theguardian.com","bloomberg.com","ed.gov","politico.com","psychologytoday.com","medium.com","kaiserpermanente.org","worldometers.info","urbandictionary.com","brainly.in","oregon.gov","pbs.org","archive.org","nps.gov","clevelandclinic.org","thespruce.com","marketwatch.com","purdue.edu","enotes.com","fool.com","hunker.com","w3schools.com","wiley.com","fda.gov","yourdictionary.com","sparknotes.com","nextdoor.com","docusign.com","wsj.com","reuters.com","nasa.gov","tutorialspoint.com","thebalance.com","biography.com","consumerreports.org","elsevier.com","livestrong.com","lumenlearning.com","nasdaq.com","geeksforgeeks.org","medicinenet.com","epa.gov","nationalgeographic.com","usgs.gov","worldatlas.com","prezi.com","socratic.org","springer.com","mathworks.com","slack.com","slate.com","statista.com","census.gov","slideshare.net","rei.com","nerdwallet.com","pge.com","osha.gov","doordash.com","howstuffworks.com","livescience.com","oregonlive.com","theatlantic.com","shutterstock.com","collinsdictionary.com","joebiden.com","familyhandyman.com","thebalancesmb.com","who.int","theverge.com","sciencing.com","vox.com","wiktionary.org","variety.com","scribd.com","insider.com","bobvila.com","archives.gov","boredpanda.com","nwcg.gov","alltrails.com","computerhope.com","medscape.com","bls.gov","libretexts.org","medlineplus.gov","nymag.com","angieslist.com","seekingalpha.com","europa.eu","loc.gov","sec.gov","inc.com","unsplash.com","apa.org","wikimedia.org","wired.com","popularmechanics.com","worldpopulationreview.com","askubuntu.com","everydayhealth.com","smithsonianmag.com","aljazeera.com","nist.gov","mentalfloss.com","turnitin.com","worldcat.org","coursera.org","sciencedaily.com","gizmodo.com","nationalgeographic.org","superuser.com","issuu.com","techtarget.com","guru99.com","encyclopedia.com","codeproject.com","colorado.edu","ti.com","macrotrends.net","serverfault.com","phys.org","theculturetrip.com","ancient.eu","space.com","pewresearch.org","theconversation.com","atlassian.com","scribbr.com","uchicago.edu","c-sharpcorner.com","weforum.org","energy.gov","deloitte.com","entrepreneur.com","nature.com","jetbrains.com","towardsdatascience.com","engineeringtoolbox.com","cloudfront.net","fastcompany.com","scientificamerican.com","imgur.com","economist.com","prnewswire.com","pypi.org","tutsplus.com","hbr.org","actblue.com","ft.com","gatech.edu","udemy.com","worldbank.org","airnow.gov","toppr.com","android.com","fiverr.com","cmu.edu","vice.com","brookings.edu","axios.com","travelandleisure.com","mysql.com","barrons.com","tradingeconomics.com","uc.edu","ukessays.com","eia.gov","git-scm.com","lonelyplanet.com","javatpoint.com","freepik.com","ahajournals.org","businesswire.com","crunchbase.com","trane.com","atlasobscura.com","techcrunch.com","npmjs.com","cyberciti.biz","programiz.com","simplypsychology.org","hindawi.com","techopedia.com","digitalocean.com","cell.com","uakron.edu","calendly.com","asp.net","freecodecamp.org","physicsclassroom.com","globenewswire.com","baeldung.com","dzone.com","thomasnet.com","fao.org","w3resource.com","overleaf.com","iqair.com","flaticon.com","caltech.edu","universityofcalifornia.edu","purpleair.com","ourworldindata.org","fueleconomy.gov","mckinsey.com","treehugger.com","uchealth.com","allaboutcircuits.com","dev.to","nrc.gov","tecmint.com","amazonaws.com","getbootstrap.com","electrek.co","questia.com","spacex.com","gitlab.com","php.net","sciencealert.com","qz.com","linuxize.com","universetoday.com","envato.com","codepen.io","realpython.com","oecd.org","asme.org","webofknowledge.com","docusign.net","energysage.com","ebsco.com","sci-hub.se","softwaretestinghelp.com","earthsky.org","mendeley.com","edureka.co","sitepoint.com","css-tricks.com","owler.com","techonthenet.com","tensorflow.org","phoenixnap.com","newyorker.com","lennox.com","mongodb.com","insideevs.com","ethz.ch","cloudflare.com","worldwildlife.org","newscientist.com","jquery.com","doe.gov","oberlo.com","improvenet.com","energystar.gov","w3.org","greenbuildingadvisor.com","kaggle.com","codecademy.com","directenergy.com","g2.com","discovermagazine.com","fixr.com","wpbeginner.com","datacamp.com","influencermarketinghub.com","ebscohost.com","solarreviews.com","academic-accelerator.com","reactjs.org","ibisworld.com","proquest.com","fontawesome.com","timeshighereducation.com","cleantechnica.com","streetdirectory.com","journaldev.com","futurism.com","nwf.org","anl.gov","aqicn.org","constellation.com","wordstream.com","stackabuse.com","buffer.com","lbl.gov","machinelearningmastery.com","interestingengineering.com","pluralsight.com","monash.edu","analyticsvidhya.com","mysqltutorial.org","nrdc.org","igi-global.com","esa.int","electronics-tutorials.ws","scimagojr.com","yourstory.com","panopto.com","ornl.gov","modernize.com","gale.com","themeforest.net","nrel.gov","greencarreports.com","colorlib.com","teamtreehouse.com","cas.org","sgpbusiness.com","tutorialsteacher.com","scielo.br","intellipaat.com","templatemonster.com","ucsusa.org","beginnersbook.com","ahrefs.com","toptal.com","bitdegree.org","mongabay.com","pnnl.gov","orcid.org","explainthatstuff.com","sproutsocial.com","iea.org","clarivate.com","worldscientific.com","dribbble.com","compactappliance.com","asm-air.com","rug.nl","dovepress.com","editage.com","asiaone.com","mdbootstrap.com","laravel.com","archives-ouvertes.fr","a-z-animals.com","scopus.com","cloudways.com","libgen.rs","tutorialrepublic.com","energyvanguard.com","sanfoundry.com","ocbc.com","smashingmagazine.com","civilica.com","sci-hub.st","energyeducation.ca","greentechmedia.com","jsfiddle.net","cqvip.com","buildinggreen.com","solarpowerworldonline.com","wri.org","semrush.com","energycentral.com","theworldcounts.com","iucn.org","xspdf.com","gtmetrix.com","springernature.com","infona.pl","panda.org","edf.org","batteryuniversity.com","seaworld.org","singtel.com","world-nuclear.org","codecanyon.net","businessofapps.com","emarketer.com","heinonline.org","thesmartlocal.com","doi.org","letpub.com","greencarcongress.com","sgx.com","waset.org","power-technology.com","moz.com","laracasts.com","goodyfeed.com","iucnredlist.org","codegrepper.com","renewableenergyworld.com","resurchify.com","editorialmanager.com","pv-magazine.com","mewatch.sg","mothership.sg","dblp.org","defenders.org","taylorandfrancis.com","theseus.fi","inspirehep.net","todayonline.com","atlantis-press.com","cairn.info","narcis.nl","seia.org","openei.org","talis.com","saveonenergy.com","arxiv-vanity.com","computer.org","openathens.net","starhub.com","bbcollab.com","exlibrisgroup.com","solarpowerrocks.com","energyusecalculator.com","web.dev","crossref.org","earthled.com","awf.org","manuscriptcentral.com","issn.org","wikidata.org","educative.io","tnp.sg","tnp.sg","wikicn.top","aceee.org","inderscience.com","copyright.com","8days.sg","osf.io","awionline.org","pimido.com","capitaland.com","neliti.com","visitsingapore.com","seedly.sg","singap", "{"aadc_info":{"age_group":0} "account_tracker_service_last_update":"13339146945574610" "alternate_error_pages":{"backup":true} "autocomplete":{"retention_policy_last_version":107} "autofill":{"orphan_rows_removed":true} "browser":{"available_dark_theme_options":"All" "editor_proofing_languages":{"en":{"Grammar":false "Spelling":false} "en-US":{"Grammar":true "Spelling":true}} "has_seen_welcome_page":false "hub_toggle_time":"13339146952427944" "should_reset_check_default_browser":false "time_of_last_normal_window_close":"13322933236939799" "toolbar_extensions_hub_button_visibility":0 "window_placement":{"bottom":561 "left":10 "maximized":true "right":1014 "top":10 "work_area_bottom":571 "work_area_left":0 "work_area_right":1024 "work_area_top":0}} "browser_content_container_height":501 "browser_content_container_width":1024 "browser_content_container_x":0 "browser_content_container_y":70 "cached_fonts":{"search_results_page":{"fallback":[] "primary":["Roboto"]}} "collections":{"prism_collections":{"enabled":0 "policy":{"cached":0}} "rss_dev_feed":{"policy":{"cached":false}}} "commerce_daily_metrics_last_update_time":"13339146945575268" "continuous_migration":{"advance_consent":{"browser_version":"100.0.1185.50" "consented":0}} "countryid_at_install":21843 "custom_links":{"list":[]} "default_apps_install_state":3 "domain_diversity":{"last_reporting_timestamp":"13339146945575171"} "download":{"directory_upgrade":true "last_complete_time":"13322933224658080"} "dual_engine":{"consumer_sitelist_location":"" "consumer_sitelist_version":"" "shared_cookie_data":{} "sitelist_data_2":{} "sitelist_has_consumer_data":false "sitelist_has_enterprise_data":false "sitelist_location":"" "sitelist_source":0 "sitelist_version":""} "edge":{"msa_sso_info":{"allow_for_non_msa_profile":true} "profile_sso_info":{"aad_sso_algo_state":1 "is_first_profile":true "is_msa_first_profile":true "msa_sso_algo_state":1} "profile_sso_option":1 "services":{"signin_scoped_device_id":"04c15d06-2227-408c-8d6c-ae2c2f07ef37"} "vertical_tabs":{"feedback_do_not_show":true}} "edge_etree":{"task":{"status":"{\"tasks_status_update_time\":\"1694673352430\",\"tasks_update_time\":\"1694673352430\"}"}} "edge_rewards":{"cache_data":"CAA=" "coachmark_muted_until_dict":{"amazon":"13303219003945806" "lol":"13295640815542676" "minecraft":"13295640815542678" "natureConservancy":"13295640817776207" "roblox":"13295640815542673" "unicef":"13295640817776187" "wikipedia":"13295640817776198"} "coachmark_promotions":{} "coachmark_shown_count_dict":{"amazon":0 "lol":0 "minecraft":0 "natureConservancy":0 "roblox":0 "unicef":0 "wikipedia":0} "coachmark_was_accepted_dict":{"amazon":false "lol":false "minecraft":false "natureConservancy":false "roblox":false "unicef":false "wikipedia":false} "hva_promotions":[] "opened_via_prototocol_launch":false "refresh_status_muted_until":"13339751745213824"} "edge_vpn":{"available":true} "entity_extraction":{"aee_config":{"ar":{"price_regex":{"ae":"(((ae|aed|\\x{062F}\\x{0660}\\x{0625}\\x{0660}|\\x{062F}\\.\\x{0625}|dhs|dh)\\s*\\d{1,3})|(\\d{1,3}\\s*(ae|aed|\\x{062F}\\x{0660}\\x{0625}\\x{0660}|\\x{062F}\\.\\x{0625}|dhs|dh)))" "dz":"(((dzd|da|\\x{062F}\\x{062C})\\s*\\d{1,3})|(\\d{1,3}\\s*(dzd|da|\\x{062F}\\x{062C})))" "eg":"(((e\\x{00a3}|egp)\\s*\\d{1,3})|(\\d{1,3}\\s*(e\\x{00a3}|egp)))" "ma":"(((mad|dhs|dh)\\s*\\d{1,3})|(\\d{1,3}\\s*(mad|dhs|dh)))" "sa":"((\\d{1,3}\\s*(sar\\s*\\x{fdfc}|sar|sr|\\x{fdfc}|\\.\\x{0631}\\.\\x{0633}))|((sar\\s*\\x{fdfc}|sar|sr|\\x{fdfc}|\\.\\x{0631}\\.\\x{0633})\\s*\\d{1,3}))"} "product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s*\\x{0625}\\x{0644}\\x{0649}\\s*\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})|(\\x{0623}\\x{0636}\\x{0641}\\s*\\x{0625}\\x{0644}\\x{0649}\\s*\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}\\x{0627}\\x{062A}\\s*\\x{0627}\\x{0644}\\x{062A}\\x{0648}\\x{0635}\\x{064A}\\x{0644})|(\\x{0627}\\x{0644}\\x{062A}\\x{0648}\\x{0635}\\x{064A}\\x{0644}\\s*\\x{0641}\\x{064A}\\s*\\x{0646}\\x{0641}\\x{0633}\\s*\\x{0627}\\x{0644}\\x{064A}\\x{0648}\\x{0645}\\s*\\x{0645}\\x{062A}\\x{0627}\\x{062D}))"} "bg":{"price_regex":{"bg":"((\\d{1,3}\\s*(bgn|\\x{043B}\\x{0432}|\\x{043B}\\x{0432}\\.))|((bgn|\\x{043B}\\x{0432}|\\x{043B}\\x{0432}\\.)\\s*\\d{1,3}))"} "product_terms":"((\\x{0414}\\x{043E}\\x{0431}\\x{0430}\\x{0432}\\x{0438}\\s*\\x{0432}\\s*\\x{043A}\\x{043E}\\x{0448}\\x{043D}\\x{0438}\\x{0446}\\x{0430}\\x{0442}\\x{0430})|(\\x{0414}\\x{043E}\\x{0431}\\x{0430}\\x{0432}\\x{0438}\\s*\\x{0432}\\s*\\x{043A}\\x{043E}\\x{043B}\\x{0438}\\x{0447}\\x{043A}\\x{0430}\\x{0442}\\x{0430})|(\\x{0414}\\x{0440}\\x{0443}\\x{0433}\\x{0438}\\s*\\x{043E}\\x{0444}\\x{0435}\\x{0440}\\x{0442}\\x{0438})|(\\x{041F}\\x{043E}\\x{0434}\\x{043E}\\x{0431}\\x{043D}\\x{0438}\\s*\\x{043F}\\x{0440}\\x{043E}\\x{0434}\\x{0443}\\x{043A}\\x{0442}\\x{0438})|(\\x{0412}\\s*\\x{043D}\\x{0430}\\x{043B}\\x{0438}\\x{0447}\\x{043D}\\x{043E}\\x{0441}\\x{0442})|(\\x{041E}\\x{043F}\\x{0438}\\x{0441}\\x{0430}\\x{043D}\\x{0438}\\x{0435}\\s*\\x{043D}\\x{0430}\\s*\\x{043F}\\x{0440}\\x{043E}\\x{0434}\\x{0443}\\x{043A}\\x{0442}\\x{0430}))"} "bs":{"price_regex":{"ba":"((\\d{1,3}\\s*(bam|km|,-\\s*km))|((bam|km|,-\\s*km)\\s*\\d{1,3}))"} "product_terms":"((dodajte\\s*u\\s*korpu)|(dodaj\\s*u\\s*korpu)|(u\\s*ko\\x{0161}aricu)|(sli\\x{010D}nim\\s*proizvodima)|(opcije\\s*dostave)|(u\\s*prodavnici))"} "character_cutoff":400 "citations":{"domains":{"academic":["nih.gov" "sciencedirect.com" "lww.com" "acs.org" "sagepub.com" "arxiv.org" "tandfonline.com" "semanticscholar.org" "jstor.org" "ieee.org" "rsc.org" "sciencemag.org" "frontiersin.org" "iop.org" "pnas.org" "europepmc.org" "scitation.org" "scirp.org" "acm.org" "ashpublications.org" "ascopubs.org" "oclc.org" "osapublishing.org" "osti.gov" "repec.org" "annualreviews.org" "spiedigitallibrary.org" "iaea.org" "ascelibrary.org" "philpapers.org" "cabdirect.org" "bioone.org" "aom.org" "onepetro.org" "scilit.net" "ajol.info" "iiste.org" "doaj.org" "paperity.org" "escholarship.org" "emeraldgrouppublishing.com" "irena.org" "indianjournals.com" "safetylit.org" "link.springer.com" "onlinelibrary.wiley.com" "rd.springer.com" "econpapers.repec.org" "academic.oup.com" "iopscience.iop.org" "papers.ssrn.com" "hdl.handle.net" "aip.scitation.org" "link.aps.org" "pubs.rsc.org" "doi.ieeecomputersociety.org" "muse.jhu.edu" "insights.ovid.com" "insights.ovid.com" "proceedings.spiedigitallibrary.org" "espace.library.uq.edu.au" "discovery.ucl.ac.uk" "lirias.kuleuven.be" "doi.acm.org" "jhu.pure.elsevier.com" "psycnet.apa.org" "biblio.ugent.be" "lup.lub.lu.se" "journals.plos.org" "research.monash.edu" "experts.umn.edu" "asmedigitalcollection.asme.org" "moh-it.pure.elsevier.com" "agupubs.onlinelibrary.wiley.com" "scholars.northwestern.edu" "proceedings.asmedigitalcollection.asme.org" "export.arxiv.org" "journals.lww.com" "mdanderson.elsevierpure.com" "digital-library.theiet.org" "digital.csic.es" "experts.illinois.edu" "research.vu.nl" "kclpure.kcl.ac.uk" "research-repository.uwa.edu.au" "synapse.koreamed.org" "eprints.qut.edu.au" "vbn.aau.dk" "repository.tudelft.nl" "iovs.arvojournals.org" "mayoclinic.pure.elsevier.com" "eprints.gla.ac.uk" "download.atlantis-press.com" "repub.eur.nl" "researchers.mq.edu.au" "chemistry-europe.onlinelibrary.wiley.com" "content.sciendo.com" "zora.uzh.ch" "researchportal.helsinki.fi" "content.iospress.com" "file.scirp.org" "helda.helsinki.fi" "findresearcher.sdu.dk" "eprints.whiterose.ac.uk" "repository.cam.ac.uk" "biomedcentral.com" "bmj.com" "mdpi.com" "jamanetwork.com" "plos.org" "thelancet.com" "ssrn.com" "emerald.com" "springeropen.com" "liebertpub.com" "degruyter.com" "scientific.net" "brill.com" "allenpress.com" "publons.com" "spandidos-publications.com" "eurekaselect.com" "ingentaconnect.com" "thieme-connect.com" "ores.su" "inderscienceonline.com" "jcreview.com" "research.ed.ac.uk" "cancerres.aacrjournals.org" "dro.deakin.edu.au" "publications.hse.ru" "research-collection.ethz.ch" "biomedcentral.com"] "books":["studocu.com" "libguides.com" "nap.edu" "intechopen.com" "oreilly.com" "books.openedition.org" "taylorfrancis.com"] "newspapers":["cnn.com" "nytimes.com" "usatoday.com" "nypost.com" "washingtonpost.com" "usnews.com" "cbsnews.com" "nbcnews.com" "cnbc.com" "bbc.com" "latimes.com" "newsweek.com" "snopes.com" "thehill.com" "chron.com" "time.com" "apnews.com" "indiatimes.com" "bizjournals.com" "cbc.ca" "mercurynews.com" "ndtv.com" "abc7news.com" "indianexpress.com" "hindustantimes.com" "uci.edu" "fortune.com" "straitstimes.com" "businessinsider.in" "businessinsider.in" "channelnewsasia.com" "financialexpress.com" "financialexpress.com" "livemint.com" "mustsharenews.com" "theindependent.sg"] "websites":["searchenginejournal.com" "unenvironment.org" "wikipedia.org" "msn.com" "reddit.com" "fandom.com" "pinterest.com" "webmd.com" "stackoverflow.com" "healthline.com" "weather.com" "drugs.com" "ny.gov" "quora.com" "cnet.com" "cdc.gov" "britannica.com" "merriam-webster.com" "forbes.com" "wikihow.com" "wa.gov" "coursehero.com" "fivethirtyeight.com" "github.com" "noaa.gov" "timeanddate.com" "thefreedictionary.com" "dictionary.com" "investopedia.com" "goodreads.com" "stackexchange.com" "huffpost.com" "medicalnewstoday.com" "weather.gov" "history.com" "thoughtco.com" "businessinsider.com" "howtogeek.com" "wunderground.com" "npr.org" "khanacademy.org" "sfgate.com" "usda.gov" "theguardian.com" "bloomberg.com" "ed.gov" "politico.com" "psychologytoday.com" "medium.com" "kaiserpermanente.org" "worldometers.info" "urbandictionary.com" "brainly.in" "oregon.gov" "pbs.org" "archive.org" "nps.gov" "clevelandclinic.org" "thespruce.com" "marketwatch.com" "purdue.edu" "enotes.com" "fool.com" "hunker.com" "w3schools.com" "wiley.com" "fda.gov" "yourdictionary.com" "sparknotes.com" "nextdoor.com" "docusign.com" "wsj.com" "reuters.com" "nasa.gov" "tutorialspoint.com" "thebalance.com" "biography.com" "consumerreports.org" "elsevier.com" "livestrong.com" "lumenlearning.com" "nasdaq.com" "geeksforgeeks.org" "medicinenet.com" "epa.gov" "nationalgeographic.com" "usgs.gov" "worldatlas.com" "prezi.com" "socratic.org" "springer.com" "mathworks.com" "slack.com" "slate.com" "statista.com" "census.gov" "slideshare.net" "rei.com" "nerdwallet.com" "pge.com" "osha.gov" "doordash.com" "howstuffworks.com" "livescience.com" "oregonlive.com" "theatlantic.com" "shutterstock.com" "collinsdictionary.com" "joebiden.com" "familyhandyman.com" "thebalancesmb.com" "who.int" "theverge.com" "sciencing.com" "vox.com" "wiktionary.org" "variety.com" "scribd.com" "insider.com" "bobvila.com" "archives.gov" "boredpanda.com" "nwcg.gov" "alltrails.com" "computerhope.com" "medscape.com" "bls.gov" "libretexts.org" "medlineplus.gov" "nymag.com" "angieslist.com" "seekingalpha.com" "europa.eu" "loc.gov" "sec.gov" "inc.com" "unsplash.com" "apa.org" "wikimedia.org" "wired.com" "popularmechanics.com" "worldpopulationreview.com" "askubuntu.com" "everydayhealth.com" "smithsonianmag.com" "aljazeera.com" "nist.gov" "mentalfloss.com" "turnitin.com" "worldcat.org" "coursera.org" "sciencedaily.com" "gizmodo.com" "nationalgeographic.org" "superuser.com" "issuu.com" "techtarget.com" "guru99.com" "encyclopedia.com" "codeproject.com" "colorado.edu" "ti.com" "macrotrends.net" "serverfault.com" "phys.org" "theculturetrip.com" "ancient.eu" "space.com" "pewresearch.org" "theconversation.com" "atlassian.com" "scribbr.com" "uchicago.edu" "c-sharpcorner.com" "weforum.org" "energy.gov" "deloitte.com" "entrepreneur.com" "nature.com" "jetbrains.com" "towardsdatascience.com" "engineeringtoolbox.com" "cloudfront.net" "fastcompany.com" "scientificamerican.com" "imgur.com" "economist.com" "prnewswire.com" "pypi.org" "tutsplus.com" "hbr.org" "actblue.com" "ft.com" "gatech.edu" "udemy.com" "worldbank.org" "airnow.gov" "toppr.com" "android.com" "fiverr.com" "cmu.edu" "vice.com" "brookings.edu" "axios.com" "travelandleisure.com" "mysql.com" "barrons.com" "tradingeconomics.com" "uc.edu" "ukessays.com" "eia.gov" "git-scm.com" "lonelyplanet.com" "javatpoint.com" "freepik.com" "ahajournals.org" "businesswire.com" "crunchbase.com" "trane.com" "atlasobscura.com" "techcrunch.com" "npmjs.com" "cyberciti.biz" "programiz.com" "simplypsychology.org" "hindawi.com" "techopedia.com" "digitalocean.com" "cell.com" "uakron.edu" "calendly.com" "asp.net" "freecodecamp.org" "physicsclassroom.com" "globenewswire.com" "baeldung.com" "dzone.com" "thomasnet.com" "fao.org" "w3resource.com" "overleaf.com" "iqair.com" "flaticon.com" "caltech.edu" "universityofcalifornia.edu" "purpleair.com" "ourworldindata.org" "fueleconomy.gov" "mckinsey.com" "treehugger.com" "uchealth.com" "allaboutcircuits.com" "dev.to" "nrc.gov" "tecmint.com" "amazonaws.com" "getbootstrap.com" "electrek.co" "questia.com" "spacex.com" "gitlab.com" "php.net" "sciencealert.com" "qz.com" "linuxize.com" "universetoday.com" "envato.com" "codepen.io" "realpython.com" "oecd.org" "asme.org" "webofknowledge.com" "docusign.net" "energysage.com" "ebsco.com" "sci-hub.se" "softwaretestinghelp.com" "earthsky.org" "mendeley.com" "edureka.co" "sitepoint.com" "css-tricks.com" "owler.com" "techonthenet.com" "tensorflow.org" "phoenixnap.com" "newyorker.com" "lennox.com" "mongodb.com" "insideevs.com" "ethz.ch" "cloudflare.com" "worldwildlife.org" "newscientist.com" "jquery.com" "doe.gov" "oberlo.com" "improvenet.com" "energystar.gov" "w3.org" "greenbuildingadvisor.com" "kaggle.com" "codecademy.com" "directenergy.com" "g2.com" "discovermagazine.com" "fixr.com" "wpbeginner.com" "datacamp.com" "influencermarketinghub.com" "ebscohost.com" "solarreviews.com" "academic-accelerator.com" "reactjs.org" "ibisworld.com" "proquest.com" "fontawesome.com" "timeshighereducation.com" "cleantechnica.com" "streetdirectory.com" "journaldev.com" "futurism.com" "nwf.org" "anl.gov" "aqicn.org" "constellation.com" "wordstream.com" "stackabuse.com" "buffer.com" "lbl.gov" "machinelearningmastery.com" "interestingengineering.com" "pluralsight.com" "monash.edu" "analyticsvidhya.com" "mysqltutorial.org" "nrdc.org" "igi-global.com" "esa.int" "electronics-tutorials.ws" "scimagojr.com" "yourstory.com" "panopto.com" "ornl.gov" "modernize.com" "gale.com" "themeforest.net" "nrel.gov" "greencarreports.com" "colorlib.com" "teamtreehouse.com" "cas.org" "sgpbusiness.com" "tutorialsteacher.com" "scielo.br" "intellipaat.com" "templatemonster.com" "ucsusa.org" "beginnersbook.com" "ahrefs.com" "toptal.com" "bitdegree.org" "mongabay.com" "pnnl.gov" "orcid.org" "explainthatstuff.com" "sproutsocial.com" "iea.org" "clarivate.com" "worldscientific.com" "dribbble.com" "compactappliance.com" "asm-air.com" "rug.nl" "dovepress.com" "editage.com" "asiaone.com" "mdbootstrap.com" "laravel.com" "archives-ouvertes.fr" "a-z-animals.com" "scopus.com" "cloudways.com" "libgen.rs" "tutorialrepublic.com" "energyvanguard.com" "sanfoundry.com" "ocbc.com" "smashingmagazine.com" "civilica.com" "sci-hub.st" "energyeducation.ca" "greentechmedia.com" "jsfiddle.net" "cqvip.com" "buildinggreen.com" "solarpowerworldonline.com" "wri.org" "semrush.com" "energycentral.com" "theworldcounts.com" "iucn.org" "xspdf.com" "gtmetrix.com" "springernature.com" "infona.pl" "panda.org" "edf.org" "batteryuniversity.com" "seaworld.org" "singtel.com" "world-nuclear.org" "codecanyon.net" "businessofapps.com" "emarketer.com" "heinonline.org" "thesmartlocal.com" "doi.org" "letpub.com" "greencarcongress.com" "sgx.com" "waset.org" "power-technology.com" "moz.com" "laracasts.com" "goodyfeed.com" "iucnredlist.org" "codegrepper.com" "renewableenergyworld.com" "resurchify.com" "editorialmanager.com" "pv-magazine.com" "mewatch.sg" "mothership.sg" "dblp.org" "defenders.org" "taylorandfrancis.com" "theseus.fi" "inspirehep.net" "todayonline.com" "atlantis-press.com" "cairn.info" "narcis.nl" "seia.org" "openei.org" "talis.com" "saveonenergy.com" "arxiv-vanity.com" "computer.org" "openathens.net" "starhub.com" "bbcollab.com" "exlibrisgroup.com" "solarpowerrocks.com" "energyusecalculator.com" "web.dev" "crossref.org" "earthled.com" "awf.org" "manuscriptcentral.com" "issn.org" "wikidata.org" "educative.io" "tnp.sg" "tnp.sg" "wikicn.top" "aceee.org" "inderscience.com" "copyright.com" "8days.sg" "osf.io" "awionline.org" "pimido.com" "capitaland.com" "neliti.com" "visitsingapore.com" "seedly.sg" "singap"34:T4b7,"GET / HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.google.com Connection: Keep-Alive" Response ==> HTTP/1.1 302 Found Location: https://www.google.com/?gws_rd=ssl Cache-Control: private Content-Type: text/html; charset=UTF-8 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-8tT_4tP542XOEnVlP8_xuw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Date: Thu 14 Sep 2023 06:35:43 GMT Server: gws Content-Length: 231 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2023-09-14-06; expires=Sat 14-Oct-2023 06:35:43 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: AEC=Ad49MVGz8OEtWmDPX67IGOhXMY4mBoQwKuZaVnWWioWUrms7gCZHh97VFg; expires=Tue 12-Mar-2024 06:35:43 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax with response body ==>3C48544D4C3E3C484541443E3C6D65746120687474702D65717569763D22636F6E74656E742D747970652220636F6E74656E743D22746578742F68746D6C3B63.......35:T1012,"ie_to_edge_stub.exe" wrote bytes "7021ea49fd7f0000b0fdea49fd7f0000" to virtual address "0x408A0208" (part of module "PROPSYS.DLL") "ie_to_edge_stub.exe" wrote bytes "c08dea49fd7f0000301fea49fd7f0000" to virtual address "0x473F3EF8" (part of module "WINDOWS.STORAGE.DLL") "ie_to_edge_stub.exe" wrote bytes "1038a739fd7f0000101aa739fd7f00006012a739fd7f00000012a739fd7f0000905ca739fd7f0000a066a739fd7f000040aca739fd7f000060a8a739fd7f000010afa739fd7f000020b1a739fd7f0000e0afa739fd7f000080b0a739fd7f0000" to virtual address "0x473F3070" (part of module "WINDOWS.STORAGE.DLL") "ie_to_edge_stub.exe" wrote bytes "e015fc3bfd7f000090a4fb3bfd7f000030dbfb3bfd7f000010f8ff3bfd7f00006018f53bfd7f0000a0a3053cfd7f00004015fc3bfd7f0000a014fc3bfd7f0000c0cbfb3bfd7f00002062fc3bfd7f000020fefb3bfd7f0000" to virtual address "0x473F4B30" (part of module "WINDOWS.STORAGE.DLL") "ie_to_edge_stub.exe" wrote bytes "202e3d46fd7f0000302e3d46fd7f0000" to virtual address "0x48EC8378" (part of module "COMBASE.DLL") "ie_to_edge_stub.exe" wrote bytes "b0fdea49fd7f00007021ea49fd7f0000" to virtual address "0x473F3E28" (part of module "WINDOWS.STORAGE.DLL") "ie_to_edge_stub.exe" wrote bytes "60eb0749fd7f0000e0bc0749fd7f000090c40749fd7f0000e0bf0749fd7f0000" to virtual address "0x473F3DA8" (part of module "WINDOWS.STORAGE.DLL") "ie_to_edge_stub.exe" wrote bytes "e0bc0749fd7f000090c40749fd7f0000e0bf0749fd7f000060eb0749fd7f0000" to virtual address "0x47B75060" (part of module "SHELL32.DLL") "ie_to_edge_stub.exe" wrote bytes "60b2ea49fd7f0000908bec49fd7f00002078e749fd7f000010acea49fd7f0000f0bcea49fd7f0000108fe749fd7f000020c0ea49fd7f0000a093ea49fd7f0000608fe749fd7f00004094ea49fd7f0000c0c2ea49fd7f0000" to virtual address "0x47B75120" (part of module "SHELL32.DLL") "ie_to_edge_stub.exe" wrote bytes "209be849fd7f0000e0eee749fd7f0000" to virtual address "0x408A0290" (part of module "PROPSYS.DLL") "ie_to_edge_stub.exe" wrote bytes "2086c148fd7f0000" to virtual address "0x408A0150" (part of module "PROPSYS.DLL") "ie_to_edge_stub.exe" wrote bytes "a01cc649fd7f0000601cc649fd7f0000d01bc649fd7f0000" to virtual address "0x48EC8430" (part of module "COMBASE.DLL") "ie_to_edge_stub.exe" wrote bytes "90c40749fd7f0000e0bc0749fd7f0000e0bf0749fd7f0000" to virtual address "0x48EC80F0" (part of module "COMBASE.DLL") "ie_to_edge_stub.exe" wrote bytes "1075e749fd7f0000" to virtual address "0x48BCE558" (part of module "SHLWAPI.DLL") "ie_to_edge_stub.exe" wrote bytes "b013b849fd7f00008014b849fd7f0000" to virtual address "0x48EC81C8" (part of module "COMBASE.DLL") "ie_to_edge_stub.exe" wrote bytes "303ac848fd7f000020ebc948fd7f000020d9c248fd7f0000f036c848fd7f0000704ac848fd7f0000" to virtual address "0x408A0160" (part of module "PROPSYS.DLL") "ie_to_edge_stub.exe" wrote bytes "b0014347fd7f0000" to virtual address "0x490671A8" (part of module "RPCRT4.DLL") "ie_to_edge_stub.exe" wrote bytes "70709b46fd7f000070169c46fd7f0000600e9c46fd7f000080119c46fd7f0000403c9c46fd7f0000c09d9b46fd7f000060359c46fd7f0000809d9b46fd7f0000400e9c46fd7f000060119c46fd7f000080969b46fd7f0000" to virtual address "0x473F3010" (part of module "WINDOWS.STORAGE.DLL") "ie_to_edge_stub.exe" wrote bytes "d01eea49fd7f0000e03cea49fd7f0000703dea49fd7f0000b022ea49fd7f0000" to virtual address "0x47B750D8" (part of module "SHELL32.DLL") "ie_to_edge_stub.exe" wrote bytes "a0ffca48fd7f0000f0e5ca48fd7f0000" to virtual address "0x408A0138" (part of module "PROPSYS.DLL") "ie_to_edge_stub.exe" wrote bytes "d01eea49fd7f0000" to virtual address "0x408A01F8" (part of module "PROPSYS.DLL") "ie_to_edge_stub.exe" wrote bytes "20fe0749fd7f000000fa0749fd7f0000" to virtual address "0x48EC80D8" (part of module "COMBASE.DLL") "ie_to_edge_stub.exe" wrote bytes "4035ea49fd7f00007021ea49fd7f0000b0fdea49fd7f0000" to virtual address "0x47B75100" (part of module "SHELL32.DLL") "ie_to_edge_stub.exe" wrote bytes "d0d2a349fd7f0000708aa349fd7f0000" to virtual address "0x47B75640" (part of module "SHELL32.DLL") "ie_to_edge_stub.exe" wrote bytes "e03cea49fd7f0000d01eea49fd7f0000703dea49fd7f0000" to virtual address "0x473F3E08" (part of module "WINDOWS.STORAGE.DLL")36:T558,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37:T558,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1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"728efd7a98381720e295b8fbb1591a800fbbdca446d9ecdc0d5f66956a453575","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":85,"unified_at_epoch_ms":1790268119798,"unified_at":"2026-09-24T16:41:59.798Z","metadata":{"hashes":{"sha256":"728efd7a98381720e295b8fbb1591a800fbbdca446d9ecdc0d5f66956a453575","sha1":"62dee9efdd9a4c099189d41350f5782295afd0f1","md5":"484c7aa0ba38dc18929bee304ffa4375","sha512":"fd89da6c822d45969b97fa764b377aad2219b1fe1280e9e5729194d5311fa98ae278e6e7cf1c7be89318e142cc525a69552a0c8d1950c13e36ea03e54c93039d","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1694673114000,"last_seen":1694673183000,"last_multi_scan":1694673183000}},"detections":{"summary":{"verdict":"malicious","score":85,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":4},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":24},"sandbox_signatures":{"informative_count":42,"suspicious_count":8,"malicious_count":2,"total":52},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"bforeai":{"name":"BforeAI","success":true,"verdict":"clean","status":"clean","progress":100,"data_source":"BforeAI","permalink":"https://bfore.ai/","extra_fields":[{"name":"percent","value":2}]},"cleandns":{"name":"CleanDNS","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"CleanDNS","permalink":"https://www.cleandns.com/","extra_fields":[{"name":"domain","value":"hybrid-analysis.com"},{"name":"percent","value":0},{"name":"reports_count","value":0}]},"scamadviser":{"name":"ScamAdviser","success":true,"verdict":"clean","status":"clean","progress":100,"data_source":"ScamAdviser","permalink":"https://www.scamadviser.com/?utm_source=hybridanalysis","report_link":"https://www.scamadviser.com/check-website/hybrid-analysis.com?utm_source=hybridanalysis","extra_fields":[{"name":"domain","value":"hybrid-analysis.com"},{"name":"percent","value":0}]},"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Execution","technique":"JavaScript","attack_id":"T1059.007","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/007","identifiers":[{"type":"informative","value":"References JavaScript(s)"}],"sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"suspicious","value":"Found potential IP address in binary/memory"},{"type":"informative","value":"Contacts server"},{"type":"informative","value":"Found potential URL in binary/memory"},{"type":"informative","value":"Contacts domains"}],"sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Command and Control","technique":"DNS","attack_id":"T1071.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/004","identifiers":[{"type":"informative","value":"Queries DNS server"}],"sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Command and Control","technique":"Web Protocols","attack_id":"T1071.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/001","identifiers":[{"type":"informative","value":"Contacts random domain names"},{"type":"suspicious","value":"GETs files from a webserver"},{"type":"informative","value":"Communicates with HTTP webserver (GET/POST requests)"},{"type":"informative","value":"Communicates with HTTPS webserver (GET/POST requests)"}],"sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Command and Control","technique":"Mail Protocols","attack_id":"T1071.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/003","identifiers":[{"type":"informative","value":"Found mail related domain names"}],"sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"informative","value":"Dropped files"},{"type":"informative","value":"Drops files with image extension"}],"sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Execution","technique":"Native API","attack_id":"T1106","attack_id_wiki":"https://attack.mitre.org/techniques/T1106","identifiers":[{"type":"malicious","value":"Calls an API typically used to execute an application"},{"type":"informative","value":"Calls an API typically used to create a process"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Execution","technique":"Shared Modules","attack_id":"T1129","attack_id_wiki":"https://attack.mitre.org/techniques/T1129","identifiers":[{"type":"informative","value":"Loads the RPC (Remote Procedure Call) module DLL"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Persistence","technique":"Component Object Model Hijacking","attack_id":"T1546.015","attack_id_wiki":"https://attack.mitre.org/techniques/T1546/015","identifiers":[{"type":"informative","value":"Overview of unique CLSIDs touched in registry"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Persistence","technique":"Windows Service","attack_id":"T1543.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1543/003","identifiers":[{"type":"informative","value":"Creates or modifies windows services"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Privilege Escalation","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/techniques/T1055","identifiers":[{"type":"malicious","value":"Creates a process in suspended mode (likely for process injection)"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Defense Evasion","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Loads the Bcrypt module DLL"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Defense Evasion","technique":"Modify Registry","attack_id":"T1112","attack_id_wiki":"https://attack.mitre.org/techniques/T1112","identifiers":[{"type":"suspicious","value":"Modifies proxy settings"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Defense Evasion","technique":"Deobfuscate/Decode Files or Information","attack_id":"T1140","attack_id_wiki":"https://attack.mitre.org/techniques/T1140","identifiers":[{"type":"suspicious","value":"Contains escaped byte string (often part of obfuscated shellcode)"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Credential Access","technique":"Credential API Hooking","attack_id":"T1056.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1056/004","identifiers":[{"type":"suspicious","value":"Installs hooks/patches the running process"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/techniques/T1083","identifiers":[{"type":"informative","value":"Drops a license file"},{"type":"suspicious","value":"Reads configuration files (.ini files)"},{"type":"informative","value":"Tries to access non-existent files (executable)"},{"type":"informative","value":"Touches files in the Windows directory"},{"type":"informative","value":"Tries to access non-existent files (non-executable)"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Discovery","technique":"System Information Discovery","attack_id":"T1082","attack_id_wiki":"https://attack.mitre.org/techniques/T1082","identifiers":[{"type":"informative","value":"Calls an API typically used to get system version information"},{"type":"informative","value":"Contains ability to read software policies"},{"type":"informative","value":"Reads information about supported languages"},{"type":"informative","value":"Reads the active computer name"},{"type":"informative","value":"Calls an API typically used to retrieve OS information"},{"type":"informative","value":"Calls an API typically used to get product type"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Discovery","technique":"Application Window Discovery","attack_id":"T1010","attack_id_wiki":"https://attack.mitre.org/techniques/T1010","identifiers":[{"type":"informative","value":"Calls an API possibly used to retrieve a handle to the foreground window"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Discovery","technique":"Process Discovery","attack_id":"T1057","attack_id_wiki":"https://attack.mitre.org/techniques/T1057","identifiers":[{"type":"informative","value":"Process launched with changed environment"},{"type":"informative","value":"Calls an API typically used for taking snapshot of the specified processes"},{"type":"informative","value":"Spawns new processes"},{"type":"informative","value":"Spawns new processes that are not known child processes"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/techniques/T1012","identifiers":[{"type":"suspicious","value":"Queries sensitive IE security settings"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Discovery","technique":"Software Discovery","attack_id":"T1518","attack_id_wiki":"https://attack.mitre.org/techniques/T1518","identifiers":[{"type":"informative","value":"Reads the registry for installed applications"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Discovery","technique":"System Owner/User Discovery","attack_id":"T1033","attack_id_wiki":"https://attack.mitre.org/techniques/T1033","identifiers":[{"type":"informative","value":"Calls an API typically used to retrieve user name"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Discovery","technique":"Security Software Discovery","attack_id":"T1518.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1518/001","identifiers":[{"type":"informative","value":"Possibly checks for the presence of an Antivirus engine"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"tactic":"Collection","technique":"Data from Local System","attack_id":"T1005","attack_id_wiki":"https://attack.mitre.org/techniques/T1005","identifiers":[{"type":"suspicious","value":"Queries the display settings of system associated file extensions"},{"type":"informative","value":"Queries list of installed browsers"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]}],"sandbox_signatures":[{"level":"informative","category":"External Systems","name":"Sample was identified as clean by Antivirus engines","description":"0/90 Antivirus vendors marked sample as malicious (0% detection rate)","origin":"External System","relevance":10,"id":"avtest-1","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"104.18.34.183:443\"\n \"104.18.130.236:443\"\n \"142.251.214.132:443\"\n \"23.62.46.19:443\"\n \"172.64.155.119:443\"","origin":"Network Traffic","mitre_attack_id":"T1071","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"$27","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"logo_1_.svg\" as clean (type is \"SVG Scalable Vector Graphics image\")\n Antivirus vendors marked dropped file \"privacy-options_1_.svg\" as clean (type is \"SVG Scalable Vector Graphics image\")\n Antivirus vendors marked dropped file \"clippy_1_.svg\" as clean (type is \"SVG Scalable Vector Graphics image\")\n Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"$28","origin":"File/Memory","relevance":2,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Possibly uses system binaries (Windows LOLbins)","description":"Observed system executable string:\""ntvdm.exe" allocated memory in "%WINDIR%\\system32\\ntvdm.exe" with (Protection: "read/write")\" [Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3]\n Observed system executable string:\""ntvdm.exe" trying to access non-existent file "%WINDIR%\\system32\\api-ms-win-core-fibers-l1-1-1.DLL"
"ntvdm.exe" trying to access non-existent file "C:\\Windows\\system32\\api-ms-win-core-localization-l1-2-1.DLL"
"ntvdm.exe" trying to access non-existent file "C:\\Windows\\System32\\API-MS-WIN-CORE-FIBERS-L1-1-1.DLL"
"ntvdm.exe" trying to access non-existent file "C:\\Windows\\System32\\API-MS-WIN-CORE-LOCALIZATION-L1-2-1.DLL"\" [Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3]","origin":"File/Memory","relevance":1,"id":"string-170","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Queries DNS server","description":"\"cdn.cookielaw.org\"\n \"geolocation.onetrust.com\"\n \"www.google.com\"\n \"www.hybrid-analysis.com\"","origin":"Network Traffic","mitre_attack_id":"T1071.004","relevance":1,"id":"network-51","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"References JavaScript(s)","description":"$29","origin":"File/Memory","mitre_attack_id":"T1059.007","relevance":1,"id":"string-626","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$2a","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Network Related","name":"Communicates with HTTPS webserver (GET/POST requests)","description":"$2b","origin":"File/Memory","mitre_attack_id":"T1071.001","relevance":1,"id":"string-505","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"level":"informative","category":"Network Related","name":"Found mail related domain names","description":"$2c","origin":"File/Memory","mitre_attack_id":"T1071.003","relevance":1,"id":"string-169","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$2d","origin":"File/Memory","mitre_attack_id":"T1071","relevance":3,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Unusual Characteristics","name":"Detected known bank URL artifact","description":"\""ws*//*lepubs.com^$" (Source: daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789.bin, Indicator: "ubs.com")\" (Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3, Indicator: \"ubs.com\")\n \"ws*//*lepubs.com^$\" (Source: urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3, Indicator: \"ubs.com\")","origin":"File/Memory","relevance":2,"id":"string-23","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops files with image extension","description":"\"sprite_1_.png\" has type \"PNG image data 39 x 1522 8-bit/color RGBA non-interlaced\" and extension \"png\"\n \"icon_dummy_1_.png\" has type \"PNG image data 32 x 32 8-bit/color RGBA non-interlaced\" and extension \"png\"\n \"lastnode_1_.png\" has type \"PNG image data 8 x 20 1-bit colormap non-interlaced\" and extension \"png\"\n \"vline_1_.png\" has type \"PNG image data 1 x 10 1-bit colormap non-interlaced\" and extension \"png\"","origin":"Binary File","mitre_attack_id":"T1105","id":"binary-56","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"level":"suspicious","category":"Network Related","name":"Found potential IP address in binary/memory","description":"$2e","origin":"File/Memory","mitre_attack_id":"T1071","relevance":3,"id":"string-14","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"External Systems","name":"Detected Suricata Alert","description":"Detected alert \"ET INFO Windows OS Submitting USB Metadata to Microsoft\" (SID: 2025275, Rev: 4, Severity: 3) categorized as \"Misc activity\"\n Detected alert \"ET USER_AGENTS Microsoft Device Metadata Retrieval Client User-Agent\" (SID: 2027390, Rev: 4, Severity: 3) categorized as \"Misc activity\"","origin":"Suricata Alerts","relevance":10,"id":"suricata-0","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Network Related","name":"Contacts random domain names","description":"\"c.clarity.ms\" seems to be random\n \"s.yimg.jp\" seems to be random","origin":"Network Traffic","mitre_attack_id":"T1071.001","relevance":5,"id":"network-6","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Environment Awareness","name":"Calls an API possibly used to retrieve a handle to the foreground window","description":"\"ie_to_edge_stub.exe\" called \"GetForegroundWindow\" (UID: 00000000-00001068)\n \"rundll32.exe\" called \"GetForegroundWindow\" (UID: 00000000-00005936)","origin":"API Call","mitre_attack_id":"T1010","relevance":3,"id":"api-142","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Environment Awareness","name":"Calls an API typically used to get product type","description":"\"ie_to_edge_stub.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00001068)\n \"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00005936)","origin":"API Call","mitre_attack_id":"T1082","relevance":3,"id":"api-124","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Environment Awareness","name":"Calls an API typically used to get system version information","description":"$2f","origin":"API Call","mitre_attack_id":"T1082","relevance":3,"id":"api-125","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Environment Awareness","name":"Calls an API typically used to retrieve OS information","description":"\"rundll32.exe\" called \"GetVersionExA\" (UID: 00000000-00005936)","origin":"API Call","mitre_attack_id":"T1082","relevance":2,"id":"api-222","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to read software policies","description":"\"ie_to_edge_stub.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\")\n \"ie_to_edge_stub.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"AUTHENTICODEENABLED\")\n \"rundll32.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\")\n \"rundll32.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"AUTHENTICODEENABLED\")","origin":"Registry Access","mitre_attack_id":"T1082","relevance":1,"id":"registry-78","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Environment Awareness","name":"Queries list of installed browsers","description":"$30","origin":"Registry Access","mitre_attack_id":"T1005","relevance":1,"id":"registry-137","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Environment Awareness","name":"Reads the active computer name","description":"\"ie_to_edge_stub.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","origin":"Registry Access","mitre_attack_id":"T1082","relevance":5,"id":"registry-35","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Environment Awareness","name":"Reads the registry for installed applications","description":"\"ie_to_edge_stub.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\MSEDGE.EXE\")\n \"ie_to_edge_stub.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\MSEDGE.EXE\"; Key: \"APPENDPATH\")\n \"ie_to_edge_stub.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\MSEDGE.EXE\"; Key: \"PATH\")\n \"rundll32.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\MSEDGE.EXE\")\n \"rundll32.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\MSEDGE.EXE\"; Key: \"USESHORTNAME\")\n \"rundll32.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\MSEDGE.EXE\\SUPPORTEDPROTOCOLS\")\n \"rundll32.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\MSEDGE.EXE\"; Key: \"APPENDPATH\")\n \"rundll32.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\MSEDGE.EXE\"; Key: \"PATH\")","origin":"Registry Access","mitre_attack_id":"T1518","relevance":10,"id":"registry-55","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Calls an API typically used to create a process","description":"\"ie_to_edge_stub.exe\" called \"CreateProcessW\" with parameter \"\"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --from-ie-to-edge=3 --ie-frame-hwnd=b0036\" - (UID: 00000000-00001068)\n \"rundll32.exe\" called \"CreateProcessW\" with parameter \"\"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --single-argument https://www.hybrid-analysis.com/sample/daa8547f1d\" - (UID: 00000000-00005936)","origin":"API Call","mitre_attack_id":"T1106","relevance":5,"id":"api-128","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Contacts domains","description":"\"www.google.com\"","origin":"Network Traffic","mitre_attack_id":"T1071","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Loads the Bcrypt module DLL","description":"\"ie_to_edge_stub.exe\" loaded module \"%WINDIR%\\System32\\bcryptprimitives.dll\" at 47420000\n \"ie_to_edge_stub.exe\" loaded module \"%WINDIR%\\System32\\bcrypt.dll\" at 45E40000\n \"rundll32.exe\" loaded module \"%WINDIR%\\System32\\bcryptprimitives.dll\" at 47420000\n \"rundll32.exe\" loaded module \"%WINDIR%\\System32\\bcrypt.dll\" at 45E40000","origin":"Loaded Module","mitre_attack_id":"T1027","id":"module-9","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Loads the RPC (Remote Procedure Call) module DLL","description":"\"ie_to_edge_stub.exe\" loaded module \"%WINDIR%\\System32\\rpcrt4.dll\" at 48F50000\n \"rundll32.exe\" loaded module \"%WINDIR%\\System32\\rpcrt4.dll\" at 48F50000","origin":"Loaded Module","mitre_attack_id":"T1129","id":"module-10","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Overview of unique CLSIDs touched in registry","description":"$31","origin":"Registry Access","mitre_attack_id":"T1546.015","relevance":3,"id":"registry-72","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Possibly checks for the presence of an Antivirus engine","description":"\"\"superantispyware.recurly.com\",\" (Indicator: \"superantispyware\") in Source: wallet-checkout-eligible-sites.json\n \"\"totaldefense.com\",\" (Indicator: \"totaldefense\") in Source: wallet-checkout-eligible-sites.json","origin":"File/Memory","mitre_attack_id":"T1518.001","relevance":2,"id":"string-8","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"ie_to_edge_stub.exe\" (UID: 00000000-00001068) was launched with new environment variables: \"PROCESSOR_ARCHITEW6432=\"AMD64\"\"\n Process \"ie_to_edge_stub.exe\" (UID: 00000000-00001068) was launched with modified environment variables: \"PROCESSOR_ARCHITECTURE, CommonProgramFiles, ProgramFiles\"\n Process \"rundll32.exe\" (UID: 00000000-00005936) was launched with new environment variables: \"PROCESSOR_ARCHITEW6432=\"AMD64\"\"\n Process \"rundll32.exe\" (UID: 00000000-00005936) was launched with modified environment variables: \"PROCESSOR_ARCHITECTURE, ProgramFiles, CommonProgramFiles, Path\"\n Process \"rundll32.exe\" (UID: 00000000-00005936) was launched with missing environment variables: \"PATH, CHROME_RESTART, EDGE_METRICS_SESSION_ID, EDGE_USER_DATA_DIR, CHROME_CRASHPAD_PIPE_NAME, FPS_BROWSER_USER_PROFILE_STRING, EDGE_BROWSER_PID, FPS_BROWSER_APP_PROFILE_STRING, EDGE_VARIATIONS_SEED_ETAG, EDGE_METRICS_CLIENT_ID_HASH\"","origin":"Monitored Target","mitre_attack_id":"T1057","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Reads information about supported languages","description":"\"ie_to_edge_stub.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EN-US\")\n \"ie_to_edge_stub.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\EXTENDEDLOCALE\"; Key: \"EN-US\")\n \"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EN-US\")\n \"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\EXTENDEDLOCALE\"; Key: \"EN-US\")","origin":"Registry Access","mitre_attack_id":"T1082","relevance":3,"id":"registry-25","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"ie_to_edge_stub.exe\" with commandline \"--from-ie-to-edge=3 --ie-frame-hwnd=b0036\" (UID: 00000000-00001068)\n Spawned process \"rundll32.exe\" with commandline \"\"%WINDIR%\\\\system32\\\\ieframe.dll\",OpenURL C:\\\\sample.url\" (UID: 00000000-00005936)","origin":"Monitored Target","mitre_attack_id":"T1057","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"General","name":"Spawns new processes that are not known child processes","description":"Spawned process \"ie_to_edge_stub.exe\" with commandline \"--from-ie-to-edge=3 --ie-frame-hwnd=b0036\" (UID: 00000000-00001068)\n Spawned process \"rundll32.exe\" with commandline \"\"%WINDIR%\\\\system32\\\\ieframe.dll\",OpenURL C:\\\\sample.url\" (UID: 00000000-00005936)","origin":"Monitored Target","mitre_attack_id":"T1057","relevance":3,"id":"target-103","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Installation/Persistence","name":"Drops a license file","description":"\"vendor.bundle.js.LICENSE.txt\" has type \"ASCII text\"- [targetUID: N/A]","origin":"Binary File","mitre_attack_id":"T1083","relevance":1,"id":"binary-50","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Installation/Persistence","name":"Touches files in the Windows directory","description":"\"ie_to_edge_stub.exe\" touched file \"\\Device\\HarddiskVolume2\\Users\\%OSUSER%\\AppData\\Local\\Microsoft\\Windows\\Caches\"\n \"ie_to_edge_stub.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\"\n \"rundll32.exe\" touched file \"\\Device\\HarddiskVolume2\\Users\\%OSUSER%\\AppData\\Local\\Microsoft\\Windows\\INetCache\"\n \"rundll32.exe\" touched file \"\\Device\\HarddiskVolume2\\Users\\%OSUSER%\\AppData\\Local\\Microsoft\\Windows\\INetCookies\"\n \"rundll32.exe\" touched file \"\\Device\\HarddiskVolume2\\Users\\%OSUSER%\\AppData\\Local\\Microsoft\\Windows\\History\"\n \"rundll32.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\INetCache\"\n \"rundll32.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\INetCookies\"\n \"rundll32.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\History\"","origin":"API Call","mitre_attack_id":"T1083","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Installation/Persistence","name":"Tries to access non-existent files (executable)","description":"$32","origin":"API Call","mitre_attack_id":"T1083","relevance":3,"id":"api-126","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Installation/Persistence","name":"Tries to access non-existent files (non-executable)","description":"\"ie_to_edge_stub.exe\" trying to access non-existent file \"\\Device\\HarddiskVolume2\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe:ZONE.IDENTIFIER\"\n \"rundll32.exe\" trying to access non-existent file \"\\Device\\HarddiskVolume2\\Windows\\System32\\IEFRAME.DLL.MANIFEST\"\n \"rundll32.exe\" trying to access non-existent file \"\\Device\\HarddiskVolume2\\Windows\\System32\\RUNDLL32.EXE.LOCAL\"","origin":"API Call","mitre_attack_id":"T1083","relevance":3,"id":"api-161","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Network Related","name":"Communicates with HTTP webserver (GET/POST requests)","description":"Found http requests in header \"GET /\"","origin":"Network Traffic","mitre_attack_id":"T1071.001","relevance":1,"id":"network-62","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Calls an API typically used for taking snapshot of the specified processes","description":"\"ie_to_edge_stub.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"4\"\n \"th32ProcessID\": \"0\"}\n \"rundll32.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"4\"\n \"th32ProcessID\": \"0\"}","origin":"API Call","mitre_attack_id":"T1057","relevance":3,"id":"api-103","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Calls an API typically used to retrieve user name","description":"\"rundll32.exe\" called \"GetUserNameExW\" with parameters {\"NameFormat\": \"65538\"}\n \"rundll32.exe\" called \"GetUserNameExW\" with parameters {\"NameFormat\": \"2\"}","origin":"API Call","mitre_attack_id":"T1033","relevance":2,"id":"api-135","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"informative","category":"System Security","name":"Creates or modifies windows services","description":"\"ie_to_edge_stub.exe\" (Access type: \"SETVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\BAM\\USERSETTINGS\\S-1-5-21-735145574-3570218355-1207367261-1001\"; Key: \"\\DEVICE\\HARDDISKVOLUME2\\PROGRAM FILES (X86)\\MICROSOFT\\EDGE\\APPLICATION\\MSEDGE.EXE\"; Value: \"9B55B8AED5E6D90100000000000000000000000002000000\"), \"rundll32.exe\" (Access type: \"SETVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\BAM\\USERSETTINGS\\S-1-5-21-735145574-3570218355-1207367261-1001\"; Key: \"\\DEVICE\\HARDDISKVOLUME2\\PROGRAM FILES (X86)\\MICROSOFT\\EDGE\\APPLICATION\\MSEDGE.EXE\"; Value: \"51F8F0B4D5E6D90100000000000000000000000002000000\")","origin":"Registry Access","mitre_attack_id":"T1543.003","relevance":10,"id":"registry-67","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"suspicious","category":"Exploit/Shellcode","name":"Contains escaped byte string (often part of obfuscated shellcode)","description":"$33","origin":"File/Memory","mitre_attack_id":"T1140","relevance":10,"id":"string-15","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"suspicious","category":"General","name":"GETs files from a webserver","description":"$34","origin":"Network Traffic","mitre_attack_id":"T1071.001","relevance":10,"id":"network-61","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"suspicious","category":"General","name":"Reads configuration files (.ini files)","description":"\"ie_to_edge_stub.exe\" reads file \"C:\\Users\\%OSUSER%\\Desktop\\desktop.ini\"\n \"ie_to_edge_stub.exe\" reads file \"C:\\Users\\%OSUSER%\\Documents\\desktop.ini\"\n \"ie_to_edge_stub.exe\" reads file \"C:\\Users\\%OSUSER%\\Music\\desktop.ini\"\n \"ie_to_edge_stub.exe\" reads file \"C:\\Users\\%OSUSER%\\Pictures\\desktop.ini\"\n \"ie_to_edge_stub.exe\" reads file \"C:\\Users\\%OSUSER%\\Videos\\desktop.ini\"\n \"ie_to_edge_stub.exe\" reads file \"C:\\Users\\%OSUSER%\\Downloads\\desktop.ini\"\n \"ie_to_edge_stub.exe\" reads file \"C:\\Users\\%OSUSER%\\OneDrive\\desktop.ini\"","origin":"API Call","mitre_attack_id":"T1083","relevance":4,"id":"api-6","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"suspicious","category":"System Security","name":"Modifies proxy settings","description":"\"ie_to_edge_stub.exe\" (Access type: \"SETVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\"; Value: \"01000000\")","origin":"Registry Access","mitre_attack_id":"T1112","relevance":10,"id":"registry-27","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"suspicious","category":"System Security","name":"Queries sensitive IE security settings","description":"\"ie_to_edge_stub.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":8,"id":"registry-36","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"suspicious","category":"System Security","name":"Queries the display settings of system associated file extensions","description":"\"ie_to_edge_stub.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\CLASSES\\SYSTEMFILEASSOCIATIONS\\.EXE\"; Key: \"ALWAYSSHOWEXT\")\n \"ie_to_edge_stub.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\CLASSES\\SYSTEMFILEASSOCIATIONS\\.EXE\"; Key: \"NEVERSHOWEXT\")","origin":"Registry Access","mitre_attack_id":"T1005","relevance":7,"id":"registry-47","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Installs hooks/patches the running process","description":"$35","origin":"Hook Detection","mitre_attack_id":"T1056.004","relevance":10,"id":"hooks-8","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"malicious","category":"Anti-Detection/Stealthyness","name":"Creates a process in suspended mode (likely for process injection)","description":"\"ie_to_edge_stub.exe\" called \"CreateProcessW\" with parameter \"\"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --from-ie-to-edge=3 --ie-frame-hwnd=b0036\" - (UID: 00000000-00001068)\n \"rundll32.exe\" called \"CreateProcessW\" with parameter \"\"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --single-argument https://www.hybrid-analysis.com/sample/daa8547f1d\" - (UID: 00000000-00005936)","origin":"API Call","mitre_attack_id":"T1055","relevance":10,"id":"api-129","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"level":"malicious","category":"General","name":"Calls an API typically used to execute an application","description":"\"ie_to_edge_stub.exe\" called \"ShellExecuteW\" with parameter %PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe (UID: 00000000-00001068)","origin":"API Call","mitre_attack_id":"T1106","relevance":10,"id":"api-117","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 4 domains and 4 hosts"}],"sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"Persistence","details_count":1,"details":[{"detail":"Installs hooks/patches the running process"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"Fingerprint","details_count":2,"details":[{"detail":"Queries sensitive IE security settings"},{"detail":"Queries the display settings of system associated file extensions"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"Exploit","details_count":1,"details":[{"detail":"Contains escaped byte string (often part of obfuscated shellcode)"}],"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]}]},"activity":{"stats":{"process_count":43,"spawned_processes_count":43,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":60,"imported_dlls_count":245,"dropped_files_count":0,"extracted_files_count":148,"files_written_count":206,"files_deleted_count":0,"registry_keys_created_count":57,"registry_keys_modified_count":0,"registry_keys_deleted_count":3,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":60,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":81,"dns_resolutions_count":56,"contacted_urls_count":1,"http_requests_count":1},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","Decrypted SSL traffic","Multi-Process"],"sandbox_reports":[{"id":"6502a91f1d2787d79907c8b2","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"728efd7a98381720e295b8fbb1591a800fbbdca446d9ecdc0d5f66956a453575.url","analysis_start_time":"2023-09-14T06:33:03+00:00","indicators_count":{"informative":14,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files","Decrypted SSL traffic"],"is_in_unified_schema":true},{"id":"6502a900f7050c62100cb6d4","environment_id":160,"environment_description":"Windows 10 64 bit","state":"SUCCESS","verdict":"malicious","threat_score":85,"contacted_countries":["JPN","SWE","USA"],"submit_name":"728efd7a98381720e295b8fbb1591a800fbbdca446d9ecdc0d5f66956a453575.url","analysis_start_time":"2023-09-14T06:32:33+00:00","indicators_count":{"informative":39,"suspicious":8,"malicious":2},"tags":["Multi-Process","Network Traffic","Extracted Files"],"is_in_unified_schema":true},{"id":"6502a8eac2b4a01aa502c922","environment_id":120,"environment_description":"Windows 7 64 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"728efd7a98381720e295b8fbb1591a800fbbdca446d9ecdc0d5f66956a453575.url","analysis_start_time":"2023-09-14T06:32:10+00:00","indicators_count":{"informative":15,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files","Decrypted SSL traffic"],"is_in_unified_schema":true},{"id":"6502a8d92aa77590b1044a13","environment_id":160,"environment_description":"Windows 10 64 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["JPN","USA"],"submit_name":"728efd7a98381720e295b8fbb1591a800fbbdca446d9ecdc0d5f66956a453575.url","analysis_start_time":"2023-09-14T06:31:54+00:00","indicators_count":{"informative":12,"suspicious":1,"malicious":0},"tags":["Network Traffic","Extracted Files"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"104.18.34.183","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"104.18.130.236","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"142.251.214.132","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"address":"23.62.46.19","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"address":"172.64.155.119","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"172.64.153.73","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"23.62.46.15","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"address":"138.91.254.96","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"23.62.46.21","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"104.18.131.236","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"142.250.189.228","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"142.251.46.227","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"104.18.153.9","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"172.64.103.11","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"157.240.22.25","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"142.250.191.78","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"18.155.192.81","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"52.239.234.68","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"104.17.72.206","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"104.254.148.252","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"104.18.32.137","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"13.56.122.26","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"152.199.2.76","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"182.22.31.124","port":443,"protocol":"TCP","country":"Japan","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"3.20.155.0","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"104.18.36.196","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"157.240.22.35","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"63.140.36.139","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"63.140.36.138","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"34.111.208.231","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"151.101.1.140","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"18.155.202.28","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"52.5.252.169","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"192.28.144.124","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"172.217.164.102","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"20.125.62.241","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"50.16.211.97","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"104.16.137.15","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"13.227.74.64","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"172.217.12.98","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"20.114.189.70","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"199.15.214.165","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"18.173.121.36","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"34.225.124.94","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"52.1.135.115","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"52.204.28.0","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"18.155.202.104","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"18.238.192.89","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"54.147.21.139","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"157.240.11.35","port":443,"protocol":"UDP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"54.161.48.56","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"52.0.218.127","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"151.101.26.208","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"34.193.185.175","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"address":"142.250.189.228","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"23.62.46.5","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"142.251.32.35","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"104.18.154.9","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"172.64.102.11","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"142.251.46.174","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"18.155.192.26","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"104.17.73.206","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"104.254.151.69","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"23.62.46.7","port":443,"protocol":"UDP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"63.140.36.14","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"18.173.121.6","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"18.215.205.175","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"34.193.113.164","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"54.197.120.195","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"54.85.240.191","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"146.75.94.208","port":443,"protocol":"TCP","country":"Sweden","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"172.64.151.60","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"182.22.25.124","port":443,"protocol":"TCP","country":"Japan","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"18.155.202.79","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"3.210.75.67","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"3.227.190.204","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"18.155.202.119","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"44.205.84.240","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"18.238.192.114","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"23.62.46.14","port":443,"protocol":"UDP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"address":"23.62.46.20","port":443,"protocol":"UDP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]}],"dns_resolutions":[{"domain":"cdn.cookielaw.org","address":"104.18.130.236","ttl":300,"country":"United States","registrar_name":"ENOM, INC.","registrar_organization":"WhoisGuard, Inc.","registrar_name_servers":"NS-UK.1AND1-DNS.CO.UK","registrar_creation_date":"2011-06-20T12:47:48+00:00","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"geolocation.onetrust.com","address":"172.64.155.119","ttl":276,"country":"United States","registrar_name":"NAMECHEAP INC","registrar_organization":"WhoisGuard, Inc.","registrar_name_servers":"BOB.NS.CLOUDFLARE.COM","registrar_creation_date":"2004-01-12T19:08:04+00:00","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"www.google.com","address":"142.251.214.132","ttl":87,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_name_servers":"NS1.GOOGLE.COM","registrar_creation_date":"1997-09-15T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"www.hybrid-analysis.com","address":"104.18.34.183","ttl":300,"country":"United States","registrar_name":"united domains AG","registrar_name_servers":"DILBERT.NS.CLOUDFLARE.COM","registrar_creation_date":"2014-08-07T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"www.bing.com","address":"23.62.46.15","ttl":14742,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Microsoft Corporation","registrar_name_servers":"NS1.MSEDGE.NET","registrar_creation_date":"1996-01-29T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"113673-23.chat.api.drift.com","address":"54.161.48.56","ttl":5,"country":"United States","registrar_name":"1API GmbH","registrar_organization":"Registrant of drift.com","registrar_name_servers":"NS-1271.AWSDNS-30.ORG","registrar_creation_date":"1995-04-15T04:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"12037336.fls.doubleclick.net","address":"172.217.164.102","ttl":300,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_name_servers":"NS1.GOOGLE.COM","registrar_creation_date":"1996-01-16T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"281-obq-266.mktoresp.com","address":"192.28.144.124","ttl":300,"country":"United States","registrar_name":"NETWORK SOLUTIONS, LLC.","registrar_organization":"Marketo, Inc","registrar_name_servers":"NS1.MARKETO.COM","registrar_creation_date":"2008-10-31T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"adobedc.demdex.net","address":"63.140.36.138","ttl":734,"country":"United States","registrar_name":"NOM-IQ Ltd dba Com Laude","registrar_organization":"Adobe Systems Incorporated","registrar_name_servers":"UDNS1.ULTRADNS.NET","registrar_creation_date":"2008-08-12T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"adservice.google.com","address":"172.217.12.98","ttl":300,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_name_servers":"NS1.GOOGLE.COM","registrar_creation_date":"1997-09-15T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"alb.reddit.com","address":"151.101.1.140","ttl":2002,"country":"United States","registrar_name":"GANDI SAS","registrar_organization":"Reddit Inc","registrar_name_servers":"NS-1029.AWSDNS-00.ORG","registrar_creation_date":"2005-04-29T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"api.edgeoffer.microsoft.com","address":"138.91.254.96","ttl":773,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Microsoft Corporation","registrar_name_servers":"NS1.MSFT.NET","registrar_creation_date":"1991-05-02T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"appds8093.blob.core.windows.net","address":"52.239.234.68","ttl":60,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Microsoft Corporation","registrar_name_servers":"NS1.MSFT.NET","registrar_creation_date":"1995-08-10T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"bootstrap.api.drift.com","address":"54.147.21.139","ttl":43,"country":"United States","registrar_name":"1API GmbH","registrar_organization":"Registrant of drift.com","registrar_name_servers":"NS-1271.AWSDNS-30.ORG","registrar_creation_date":"1995-04-15T04:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"c.clarity.ms","address":"20.125.62.241","ttl":2073,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"c.contentsquare.net","address":"34.225.124.94","ttl":60,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"cdn.addsearch.com","address":"18.155.192.81","ttl":300,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"cdn.bizible.com","address":"152.199.2.76","ttl":558,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"cdn.bizibly.com","address":"152.199.2.76","ttl":141,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"collector-20290.tvsquared.com","address":"3.20.155.0","ttl":300,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"connect.facebook.net","address":"157.240.22.25","ttl":3325,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"conversation.api.drift.com","address":"54.147.21.139","ttl":64,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"ct.capterra.com","address":"52.5.252.169","ttl":53,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"customer.api.drift.com","address":"54.147.21.139","ttl":5,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"driftt.imgix.net","address":"151.101.26.208","ttl":20985,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"edge.adobedc.net","address":"63.140.36.138","ttl":250,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"epsilon.6sense.com","address":"13.56.122.26","ttl":60,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"event.api.drift.com","address":"54.147.21.139","ttl":53,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"ext.chtbl.com","address":"18.155.202.104","ttl":300,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"flow.api.drift.com","address":"54.147.21.139","ttl":81,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"go.crowdstrike.com","address":"104.17.72.206","ttl":300,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"ibc-flow.techtarget.com","address":"34.111.208.231","ttl":1418,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"js.driftt.com","address":"13.227.74.64","ttl":111,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"k-aus1.contentsquare.net","address":"52.204.28.0","ttl":60,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"domain":"metrics.api.drift.com","address":"54.147.21.139","ttl":74,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"ob.segreencolumn.com","address":"18.155.202.28","ttl":60,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"obs.segreencolumn.com","address":"50.16.211.97","ttl":37,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"presence.api.drift.com","address":"52.0.218.127","ttl":5,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"privacyportal-cdn.onetrust.com","address":"104.18.32.137","ttl":300,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"privacyportal.onetrust.com","address":"104.18.32.137","ttl":300,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"q-aus1.contentsquare.net","address":"52.1.135.115","ttl":60,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"domain":"s.yimg.jp","address":"182.22.31.124","ttl":374,"country":"Japan","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"secure.adnxs.com","address":"104.254.148.252","ttl":11848,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"sjrtp1.marketo.com","address":"199.15.214.165","ttl":351,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"t.clarity.ms","address":"20.114.189.70","ttl":3324,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"t.contentsquare.net","address":"18.173.121.36","ttl":60,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"targeting.api.drift.com","address":"54.147.21.139","ttl":70,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"trk.techtarget.com","address":"104.18.36.196","ttl":8989,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"use.fontawesome.com","address":"172.64.103.11","ttl":3499,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"web.chtbl.com","address":"18.238.192.89","ttl":300,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"ws.zoominfo.com","address":"104.16.137.15","ttl":300,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"www.crowdstrike.com","address":"104.18.153.9","ttl":300,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"www.facebook.com","address":"157.240.22.35","ttl":1709,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"www.gstatic.com","address":"142.251.46.227","ttl":47,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"www.redditstatic.com","address":"151.101.1.140","ttl":92,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"domain":"www.youtube.com","address":"142.250.191.78","ttl":206,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]}],"http_requests":[{"host":"www.google.com","host_ip":"142.250.189.228:80","url":"/","method":"GET","response_code":"302","response_phrase":"Found","header":"GET / HTTP/1.1\nAccept: text/html, application/xhtml+xml, image/jxr, */*\nAccept-Language: en-US\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko\nAccept-Encoding: gzip, deflate\nHost: www.google.com\nConnection: Keep-Alive","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}],"processes":[{"pid":5816,"ppid":0,"name":"IEXPLORE.EXE","command_line":"-Embedding","sha256":"8dea16e513f70e1a98be6ec48439b5499d2c740247716f6bcb990b7c305ec0a0","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\IEXPLORE.EXE","uid":"00000000-00005816","icon":"$36"},{"pid":664,"ppid":5816,"name":"IEXPLORE.EXE","command_line":"SCODEF:5816 CREDAT:17410 /prefetch:2","sha256":"6eda2f58189675e23011e5a39fcbfdd4aa8846feb99c5e347bbd3071f30bd5ed","normalized_path":"%PROGRAMFILES%\\(x86)\\Internet Explorer\\IEXPLORE.EXE","parent_uid":"00000000-00005816","uid":"00000000-00000664"},{"pid":1068,"ppid":664,"name":"ie_to_edge_stub.exe","command_line":"--from-ie-to-edge=3 --ie-frame-hwnd=b0036","sha256":"8cf1124b4df2d2719f62c52fa108ae3b34ea17efa5b563807789a34f6a4fe1c6","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\107.0.1418.56\\BHO\\ie_to_edge_stub.exe","parent_uid":"00000000-00000664","uid":"00000000-00001068"},{"pid":2836,"ppid":1068,"name":"msedge.exe","command_line":"--from-ie-to-edge=3 --ie-frame-hwnd=b0036","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00001068","uid":"00000000-00002836"},{"pid":3168,"ppid":2836,"name":"msedge.exe","command_line":"--type=crashpad-handler \"--user-data-dir=%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad\" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=107.0.5304.110 \"--annotation=exe=%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --annotation=plat=Win64 \"--annotation=prod=Microsoft Edge\" --annotation=ver=107.0.1418.56 --initial-client-data=0xc8,0xcc,0xd0,0xa4,0x170,0x7ffd3600b208,0x7ffd3600b218,0x7ffd3600b228","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00003168"},{"pid":6876,"ppid":2836,"name":"msedge.exe","command_line":"--type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1824 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:2","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00006876"},{"pid":7080,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1912 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:3","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00007080"},{"pid":4256,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2196 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00004256"},{"pid":6472,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2472 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00006472"},{"pid":644,"ppid":2836,"name":"msedge.exe","command_line":"--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --time-ticks-at-unix-epoch=-1694672254085701 --launch-time-ticks=1098799381 --mojo-platform-channel-handle=4408 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:1","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00000644"},{"pid":5036,"ppid":2836,"name":"msedge.exe","command_line":"--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --time-ticks-at-unix-epoch=-1694672254085701 --launch-time-ticks=1099464187 --mojo-platform-channel-handle=4416 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:1","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00005036"},{"pid":4928,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4964 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00004928"},{"pid":2668,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --mojo-platform-channel-handle=3464 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00002668"},{"pid":6244,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=entity_extraction_service.mojom.PageScreenshotProcessor --lang=en-US --service-sandbox-type=entity_extraction --mojo-platform-channel-handle=5264 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00006244"},{"pid":1312,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=5472 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00001312"},{"pid":4612,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=5524 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00004612"},{"pid":2608,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5668 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00002608"},{"pid":6192,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1096 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00006192"},{"pid":2424,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5488 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00002424"},{"pid":3224,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5032 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00003224"},{"pid":6476,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6056 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00006476"},{"pid":6008,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6068 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00006008"},{"pid":4636,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5376 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00004636"},{"pid":4788,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5056 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00004788"},{"pid":4708,"ppid":2836,"name":"msedge.exe","command_line":"--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --time-ticks-at-unix-epoch=-1694672254085701 --launch-time-ticks=1202538603 --mojo-platform-channel-handle=5252 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:1","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00004708"},{"pid":3472,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --mojo-platform-channel-handle=5416 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00003472"},{"pid":5944,"ppid":2836,"name":"msedge.exe","command_line":"--type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.16299.192 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3444 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:2","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00005944"},{"pid":5676,"ppid":2836,"name":"msedge.exe","command_line":"--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=24 --time-ticks-at-unix-epoch=-1694672254085701 --launch-time-ticks=1218361714 --mojo-platform-channel-handle=4672 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:1","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00005676"},{"pid":2992,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5004 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00002992"},{"pid":1712,"ppid":2836,"name":"msedge.exe","command_line":"--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=27 --time-ticks-at-unix-epoch=-1694672254085701 --launch-time-ticks=1295578621 --mojo-platform-channel-handle=3416 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:1","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00001712"},{"pid":1336,"ppid":2836,"name":"msedge.exe","command_line":"--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=28 --time-ticks-at-unix-epoch=-1694672254085701 --launch-time-ticks=1301743550 --mojo-platform-channel-handle=5016 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:1","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00001336"},{"pid":6448,"ppid":2836,"name":"msedge.exe","command_line":"--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=30 --time-ticks-at-unix-epoch=-1694672254085701 --launch-time-ticks=1305838450 --mojo-platform-channel-handle=5116 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:1","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00006448"},{"pid":6080,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5716 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00006080"},{"pid":3860,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6464 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00003860"},{"pid":416,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=840 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00000416"},{"pid":5964,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=6056 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00005964"},{"pid":2844,"ppid":2836,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2632 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:8","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00002844"},{"pid":2856,"ppid":2836,"name":"msedge.exe","command_line":"--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=37 --time-ticks-at-unix-epoch=-1694672254085701 --launch-time-ticks=1398725180 --mojo-platform-channel-handle=6452 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:1","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00002856"},{"pid":412,"ppid":2836,"name":"msedge.exe","command_line":"--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=38 --time-ticks-at-unix-epoch=-1694672254085701 --launch-time-ticks=1399161128 --mojo-platform-channel-handle=6272 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:1","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00000412"},{"pid":6936,"ppid":2836,"name":"msedge.exe","command_line":"--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=39 --time-ticks-at-unix-epoch=-1694672254085701 --launch-time-ticks=1399794488 --mojo-platform-channel-handle=2988 --field-trial-handle=1992,i,2483918150038291177,8314223232052986832,131072 /prefetch:1","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00002836","uid":"00000000-00006936"},{"pid":5936,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\system32\\ieframe.dll\",OpenURL C:\\sample.url","sha256":"b1e6a7a3e2597e51836277a32b2bc61aa781c8f681d44dfddea618b32e2bf2a6","normalized_path":"%WINDIR%\\system32\\rundll32.exe","uid":"00000000-00005936","icon":"$37"},{"pid":6820,"ppid":5936,"name":"msedge.exe","command_line":"--single-argument https://www.hybrid-analysis.com/sample/daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789/6472341bee4a9f89c40ecbb3","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005936","uid":"00000000-00006820"},{"pid":7112,"ppid":6820,"name":"msedge.exe","command_line":"--type=crashpad-handler \"--user-data-dir=%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad\" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=107.0.5304.110 \"--annotation=exe=%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --annotation=plat=Win64 \"--annotation=prod=Microsoft Edge\" --annotation=ver=107.0.1418.56 --initial-client-data=0xc8,0xcc,0xd0,0xa4,0x160,0x7ffd3600b208,0x7ffd3600b218,0x7ffd3600b228","sha256":"accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00006820","uid":"00000000-00007112"}],"all_imported_dlls":["msvcrt.dll","wship6.dll","ieframe.dll","normaliz.dll","DWrite.dll","d3d11.dll","npmproxy.dll","iertutil.dll","msimtf.dll","VxSSL32.dll","api-ms-win-core-synch-l1-2-0.dll","urlmon.dll","winnsi.dll","propsys.dll","bcryptprimitives.dll","setupapi.dll","winmm.dll","kernel32.dll","cryptbase.dll","WSHTCPIP.DLL","api-ms-win-downlevel-shlwapi-l1-1-0.dll","wininet.dll","wintrust.dll","deploy.dll","mshtml.dll","UIAnimation.dll","dnsapi.dll","crypt32.dll","gpapi.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","FWPUCLNT.DLL","netprofm.dll","profapi.dll","jscript9.dll","sspicli.dll","jp2ssv.dll","tzres.dll","userenv.dll","netapi32.dll","cryptsp.dll","dhcpcsvc.dll","mscorwks.dll","mscoree.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","dxgi.dll","nlaapi.dll","credssp.dll","bcrypt.dll","rasadhlp.dll","t2embed.dll","powrprof.dll","ws2_32.dll","version.dll","cfgmgr32.dll","comctl32.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","srvcli.dll","IEShims.dll","wshqos.dll","fltLib.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","mlang.dll","sxs.dll","rpcrt4.dll","user32.dll","msimg32.dll","msvcr90.dll","KernelBase.dll","ieui.dll","URLREDIR.DLL","msvcr100.dll","sqmapi.dll","rsaenh.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","clbcatq.dll","mswsock.dll","ole32.dll","secur32.dll","msasn1.dll","sechost.dll","api-ms-win-downlevel-version-l1-1-0.dll","imagehlp.dll","shlwapi.dll","uxtheme.dll","ExplorerFrame.dll","dui70.dll","api-ms-win-downlevel-user32-l1-1-0.dll","lpk.dll","ntmarta.dll","shell32.dll","oleacc.dll","mscoreei.dll","usp10.dll","dwmapi.dll","apphelp.dll","ssv.dll","xmllite.dll","nsi.dll","duser.dll","ncrypt.dll","Wldap32.dll","d3d10warp.dll","winhttp.dll","RpcRtRemote.dll","netutils.dll","MSOHEV.DLL","oleaut32.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","webio.dll","oleaccrc.dll","advapi32.dll","imm32.dll","rpcss.dll","ieproxy.dll","dhcpcsvc6.dll","msctf.dll","IPHLPAPI.DLL","WindowsCodecs.dll","devobj.dll","d2d1.dll","comdlg32.dll","wkscli.dll","schannel.dll","gdi32.dll","wow64.dll","wuaueng.dll","VxSSL64.dll","actxprxy.dll","wow64win.dll","fveui.dll","wow64cpu.dll","QAGENTRT.DLL","oneds.dll","mfperfhelper.dll","libGLESv2.dll","libEGL.dll","dpapi.dll","DataExchange.dll","Windows.Web.dll","dxilconv.dll","mfsensorgroup.dll","mf.dll","msmpeg2vdec.dll","vulkan-1.dll","SHCore.dll","PCPKsp.dll","msvcp110_win.dll","microsoft_apis.dll","mscms.dll","dbghelp.dll","kernel.appcore.dll","KBDUS.DLL","RTWorkQ.dll","CoreUIComponents.dll","gdi32full.dll","dsreg.dll","msdmo.dll","CompPkgSup.dll","dcomp.dll","twinapi.dll","cldapi.dll","winmmbase.dll","UIAutomationCore.dll","WinTypes.dll","wtsapi32.dll","vaultcli.dll","Windows.Media.dll","d3dcompiler_47.dll","linkinfo.dll","onramp.dll","winsta.dll","wldp.dll","MMDevAPI.dll","vk_swiftshader.dll","msvcp_win.dll","edputil.dll","Windows.UI.dll","srumapi.dll","dxva2.dll","ksuser.dll","wevtapi.dll","Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll","TextInputFramework.dll","fwpolicyiomgr.dll","tbs.dll","sapi.dll","mfplat.dll","FirewallAPI.dll","fwbase.dll","Windows.System.UserProfile.DiagnosticsSettings.dll","BitsProxy.dll","mfcore.dll","OneCoreUAPCommonProxyStub.dll","combase.dll","windows.storage.dll","twinapi.appcore.dll","dmcmnutils.dll","Windows.System.Profile.RetailInfo.dll","ResourcePolicyClient.dll","win32u.dll","OneCoreCommonProxyStub.dll","Windows.Security.Authentication.OnlineId.dll","devenum.dll","ntdll.dll","directmanipulation.dll","rmclient.dll","ffmpeg.dll","aepic.dll","msacm32.dll","msedge_elf.dll","ntasn1.dll","Windows.Security.Authentication.Web.Core.dll","msvproc.dll","CoreMessaging.dll","atlthunk.dll","telclient.dll","msedge.dll","DolbyDecMFT.dll","mdmregistration.dll","ucrtbase.dll","cryptnet.dll","wlanapi.dll","ie_to_edge_bho.dll","policymanager.dll","ninput.dll","mskeyprotect.dll","sppc.dll","pcacli.dll","sfc_os.dll","Windows.Networking.Connectivity.dll","tokenbinding.dll","ncryptsslp.dll","thumbcache.dll","D3D12.dll","StructuredQuery.dll","srpapi.dll","OnDemandConnRouteHelper.dll","Windows.UI.AppDefaults.dll","ieapfltr.dll","Windows.StateRepositoryPS.dll","mpr.dll","MSWB7.dll","msIso.dll","samcli.dll","slc.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"logo_1_.svg","sha256":"09f5a7a848242e162ea1121101675b8fe182e936e0ca99c3cd41fd4a08ce82a9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"privacy-options_1_.svg","sha256":"bacb680e76221894246173c4d19d68b2bb2208a123dcff85c89bef8cebfc747a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"clippy_1_.svg","sha256":"15e5f9b800647b1491a3c0fff92b3fe7f869adc26526a3cfd5e1f607303e65dd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"1DSCC7L3.txt","sha256":"17e5a3df52895cd936ca194c756f754ccf7de766b4f26e17f15eb3193bacdbf7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"BE22EN45.txt","sha256":"65f050cbb9230d93a8fa3b945bba8473ef4074f8292f412b3cfccaa66ca392d6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"BK1SZX0W.txt","sha256":"c9f977e307f6573205771896fcb6c1db6a28c9123ce9b26af7457e1bae847292","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"CK6MALCK.txt","sha256":"71b23f781bf7c0d78df4e62b59f81d9f9d2a6034f34d596516378ea846c05cae","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"FSPDIXEG.txt","sha256":"1f29ab804e346f9885bb7563ed5b579328ca71ad5c207d817e9475b239424214","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"H6HHAQLW.txt","sha256":"0176d5548599939a494c6e5aca9249e410ea1323d32f10f0c2fef8e844860d48","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"HPC72WRK.txt","sha256":"805194656726eb9f07291dfad41e8c348cd7b8599c606b2c1879f798e8778fa0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"JUKNUYGA.txt","sha256":"9874651af01a4ecd292fa4cfed1b5003b4f91c983748204c60557980092210e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"LKTC69C4.txt","sha256":"b252231d98a0cf4ff25267f4e0aea209a3f22bfe4519d6da0e0c53efb180136d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"LZZ1HBAW.txt","sha256":"8c058d561cc1e981b52eb2edead9111230bfb4794fe90ebf780affbc3808a2b4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"MPCHGMMB.txt","sha256":"ff364e9b2b55c27c1684b7618feb2e59a1508e2f21c68677a7c19cd1e45510e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"NS5F8LPM.txt","sha256":"789ae0f649bbf422f8719a1f336eb6dc9d2b70887cb82912170f6e8f9a65a8c0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"PBWX443F.txt","sha256":"299dac018950fbaf879ba657c3799ab2268bf6f1510bb00c02c5ad68afafefeb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"RH171V8U.txt","sha256":"c321a6893acb6060537530d9170f4820f5e12afd69ea0ab9dc117db7770e987d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"TC1F2X6N.txt","sha256":"1d0217c6cbeceaa22f48cd43d986b0165096634fb28a55900f54eb66d3bf5d3b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"ULE0A690.txt","sha256":"0286d88fbf4c7ec48db147188475bf7e5825eae0c45b3108e83615c9e70b2803","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"VKCIPXXP.txt","sha256":"7c7575450653ff822d895b9198908cd0bc2c25acba2a575cf1b80a0cfacbb1b3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"WVGDO7LH.txt","sha256":"a092937c22f0751f2b733b4de5c70c0f944bb276e0cb657487857dbbf350ca2a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"YUKEAJD7.txt","sha256":"36e3626a47b67d29a15097f140708dcce76ae099f5a4711a667163f04223da90","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"imagestore.dat","sha256":"534b7468a26fe0ede6ed11ef9a9c7ae0984012266f7efd033ed2d6c31f44ed12","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"WZ17PTAF.htm","sha256":"93fcb940de0c3563f35f30a4e1d40691cf78fc3e1210a78e87235e17e1d2dfe5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"datD9FB.tmp","sha256":"aa89984c0a995d69c4863187d08cd1f44d1889bdf3bed75eee0244511e2c3d2b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"~DF23889396926C2D16.TMP","sha256":"e552a2c101d6fcfd8e4ca13dbefc40f2175b889a9992c26981b21289132937b8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"~DF453A12BD2AF9B9EC.TMP","sha256":"dd68d5a9fd3ecb629df4804a1ecc653d33a85c21a36cbd711f1784b9e802b5f9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"~DF507720DB113621A4.TMP","sha256":"e7ee92fd44d73a1b6f22b3257de3743baf1e4f40f5c6d00ddc084a5759517f32","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"~DF6525DAEED3955687.TMP","sha256":"30a45edb48ac918f0562773c824fd434c5c3fa18e807c13ae8aa730e2445a9b4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"~DFE954FDC596D70604.TMP","sha256":"a48631763e6a4d2011c872cb2f484332aa3e59c0e8863044341f5a3be74c3f85","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"urlref_httpswww.hybrid-analysis.comsampledaa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e7896472341bee4a9f89c40ecbb3","sha256":"3e1139622ee75e7f57f56c125c1ea8d98aa4021f8e6703fe30ac5ef9a68dd88c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"6472341bee4a9f89c40ecbb3_1_.htm","sha256":"138b13c6f3726d7ec553bee1b5f552667ca4adad71f15bdc5e86e1c03925b660","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"48383142a884697477a027d292e9a85361e9c93599ad7ef7fe0b5d9e2ad3ba6c.min_1_.js","sha256":"fa43d31853abfe3473bb586532d3a5ead66e0dbb0de35e744eb7e199029befcd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"76a4a774670d36d006376bf08ab3a0064be22e7a5a07347197ceecf62e1c1ce7.min_1_.js","sha256":"86b716533676ed227beb89206dc5364330236026053f3ee8684966283efcdb36","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"otBannerSdk_1_.js","sha256":"1114132a79b42ce8e5064f57a1560a3b3f0e1659afc33e4698bab53e1301fbfd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"67ee809d98b4fbb930a8e120f01d360bb9f6b721ec15083f8e4378fe1495ba9e.min_1_.css","sha256":"0d7373dc8426d5bb7c950528bcd37be4636ce830c663d367f7c348ad986f1fb0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"fa-solid-900_1_.eot","sha256":"373c04fd2418f5c77eea49d514731058f1907a94ff3b4e5d7c3e5767e8b53d8b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"e1f54aab397645fc5c44fb367f5af880c16ac573d3f08481e1df77bf11408262.min_1_.js","sha256":"e81fe3fcf5c1f94b39fd398bf47adfddaa2ef950ef9448cca059ffa42cb932ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"fa-brands-400_1_.eot","sha256":"e4299464e7b012968eed63ac2db1c9509f56bca409ef9f71f2926a8c3c80b2a9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"otPcTab_1_.json","sha256":"32a8c8c75e0574d43215424909195c56e950e04c0839abec5e7cf5b0c0ac4282","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"en_1_.js","sha256":"a670970dea0d5c822562c6598d5142e9e5e343ea74c7d26a99bb6d665ea758d0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"fa-regular-400_1_.eot","sha256":"79d088064beb3826054fb88165416235897a856ca952fca1498b1c59b16aaa48","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"favicon_3_.ico","sha256":"d91e23233d362d1ab9ef4562e6b6a72c39bed3b5699306f8bee94c5b223775c5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"sprite_1_.png","sha256":"5ecc7a22d36acd9b08b2d79f065b3b88906bf4f4805b9e7223838ee331369ce3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"otSDKStub_1_.js","sha256":"e181730c1a666b38b299b81ead525f7fec078ff980360b4c032e75b9802ebf0d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"otCommonStyles_1_.css","sha256":"d0c233d327541d2961f1cde9e53a6166279655f4d4041c1bc458ac1701827719","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"glyphicons-halflings-regular_1_.eot","sha256":"13634da87d9e23f8c3ed9108ce1724d183a39ad072e73e1b3d8cbf646d2d0407","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"cabin-400-normal_2_.woff","sha256":"e0ff36e2b6bf1f32555d467a76e18e7b3c2dd836c00881d65a0504b4e3c173e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"2SBL0E55.txt","sha256":"19f6f1032fe195f643a8c170ad9ba9e3a3a7a498db0e777c17d6fe3900d1dee6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"5EB192L4.txt","sha256":"8601489ad9a4acefaf9715cb7b6e5723d1c3950a20885c3ee24135c1aec42ffc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"5VX0GVLO.txt","sha256":"25f1f7d4d71c97f7e37c482b4568cc36f3e4049196606d586ac6857450ee3198","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"6NU6CI9S.txt","sha256":"0e7663ed2170191af9aa0af404f47e3a8160c67a238ae12793f92c26eabdbc40","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"6WB50HPP.txt","sha256":"98dd3548a7b38058e6f6a3dadb0dbbb7cc23dd1851b774cd0dcb152a33d8599a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"6Z5MT8RN.txt","sha256":"39d5376332babbfa9df352e390e688578c64369105cc54cf7d6bc82817c1d3fe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"7496W41K.txt","sha256":"c97ac8d3ab9be8260d4192a7497d124b923a3fdbf257f194353e88cb180fc8e7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"EMWPN480.txt","sha256":"f355a6519638d765811b688eced25875707751b511978d9f99ddc51404012680","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"EVA1DFLC.txt","sha256":"865f100e71c605e953358588a5ceade7574bc11073fe8a257bcfc2eecce281c7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"G690DV6T.txt","sha256":"b96167132c38c8565e4bedb8edb936b94af026e066e33004f714c253bc08b4ca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"GZB33P9L.txt","sha256":"41f04bfcfbea5160bc8e8354e26461b9382b9c98b76358fca98561ec620bce10","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"IN2VCZJT.txt","sha256":"437f7cd5dddb4c3381f812fce6596db0336e4d1c07a667c28b6d105c54bb3e1b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"IWQ54O0D.txt","sha256":"724bc74c3aadc74bfff58609a87607ce75cd523fab120c59f7c2ed1af44d4792","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"KP2P133X.txt","sha256":"4b81a5fc8b7f1dbf40c19d95d4d2bf01b1763e1d053ea6e765c862b1a8144cd6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"QY9AQ9AD.txt","sha256":"44e8a39f5bec0f93994e9b192ed5d125ae9b238d4c2249783782ae3ecceb4b41","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"QYNWMOK9.txt","sha256":"1ab26045e83fec4bc54d97d1b6cd6a0b02f3446e49fa8caa31acf69b43de8784","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"RGYYK8JO.txt","sha256":"e79fd0e0cbce65cb40160e9c9a3340a68f69f934615e5e2200e048a342c8f435","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"TZRAQ7M7.txt","sha256":"709edd661a6ec55ba988485807ba46a157b6dadc2955a4923c20edfd44f6f281","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"X5NVR0CN.txt","sha256":"8ff8728fdcd4fa0daa844b339b55d874c731f807347be115aa8148fec364db80","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"Y26FBWHG.txt","sha256":"7b7bfedc473d10ca1e08b97d9c25a365019affb731fc9c1fe294f52bb8bc0b16","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"en-US.5","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"KHN3CMGG.htm","sha256":"3c10d61173dc5f6ac739c3beed823fb7dc5af3f4e4807b6e7b8ee9094c9d6246","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"dat4690.tmp","sha256":"aa89984c0a995d69c4863187d08cd1f44d1889bdf3bed75eee0244511e2c3d2b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"~DF1F87C3EF001A8EB8.TMP","sha256":"5d3085d54b1673865c63f7e0984575bf72cc2e1e1b285d1a0af54f548595acb4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"~DF5C8D7721867822B3.TMP","sha256":"2ea47cc502780f28e4257e5d8592d4a73824444d5b4176ece25fe8c5933160ab","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"~DFA10FCFA725960263.TMP","sha256":"de8b707697e2cb2fda2bc930951208aace4a6c695b92445a572dde89e7f9b7d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"~DFA59A9B7E3536F01A.TMP","sha256":"f1669294a2b950da3e8b18fbdabd0fa055d6ef1474ec7ecaa0287bffbe5bd134","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"~DFB2E49994EB881C89.TMP","sha256":"6785a86738850e47a302aec0059542216c7d30920ecee2d90b8cc10effade603","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"favicon_6_.ico","sha256":"d91e23233d362d1ab9ef4562e6b6a72c39bed3b5699306f8bee94c5b223775c5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"3512b9ed-fc77-4a27-8ab0-3d30672fbb54.tmp","sha256":"e67819144a7d250ba8d0f6fe2bfa95c0f2ca99a453f5b9c43d51909a02840037","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"4840456d-4c7e-4cb2-a4f0-18938a9940bc.tmp","sha256":"2cf6facb9fdc6a4d7fbaabe080b8c414c17568d5e3ee006491c3ab5f5df16d08","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"54922a09-f5b8-4652-8faa-da976b514bf5.tmp","sha256":"133a685903b0b69527805ff6c9c696efe747ad0098983114a4595ee8e9eaf168","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"85a4ebee-54a1-455e-968f-945fbb67266d.tmp","sha256":"e67819144a7d250ba8d0f6fe2bfa95c0f2ca99a453f5b9c43d51909a02840037","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"99750a10-11c6-44bc-b7ca-f205ab7a9810.tmp","sha256":"59bff15b891e70f9667eb87492348e592b4210a6915c1c05da41b85cafe2681a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"72c68c8f-cd3f-46bf-8c6a-260c147820fd.tmp","sha256":"1cd4382f7d381170a5730a5ecbb6c512a4fa33fb83ccd836f940838cf21c600e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"settings.dat","sha256":"ff788ad9260235970674c12b2c4faa4c1825b6cbe3b471b8de23ef1ae13b1a56","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"15b493f4-3151-4e55-a566-311f4b06d05d.tmp","sha256":"9cdc4b62da68cbf241215139cd5f742a4058f7c1c738d2e3fba93e72d1b5f4c6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"44cca2d9-114f-4b9b-9316-653e2e128134.tmp","sha256":"d0a397c8c9965789201ff697a2e4da5e1c59c70c321855fb53209dfbd1e69219","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"6bb6fa1b-9eb4-46cd-af32-2ad279d7063d.tmp","sha256":"35855d69b5970e7476b6161ea03988887169be327a08b433c655c25f2a415514","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"85bf6114-5227-4933-9d3d-05a08887169e.tmp","sha256":"85522fbdb887baaf447b509c6a74444ed2bc1c9bf9c5bdd31d42d13cf2aa6069","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"8f0e56e3-7c94-4d2f-81ec-fbaaec3e9f09.tmp","sha256":"1a4b407789f79d6e2480ba6d97ec656dc1616be12acc9916d92d31873d75a251","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"9d05acac-2ab3-4157-8a42-420407b9d432.tmp","sha256":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"000001.dbtmp","sha256":"0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"000003.log","sha256":"68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"LOG","sha256":"29eb227d3ff8a00a17a8c666ef9552e31174a751ac67cb0d8b507acc71b5e7ce","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"MANIFEST-000001","sha256":"f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"data_0","sha256":"16f72d39a5e684a8dcdc2c23441cb9d41abadd7c099854ee0d76662a6e2bdfc3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"data_1","sha256":"f4e92349a968c955cfc4c86c8e5fc206c6c03aa5634f1d6bd0bfb690a07f6800","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004c3","sha256":"77c4da62a6a28b1c5dd019052b0cbba5bb3e38324b0df94e9865e4a4a6c12ec0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004c4","sha256":"8bcbac2ea682991d0e69818189550b953a7d0ad62e6570d61aeb86ef4a594caf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004c5","sha256":"813339e5ebb49bf91b6b5b136f4d066be16841c1c9641628695bdc4fe84ef061","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004c6","sha256":"85a86d298a8bfff2dc5949c9172b2a923317c64232cde16fa263d0ff2e418bc9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004c7","sha256":"958cf30f6cb891ab167aea30fed613bd944d12494662634d92fdc3f5f752c29d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004c8","sha256":"57a45c4a52afdd9a881510807d2a828972b710c91360b9681a2a46b440759cc1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004c9","sha256":"fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004ca","sha256":"5796165c6ecb554a25c34d66d5ecb34fe988cd59c45d87affe7dd5b6d0aac937","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004cb","sha256":"e0ff36e2b6bf1f32555d467a76e18e7b3c2dd836c00881d65a0504b4e3c173e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004cc","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004cd","sha256":"5ecc7a22d36acd9b08b2d79f065b3b88906bf4f4805b9e7223838ee331369ce3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004ce","sha256":"8ea8791754915a898a3100e63e32978a6d1763be6df8e73a39d3a90d691cdeef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004cf","sha256":"e11ff08dff0a884b311133e2469146b2a54319cf60094511e098df0c3677c4e0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004d0","sha256":"ae4fcbd555bd417483311af85ed24bddb5da95b1fe62db389249fc1397fd0062","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004d1","sha256":"75e6c818f9ac8d1ca575800403bd69175cc8fb6bd4d15ab03fdde473f50733d1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004d2","sha256":"26a78f6a134914219ada46acd1bc1c2702b3521bda74e6e2c78cd379bb2b09e7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004d3","sha256":"9a0e91a8ccbf6be0449c7a1907c5e8bb819e85aab41117f52a8c209507b5c6e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004d4","sha256":"b332a3fa616df968bdd71567cde2fe6031561746f6022d06993bde4001ec2730","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004d5","sha256":"47aefdb47492b4a7869edac917b4b3479e06a2e502d24c07197f99fba0366093","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004d6","sha256":"5e919c485b468cf69646d411d76e46ba894ebe44f93c98ddfd6286ffa891fc66","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"f_0004d7","sha256":"138d3c57e48b9562966d55dde07846b002f61a05a8c99d7b4da50047f26aacec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"f_0004d8","sha256":"580863e0e651d2e49160840c315ae69e20da0cbdfde31bddddb0dfdba6d2dcf3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"f_0004d9","sha256":"13c7de4871df34d9216b53dda1a56e968daa9b9421d2c41796166358319cc0bc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"f_0004da","sha256":"a1079de74d4cce48e64253e000bcb11a675889a35524df8c50ab667636c17076","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"f_0004db","sha256":"d27bc752105c079f8a516e9142406a9fc12cbb409f9bf8681f2ddfe0360b52a6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"f_0004dc","sha256":"9aba02c2d767aa4bb6881f7210fab0ab6026ed430c91040fafd9125be2d3a4ab","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"f_0004dd","sha256":"0bf90a8569ed246ad28d91458f6771f6934a0c4983243eca5f6accf91d6979cc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"f_0004de","sha256":"0f9c2ce6f85c93eed9e3e0917378e13d9ecc30b3690a2c97f9eb013b81244f4b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"f_0004df","sha256":"3fe890d088ecf0cc9bc1b9069201e52972dbad6237865524090e15982d0de718","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"name":"034e0062-0e25-4fe0-b052-4855f8eb2667.tmp","sha256":"62ef411117e9ea41e27e31a734b64ecbdc7a5e75fcca41025ba2496ec7eecaf9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"0aed71cf-467e-4e73-a379-7b8ff2c05454.tmp","sha256":"cbee8f9ab7abbc949fd838d377bc0fc1dd0c93bf4411ac58bdf37045e52d5d61","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"0d76d137-3f8a-4cb1-99c1-e69dfb01462b.tmp","sha256":"0bba5e164fa96019bc728c3eb31b4dc2bd06f13f998eb73ef772423a52b9ee11","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"37da30ad-1020-413b-b457-96681b80eb3f.tmp","sha256":"ac403609277edf5765b4b363d21c73f8f6d09ca1b2e26ebba9e410f8ac8f6a1b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"4a63e02d-3c20-442f-9775-38bc135edc79.tmp","sha256":"ac63ae3996ee504f1ffb4922f692876def81b21fb3443fb9f6c3e3cbe3d9a98e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"6e9424cc-ca5a-4664-a1be-2891af06e673.tmp","sha256":"7082c85e6ecbf9b1f779ba829b95ef7b78e9806c412c6d7826d39c14f3e5fa5e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"074339c0-28da-4ad8-ae45-336fbf6698eb.tmp","sha256":"1cd4382f7d381170a5730a5ecbb6c512a4fa33fb83ccd836f940838cf21c600e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"122b71d4-8b43-4e4a-9dfe-6793862f646c.tmp","sha256":"40f8e5b19bcb9c5f0e198f3d1f697aae05b95ed9c9e2f1eeb104a01fa04d5011","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"2a30d818-efb8-468e-b02e-f572e60594f9.tmp","sha256":"edf45a4fb9095a8e65df09c12a92a886e963fbcc03f05ce9ed4ad9f2f5c426c0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"2bf057f4-40f2-4d79-be0a-253cf28e71bf.tmp","sha256":"59b5aacfc87b5d9ccd3e3736378d6a524c9a9fdf82d35c84390368713b77f73d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"34addfd7-b556-4b88-920a-f1e1d5f661a0.tmp","sha256":"83e0c5defb973534a9cfe57fb170d6abd14d6e4af0a8307846f505ecbe37ab8c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"4a98a038-be15-4902-94a7-9db533e48a00.tmp","sha256":"dece00fd1eeb600181da1b5ad7c1da576d27fe52bfc46365644a3e0cbe37a155","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"5b70bcfb-6763-4be4-8c48-e4f66cdaaa38.tmp","sha256":"b506d301b917238a0148abe97bdc00fd9287dea95f06a1ce09334a1522073da2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"5f0dce98-8511-47c7-8cc9-66bfca682aad.tmp","sha256":"89e97e9e6c5bc8adc8371f94f377a32b0d22aadd3f931fb177c9197fd87afeca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"62171733-0b09-45e5-beb0-265d0869355b.tmp","sha256":"60cc50b0830c08ed37c1cb1a830d6cb237e3e41f6b33b3a87ccac338ffbd4015","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"6c8a6735-7523-4f5b-a11f-ec7fd25fedc6.tmp","sha256":"918fae3b42fd5408feb61724afd69606e0885eb993c2d9b39994c9eff7ef7113","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"76a3a2ab-e6fe-4daf-847c-0eec2c65fa14.tmp","sha256":"15b18d7c64b0ea0bc0b8cae5216e76c44a9ab10ad93ded2b772e1bda8a3bfde4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"7a016762-fe21-4ac0-9703-6135b14bced5.tmp","sha256":"e6f00768f3a698f4dad1c33f525f750feec3b5359ec1a33162e813ffc72b2a69","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"907d409b-0f96-448b-9f6b-acbda83834e2.tmp","sha256":"0d71c23de0cc7cc7c042992824a6e20e07132249d40deb010992fe1e0a760395","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"data_2","sha256":"482f138a163bae409fbf3e26b82a82896009767a3db1f19eb079e1f928148757","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"data_3","sha256":"8c74da9d9a21f4c75dde40cf3a92c4b26fb25faa8ee735a6f193fb5b52d18d34","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]}],"files_written":[{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01}","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"\\FileSystem\\Filters\\FltMgrMsg","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%TEMP%\\~DFE954FDC596D70604.TMP","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\6472341bee4a9f89c40ecbb3[1].htm","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\icon_dummy[1].png","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\8f169b8c-2bc5-4bd8-ae41-f76f629e0575[1].js","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\cabin-700-normal[1].woff","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\cabin-400-normal[1].woff","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\sprite[1].png","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\lastnode[1].png","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%SAMPLEDIR%\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\~DF23889396926C2D16.TMP","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{134C8F91-52B8-11EE-88A1-080027C9DEA2}.dat","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\otFlat[1].json","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{134C8F8F-52B8-11EE-88A1-080027C9DEA2}.dat","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\logo[1].svg","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\clippy[1].svg","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\vline[1].png","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\privacy-options[1].svg","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\ientpgbconfig[1]","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{1DB662BA-52B8-11EE-88A1-080027C9DEA2}.dat","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%TEMP%\\~DF507720DB113621A4.TMP","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[3].ico","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{846EE342-7039-11DE-9D20-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{4E9E2E8D-9F1D-42B3-A7CC-CF80C95D3ED4}","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\0CH0OVJV\\6472341bee4a9f89c40ecbb3[1].htm","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\98FKNM2M\\logo[1].svg","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\VC2ME0V4\\icon_dummy[1].png","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{0EBC9888-52B8-11EE-8B1C-08002748B200}.dat","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%TEMP%\\~DFB2E49994EB881C89.TMP","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\4KBMQIHU\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\SLSW3KYW\\otCommonStyles[1].css","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\W4ZUP6XA\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%TEMP%\\~DFA59A9B7E3536F01A.TMP","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.5","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\ientpgbconfig[1]","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CP53U0VR\\KHN3CMGG.htm","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{0412B401-52B8-11EE-8B1C-08002748B200}.dat","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%TEMP%\\~DF1F87C3EF001A8EB8.TMP","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\INetCache","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\INetCookies","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad\\reports","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad\\attachments","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad\\metadata","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Variations","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\lockfile","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Last Version","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Login Data","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Nurturing\\campaign_history","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Nurturing\\campaign_history","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\commerce_subscription_db\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\commerce_subscription_db\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Site Characteristics Database\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Site Characteristics Database\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\EdgeCoupons\\coupons_data.db\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\EdgeCoupons\\coupons_data.db\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\EdgeCoupons\\coupons_data.db\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Top Sites","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Sync Data\\LevelDB\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\EdgeCoupons\\coupons_data.db\\000009.log","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Sync Data\\LevelDB\\000003.log","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\EdgePushStorageWithConnectTokenAndKey\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\EdgePushStorageWithConnectTokenAndKey\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\INetCookies\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\INetCookies\\DNTException","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\IECompatUaCache","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Vpn Tokens-journal","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\History","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Sync Data\\LevelDB\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Service Worker\\Database\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Service Worker\\Database\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Platform Notifications\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Platform Notifications\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Platform Notifications\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\shared_proto_db\\metadata\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Service Worker\\Database\\000003.log","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\shared_proto_db\\metadata\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\shared_proto_db\\metadata\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Platform Notifications\\000003.log","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\shared_proto_db\\metadata\\000003.log","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\shared_proto_db\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\shared_proto_db\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\shared_proto_db\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\shared_proto_db\\000003.log","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Extension State\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Extension State\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Extension State\\000003.log","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Feeds","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Local Storage\\leveldb\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad\\settings.dat","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\HubApps Icons","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\load_statistics.db-shm","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Session Storage\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Session Storage\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\History-journal","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004c3","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Sessions\\Session_13339146955289047","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004c4","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Code Cache\\js\\fe91a0296af4df0b_0","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Sessions\\Tabs_13339146955844409","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004c5","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004c6","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Code Cache\\js\\2e1a1c169e46f485_0","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004c7","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004c8","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004c9","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004ca","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004cb","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\EdgeCoupons\\coupons_data.db\\000012.log","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004cc","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004cd","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004ce","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Code Cache\\js\\48ef080dddb61c75_0","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Code Cache\\js\\fc60443824d958b1_0","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004cf","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Code Cache\\js\\e2624cb2df39fdd9_0","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Cache\\Cache_Data\\f_0004d0","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Code Cache\\js\\f1aa51859c7a014b_0","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Code Cache\\js\\61d374bafdc8f0ee_0","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\AssistanceHome\\AssistanceHomeSQLite","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\heavy_ad_intervention_opt_out.db","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Asset Store\\assets.db\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Asset Store\\assets.db\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Last Browser","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\WebAssistDatabase","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Shortcuts","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\AdPlatform\\auto_show_data.db\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\AdPlatform\\auto_show_data.db\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\arbitration_service_config.json","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\optimization_guide_hint_cache_store\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\optimization_guide_hint_cache_store\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\optimization_guide_model_metadata_store\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\optimization_guide_model_metadata_store\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\BudgetDatabase\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\BudgetDatabase\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\AutofillStrikeDatabase\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\AutofillStrikeDatabase\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Segmentation Platform\\SegmentInfoDB\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Segmentation Platform\\SegmentInfoDB\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Segmentation Platform\\SignalDB\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Segmentation Platform\\SignalDB\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Segmentation Platform\\SignalStorageConfigDB\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Segmentation Platform\\SignalStorageConfigDB\\LOCK","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{097389CD-52C9-11EE-9C2B-0800277F7905}.dat","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\~DFA6F7B77DD9E241C7.TMP","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Asset Store\\assets.db\\000003.log","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Asset Store\\assets.db\\LOG","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_414931450\\manifest.json","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_414931450\\recovery-component-inner.crx","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_2127444656\\manifest.json","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_2127444656\\safety_tips.pb","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_2127444656\\typosquatting_list.pb","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_2127444656\\_metadata\\verified_contents.json","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_2127444656\\manifest.fingerprint","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\manifest.json","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Mu\\Advertising","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Mu\\Analytics","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Mu\\CompatExceptions","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Mu\\Content","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Mu\\Cryptomining","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Mu\\Entities","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Mu\\Fingerprinting","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Mu\\LICENSE","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Mu\\Other","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Mu\\Social","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Mu\\TransparentAdvertisers","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Sigma\\Advertising","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Sigma\\Analytics","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Sigma\\Content","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Sigma\\Cryptomining","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Sigma\\Entities","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Sigma\\Fingerprinting","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Sigma\\LICENSE","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Sigma\\Other","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Sigma\\Social","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\Sigma\\Staging","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1680868195\\manifest.fingerprint","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1934758821\\app-setup.js","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1934758821\\bnpl\\bnpl.bundle.js","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"path":"%TEMP%\\2836_1934758821\\bnpl\\bnpl.bundle.js.LICENSE.txt","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{6A6D4824-5197-46AC-81B1-4E580EDCDD7D}\\","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\00-10-DB-FF-DC-01\\","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{6A6D4824-5197-46AC-81B1-4E580EDCDD7D}\\00-10-DB-FF-DC-01\\","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\VERSIONMANAGER\\","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"key":"HKLMHKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SECURITYPROVIDERS\\SCHANNEL\\","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TOOLBAR\\","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\MY\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\DISALLOWED\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SPEECH\\VOICES\\","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SPEECH_ONECORE\\VOICES\\","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"}]},{"key":"HKCUHKCU\\\\","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"key":"HKLMHKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\TCPIP\\PARAMETERS\\","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\NETWORK\\LOCATION AWARENESS\\","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"key":"HKCUHKCU\\SOFTWARE\\\\","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\\\","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\EDGE\\\\","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\EDGE\\BLBEACON\\\\","sources":[{"report_type":"sandbox","report_id":"6502a8d92aa77590b1044a13"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\EDGE\\THIRDPARTY\\\\","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\EDGEUPDATE\\CLIENTSTATE\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\\","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\EDGE\\STABILITYMETRICS\\","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\EDGE\\","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{6A6D4824-5197-46AC-81B1-4E580EDCDD7D}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\00-10-DB-FF-DC-01\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\ADMINACTIVE\\{00000000-0000-0000-0000-000000000000}\\{00000000-0000-0000-0000-000000000000}","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a58_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"IsoScope_a58_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"IsoScope_a58_ConnHashTable<2648>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"IsoScope_a58_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"IsoScope_a58_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2648","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"IsoScope_a58_IE_EarlyTabStart_0x8dc_Mutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2648","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"},{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a58_IE_EarlyTabStart_0x8dc_Mutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a58_ConnHashTable<2648>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a58_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a58_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_a58_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"IsoScope_a58_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"6502a91f1d2787d79907c8b2"},{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_984_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"IsoScope_984_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"IsoScope_984_ConnHashTable<2436>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"IsoScope_984_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"IsoScope_984_IE_EarlyTabStart_0xba4_Mutex","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2436","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"IsoScope_984_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2436","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_984_IE_EarlyTabStart_0xba4_Mutex","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_984_ConnHashTable<2436>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_984_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_984_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_984_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"IsoScope_984_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"6502a8eac2b4a01aa502c922"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:1068:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\SM0:1068:120:WilError_01","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"\\BaseNamedObjects\\SyncRootManager","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:1068:120:WilError_01","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:5936:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:5936:120:WilError_01","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\SM0:5936:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\SM0:5936:120:WilError_01","sources":[{"report_type":"sandbox","report_id":"6502a900f7050c62100cb6d4"}]}]}},"report_ids":{"sandbox_job_ids":["6502a900f7050c62100cb6d4","6502a91f1d2787d79907c8b2","6502a8eac2b4a01aa502c922","6502a8d92aa77590b1044a13"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Malicious Sample 728efd7a9838… — Score 85/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 728efd7a9838…. Threat score 85/100. 0/4 AV engines flagged this file. 2 malicious and 8 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/728efd7a98381720e295b8fbb1591a800fbbdca446d9ecdc0d5f66956a453575"}],["$","meta","4",{"property":"og:title","content":"Malicious Sample 728efd7a9838… — Score 85/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 728efd7a9838…. Threat score 85/100. 0/4 AV engines flagged this file. 2 malicious and 8 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/728efd7a98381720e295b8fbb1591a800fbbdca446d9ecdc0d5f66956a453575"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Sample 728efd7a9838… — Score 85/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 728efd7a9838…. Threat score 85/100. 0/4 AV engines flagged this file. 2 malicious and 8 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L38","11",{}]]