9282e9c79c79cbf2874af5f7713aa442120286ce3ae73f718f379abb0e7494c4.exe
This report is generated from a file or URL submitted to this webservice on July 18th 2019 11:59:47 (UTC) and action script Heavy Anti-Evasion
Guest System: Windows 7 64 bit, Professional, 6.1 (build 7601), Service Pack 1
Report generated by
Falcon Sandbox v8.30 © Hybrid Analysis
Incident Response
Risk Assessment
- Evasive
- Possibly tries to implement anti-virtualization techniques
MITRE ATT&CK™ Techniques Detection
Indicators
Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.
-
Malicious Indicators 3
-
External Systems
-
Sample was identified as malicious by a large number of Antivirus engines
- details
- 22/70 Antivirus vendors marked sample as malicious (31% detection rate)
- source
- External System
- relevance
- 10/10
-
Sample was identified as malicious by at least one Antivirus engine
- details
- 22/70 Antivirus vendors marked sample as malicious (31% detection rate)
- source
- External System
- relevance
- 8/10
-
Sample was identified as malicious by a large number of Antivirus engines
-
Hiding 1 Malicious Indicators
- All indicators are available only in the private webservice or standalone version
-
Suspicious Indicators 8
-
Anti-Reverse Engineering
-
PE file has unusual entropy sections
- details
-
.text
/30 with unusual entropies 7.41601352038
7.9390991556 - source
- Static Parser
- relevance
- 10/10
-
PE file has unusual entropy sections
-
Environment Awareness
-
Possibly tries to implement anti-virtualization techniques
- details
-
"Hyper-V-@Server" (Indicator: "hyper-v")
"Hyper-V-" (Indicator: "hyper-v") - source
- File/Memory
- relevance
- 4/10
-
Possibly tries to implement anti-virtualization techniques
-
External Systems
-
Found an IP/URL artifact that was identified as malicious by at least one reputation engine
- details
-
2/70 reputation engines marked "http://smilered.com" as malicious (2% detection rate)
1/70 reputation engines marked "https://www.work.ua" as malicious (1% detection rate) - source
- External System
- relevance
- 10/10
-
Found an IP/URL artifact that was identified as malicious by at least one reputation engine
-
General
-
Found a potential E-Mail address in binary/memory
- details
- Pattern match: "la@dataonly_.jpg__"
- source
- File/Memory
- relevance
- 3/10
- ATT&CK ID
- T1114 (Show technique in the MITRE ATT&CK™ matrix)
-
Found a potential E-Mail address in binary/memory
-
Network Related
-
Found potential IP address in binary/memory
- details
-
Heuristic match: "~6.3.1.50, no"
Heuristic match: "~6.3.1.5@, no p"
Heuristic match: "d64~~6.30.1.5"
Heuristic match: "6.3.1.5, no p"
Heuristic match: "6.3.1.5,"
Heuristic match: "1.3.6.1.5.5.7.3.1"
Heuristic match: "1.3.6.1.4.1.311.10.3.3" - source
- File/Memory
- relevance
- 3/10
-
Found potential IP address in binary/memory
-
Unusual Characteristics
-
Imports suspicious APIs
- details
-
LoadLibraryW
LoadLibraryA
GetProcAddress
GetThreadContext
CreateThread
WriteFile
VirtualAlloc - source
- Static Parser
- relevance
- 1/10
-
Timestamp in PE header is very old or in the future
- details
- "9282e9c79c79cbf2874af5f7713aa442120286ce3ae73f718f379abb0e7494c4.bin" claims program is from Thu Jan 1 00:00:00 1970
- source
- Static Parser
- relevance
- 10/10
-
Imports suspicious APIs
-
Hiding 1 Suspicious Indicators
- All indicators are available only in the private webservice or standalone version
-
Informative 3
-
General
-
The input sample possibly contains the RDTSCP instruction
- details
- Found VM detection artifact "RDTSCP trick" in "9282e9c79c79cbf2874af5f7713aa442120286ce3ae73f718f379abb0e7494c4.bin" (Offset: 4479140)
- source
- Binary File
- relevance
- 5/10
-
The input sample possibly contains the RDTSCP instruction
-
Network Related
-
Found potential URL in binary/memory
- details
-
Heuristic match: ")v;lPS.lC"
Pattern match: "pp.userapi.com/c836138/v836138184/62073/pmyz83PTqlU.jpg"
Pattern match: "http://sf.uploads.ru/OvjKq.png"
Pattern match: "http://smilered.com/s/h5/3432/images/logo_col.gif"
Pattern match: "https://www.work.ua/jobs/2429867/,title"
Pattern match: "https://www.work.ua/jobs-kharkiv/?sel_zan=76&advs=1&page=24,referrerPolicy:1,originalURI:https://www.work.ua/jobs/2429867/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wA"
Pattern match: "https://www.work.ua:{savefrom-helper-extension:1}},image:https://st.work.ua/browser/favicon.ico?v2=1,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAbsBAAAAIWh0dHBzOi8vd3"
Pattern match: "https://www.work.ua/jobs-kharkiv/?sel_zan=76&advs=1&page=21,referrerPolicy:1,originalURI:https://www.work.ua/jobs/2757729/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wA"
Pattern match: "https://www.work.ua:{savefrom-helper-extension:1}},scroll:{scroll:0,228},image:https://st.work.ua/browser/favicon.ico?v2=1,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC//"
Pattern match: "https://www.work.ua/jobs-kharkiv/?sel_zan=76&advs=1&page=14,referrerPolicy:1,originalURI:https://www.work.ua/jobs/2606326/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wA"
Pattern match: "https://www.work.ua/jobs-kharkiv-hotel-restaurant-tourism/,referrerPolicy:1,originalURI:https://www.work.ua/jobs/2608493/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAA"
Pattern match: "https://www.work.ua:{savefrom-helper-extension:1}},scroll:{scroll:0,798},image:https://st.work.ua/browser/favicon.ico?v2=1,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC//"
Pattern match: "https://www.work.ua/jobs/2453870/,referrerPolicy:1,originalURI:https://www.work.ua/jobs/2772872/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAbsBAAAAIWh0dHBzOi8vd3d3L"
Pattern match: "https://www.work.ua:{savefrom-helper-extension:1}},scroll:{scroll:0,570},image:https://st.work.ua/browser/favicon.ico?v2=1,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC//"
Pattern match: "https://www.work.ua/jobs-kharkiv-hr-recruitment/?page=4,referrerPolicy:1,originalURI:https://www.work.ua/jobs/2763564/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAbs"
Pattern match: "https://www.work.ua:{savefrom-helper-extension:1}},scroll:{scroll:0,684},image:https://st.work.ua/browser/favicon.ico?v2=1,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC//"
Pattern match: "http://www.playground.ru/cheats/freelancer_redaktor_sohranenij_save_editor-43995/,triggeringPrincipal_base64:SmIS26zLEdO3ZQBgsLbOywAAAAAAAAAAwAAAAAAAAEY=,docIdentifier:640,persist:true},{url:http://www.playground.ru/games/freelancer/,title:"
Pattern match: "http://www.playground.ru/cheats/freelancer_redaktor_sohranenij_save_editor-43995/,referrerPolicy:1,originalURI:http://www.playground.ru/games/freelancer/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIH"
Pattern match: "http://www.playground.ru/files/freelancer_rebirth_7_6-136622/,title:Freelancer"
Pattern match: "http://www.playground.ru/files/freelancer_rebirth_7_6-136622/,triggeringPrincipal_base64:SmIS26zLEdO3ZQBgsLbOywAAAAAAAAAAwAAAAAAAAEY=,docIdentifier:1153,persist:true},{url:http://www.playground.ru/cheats/freelancer_redaktor_sohranenij_save_edit"
Pattern match: "http://www.playground.ru/cheats/freelancer_redaktor_sohranenij_save_editor-43995/,triggeringPrincipal_base64:SmIS26zLEdO3ZQBgsLbOywAAAAAAAAAAwAAAAAAAAEY=,docIdentifier:1175,persist:true}],lastAccessed:1501361444168,hidden:false,attributes:{}"
Pattern match: "http://freelancerothe.ucoz.ru/load/freelancer_rebirth_7_6/1-1-0-48,referrerPolicy:1,originalURI:http://freelancerothe.ucoz.ru/load/freelancer_rebirth_7_6/1-1-0-48,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQA"
Pattern match: "http://freelancerothe.ucoz.ru/mchat/,charset:UTF-8,ID:1251,docshellUUID:{6e0a30e7-82fc-4b23-b94b-1607b4448430},referrer:http://freelancerothe.ucoz.ru/load/freelancer_rebirth_7_6/1-1-0-48,referrerPolicy:1,originalURI:http://freelanceroth"
Pattern match: "http://lovi.fm/mini/?c=1&a=0&r=1&h=250&s=263,49,54,1370,1384,465,108,19,156,223,464,42,226,1638,1636,1658,1648,1633"
Pattern match: "http://freelancerothe.ucoz.ru/load/freelancer_rebirth_7_6/1-1-0-48,referrerPolicy:1,originalURI:http://lovi.fm/mini/?c=1&a=0&r=1&h=250&s=263,49,54,1370,1384,465,108,19,156,223,464,42,226,1638,1636,1658,1648,1633,1611,1601,1612,1655,1639,1641,1630,162"
Pattern match: "http://freelancerothe.ucoz.ru/forum/,title:Freelancer"
Pattern match: "http://freelancerothe.ucoz.ru/load/freelancer_rebirth_7_6/1-1-0-48,referrerPolicy:1,originalURI:http://freelancerothe.ucoz.ru/forum/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAA"
Pattern match: "http://freelancerothe.ucoz.ru:{savefrom-helper-extension:1}},scroll:{scroll:0,570},image:http://freelancerothe.ucoz.ru/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCM"
Pattern match: "http://freelancerothe.ucoz.ru/forum/16,title:Freelancer"
Pattern match: "http://freelancerothe.ucoz.ru/forum/,referrerPolicy:1,originalURI:http://freelancerothe.ucoz.ru/forum/16,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAJGh0dHA6L"
Pattern match: "http://freelancerothe.ucoz.ru:{savefrom-helper-extension:1}},scroll:{scroll:0,834},image:http://freelancerothe.ucoz.ru/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCM"
Pattern match: "http://freelancerothe.ucoz.ru/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAJmh0dHA6Ly9mcmVlbGFuY2Vyb3RoZS51Y296LnJ1L2ZvcnVtLzE2AAAAAAAAAAQAAAAHAAAAFgAAAAf//"
Pattern match: "http://freelancerothe.ucoz.ru/forum/16,referrerPolicy:1,originalURI:http://freelancerothe.ucoz.ru/forum/16-19-1,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAJm"
Pattern match: "http://freelancerothe.ucoz.ru:{savefrom-helper-extension:1}},scroll:{scroll:0,8322},image:http://freelancerothe.ucoz.ru/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyC"
Pattern match: "http://freelancerothe.ucoz.ru/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAK2h0dHA6Ly9mcmVlbGFuY2Vyb3RoZS51Y296LnJ1L2ZvcnVtLzE2LTE5LTEAAAAAAAAABAAAAAcAAAAWA"
Pattern match: "http://freelancerothe.ucoz.ru/forum/,referrerPolicy:1,originalURI:http://freelancerothe.ucoz.ru/forum/6,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAJGh0dHA6Ly"
Pattern match: "https://www.google.com.ua/search?q=xtv+ghjcvjnhtnm+.mat+afqk&ie=utf-8&oe=utf-8&client=firefox-b&gfe_rd=cr&ei=Fu18WcvTBee46ATJ5YjgAg,title:xtv"
Pattern match: "https://www.google.com.ua/search?client=firefox-b&biw=1600&bih=767&q=%D1%87%D0%B5%D0%BC+%D0%BF%D0%BE%D1%81%D0%BC%D0%BE%D1%82%D1%80%D0%B5%D1%82%D1%8C+.mat+%D1%84%"
Pattern match: "http://mydebianblog.blogspot.com/2009/09/mat-matlab-nip2.html,title"
Pattern match: "http://freelancerothe.ucoz.ru/DonatSection/,title"
Pattern match: "http://freelancerothe.ucoz.ru/load/freelancer_rebirth_7_6/1-1-0-48,referrerPolicy:1,originalURI:http://freelancerothe.ucoz.ru/DonatSection/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cY"
Pattern match: "http://freelancerothe.ucoz.ru/DonatSection/ships/,title"
Pattern match: "http://freelancerothe.ucoz.ru/DonatSection/,referrerPolicy:1,originalURI:http://freelancerothe.ucoz.ru/DonatSection/ships/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wA"
Pattern match: "http://freelancerothe.ucoz.ru/DonatSection/ships/,referrerPolicy:1,originalURI:http://freelancerothe.ucoz.ru/DonatSection/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wA"
Pattern match: "http://freelancerothe.ucoz.ru:{savefrom-helper-extension:1}},image:http://freelancerothe.ucoz.ru/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAK2h0dH"
Pattern match: "http://freelancerothe.ucoz.ru/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAK2h0dHA6Ly9mcmVlbGFuY2Vyb3RoZS51Y296LnJ1L0RvbmF0U2VjdGlvbi8AAAAAAAAABAAAAAcAAAAWA"
Pattern match: "https://www.google.com.ua/search?client=firefox-b&q=freelancer+junko+zane+id&oq=freelancer+junko+zane+id&gs_l=psy-ab.3...53854.53968.0.54583"
Pattern match: "https://www.google.com.ua/search?client=firefox-b&q=freelancer+junko+zane+imode&oq=freelancer+junko+zane+imode&gs_l=psy-ab.3...9109.9496.0.9696.4.4.0.0.0.0.157.307.0j2.2.0....0...1.1.64.psy-ab..2.0.0.5-ULZ33z_Jg,title:freelancer"
Pattern match: "https://www.google.com.ua/search?client=firefox-b&q=freelancer+junko+zane+mode&oq=freelancer+junko+zane+mode&gs_l=psy-ab.3..33i21k1.1813.1813.0.2011.1.1.0.0.0.0.158.158.0j1.1.0....0...1.1.64.psy-ab..0.1.157.4R5fn_jSSAE,title:freelancer"
Pattern match: "https://www.google.com.ua/search?client=firefox-b&q=freelancer+junko+zane+retexture&oq=freelancer+junko+zane+retexture&gs_l=psy-ab.3...63454.67186.0.67369.9.9.0.0.0.0.179.820.0j5.5.0....0...1.1.64.psy-ab..4.1.176...33i21k1.XGK1l0TPnZQ,title:freelancer"
Pattern match: "https://www.google.com.ua/search?client=firefox-b&q=freelancer+junko+zane+texture+repack&oq=freelancer+junko+zane+texture+repack&gs_l=psy-ab.3...9743515.9746396.0.9746784.14.13.0.0.0.0.306.1576.0j6j1j1.8.0....0...1.1.64.psy-ab..6.3.632...33i21k1.t4QJ4raAk5"
Pattern match: "https://discoverygc.com/wiki/IDs,title:IDs"
Pattern match: "https://discoverygc.com/wiki/Jun%27ko_Zane,referrerPolicy:1,originalURI:https://discoverygc.com/wiki/IDs,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAbsBAAAAKmh0dHBzO"
Pattern match: "https://discoverygc.com:{savefrom-helper-extension:1}},scroll:{scroll:0,1254},image:https://discoverygc.com/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////"
Pattern match: "https://www.reddit.com/r/freelancer/comments/2g93u6/2014_freelancer_graphics_mod_only_guide/,title:2014"
Pattern match: "https://www.redditstatic.com/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9Q"
Pattern match: "https://www.reddit.com:{reddit.event/scroll_events/scroll:{\screen_width\:1600,\screen_height\:900,\viewport_width\:1600,\viewport_height\:767,\target_id\:148231086,\target_type\:\self\,\target_sort\:\confidence\,\target_fullname\:\"
Pattern match: "www.google.com.ua\,\referrer_url\:\https://www.google.com.ua/\,\session_referrer_domain\:\google.com.ua\,\user_in_beta\:false,\adblock\:false,\content_seen_percentage\:0.20673854447439352,\scroll_percentage\:0},__synced_session_storage_k"
Pattern match: "http://www.moddb.com:{savefrom-helper-extension:1}},scroll:{scroll:0,1026},image:http://www.moddb.com/favicon-192x192.png,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC///"
Pattern match: "http://www.moddb.com/favicon-192x192.png,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAO2h0dHA6Ly93d3cubW9kZGIuY29tL2dhbWVzL2ZyZWVsYW5jZXIvYWRkb25zL2hkLXRleHR1cmVzLTEyAA"
Pattern match: "https://vk.com/podslushano_kpop_ua,title"
Pattern match: "https://twitter.com/,scroll:0,177840,triggeringPrincipal_b64:vQZuXxRvRHKDMXv9BbHtkAAAAAAAAAAAwAAAAAAAAEYAAAA4bW96LW51bGxwcmluY2lwYWw6ezQxYjE3MmY2LTY2ZGQtNGFkNi1iMjQwLTI4N2IwYWI5ZWU5MH0AAAAA,principalToInherit_base64:vQZuXxRvRHKDMXv9BbHtkAAAAAAA"
Pattern match: "https://twitter.com/i/notifications,title"
Pattern match: "https://twitter.com/i/notifications,triggeringPrincipal_b64:vQZuXxRvRHKDMXv9BbHtkAAAAAAAAAAAwAAAAAAAAEYAAAA4bW96LW51bGxwcmluY2lwYWw6ezQxYjE3MmY2LTY2ZGQtNGFkNi1iMjQwLTI4N2IwYWI5ZWU5MH0AAAAA,principalToInherit_base64:vQZuXxRvRHKDMXv9BbHtkAAAAAAAAAAAw"
Pattern match: "https://twitter.com:{savefrom-helper-extension:1,ScribeTransport:{\internal_referer\:\/\,\client_version\:\macaw-swift\,\event_namespace\:{\client\:\web\,\page\"
Pattern match: "https://analytics.twitter.com/tpm/p\\\,\\\browser\\\:{\\\mozilla\\\:true,\\\version\\\:\\\54.0\\\,\\\name\\\:\\\mozilla\\\},\\\response_size\\\:2}\,\_category_\:\perftown\},{\internal_referer\:\/\,\client_version\:\macaw-swift\,"
Pattern match: "https://abs.twimg.com/favicons/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAbsBAAAAFGh0dHBzOi8vdHdpdHRlci5jb20vAAAAAAAAAAUAAAAIAAAACwAAAAj/////AAAACP////8AAAAIAAAA"
Pattern match: "www.work.ua,value:b,path:/,name:b,originAttributes:{addonId:,appId:0,firstPartyDomain:,inIsolatedMozBrowser:false,privateBrowsingId:0,userContextId:0}},{host:.playground.ru,value:3gpfmdi0230t8l7mo08j2644a4,path:/,"
Pattern match: "https://start.parimatch.com/ua/build/?btag=a_9155b_683c_{866},title:Parimatch,charset:UTF-8,ID:837,docshellUUID:{33caf37a-abac-444b-b694-8cbc51e03538},referrer:http://www.mxttrf.com/ads?key=99f3b63091e59703ff6a3eff497c95e2&ch=&width=0&hei"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/,title"
Pattern match: "http://www.repetitor.ua/repetitory/all/kharkov/,referrerPolicy:1,originalURI:http://www.repetitor.ua/kursy/all/kharkov/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAF"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=2,title"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/,referrerPolicy:1,originalURI:http://www.repetitor.ua/kursy/all/kharkov/?page=2,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAA"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=3,title"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=2,referrerPolicy:1,originalURI:http://www.repetitor.ua/kursy/all/kharkov/?page=3,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=4,title"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=3,referrerPolicy:1,originalURI:http://www.repetitor.ua/kursy/all/kharkov/?page=4,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=5,title"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=4,referrerPolicy:1,originalURI:http://www.repetitor.ua/kursy/all/kharkov/?page=5,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=6,title"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=5,referrerPolicy:1,originalURI:http://www.repetitor.ua/kursy/all/kharkov/?page=6,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=7,title"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=6,referrerPolicy:1,originalURI:http://www.repetitor.ua/kursy/all/kharkov/?page=7,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=8,title"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=7,referrerPolicy:1,originalURI:http://www.repetitor.ua/kursy/all/kharkov/?page=8,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=9,title"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=8,referrerPolicy:1,originalURI:http://www.repetitor.ua/kursy/all/kharkov/?page=9,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=10,title"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=9,referrerPolicy:1,originalURI:http://www.repetitor.ua/kursy/all/kharkov/?page=10,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC"
Pattern match: "http://www.repetitor.ua:{savefrom-helper-extension:1}},image:http://www.repetitor.ua/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAKmh0dHA6Ly93d3cucm"
Pattern match: "http://nadiausp.repetitor.ua/,title"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=8,referrerPolicy:1,originalURI:http://nadiausp.repetitor.ua/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAMWh0d"
Pattern match: "http://nadiausp.repetitor.ua:{savefrom-helper-extension:1}},scroll:{scroll:0,1254},image:http://www.repetitor.ua/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC"
Pattern match: "http://www.repetitor.ua/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAHWh0dHA6Ly9uYWRpYXVzcC5yZXBldGl0b3IudWEvAAAAAAAAAAQAAAAHAAAAFQAAAAf/////AAAAB/////8AAAA"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=8,referrerPolicy:1,originalURI:http://obrazovanue2012.repetitor.ua/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAA"
Pattern match: "http://obrazovanue2012.repetitor.ua:{savefrom-helper-extension:1}},scroll:{scroll:0,912},image:http://www.repetitor.ua/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCM"
Pattern match: "http://www.repetitor.ua/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAJGh0dHA6Ly9vYnJhem92YW51ZTIwMTIucmVwZXRpdG9yLnVhLwAAAAAAAAAEAAAABwAAABwAAAAH/////wAAAAf"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=8,referrerPolicy:1,originalURI:http://saltovka.repetitor.ua/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAMWh0d"
Pattern match: "http://saltovka.repetitor.ua:{savefrom-helper-extension:1}},scroll:{scroll:0,1140},image:http://www.repetitor.ua/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC"
Pattern match: "http://www.repetitor.ua/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAHWh0dHA6Ly9zYWx0b3ZrYS5yZXBldGl0b3IudWEvAAAAAAAAAAQAAAAHAAAAFQAAAAf/////AAAAB/////8AAAA"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=7,referrerPolicy:1,originalURI:http://moreturov.repetitor.ua/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAMWh0"
Pattern match: "http://moreturov.repetitor.ua:{savefrom-helper-extension:1}},scroll:{scroll:0,456},image:http://www.repetitor.ua/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC"
Pattern match: "http://www.repetitor.ua/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAHmh0dHA6Ly9tb3JldHVyb3YucmVwZXRpdG9yLnVhLwAAAAAAAAAEAAAABwAAABYAAAAH/////wAAAAf/////AAA"
Pattern match: "http://www.repetitor.ua/kursy/all/kharkov/?page=4,referrerPolicy:1,originalURI:http://fotoshkola.repetitor.ua/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAMWh"
Pattern match: "http://fotoshkola.repetitor.ua:{savefrom-helper-extension:1}},scroll:{scroll:0,114},image:http://www.repetitor.ua/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAA"
Pattern match: "http://www.repetitor.ua/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAH2h0dHA6Ly9mb3Rvc2hrb2xhLnJlcGV0aXRvci51YS8AAAAAAAAABAAAAAcAAAAXAAAAB/////8AAAAH/////wA"
Pattern match: "http://sweeter.in.ua/,referrerPolicy:1,originalURI:http://sweeter.in.ua/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAFWh0dHA6Ly9zd2VldGVyLmluLnVhLwAAAAAAAAAEA"
Pattern match: "http://sweeter.in.ua:{savefrom-helper-extension:1}},scroll:{scroll:0,5866},image:http://sweeter.in.ua/images/touch/chrome-touch-icon-192x192.png,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRt"
Pattern match: "http://sweeter.in.ua/images/touch/chrome-touch-icon-192x192.png,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAFWh0dHA6Ly9zd2VldGVyLmluLnVhLwAAAAAAAAAEAAAABwAAAA0AAAAH///"
Pattern match: "http://sweeter.057.ua/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAbsBAAAAKGh0dHBzOi8vd3d3LjA1Ny51YS9jYXRhbG9nLzE3L3N1YmNhdC8yMzUAAAAAAAAABQAAAAgAAAAKAAAACP////8AAAAI/////"
Pattern match: "http://sweeter.057.ua/products,charset:UTF-8,ID:126,docshellUUID:{7ddca669-e9e9-475a-bfad-bf6f5a8b13ca},referrer:http://sweeter.057.ua/,referrerPolicy:1,originalURI:http://sweeter.057.ua/products,triggeringPrincipal_b64:ZT4OTT7kRfqy"
Pattern match: "http://sweeter.057.ua/page/kursy-barista,charset:UTF-8,ID:127,docshellUUID:{7ddca669-e9e9-475a-bfad-bf6f5a8b13ca},referrer:http://sweeter.057.ua/products,referrerPolicy:1,originalURI:http://sweeter.057.ua/page/kursy-barista,triggering"
Pattern match: "http://sweeter.057.ua/,title:Sweeter"
Pattern match: "http://sweeter.057.ua/page/kursy-barista,referrerPolicy:1,originalURI:http://sweeter.057.ua/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAKGh0dHA6Ly9zd2VldGVyL"
Pattern match: "http://sweeter.057.ua/page/nashi-adresa-i-grafik-raboty,charset:UTF-8,ID:677,docshellUUID:{7ddca669-e9e9-475a-bfad-bf6f5a8b13ca},referrer:http://sweeter.057.ua/,referrerPolicy:1,originalURI:http://sweeter.057.ua/page/nashi-adresa-i-graf"
Pattern match: "http://sweeter.057.ua:{savefrom-helper-extension:1}},scroll:{scroll:0,741},image:null,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAFmh0dHA6Ly9zd2VldGVyLjA1N"
Pattern match: "https://www.057.ua/vacancy/3314552,charset:UTF-8,ID:146,docshellUUID:{7485e9c8-85ed-4001-90a5-6f93d448bd83},referrer:https://www.057.ua/vacancy/index?education=&experience_job=&graph_job=22&price_from=¤cy=2,referrerPolicy:1,original"
Pattern match: "https://www.057.ua:{savefrom-helper-extension:1}},scroll:{scroll:0,342},image:https://www.s.057.ua/section/favicon/upload/pers/16/favicon.png,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8"
Pattern match: "https://www.olx.ua/obyavlenie/shkola-barmenov-bar-boss-kursy-barmenov-ofitsiantov-barista-ID5wD0h.html,title"
Pattern match: "https://www.olx.ua:{savefrom-helper-extension:1}},image:https://s2.olx.ua/static/olxua/naspersclassifieds-regional/olxeu-atlas-web-olxua/static/img/favicon.ico?v=4,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQA"
Pattern match: "https://s2.olx.ua/static/olxua/naspersclassifieds-regional/olxeu-atlas-web-olxua/static/img/favicon.ico?v=4,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAbsBAAAAZmh0dHBzOi8vd3d"
Pattern match: "http://www.barland-event.com/ceni/,title"
Pattern match: "http://www.barland-event.com/kursi-barmenov-v-kharkove/,referrerPolicy:1,originalURI:http://www.barland-event.com/ceni/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAF"
Pattern match: "http://www.barland-event.com/kursi-barmenov-v-kharkove/,title"
Pattern match: "http://www.barland-event.com/ceni/,referrerPolicy:1,originalURI:http://www.barland-event.com/kursi-barmenov-v-kharkove/,triggeringPrincipal_b64:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAF"
Pattern match: "http://www.barland-event.com:{savefrom-helper-extension:1}},scroll:{scroll:0,114},image:http://www.barland-event.com/wp-content/uploads/2016/04/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS"
Pattern match: "http://www.barland-event.com/wp-content/uploads/2016/04/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAFABAAAAN2h0dHA6Ly93d3cuYmFybGFuZC1ldmVudC5jb20va3Vyc2ktYmFybWV"
Pattern match: "www.repetitor.ua,value:b,path:/kursy/dances_choreography/kharkov/,name:b,originAttributes:{addonId:,appId:0,firstPartyDomain:,inIsolatedMozBrowser:false,privateBrowsingId:0,userContextId:0}},{host:www.repetitor.ua,value"
Pattern match: "http://schemas.microsoft.com/WMIConfig/2002/State"
Pattern match: "http://www.w3.org/2001/XMLSchema"
Pattern match: "http://www.w3.org/2000/xmlns/"
Pattern match: "http://lovi.fm/mini/?c=1&a=0&r=1&h=250&s=263,49,54,1370,1384,465,108,19,156,223,464,42,226,1638,1636,1658,1648,163"
Pattern match: "https://www.google.com.ua/search?client=firefox-b&biw=1600&bih=767&q=%D1%87%D0%B5%D0%BC+%D0%BF%D0%BE%D1%81%D0%BC%D0%BE%D1%82%D1%80%D0%B5%D1%82%D1%8C+.mat+%D1%84"
Pattern match: "https://www.google.com.ua/search?client=firefox-b&q=freelancer+junko+zane+id&oq=freelancer+junko+zane+id&gs_l=psy-ab.3...53854.53968.0.5458"
Pattern match: "https://www.redditstatic.com/favicon.ico,iconLoadingPrincipal:ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9"
Pattern match: "https://twitter.com:{savefrom-helper-extension:1,ScribeTransport:{\internal_referer\:\/\,\client_version\:\macaw-swift\,\event_namespace\:{\client\:\web\,\page\:\connect\,\section\:\connect\,\component\:\user_recommendation"
Pattern match: "ww.w3.org/2000/xmlns/"
Pattern match: "ww.w3.org/2001/XMLSchema"
Pattern match: "type..hash.net/url.Error"
Pattern match: "type..eq.net/url.Error"
Pattern match: "type..hash.net/url.Userinfo"
Pattern match: "type..eq.net/url.Userinfo"
Pattern match: "type..hash.net/url.URL"
Pattern match: "type..eq.net/url.URL"
Pattern match: "type..hash.net/http/httptrace.GotConnInfo"
Pattern match: "type..eq.net/http/httptrace.GotConnInfo"
Pattern match: "type..hash.net/http/internal.chunkedReader"
Pattern match: "type..eq.net/http/internal.chunkedReader"
Heuristic match: "net/http.(*Client).Do"
Pattern match: "type..hash.net/http.httpError"
Pattern match: "type..hash.net/http.http2PriorityParam"
Pattern match: "type..eq.net/http.http2PriorityParam"
Pattern match: "type..hash.net/http.http2Setting"
Pattern match: "type..hash.net/http.connectMethodKey"
Pattern match: "type..eq.net/http.connectMethodKey"
Pattern match: "type..hash.net/http.responseAndError"
Pattern match: "type..eq.net/http.responseAndError"
Pattern match: "type..hash.net/http.requestAndChan"
Pattern match: "type..eq.net/http.requestAndChan"
Pattern match: "type..hash.net/http.connectMethod"
Pattern match: "type..eq.net/http.connectMethod"
Pattern match: "type..hash.net/http.http2dialCall"
Pattern match: "type..eq.net/http.http2dialCall"
Pattern match: "type..hash.net/http.http2addConnCall"
Pattern match: "type..eq.net/http.http2addConnCall"
Pattern match: "type..hash.net/http.http2StreamError"
Pattern match: "type..hash.net/http.http2WindowUpdateFrame"
Pattern match: "type..eq.net/http.http2WindowUpdateFrame"
Pattern match: "type..hash.net/http.http2PriorityFrame"
Pattern match: "type..eq.net/http.http2PriorityFrame"
Pattern match: "type..hash.net/http.http2RSTStreamFrame"
Pattern match: "type..eq.net/http.http2RSTStreamFrame"
Pattern match: "type..hash.net/http.http2httpError"
Pattern match: "type..eq.net/http.http2httpError"
Pattern match: "type..hash.net/http.http2stickyErrWriter"
Pattern match: "type..eq.net/http.http2stickyErrWriter"
Pattern match: "type..hash.net/http.http2badStringError"
Pattern match: "type..eq.net/http.http2badStringError"
Pattern match: "type..hash.net/http.http2GoAwayError"
Pattern match: "type..eq.net/http.http2GoAwayError"
Pattern match: "type..hash.net/http.http2gzipReader"
Pattern match: "type..eq.net/http.http2gzipReader"
Pattern match: "type..hash.net/http.badStringError"
Pattern match: "type..eq.net/http.badStringError"
Pattern match: "type..hash.net/http.readResult"
Pattern match: "type..eq.net/http.readResult"
Pattern match: "type..hash.net/http.gzipReader"
Pattern match: "type..eq.net/http.gzipReader"
Pattern match: "type..hash.os/exec.Error"
Pattern match: "type..eq.os/exec.Error"
Pattern match: "github.com/pkg/errors.New"
Pattern match: "github.com/pkg/errors.(*fundamental).Error"
Pattern match: "github.com/pkg/errors.(*fundamental).Format"
Pattern match: "github.com/pkg/errors.(*withStack).Format"
Pattern match: "github.com/pkg/errors.Wrap"
Pattern match: "github.com/pkg/errors.(*withMessage).Error"
Pattern match: "github.com/pkg/errors.(*withMessage).Format"
Pattern match: "github.com/pkg/errors.Frame.file"
Pattern match: "github.com/pkg/errors.Frame.line"
Pattern match: "github.com/pkg/errors.Frame.Format"
Pattern match: "github.com/pkg/errors.(*stack).Format"
Pattern match: "github.com/pkg/errors.callers"
Pattern match: "github.com/pkg/errors.funcname"
Pattern match: "github.com/pkg/errors.init"
Pattern match: "github.com/pkg/errors.(*Frame).Format"
Pattern match: "type..hash.github.com/pkg/errors.fundamental"
Pattern match: "type..eq.github.com/pkg/errors.fundamental"
Pattern match: "type..hash.github.com/pkg/errors.withStack"
Pattern match: "type..eq.github.com/pkg/errors.withStack"
Pattern match: "github.com/pkg/errors.(*withStack).Error"
Pattern match: "github.com/pkg/errors.withStack.Error"
Pattern match: "type..hash.github.com/pkg/errors.withMessage"
Pattern match: "type..eq.github.com/pkg/errors.withMessage"
Heuristic match: "regexp/syntax.(*compiler).cat"
Heuristic match: "regexp/syntax.bw"
Pattern match: "golang.org/x/sys/windows.(*DLLError).Error"
Pattern match: "golang.org/x/sys/windows.LoadDLL"
Pattern match: "golang.org/x/sys/windows.(*DLL).FindProc"
Pattern match: "golang.org/x/sys/windows.(*LazyDLL).Load"
Pattern match: "golang.org/x/sys/windows.(*LazyDLL).NewProc"
Pattern match: "golang.org/x/sys/windows.NewLazySystemDLL"
Pattern match: "golang.org/x/sys/windows.(*LazyProc).Find"
Pattern match: "golang.org/x/sys/windows.(*LazyProc).mustFind"
Pattern match: "golang.org/x/sys/windows.(*LazyProc).Addr"
Pattern match: "golang.org/x/sys/windows.initCanDoSearchSystem32"
Pattern match: "golang.org/x/sys/windows.canDoSearchSystem32"
Pattern match: "golang.org/x/sys/windows.isBaseName"
Pattern match: "golang.org/x/sys/windows.loadLibraryEx"
Pattern match: "golang.org/x/sys/windows.errString.Error"
Pattern match: "golang.org/x/sys/windows.Getenv"
Pattern match: "golang.org/x/sys/windows.CloseOnExec"
Pattern match: "golang.org/x/sys/windows.ByteSliceFromString"
Pattern match: "golang.org/x/sys/windows.BytePtrFromString"
Pattern match: "golang.org/x/sys/windows.UTF16FromString"
Pattern match: "golang.org/x/sys/windows.UTF16PtrFromString"
Pattern match: "golang.org/x/sys/windows.getStdHandle"
Pattern match: "golang.org/x/sys/windows.LoadLibraryEx"
Pattern match: "golang.org/x/sys/windows._LoadLibraryEx"
Pattern match: "type..eq.golang.org/x/sys/windows.Proc"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CachedFirewall"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetFirewall"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).InitializeFirewall"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).Defender"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CachedDefender"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetDefender"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).InitializeDefender"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).Server"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CachedServer"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetServer"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).UUID"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CachedUUID"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetUUID"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).LatestCommand"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CachedLatestCommand"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetLatestCommand"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).Miner"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetMiner"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).LargeMemoryPages"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetLargeMemoryPages"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CPU"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CachedCPU"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetCPU"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).GPU"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CachedGPU"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetGPU"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).OSCaption"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CachedOSCaption"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetOSCaption"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).OSArchitecture"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CachedOSArchitecture"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetOSArchitecture"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).AV"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CachedAV"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetAV"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).IsAdmin"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CachedIsAdmin"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetIsAdmin"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.init"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.SplitKeyAndPath"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.CreateKey"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.DeleteKey"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.GetStringValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.SetStringValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.GetStringsValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.SetStringsValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.GetUint64Value"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.SetUint64Value"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.AddToStartup"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.FirewallRuleExists"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.registryStorage.GetStringValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.registryStorage.SetStringValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.registryStorage.GetStringsValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.registryStorage.SetStringsValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.registryStorage.GetUint64Value"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.registryStorage.SetUint64Value"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.NewRegistryStorage"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.init"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.(*registryStorage).GetStringValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.(*registryStorage).SetStringValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.(*registryStorage).GetStringsValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.(*registryStorage).SetStringsValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.(*registryStorage).GetUint64Value"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.(*registryStorage).SetUint64Value"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/winapi.IsLocalUserAdmin"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/winapi.init"
Pattern match: "github.com/go-ole/go-ole.coInitializeEx"
Pattern match: "github.com/go-ole/go-ole.CoInitializeEx"
Pattern match: "github.com/go-ole/go-ole.CoUninitialize"
Pattern match: "github.com/go-ole/go-ole.CLSIDFromProgID"
Pattern match: "github.com/go-ole/go-ole.CLSIDFromString"
Pattern match: "github.com/go-ole/go-ole.CreateInstance"
Pattern match: "github.com/go-ole/go-ole.VariantInit"
Pattern match: "github.com/go-ole/go-ole.VariantClear"
Pattern match: "github.com/go-ole/go-ole.SysAllocStringLen"
Pattern match: "github.com/go-ole/go-ole.SysFreeString"
Pattern match: "github.com/go-ole/go-ole.SysStringLen"
Pattern match: "github.com/go-ole/go-ole.GetUserDefaultLCID"
Pattern match: "github.com/go-ole/go-ole.GetVariantDate"
Pattern match: "github.com/go-ole/go-ole.(*OleError).String"
Pattern match: "github.com/go-ole/go-ole.(*OleError).Error"
Pattern match: "github.com/go-ole/go-ole.errstr"
Pattern match: "github.com/go-ole/go-ole.NewGUID"
Pattern match: "github.com/go-ole/go-ole.decodeHexUint32"
Pattern match: "github.com/go-ole/go-ole.decodeHexUint16"
Pattern match: "github.com/go-ole/go-ole.decodeHexByte64"
Pattern match: "github.com/go-ole/go-ole.decodeHexByte"
Pattern match: "github.com/go-ole/go-ole.(*GUID).String"
Pattern match: "github.com/go-ole/go-ole.putUint32Hex"
Pattern match: "github.com/go-ole/go-ole.putByteHex"
Pattern match: "github.com/go-ole/go-ole.(*IDispatch).GetIDsOfName"
Pattern match: "github.com/go-ole/go-ole.(*IDispatch).Invoke"
Pattern match: "github.com/go-ole/go-ole.(*IDispatch).GetSingleIDOfName"
Pattern match: "github.com/go-ole/go-ole.(*IDispatch).InvokeWithOptionalArgs"
Pattern match: "github.com/go-ole/go-ole.(*IDispatch).GetProperty"
Pattern match: "github.com/go-ole/go-ole.getIDsOfName"
Pattern match: "github.com/go-ole/go-ole.invoke"
Pattern match: "github.com/go-ole/go-ole.(*IEnumVARIANT).Next"
Pattern match: "github.com/go-ole/go-ole.(*IUnknown).PutQueryInterface"
Pattern match: "github.com/go-ole/go-ole.(*IUnknown).IEnumVARIANT"
Pattern match: "github.com/go-ole/go-ole.(*IUnknown).QueryInterface"
Pattern match: "github.com/go-ole/go-ole.(*IUnknown).Release"
Pattern match: "github.com/go-ole/go-ole.reflectQueryInterface"
Pattern match: "github.com/go-ole/go-ole.queryInterface"
Pattern match: "github.com/go-ole/go-ole.release"
Pattern match: "github.com/go-ole/go-ole.EXCEPINFO.String"
Pattern match: "github.com/go-ole/go-ole.EXCEPINFO.Error"
Pattern match: "github.com/go-ole/go-ole.safeArrayCreateVector"
Pattern match: "github.com/go-ole/go-ole.safeArrayGetElement"
Pattern match: "github.com/go-ole/go-ole.safeArrayGetLBound"
Pattern match: "github.com/go-ole/go-ole.safeArrayGetUBound"
Pattern match: "github.com/go-ole/go-ole.safeArrayGetVartype"
Pattern match: "github.com/go-ole/go-ole.safeArrayPutElement"
Pattern match: "github.com/go-ole/go-ole.(*SafeArrayConversion).ToValueArray"
Pattern match: "github.com/go-ole/go-ole.(*SafeArrayConversion).TotalElements"
Pattern match: "github.com/go-ole/go-ole.safeArrayFromByteSlice"
Pattern match: "github.com/go-ole/go-ole.safeArrayFromStringSlice"
Pattern match: "github.com/go-ole/go-ole.ClassIDFrom"
Pattern match: "github.com/go-ole/go-ole.LpOleStrToString"
Pattern match: "github.com/go-ole/go-ole.BstrToString"
Pattern match: "github.com/go-ole/go-ole.lpOleStrLen"
Pattern match: "github.com/go-ole/go-ole.(*VARIANT).ToString"
Pattern match: "github.com/go-ole/go-ole.(*VARIANT).Clear"
Pattern match: "github.com/go-ole/go-ole.(*VARIANT).Value"
Pattern match: "github.com/go-ole/go-ole.VT.String"
Pattern match: "github.com/go-ole/go-ole.init"
Pattern match: "github.com/go-ole/go-ole.(*VT).String"
Pattern match: "type..hash.github.com/go-ole/go-ole.OleError"
Pattern match: "type..eq.github.com/go-ole/go-ole.OleError"
Pattern match: "github.com/go-ole/go-ole.(*EXCEPINFO).String"
Pattern match: "github.com/go-ole/go-ole.(*EXCEPINFO).Error"
Pattern match: "github.com/go-ole/go-ole/oleutil.CreateObject"
Pattern match: "github.com/go-ole/go-ole/oleutil.CallMethod"
Pattern match: "github.com/go-ole/go-ole/oleutil.GetProperty"
Pattern match: "github.com/go-ole/go-ole/oleutil.init"
Pattern match: "github.com/StackExchange/wmi.(*SWbemServices).Close"
Pattern match: "github.com/StackExchange/wmi.(*SWbemServices).Query"
Pattern match: "github.com/StackExchange/wmi.Query"
Pattern match: "github.com/StackExchange/wmi.(*Client).Query"
Pattern match: "github.com/StackExchange/wmi.(*ErrFieldMismatch).Error"
Pattern match: "github.com/StackExchange/wmi.(*Client).loadEntity"
Pattern match: "github.com/StackExchange/wmi.checkMultiArg"
Pattern match: "github.com/StackExchange/wmi.oleInt64"
Pattern match: "github.com/StackExchange/wmi.(*Client).Query.func1"
Pattern match: "github.com/StackExchange/wmi.init"
Pattern match: "type..hash.github.com/StackExchange/wmi.Client"
Pattern match: "type..eq.github.com/StackExchange/wmi.Client"
Pattern match: "type..hash.github.com/StackExchange/wmi.ErrFieldMismatch"
Pattern match: "type..eq.github.com/StackExchange/wmi.ErrFieldMismatch"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/wmi.ProcessIsRunning"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/wmi.GetOSCaption"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/wmi.GetOSArchitecture"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/wmi.GetCPU"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/wmi.GetGPU"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/wmi.GetAV"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/wmi.init"
Pattern match: "github.com/yelinaung/go-haikunator.RandomName.Haikunate"
Pattern match: "github.com/yelinaung/go-haikunator.New"
Pattern match: "github.com/yelinaung/go-haikunator.init"
Pattern match: "github.com/yelinaung/go-haikunator.(*RandomName).Haikunate"
Heuristic match: "archive/zip.headerFileInfo.Name"
Heuristic match: "archive/zip.(*headerFileInfo).Name"
Pattern match: "github.com/kardianos/osext.executableClean"
Pattern match: "type..hash.github.com/GeertJohan/go.rice/embedded.EmbeddedFile"
Pattern match: "type..eq.github.com/GeertJohan/go.rice/embedded.EmbeddedFile"
Pattern match: "github.com/GeertJohan/go%2erice.init.1"
Pattern match: "github.com/GeertJohan/go%2erice.(*appendedDirInfo).Name"
Pattern match: "github.com/GeertJohan/go%2erice.(*appendedDirInfo).Size"
Pattern match: "github.com/GeertJohan/go%2erice.(*appendedDirInfo).Mode"
Pattern match: "github.com/GeertJohan/go%2erice.(*appendedDirInfo).ModTime"
Pattern match: "github.com/GeertJohan/go%2erice.(*appendedDirInfo).IsDir"
Pattern match: "github.com/GeertJohan/go%2erice.(*appendedDirInfo).Sys"
Pattern match: "github.com/GeertJohan/go%2erice.findBox"
Pattern match: "github.com/GeertJohan/go%2erice.MustFindBox"
Pattern match: "github.com/GeertJohan/go%2erice.(*Box).resolveAbsolutePathFromCaller"
Pattern match: "github.com/GeertJohan/go%2erice.(*Box).resolveAbsolutePathFromWorkingDirectory"
Pattern match: "github.com/GeertJohan/go%2erice.(*Box).Open"
Pattern match: "github.com/GeertJohan/go%2erice.(*Box).Bytes"
Pattern match: "github.com/GeertJohan/go%2erice.(*Box).MustBytes"
Pattern match: "github.com/GeertJohan/go%2erice.(*Box).Name"
Pattern match: "github.com/GeertJohan/go%2erice.(*File).Close"
Pattern match: "github.com/GeertJohan/go%2erice.(*File).Read"
Pattern match: "github.com/GeertJohan/go%2erice.(*File).Seek"
Pattern match: "github.com/GeertJohan/go%2erice.(*virtualFile).read"
Pattern match: "github.com/GeertJohan/go%2erice.glob..func1"
Pattern match: "github.com/GeertJohan/go%2erice.init"
Pattern match: "type..hash.github.com/GeertJohan/go%2erice.appendedDirInfo"
Pattern match: "type..eq.github.com/GeertJohan/go%2erice.appendedDirInfo"
Pattern match: "type..hash.github.com/GeertJohan/go%2erice.Box"
Pattern match: "type..eq.github.com/GeertJohan/go%2erice.Box"
Pattern match: "type..hash.github.com/GeertJohan/go%2erice.virtualFile"
Pattern match: "type..eq.github.com/GeertJohan/go%2erice.virtualFile"
Pattern match: "type..hash.github.com/GeertJohan/go%2erice.virtualDir"
Pattern match: "type..eq.github.com/GeertJohan/go%2erice.virtualDir"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/rice-box.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/install.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/file.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/main.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/elevate.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.go"
Pattern match: "github.com/GeertJohan/go.rice/walk.go"
Pattern match: "github.com/GeertJohan/go.rice/virtual.go"
Pattern match: "github.com/GeertJohan/go.rice/file.go"
Pattern match: "github.com/GeertJohan/go.rice/box.go"
Pattern match: "github.com/GeertJohan/go.rice/appended.go"
Pattern match: "github.com/GeertJohan/go.rice/embedded/embedded.go"
Pattern match: "github.com/kardianos/osext/osext_go18.go"
Pattern match: "github.com/kardianos/osext/osext.go"
Pattern match: "github.com/daaku/go.zipexe/zipexe.go"
Pattern match: "github.com/yelinaung/go-haikunator/haikunator.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/wmi/wmi.go"
Pattern match: "github.com/StackExchange/wmi/wmi.go"
Pattern match: "github.com/StackExchange/wmi/swbemservices.go"
Pattern match: "github.com/go-ole/go-ole/oleutil/oleutil.go"
Pattern match: "github.com/go-ole/go-ole/variables.go"
Pattern match: "github.com/go-ole/go-ole/winrt.go"
Pattern match: "github.com/go-ole/go-ole/vt_string.go"
Pattern match: "github.com/go-ole/go-ole/variant.go"
Pattern match: "github.com/go-ole/go-ole/utility.go"
Pattern match: "github.com/go-ole/go-ole/safearrayslices.go"
Pattern match: "github.com/go-ole/go-ole/safearrayconversion.go"
Pattern match: "github.com/go-ole/go-ole/safearray_windows.go"
Pattern match: "github.com/go-ole/go-ole/ole.go"
Pattern match: "github.com/go-ole/go-ole/iunknown_windows.go"
Pattern match: "github.com/go-ole/go-ole/iunknown.go"
Pattern match: "github.com/go-ole/go-ole/ienumvariant_windows.go"
Pattern match: "github.com/go-ole/go-ole/idispatch_windows.go"
Pattern match: "github.com/go-ole/go-ole/idispatch.go"
Pattern match: "github.com/go-ole/go-ole/guid.go"
Pattern match: "github.com/go-ole/go-ole/error_windows.go"
Pattern match: "github.com/go-ole/go-ole/error.go"
Pattern match: "github.com/go-ole/go-ole/com.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/winapi/winapi.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry/registry_storage.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry/registry.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config/config.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config/storage.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config/os_info.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config/hw_info.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config/app_info.go"
Pattern match: "golang.org/x/sys/windows/registry/zsyscall_windows.go"
Pattern match: "golang.org/x/sys/windows/registry/value.go"
Pattern match: "golang.org/x/sys/windows/registry/key.go"
Pattern match: "golang.org/x/sys/windows/asm_windows_386.s"
Pattern match: "golang.org/x/sys/windows/ztypes_windows_386.go"
Pattern match: "golang.org/x/sys/windows/zsyscall_windows.go"
Pattern match: "golang.org/x/sys/windows/syscall_windows.go"
Pattern match: "golang.org/x/sys/windows/syscall.go"
Pattern match: "golang.org/x/sys/windows/exec_windows.go"
Pattern match: "golang.org/x/sys/windows/env_windows.go"
Pattern match: "golang.org/x/sys/windows/dll_windows.go"
Pattern match: "github.com/pkg/errors/stack.go"
Pattern match: "github.com/pkg/errors/errors.go"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/command.go"
Pattern match: "github.com/pkg/errors.fundamental,error"
Pattern match: "github.com/pkg/errors.withStack,error"
Pattern match: "github.com/pkg/errors.withMessage,error"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.ErrEmptyPath"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.firewallCustomRuleRegexp"
Pattern match: "golang.org/x/sys/windows/registry.ErrNotExist"
Pattern match: "go.itab.git.anyget.ru/root/goscripts/bot/new/bot/registry.registryStorage,git.anyget.ru/root/goscripts/bot/new/bot/config.Storage"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/winapi.statictmp_7"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/winapi.usrNetUserGetInfo"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/winapi.usrNetApiBufferFree"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/winapi.modNetapi32"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/wmi.nonASCIIRegexp"
Pattern match: "github.com/yelinaung/go-haikunator.ADJECTIVES"
Pattern match: "github.com/yelinaung/go-haikunator.NOUNS"
Pattern match: "go.itab.github.com/yelinaung/go-haikunator.RandomName,github.com/yelinaung/go-haikunator.Name"
Pattern match: "github.com/yelinaung/go-haikunator.statictmp_23"
Pattern match: "github.com/yelinaung/go-haikunator.statictmp_24"
Pattern match: "github.com/kardianos/osext.cx"
Pattern match: "github.com/kardianos/osext.ce"
Pattern match: "github.com/GeertJohan/go%2erice.appendedBoxes"
Pattern match: "github.com/GeertJohan/go.rice/embedded.EmbeddedBoxes"
Pattern match: "github.com/GeertJohan/go%2erice.defaultLocateOrder"
Pattern match: "github.com/GeertJohan/go%2erice.resolveAbsolutePathFromCaller"
Pattern match: "github.com/GeertJohan/go%2erice.Debug"
Pattern match: "github.com/GeertJohan/go%2erice.File,io.Reader"
Pattern match: "github.com/GeertJohan/go%2erice.ErrNotImplemented"
Pattern match: "github.com/GeertJohan/go%2erice.statictmp_548"
Pattern match: "github.com/GeertJohan/go%2erice.statictmp_564"
Heuristic match: "unicode.Cc"
Heuristic match: "unicode.Cf"
Heuristic match: "unicode.Co"
Heuristic match: "unicode.Lt"
Heuristic match: "unicode.Lu"
Heuristic match: "unicode.Mc"
Heuristic match: "unicode.Me"
Heuristic match: "unicode.Mn"
Heuristic match: "unicode.Nl"
Heuristic match: "unicode.No"
Heuristic match: "unicode.Pe"
Heuristic match: "unicode.Pf"
Heuristic match: "unicode.Ps"
Heuristic match: "unicode.Sc"
Heuristic match: "unicode.Sk"
Heuristic match: "unicode.Sm"
Heuristic match: "unicode.So"
Pattern match: "go.itab.net/textproto.ProtocolError,error"
Pattern match: "golang.org/x/sys/windows/registry.procRegLoadMUIStringW"
Pattern match: "golang.org/x/sys/windows/registry.ErrUnexpectedType"
Pattern match: "golang.org/x/sys/windows/registry.procRegCreateKeyExW"
Pattern match: "golang.org/x/sys/windows/registry.procRegDeleteKeyW"
Pattern match: "golang.org/x/sys/windows/registry.procRegSetValueExW"
Pattern match: "golang.org/x/sys/windows/registry.procRegEnumValueW"
Pattern match: "golang.org/x/sys/windows/registry.procRegDeleteValueW"
Pattern match: "golang.org/x/sys/windows/registry.procRegConnectRegistryW"
Pattern match: "golang.org/x/sys/windows/registry.procExpandEnvironmentStringsW"
Pattern match: "golang.org/x/sys/windows/registry.modadvapi32"
Pattern match: "golang.org/x/sys/windows/registry.modkernel32"
Pattern match: "github.com/go-ole/go-ole.IID_IDispatch"
Pattern match: "github.com/StackExchange/wmi.ErrNilCreateObject"
Pattern match: "github.com/StackExchange/wmi.ErrInvalidEntityType"
Pattern match: "github.com/go-ole/go-ole.IID_IEnumVariant"
Pattern match: "github.com/StackExchange/wmi.DefaultClient"
Pattern match: "github.com/StackExchange/wmi.lock"
Pattern match: "github.com/StackExchange/wmi.ErrFieldMismatch,error"
Pattern match: "github.com/StackExchange/wmi.timeType"
Pattern match: "github.com/StackExchange/wmi.l"
Pattern match: "github.com/StackExchange/wmi.statictmp_237"
Heuristic match: "archive/zip.mu"
Pattern match: "golang.org/x/sys/windows.DLLError,error"
Pattern match: "golang.org/x/sys/windows.statictmp_20"
Pattern match: "golang.org/x/sys/windows.modkernel32"
Pattern match: "golang.org/x/sys/windows.canDoSearchSystem32Once"
Pattern match: "go.itab.golang.org/x/sys/windows.errString,error"
Pattern match: "golang.org/x/sys/windows.procGetSystemTimePreciseAsFileTime"
Pattern match: "golang.org/x/sys/windows.procCancelIoEx"
Pattern match: "golang.org/x/sys/windows.procSetFileCompletionNotificationModes"
Pattern match: "golang.org/x/sys/windows.procGetAddrInfoW"
Pattern match: "golang.org/x/sys/windows.procCreateSymbolicLinkW"
Pattern match: "golang.org/x/sys/windows.errERROR_IO_PENDING"
Pattern match: "golang.org/x/sys/windows.procRegisterEventSourceW"
Pattern match: "golang.org/x/sys/windows.procDeregisterEventSource"
Pattern match: "golang.org/x/sys/windows.procReportEventW"
Pattern match: "golang.org/x/sys/windows.procOpenSCManagerW"
Pattern match: "golang.org/x/sys/windows.procCloseServiceHandle"
Pattern match: "golang.org/x/sys/windows.procCreateServiceW"
Pattern match: "golang.org/x/sys/windows.procOpenServiceW"
Pattern match: "golang.org/x/sys/windows.procDeleteService"
Pattern match: "golang.org/x/sys/windows.procStartServiceW"
Pattern match: "golang.org/x/sys/windows.procQueryServiceStatus"
Pattern match: "golang.org/x/sys/windows.procControlService"
Pattern match: "golang.org/x/sys/windows.procStartServiceCtrlDispatcherW"
Pattern match: "golang.org/x/sys/windows.procSetServiceStatus"
Pattern match: "golang.org/x/sys/windows.procChangeServiceConfigW"
Pattern match: "golang.org/x/sys/windows.procQueryServiceConfigW"
Pattern match: "golang.org/x/sys/windows.procChangeServiceConfig2W"
Pattern match: "golang.org/x/sys/windows.procQueryServiceConfig2W"
Pattern match: "golang.org/x/sys/windows.procEnumServicesStatusExW"
Pattern match: "golang.org/x/sys/windows.procGetLastError"
Pattern match: "golang.org/x/sys/windows.procLoadLibraryW"
Pattern match: "golang.org/x/sys/windows.procLoadLibraryExW"
Pattern match: "golang.org/x/sys/windows.procFreeLibrary"
Pattern match: "golang.org/x/sys/windows.procGetProcAddress"
Pattern match: "golang.org/x/sys/windows.procGetVersion"
Pattern match: "golang.org/x/sys/windows.procFormatMessageW"
Pattern match: "golang.org/x/sys/windows.procExitProcess"
Pattern match: "golang.org/x/sys/windows.procCreateFileW"
Pattern match: "golang.org/x/sys/windows.procReadFile"
Pattern match: "golang.org/x/sys/windows.procWriteFile"
Pattern match: "golang.org/x/sys/windows.procSetFilePointer"
Pattern match: "golang.org/x/sys/windows.procCloseHandle"
Pattern match: "golang.org/x/sys/windows.procGetStdHandle"
Pattern match: "golang.org/x/sys/windows.procSetStdHandle"
Pattern match: "golang.org/x/sys/windows.procFindFirstFileW"
Pattern match: "golang.org/x/sys/windows.procFindNextFileW"
Pattern match: "golang.org/x/sys/windows.procFindClose"
Pattern match: "golang.org/x/sys/windows.procGetFileInformationByHandle"
Pattern match: "golang.org/x/sys/windows.procGetCurrentDirectoryW"
Pattern match: "golang.org/x/sys/windows.procSetCurrentDirectoryW"
Pattern match: "golang.org/x/sys/windows.procCreateDirectoryW"
Pattern match: "golang.org/x/sys/windows.procRemoveDirectoryW"
Pattern match: "golang.org/x/sys/windows.procDeleteFileW"
Pattern match: "golang.org/x/sys/windows.procMoveFileW"
Pattern match: "golang.org/x/sys/windows.procMoveFileExW"
Pattern match: "golang.org/x/sys/windows.procGetComputerNameW"
Pattern match: "golang.org/x/sys/windows.procGetComputerNameExW"
Pattern match: "golang.org/x/sys/windows.procSetEndOfFile"
Pattern match: "golang.org/x/sys/windows.procGetSystemTimeAsFileTime"
Pattern match: "golang.org/x/sys/windows.procGetTimeZoneInformation"
Pattern match: "golang.org/x/sys/windows.procCreateIoCompletionPort"
Pattern match: "golang.org/x/sys/windows.procGetQueuedCompletionStatus"
Pattern match: "golang.org/x/sys/windows.procPostQueuedCompletionStatus"
Pattern match: "golang.org/x/sys/windows.procCancelIo"
Pattern match: "golang.org/x/sys/windows.procCreateProcessW"
Pattern match: "golang.org/x/sys/windows.procOpenProcess"
Pattern match: "golang.org/x/sys/windows.procTerminateProcess"
Pattern match: "golang.org/x/sys/windows.procGetExitCodeProcess"
Pattern match: "golang.org/x/sys/windows.procGetStartupInfoW"
Pattern match: "golang.org/x/sys/windows.procGetCurrentProcess"
Pattern match: "golang.org/x/sys/windows.procGetProcessTimes"
Pattern match: "golang.org/x/sys/windows.procDuplicateHandle"
Pattern match: "golang.org/x/sys/windows.procWaitForSingleObject"
Pattern match: "golang.org/x/sys/windows.procGetTempPathW"
Pattern match: "golang.org/x/sys/windows.procCreatePipe"
Pattern match: "golang.org/x/sys/windows.procGetFileType"
Pattern match: "golang.org/x/sys/windows.procCryptAcquireContextW"
Pattern match: "golang.org/x/sys/windows.procCryptReleaseContext"
Pattern match: "golang.org/x/sys/windows.procCryptGenRandom"
Pattern match: "golang.org/x/sys/windows.procGetEnvironmentStringsW"
Pattern match: "golang.org/x/sys/windows.procFreeEnvironmentStringsW"
Pattern match: "golang.org/x/sys/windows.procGetEnvironmentVariableW"
Pattern match: "golang.org/x/sys/windows.procSetEnvironmentVariableW"
Pattern match: "golang.org/x/sys/windows.procSetFileTime"
Pattern match: "golang.org/x/sys/windows.procGetFileAttributesW"
Pattern match: "golang.org/x/sys/windows.procSetFileAttributesW"
Pattern match: "golang.org/x/sys/windows.procGetFileAttributesExW"
Pattern match: "golang.org/x/sys/windows.procGetCommandLineW"
Pattern match: "golang.org/x/sys/windows.procCommandLineToArgvW"
Pattern match: "golang.org/x/sys/windows.procLocalFree"
Pattern match: "golang.org/x/sys/windows.procSetHandleInformation"
Pattern match: "golang.org/x/sys/windows.procFlushFileBuffers"
Pattern match: "golang.org/x/sys/windows.procGetFullPathNameW"
Pattern match: "golang.org/x/sys/windows.procGetLongPathNameW"
Pattern match: "golang.org/x/sys/windows.procGetShortPathNameW"
Pattern match: "golang.org/x/sys/windows.procCreateFileMappingW"
Pattern match: "golang.org/x/sys/windows.procMapViewOfFile"
Pattern match: "golang.org/x/sys/windows.procUnmapViewOfFile"
Pattern match: "golang.org/x/sys/windows.procFlushViewOfFile"
Pattern match: "golang.org/x/sys/windows.procVirtualLock"
Pattern match: "golang.org/x/sys/windows.procVirtualUnlock"
Pattern match: "golang.org/x/sys/windows.procVirtualAlloc"
Pattern match: "golang.org/x/sys/windows.procVirtualFree"
Pattern match: "golang.org/x/sys/windows.procVirtualProtect"
Pattern match: "golang.org/x/sys/windows.procTransmitFile"
Pattern match: "golang.org/x/sys/windows.procReadDirectoryChangesW"
Pattern match: "golang.org/x/sys/windows.procCertOpenSystemStoreW"
Pattern match: "golang.org/x/sys/windows.procCertOpenStore"
Pattern match: "golang.org/x/sys/windows.procCertEnumCertificatesInStore"
Pattern match: "golang.org/x/sys/windows.procCertAddCertificateContextToStore"
Pattern match: "golang.org/x/sys/windows.procCertCloseStore"
Pattern match: "golang.org/x/sys/windows.procCertGetCertificateChain"
Pattern match: "golang.org/x/sys/windows.procCertFreeCertificateChain"
Pattern match: "golang.org/x/sys/windows.procCertCreateCertificateContext"
Pattern match: "golang.org/x/sys/windows.procCertFreeCertificateContext"
Pattern match: "golang.org/x/sys/windows.procCertVerifyCertificateChainPolicy"
Pattern match: "golang.org/x/sys/windows.procRegOpenKeyExW"
Pattern match: "golang.org/x/sys/windows.procRegCloseKey"
Pattern match: "golang.org/x/sys/windows.procRegQueryInfoKeyW"
Pattern match: "golang.org/x/sys/windows.procRegEnumKeyExW"
Pattern match: "golang.org/x/sys/windows.procRegQueryValueExW"
Pattern match: "golang.org/x/sys/windows.procGetCurrentProcessId"
Pattern match: "golang.org/x/sys/windows.procGetConsoleMode"
Pattern match: "golang.org/x/sys/windows.procWriteConsoleW"
Pattern match: "golang.org/x/sys/windows.procReadConsoleW"
Pattern match: "golang.org/x/sys/windows.procCreateToolhelp32Snapshot"
Pattern match: "golang.org/x/sys/windows.procProcess32FirstW"
Pattern match: "golang.org/x/sys/windows.procProcess32NextW"
Pattern match: "golang.org/x/sys/windows.procDeviceIoControl"
Pattern match: "golang.org/x/sys/windows.procCreateHardLinkW"
Pattern match: "golang.org/x/sys/windows.procGetCurrentThreadId"
Pattern match: "golang.org/x/sys/windows.procCreateEventW"
Pattern match: "golang.org/x/sys/windows.procSetEvent"
Pattern match: "golang.org/x/sys/windows.procWSAStartup"
Pattern match: "golang.org/x/sys/windows.procWSACleanup"
Pattern match: "golang.org/x/sys/windows.procWSAIoctl"
Pattern match: "golang.org/x/sys/windows.procsocket"
Pattern match: "golang.org/x/sys/windows.procsetsockopt"
Pattern match: "golang.org/x/sys/windows.procgetsockopt"
Pattern match: "golang.org/x/sys/windows.procbind"
Pattern match: "golang.org/x/sys/windows.procconnect"
Pattern match: "golang.org/x/sys/windows.procgetsockname"
Pattern match: "golang.org/x/sys/windows.procgetpeername"
Pattern match: "golang.org/x/sys/windows.proclisten"
Pattern match: "golang.org/x/sys/windows.procshutdown"
Pattern match: "golang.org/x/sys/windows.procclosesocket"
Pattern match: "golang.org/x/sys/windows.procAcceptEx"
Pattern match: "golang.org/x/sys/windows.procGetAcceptExSockaddrs"
Pattern match: "golang.org/x/sys/windows.procWSARecv"
Pattern match: "golang.org/x/sys/windows.procWSASend"
Pattern match: "golang.org/x/sys/windows.procWSARecvFrom"
Pattern match: "golang.org/x/sys/windows.procWSASendTo"
Pattern match: "golang.org/x/sys/windows.procgethostbyname"
Pattern match: "golang.org/x/sys/windows.procgetservbyname"
Pattern match: "golang.org/x/sys/windows.procntohs"
Pattern match: "golang.org/x/sys/windows.procgetprotobyname"
Pattern match: "golang.org/x/sys/windows.procDnsQuery_W"
Pattern match: "golang.org/x/sys/windows.procDnsRecordListFree"
Pattern match: "golang.org/x/sys/windows.procDnsNameCompare_W"
Pattern match: "golang.org/x/sys/windows.procFreeAddrInfoW"
Pattern match: "golang.org/x/sys/windows.procGetIfEntry"
Pattern match: "golang.org/x/sys/windows.procGetAdaptersInfo"
Pattern match: "golang.org/x/sys/windows.procWSAEnumProtocolsW"
Pattern match: "golang.org/x/sys/windows.procGetAdaptersAddresses"
Pattern match: "golang.org/x/sys/windows.procGetACP"
Pattern match: "golang.org/x/sys/windows.procMultiByteToWideChar"
Pattern match: "golang.org/x/sys/windows.procTranslateNameW"
Pattern match: "golang.org/x/sys/windows.procGetUserNameExW"
Pattern match: "golang.org/x/sys/windows.procNetUserGetInfo"
Pattern match: "golang.org/x/sys/windows.procNetGetJoinInformation"
Pattern match: "golang.org/x/sys/windows.procNetApiBufferFree"
Pattern match: "golang.org/x/sys/windows.procLookupAccountSidW"
Pattern match: "golang.org/x/sys/windows.procLookupAccountNameW"
Pattern match: "golang.org/x/sys/windows.procConvertSidToStringSidW"
Pattern match: "golang.org/x/sys/windows.procConvertStringSidToSidW"
Pattern match: "golang.org/x/sys/windows.procGetLengthSid"
Pattern match: "golang.org/x/sys/windows.procCopySid"
Pattern match: "golang.org/x/sys/windows.procAllocateAndInitializeSid"
Pattern match: "golang.org/x/sys/windows.procFreeSid"
Pattern match: "golang.org/x/sys/windows.procEqualSid"
Pattern match: "golang.org/x/sys/windows.procOpenProcessToken"
Pattern match: "golang.org/x/sys/windows.procGetTokenInformation"
Pattern match: "golang.org/x/sys/windows.procGetUserProfileDirectoryW"
Pattern match: "golang.org/x/sys/windows.Stdin"
Pattern match: "golang.org/x/sys/windows.Stdout"
Pattern match: "golang.org/x/sys/windows.Stderr"
Pattern match: "golang.org/x/sys/windows.modadvapi32"
Pattern match: "golang.org/x/sys/windows.modshell32"
Pattern match: "golang.org/x/sys/windows.modmswsock"
Pattern match: "golang.org/x/sys/windows.modcrypt32"
Pattern match: "golang.org/x/sys/windows.modws2_32"
Pattern match: "golang.org/x/sys/windows.moddnsapi"
Pattern match: "golang.org/x/sys/windows.modiphlpapi"
Pattern match: "golang.org/x/sys/windows.modsecur32"
Pattern match: "golang.org/x/sys/windows.modnetapi32"
Pattern match: "golang.org/x/sys/windows.moduserenv"
Pattern match: "golang.org/x/sys/windows.loadlibrary.args_stackmap"
Pattern match: "golang.org/x/sys/windows.getprocaddress.args_stackmap"
Pattern match: "golang.org/x/sys/windows.statictmp_1670"
Pattern match: "github.com/go-ole/go-ole.procCoInitialize"
Pattern match: "github.com/go-ole/go-ole.OleError,error"
Pattern match: "github.com/go-ole/go-ole.statictmp_55"
Pattern match: "github.com/go-ole/go-ole.procCoInitializeEx"
Pattern match: "github.com/go-ole/go-ole.procCoUninitialize"
Pattern match: "github.com/go-ole/go-ole.procCoTaskMemFree"
Pattern match: "github.com/go-ole/go-ole.procCLSIDFromProgID"
Pattern match: "github.com/go-ole/go-ole.procCLSIDFromString"
Pattern match: "github.com/go-ole/go-ole.procStringFromCLSID"
Pattern match: "github.com/go-ole/go-ole.procIIDFromString"
Pattern match: "github.com/go-ole/go-ole.procStringFromIID"
Pattern match: "github.com/go-ole/go-ole.statictmp_97"
Pattern match: "github.com/go-ole/go-ole.procCoCreateInstance"
Pattern match: "github.com/go-ole/go-ole.IID_IUnknown"
Pattern match: "github.com/go-ole/go-ole.procGetActiveObject"
Pattern match: "github.com/go-ole/go-ole.procVariantInit"
Pattern match: "github.com/go-ole/go-ole.procVariantClear"
Pattern match: "github.com/go-ole/go-ole.procSysAllocString"
Pattern match: "github.com/go-ole/go-ole.procSysAllocStringLen"
Pattern match: "github.com/go-ole/go-ole.procSysFreeString"
Pattern match: "github.com/go-ole/go-ole.procSysStringLen"
Pattern match: "github.com/go-ole/go-ole.procCreateStdDispatch"
Pattern match: "github.com/go-ole/go-ole.procCreateDispTypeInfo"
Pattern match: "github.com/go-ole/go-ole.procCopyMemory"
Pattern match: "github.com/go-ole/go-ole.procGetUserDefaultLCID"
Pattern match: "github.com/go-ole/go-ole.procGetMessageW"
Pattern match: "github.com/go-ole/go-ole.procDispatchMessageW"
Pattern match: "github.com/go-ole/go-ole.procVariantTimeToSystemTime"
Pattern match: "github.com/go-ole/go-ole.IID_NULL"
Pattern match: "go.itab.github.com/go-ole/go-ole.EXCEPINFO,error"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayAccessData"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayUnaccessData"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayAllocData"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayAllocDescriptor"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayAllocDescriptorEx"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayCopy"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayCopyData"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayCreate"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayCreateEx"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayCreateVector"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayCreateVectorEx"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayDestroy"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayDestroyData"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayDestroyDescriptor"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayGetDim"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayGetElemsize"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayGetElement"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayGetIID"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayGetLBound"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayGetUBound"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayGetVartype"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayLock"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayUnlock"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayPutElement"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayGetRecordInfo"
Pattern match: "github.com/go-ole/go-ole.procSafeArraySetRecordInfo"
Pattern match: "github.com/go-ole/go-ole._VT_index_0"
Pattern match: "github.com/go-ole/go-ole._VT_index_1"
Pattern match: "github.com/go-ole/go-ole._VT_index_2"
Pattern match: "github.com/go-ole/go-ole._VT_index_3"
Pattern match: "github.com/go-ole/go-ole._VT_index_4"
Pattern match: "github.com/go-ole/go-ole.procRoInitialize"
Pattern match: "github.com/go-ole/go-ole.procRoActivateInstance"
Pattern match: "github.com/go-ole/go-ole.procRoGetActivationFactory"
Pattern match: "github.com/go-ole/go-ole.procWindowsCreateString"
Pattern match: "github.com/go-ole/go-ole.procWindowsDeleteString"
Pattern match: "github.com/go-ole/go-ole.procWindowsGetStringRawBuffer"
Pattern match: "github.com/go-ole/go-ole.modole32"
Pattern match: "github.com/go-ole/go-ole.modkernel32"
Pattern match: "github.com/go-ole/go-ole.modoleaut32"
Pattern match: "github.com/go-ole/go-ole.moduser32"
Pattern match: "github.com/go-ole/go-ole.IID_IConnectionPointContainer"
Pattern match: "github.com/go-ole/go-ole.IID_IConnectionPoint"
Pattern match: "github.com/go-ole/go-ole.IID_IInspectable"
Pattern match: "github.com/go-ole/go-ole.IID_IProvideClassInfo"
Pattern match: "github.com/go-ole/go-ole.IID_ICOMTestString"
Pattern match: "github.com/go-ole/go-ole.IID_ICOMTestInt8"
Pattern match: "github.com/go-ole/go-ole.IID_ICOMTestInt16"
Pattern match: "github.com/go-ole/go-ole.IID_ICOMTestInt32"
Pattern match: "github.com/go-ole/go-ole.IID_ICOMTestInt64"
Pattern match: "github.com/go-ole/go-ole.IID_ICOMTestFloat"
Pattern match: "github.com/go-ole/go-ole.IID_ICOMTestDouble"
Pattern match: "github.com/go-ole/go-ole.IID_ICOMTestBoolean"
Pattern match: "github.com/go-ole/go-ole.IID_ICOMEchoTestObject"
Pattern match: "github.com/go-ole/go-ole.IID_ICOMTestTypes"
Pattern match: "github.com/go-ole/go-ole.CLSID_COMEchoTestObject"
Pattern match: "github.com/go-ole/go-ole.CLSID_COMTestScalarClass"
Pattern match: "github.com/go-ole/go-ole.procSafeArrayPtrOfIndex"
Pattern match: "github.com/go-ole/go-ole.modcombase"
Pattern match: "github.com/go-ole/go-ole.modmsvcrt"
Pattern match: "github.com/GeertJohan/go%2erice.appendedBox"
Pattern match: "github.com/GeertJohan/go%2erice.appendedFile"
Pattern match: "github.com/GeertJohan/go%2erice.appendedDirInfo"
Pattern match: "github.com/GeertJohan/go.rice/embedded.EmbeddedBox"
Pattern match: "github.com/GeertJohan/go.rice/embedded.EmbeddedFile"
Pattern match: "github.com/GeertJohan/go.rice/embedded.EmbeddedDir"
Pattern match: "github.com/GeertJohan/go%2erice.LocateMethod"
Pattern match: "golang.org/x/sys/windows.LazyProc"
Pattern match: "golang.org/x/sys/windows.LazyDLL"
Pattern match: "golang.org/x/sys/windows.DLL"
Pattern match: "golang.org/x/sys/windows.Handle"
Pattern match: "golang.org/x/sys/windows.Proc"
Pattern match: "github.com/go-ole/go-ole.GUID"
Pattern match: "github.com/StackExchange/wmi.Client"
Pattern match: "github.com/StackExchange/wmi.SWbemServices"
Pattern match: "github.com/go-ole/go-ole.IUnknown"
Pattern match: "github.com/go-ole/go-ole.IDispatch"
Pattern match: "github.com/StackExchange/wmi.queryRequest"
Pattern match: "golang.org/x/sys/windows.v"
Heuristic match: "reflect.name"
Heuristic match: "*crypto/x509/pkix.Name"
Heuristic match: "**math/big.Int"
Pattern match: "github.com/pkg/errors.fundamental"
Pattern match: "github.com/pkg/errors.stack"
Pattern match: "github.com/pkg/errors.withStack"
Pattern match: "github.com/pkg/errors.withMessage"
Pattern match: "github.com/pkg/errors.Frame"
Pattern match: "golang.org/x/sys/windows.DLLError"
Pattern match: "golang.org/x/sys/windows.errString"
Pattern match: "golang.org/x/sys/windows/registry.Key"
Pattern match: "golang.org/x/sys/windows/registry.KeyInfo"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.registryStorage"
Pattern match: "github.com/go-ole/go-ole.VARIANT"
Pattern match: "github.com/go-ole/go-ole.VT"
Pattern match: "github.com/go-ole/go-ole.OleError"
Pattern match: "github.com/go-ole/go-ole.DISPPARAMS"
Pattern match: "github.com/go-ole/go-ole.EXCEPINFO"
Pattern match: "github.com/go-ole/go-ole.IEnumVARIANT"
Pattern match: "github.com/go-ole/go-ole.SafeArray"
Pattern match: "github.com/go-ole/go-ole.SafeArrayConversion"
Pattern match: "github.com/StackExchange/wmi.multiArgType"
Pattern match: "github.com/StackExchange/wmi.ErrFieldMismatch"
Pattern match: "github.com/yelinaung/go-haikunator.RandomName"
Pattern match: "github.com/yelinaung/go-haikunator.Name"
Pattern match: "github.com/GeertJohan/go%2erice.Box"
Pattern match: "github.com/GeertJohan/go%2erice.virtualFile"
Pattern match: "github.com/GeertJohan/go%2erice.virtualDir"
Pattern match: "github.com/GeertJohan/go%2erice.File"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot"
Pattern match: "type..hash.sync/atomic.Value"
Pattern match: "type..eq.sync/atomic.Value"
Heuristic match: "runtime.(*bucket).mp"
Heuristic match: "runtime.(*Func).Name"
Heuristic match: "runtime.name.name"
Heuristic match: "sync.(*Once).Do"
Heuristic match: "unicode.In"
Heuristic match: "unicode.Is"
Heuristic match: "unicode.to"
Heuristic match: "unicode.To"
Heuristic match: "os.(*File).Name"
Heuristic match: "os.(*fileStat).Name"
Heuristic match: "m.name"
Heuristic match: "reflect.(*rtype).Name"
Heuristic match: "reflect.(*rtype).In"
Heuristic match: "reflect.Value.Int"
Heuristic match: "reflect.(*funcType).Name"
Heuristic match: "reflect.(*funcType).In"
Heuristic match: "reflect.(*interfaceType).Name"
Heuristic match: "reflect.(*interfaceType).In"
Heuristic match: "reflect.(*structType).Name"
Heuristic match: "reflect.(*structType).In"
Heuristic match: "reflect.(*ptrType).Name"
Heuristic match: "reflect.(*ptrType).In"
Heuristic match: "reflect.(*funcTypeFixed4).Name"
Heuristic match: "reflect.(*funcTypeFixed4).In"
Heuristic match: "reflect.(*funcTypeFixed8).Name"
Heuristic match: "reflect.(*funcTypeFixed8).In"
Heuristic match: "reflect.(*funcTypeFixed16).Name"
Heuristic match: "reflect.(*funcTypeFixed16).In"
Heuristic match: "reflect.(*funcTypeFixed32).Name"
Heuristic match: "reflect.(*funcTypeFixed32).In"
Heuristic match: "reflect.(*funcTypeFixed64).Name"
Heuristic match: "reflect.(*funcTypeFixed64).In"
Heuristic match: "reflect.(*funcTypeFixed128).Name"
Heuristic match: "reflect.(*funcTypeFixed128).In"
Heuristic match: "reflect.(*sliceType).Name"
Heuristic match: "reflect.(*sliceType).In"
Pattern match: "type..hash.math/rand.Rand"
Pattern match: "type..eq.math/rand.Rand"
Pattern match: "type..hash.math/rand.lockedSource"
Pattern match: "type..eq.math/rand.lockedSource"
Pattern match: "type..eq.net/http.httpError"
Pattern match: "type..hash.net/http.http2FrameHeader"
Pattern match: "type..eq.net/http.http2FrameHeader"
Pattern match: "type..hash.net/http.http2resAndError"
Pattern match: "type..eq.net/http.http2resAndError"
Pattern match: "type..eq.net/http.http2Setting"
Pattern match: "type..eq.net/http.http2StreamError"
Pattern match: "type..hash.net/http.http2connError"
Pattern match: "type..eq.net/http.http2connError"
Pattern match: "type..hash.net/http.http2PingFrame"
Pattern match: "type..eq.net/http.http2PingFrame"
Pattern match: "golang.org/x/sys/windows.GetStdHandle"
Pattern match: "golang.org/x/sys/windows.SetHandleInformation"
Pattern match: "golang.org/x/sys/windows.init"
Pattern match: "golang.org/x/sys/windows.(*errString).Error"
Pattern match: "type..hash.golang.org/x/sys/windows.DLLError"
Pattern match: "type..eq.golang.org/x/sys/windows.DLLError"
Pattern match: "type..hash.golang.org/x/sys/windows.DLL"
Pattern match: "type..eq.golang.org/x/sys/windows.DLL"
Pattern match: "type..hash.golang.org/x/sys/windows.Proc"
Pattern match: "type..hash.golang.org/x/sys/windows.LazyDLL"
Pattern match: "type..eq.golang.org/x/sys/windows.LazyDLL"
Pattern match: "type..hash.golang.org/x/sys/windows.LazyProc"
Pattern match: "type..eq.golang.org/x/sys/windows.LazyProc"
Pattern match: "golang.org/x/sys/windows.getprocaddress"
Pattern match: "golang.org/x/sys/windows.loadlibrary"
Pattern match: "golang.org/x/sys/windows/registry.Key.Close"
Pattern match: "golang.org/x/sys/windows/registry.OpenKey"
Pattern match: "golang.org/x/sys/windows/registry.CreateKey"
Pattern match: "golang.org/x/sys/windows/registry.DeleteKey"
Pattern match: "golang.org/x/sys/windows/registry.(*KeyInfo).ModTime"
Pattern match: "golang.org/x/sys/windows/registry.Key.Stat"
Pattern match: "golang.org/x/sys/windows/registry.Key.getValue"
Pattern match: "golang.org/x/sys/windows/registry.Key.GetStringValue"
Pattern match: "golang.org/x/sys/windows/registry.Key.GetStringsValue"
Pattern match: "golang.org/x/sys/windows/registry.Key.GetIntegerValue"
Pattern match: "golang.org/x/sys/windows/registry.Key.setValue"
Pattern match: "golang.org/x/sys/windows/registry.Key.SetQWordValue"
Pattern match: "golang.org/x/sys/windows/registry.Key.setStringValue"
Pattern match: "golang.org/x/sys/windows/registry.Key.SetStringValue"
Pattern match: "golang.org/x/sys/windows/registry.Key.SetStringsValue"
Pattern match: "golang.org/x/sys/windows/registry.Key.ReadValueNames"
Pattern match: "golang.org/x/sys/windows/registry.regCreateKeyEx"
Pattern match: "golang.org/x/sys/windows/registry.regDeleteKey"
Pattern match: "golang.org/x/sys/windows/registry.regSetValueEx"
Pattern match: "golang.org/x/sys/windows/registry.regEnumValue"
Pattern match: "golang.org/x/sys/windows/registry.init"
Pattern match: "golang.org/x/sys/windows/registry.(*Key).Close"
Pattern match: "golang.org/x/sys/windows/registry.(*Key).SetStringValue"
Pattern match: "golang.org/x/sys/windows/registry.(*Key).SetStringsValue"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).AppName"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).CachedAppName"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).SetAppName"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.(*Config).Firewall"
Pattern match: "github.com/daaku/go%2ezipexe.OpenCloser"
Pattern match: "github.com/daaku/go%2ezipexe.NewReader"
Pattern match: "github.com/daaku/go%2ezipexe.zipExeReaderMacho"
Pattern match: "github.com/daaku/go%2ezipexe.zipExeReaderPe"
Pattern match: "github.com/daaku/go%2ezipexe.zipExeReaderElf"
Pattern match: "github.com/daaku/go%2ezipexe.init"
Pattern match: "github.com/kardianos/osext.executable"
Pattern match: "github.com/kardianos/osext.init"
Pattern match: "github.com/GeertJohan/go.rice/embedded.RegisterEmbeddedBox"
Pattern match: "github.com/GeertJohan/go.rice/embedded.init"
Heuristic match: "runtime.name"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.Config"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.Storage"
Heuristic match: "*math/big.Int"
Heuristic match: "math/big.Int"
Heuristic match: "crypto/x509/pkix.Name"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/config.ErrNotExist"
Pattern match: "git.anyget.ru/root/goscripts/bot/new/bot/registry.ErrNotExist"
Pattern match: "go.itab.io/ioutil.nopCloser,io.ReadCloser"
Pattern match: "go.itab.io/ioutil.devNull,io.Writer"
Pattern match: "go.itab.net/http.http2noDialClientConnPool,net/http.http2ClientConnPool"
Pattern match: "go.itab.net/http.http2noDialH2RoundTripper,net/http.RoundTripper"
Pattern match: "go.itab.net/http.http2ConnectionError,error"
Pattern match: "go.itab.net/http.http2connError,error"
Pattern match: "go.itab.net/http.http2StreamError,error"
Pattern match: "go.itab.net/http.http2duplicatePseudoHeaderError,error"
Pattern match: "go.itab.net/http.http2pseudoHeaderError,error"
Pattern match: "go.itab.net/http.http2stickyErrWriter,io.Writer"
Pattern match: "go.itab.net/http.http2GoAwayError,error"
Pattern match: "go.itab.net/http.http2transportResponseBody,io.ReadCloser"
Pattern match: "go.itab.net/http.stringWriter,net/http.writeStringer"
Pattern match: "go.itab.net/http.noBody,io.ReadCloser"
Pattern match: "go.itab.net/http.errorReader,io.Reader"
Pattern match: "go.itab.net/http.finishAsyncByteRead,io.Reader"
Pattern match: "go.itab.net/http.bodyLocked,io.Reader"
Pattern match: "go.itab.net/http.persistConnWriter,io.Writer"
Pattern match: "go.itab.net/http.nothingWrittenError,error"
Pattern match: "go.itab.net/http.transportReadFromServerError,error"
Pattern match: "go.itab.net/http.http2erringRoundTripper,net/http.RoundTripper"
Pattern match: "go.itab.net/http.http2headerFieldNameError,error"
Pattern match: "go.itab.net/http.http2headerFieldValueError,error"
Pattern match: "go.itab.net/http.tlsHandshakeTimeoutError,error"
Pattern match: "go.itab.net/http.fakeLocker,sync.Locker"
Pattern match: "go.itab.net/url.EscapeError,error"
Pattern match: "go.itab.net/url.InvalidHostError,error" - source
- File/Memory
- relevance
- 10/10
-
Found potential URL in binary/memory
-
Spyware/Information Retrieval
-
Found a reference to a known community page
- details
-
""
"charset":"UTF-8"
"ID":1210
"docshellUUID":"{62ac478c-01bf-4fc8-8532-bd1c1af48493}"
"originalURI":"https://twitter.com/"
"scroll":"0,177840"
"triggeringPrincipal_b64":"vQZuXxRvRHKDMXv9BbHtkAAAAAAAAAAAwAAAAAAAAEYAAAA4bW96LW51bGxwcmluY2lwYWw6ezQxYjE3MmY2LTY2ZGQtNGFkNi1iMjQwLTI4N2IwYWI5ZWU5MH0AAAAA"
"principalToInherit_base64":"vQZuXxRvRHKDMXv9BbHtkAAAAAAAAAAAwAAAAAAAAEYAAAA4bW96LW51bGxwcmluY2lwYWw6ezQxYjE3MmY2LTY2ZGQtNGFkNi1iMjQwLTI4N2IwYWI5ZWU5MH0AAAAA"
"triggeringPrincipal_base64":"SmIS26zLEdO3ZQBgsLbOywAAAAAAAAAAwAAAAAAAAEY="
"docIdentifier":1243
"structuredCloneState":"AgAAAAAA8f8AAAAACAD//wUAAIAEAP//dGl0bGUAAAAHAAAABAD//yIEMgQ4BEIEQgQ1BEAEAAAAAAAAEwD//w=="
"structuredCloneVersion":8
"children":[{"url":"about:blank"
"subframe":true
"charset":""
"ID":1211
"docshellUUID":"{aef2e2eb-5f40-45df-bc41-4805c7389db8}"
"triggeringPrincipal_b64":"ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAbsBAAAAFGh0dHBzOi8vdHdpdHRlci5jb20vAAAAAAAAAAUAAAAIAAAACwAAAAj/////AAAA" (Indicator: "twitter")
"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"
"docIdentifier":1254}]
"persist":true}
{"url":"https://twitter.com/i/notifications"
"title":"" (Indicator: "twitter")
""
"charset":"UTF-8"
"ID":1222
"docshellUUID":"{62ac478c-01bf-4fc8-8532-bd1c1af48493}"
"originalURI":"https://twitter.com/i/notifications"
"triggeringPrincipal_b64":"vQZuXxRvRHKDMXv9BbHtkAAAAAAAAAAAwAAAAAAAAEYAAAA4bW96LW51bGxwcmluY2lwYWw6ezQxYjE3MmY2LTY2ZGQtNGFkNi1iMjQwLTI4N2IwYWI5ZWU5MH0AAAAA"
"principalToInherit_base64":"vQZuXxRvRHKDMXv9BbHtkAAAAAAAAAAAwAAAAAAAAEYAAAA4bW96LW51bGxwcmluY2lwYWw6ezQxYjE3MmY2LTY2ZGQtNGFkNi1iMjQwLTI4N2IwYWI5ZWU5MH0AAAAA"
"triggeringPrincipal_base64":"SmIS26zLEdO3ZQBgsLbOywAAAAAAAAAAwAAAAAAAAEY="
"docIdentifier":1243
"structuredCloneState":"AgAAAAAA8f8AAAAAAAD//w=="
"structuredCloneVersion":8
"children":[{"url":"about:blank"
"subframe":true
"charset":""
"ID":1211
"docshellUUID":"{aef2e2eb-5f40-45df-bc41-4805c7389db8}"
"triggeringPrincipal_b64":"ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAbsBAAAAFGh0dHBzOi8vdHdpdHRlci5jb20vAAAAAAAAAAUAAAAIAAAACwAAAAj/////AAAACP////8AAAAIAAAACwAAABMAAAABAAAAEwAAAAEAAAATAAAAAQAAABQAAAAAAAAAFP///" (Indicator: "twitter")
"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"
"docIdentifier":1254}]
"persist":true}]
"lastAccessed":1501353236978
"hidden":false
"attributes":{}
"userContextId":0
"index":14
"storage":{"https://twitter.com":{"savefrom-helper-extension":"1"
"ScribeTransport":"{\"internal_referer\":\"/\",\"client_version\":\"macaw-swift\",\"event_namespace\":{\"client\":\"web\",\"page\" (Indicator: "twitter"), "":\"connect\",\"section\":\"connect\",\"component\":\"user_recommendations\",\"element\":\"wtf_import_prompt\",\"action\":\"impression\"},\"triggered_on\":1501353233266,\"format_version\":2,\"_category_\":\"client_event\"},{\"internal_referer\":\"/\",\"client_version\":\"macaw-swift\",\"event_namespace\":{\"client\":\"web\",\"page\":\"connect\",\"section\":\"connect\",\"action\":\"show\"},\"triggered_on\":1501353233480,\"format_version\":2,\"_category_\":\"client_event\"},{\"product\":\"webclient\",\"description\":\"stats:ajax:perf:partner_id_sync\",\"duration_ms\":1203,\"start_time_ms\":1501353183244,\"metadata\":\"{\\\"url\\\":\\\"https://analytics.twitter.com/tpm/p\\\"
\\\"browser\\\":{\\\"mozilla\\\":true
\\\"version\\\":\\\"54.0\\\"
\\\"name\\\":\\\"mozilla\\\"}
\\\"response_size\\\":2}\",\"_category_\":\"perftown\"},{\"internal_referer\":\"/\",\"client_version\":\"macaw-swift\",\"woeid\":1,\"referring_event\":\"initial\",\"items\":[{\"name\":\"#For" (Indicator: "twitter"), "","charset":"UTF-8","ID":1210,"docshellUUID":"{62ac478c-01bf-4fc8-8532-bd1c1af48493}","originalURI":"https://twitter.com/","scroll":"0
177840","triggeringPrincipal_b64":"vQZuXxRvRHKDMXv9BbHtkAAAAAAAAAAAwAAAAAAAAEYAAAA4bW96LW51bGxwcmluY2lwYWw6ezQxYjE3MmY2LTY2ZGQtNGFkNi1iMjQwLTI4N2IwYWI5ZWU5MH0AAAAA","principalToInherit_base64":"vQZuXxRvRHKDMXv9BbHtkAAAAAAAAAAAwAAAAAAAAEYAAAA4bW96LW51bGxwcmluY2lwYWw6ezQxYjE3MmY2LTY2ZGQtNGFkNi1iMjQwLTI4N2IwYWI5ZWU5MH0AAAAA","triggeringPrincipal_base64":"SmIS26zLEdO3ZQBgsLbOywAAAAAAAAAAwAAAAAAAAEY=","docIdentifier":1243,"structuredCloneState":"AgAAAAAA8f8AAAAACAD//wUAAIAEAP//dGl0bGUAAAAHAAAABAD//yIEMgQ4BEIEQgQ1BEAEAAAAAAAAEwD//w==","structuredCloneVersion":8,"children":[{"url":"about:blank","subframe":true,"charset":"","ID":1211,"docshellUUID":"{aef2e2eb-5f40-45df-bc41-4805c7389db8}","triggeringPrincipal_b64":"ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAbsBAAAAFGh0dHBzOi8vdHdpdHRlci5jb20vAAAAAAAAAAUAAAAIAAAACwAAAAj/////AAA" (Indicator: "twitter"), "","charset":"UTF-8","ID":1222,"docshellUUID":"{62ac478c-01bf-4fc8-8532-bd1c1af48493}","originalURI":"https://twitter.com/i/notifications","triggeringPrincipal_b64":"vQZuXxRvRHKDMXv9BbHtkAAAAAAAAAAAwAAAAAAAAEYAAAA4bW96LW51bGxwcmluY2lwYWw6ezQxYjE3MmY2LTY2ZGQtNGFkNi1iMjQwLTI4N2IwYWI5ZWU5MH0AAAAA","principalToInherit_base64":"vQZuXxRvRHKDMXv9BbHtkAAAAAAAAAAAwAAAAAAAAEYAAAA4bW96LW51bGxwcmluY2lwYWw6ezQxYjE3MmY2LTY2ZGQtNGFkNi1iMjQwLTI4N2IwYWI5ZWU5MH0AAAAA","triggeringPrincipal_base64":"SmIS26zLEdO3ZQBgsLbOywAAAAAAAAAAwAAAAAAAAEY=","docIdentifier":1243,"structuredCloneState":"AgAAAAAA8f8AAAAAAAD//w==","structuredCloneVersion":8,"children":[{"url":"about:blank","subframe":true,"charset":"","ID":1211,"docshellUUID":"{aef2e2eb-5f40-45df-bc41-4805c7389db8}","triggeringPrincipal_b64":"ZT4OTT7kRfqycpfCC8AeuAAAAAAAAAAAwAAAAAAAAEYB3pRy0IA0EdOTmQAQS6D9QJIHOlRteE8wkTq4cYEyCMYAAAAC/////wAAAbsBAAAAFGh0dHBzOi8vdHdpdHRlci5jb20vAAAAAAAAAAUAAAAIAAAACwAAAAj/////AAAACP////8AAAAIAAAACwAAABMAAAABAAAAEwAAAAEAAAATAAAAAQAAABQAAAAAAAAAFP//" (Indicator: "twitter"), "AbwBkAC0AdABoAHUAbQBiAG4AYQBpAGwALgBwAGUAcgBpAHMAYwBvAHAAZQAuAHQAdgA7ACAAcgBlAHAAbwByAHQALQB1AHIAaQAgAGgAdAB0AHAAcwA6AC8ALwB0AHcAaQB0AHQAZQByAC4AYwBvAG0ALwBpAC8AYwBzAHAAXwByAGUAcABvAHIAdAA/AGEAPQBOAFYAUQBXAEcAWQBMAFgARgBWAFoAWABPADIATABHAE8AUQAlADMARAAlADMARAAlADMARAAlADMARAAlADMARAAlADMARAAmAHIAbwA9AGYAYQBsAHMAZQA=","docIdentifier":1254}],"persist":true}],"lastAccessed":1501353236978,"hidden":false,"attributes":{},"userContextId":0,"index":14,"storage":{"https://twitter.com":{"savefrom-helper-extension":"1","ScribeTransport":"{\"internal_referer\":\"/\"
\"client_version\":\"macaw-swift\"
\"event_namespace\":{\"client\":\"web\"
\"page\":\"connect\"
\"section\":\"connect\"
\"component\":\"user_recommendations\"
\"element\":\"wtf_import_prompt\"
\"action\":\"impression\"}
\"triggered_on\":1501353233266
\"format_version\":2
\"_category_\":\"client_event\"}
{\"internal_referer\":\"/\"
\"client_version\":\"macaw-swift\"
\"event_namespace\":{\"client\":\"web\"
\"page\":\"connect\"
\"section\":\"connect\"
\"action\" (Indicator: "twitter") - source
- File/Memory
- relevance
- 7/10
-
Found a reference to a known community page
File Details
9282e9c79c79cbf2874af5f7713aa442120286ce3ae73f718f379abb0e7494c4.exe
- Filename
- 9282e9c79c79cbf2874af5f7713aa442120286ce3ae73f718f379abb0e7494c4.exe
- Size
- 7.8MiB (8190946 bytes)
- Type
- peexe executable
- Description
- PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
- Architecture
- WINDOWS
- SHA256
- 9282e9c79c79cbf2874af5f7713aa442120286ce3ae73f718f379abb0e7494c4
- MD5
- a8850e1b89869dc17ffb546100caf0ef
- SHA1
- e92f4090c5cd2bbafaa3d8bc5c3fb2818d972090
- ssdeep
- 98304:pSaSidRhONJcoGHSlXdpIuKBa9Jr+47qDgVvTjxqv6G7aj4AdyeTO:oi7kNvGHShgMJCKvTjxo7s0eq
- imphash
- f4cc01c5888458a51fcb49aa4355a29d
- authentihash
- b2bf29a3fc34d31127ac071d851bf06a24c57ff0555281460eea4034dac1c59d
Classification (TrID)
- 72.3% (.EXE) Win64 Executable (generic)
- 11.8% (.EXE) Win32 Executable (generic)
- 5.3% (.EXE) OS/2 Executable (generic)
- 5.2% (.EXE) Generic Win/DOS Executable
- 5.2% (.EXE) DOS Executable Generic
File Sections
Details | ||||||
---|---|---|---|---|---|---|
File Imports
Screenshots
Loading content, please wait...
Hybrid Analysis
Tip: Click an analysed process below to view more details.
Analysed 1 process in total.
Network Analysis
DNS Requests
No relevant DNS requests were made.
Contacted Hosts
No relevant hosts were contacted.
HTTP Traffic
No relevant HTTP requests were made.
Extracted Strings
Extracted Files
No significant files were extracted.
Notifications
-
Runtime
- Not all Falcon MalQuery lookups completed in time
- Not all IP/URL string resources were checked online
- Not all strings are visible in the report, because the maximum number of strings was reached (5000)
- The analysis system failed to start the input sample. Error code: 193 (ERROR_BAD_EXE_FORMAT)