24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 27:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4a0,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Dyreza.Generic Sample 010e4d5c4668… — Score 74/100 — Hybrid Analysis","description":"Malicious verdict for sample 010e4d5c4668…. Malware family: Trojan.Dyreza.Generic. Threat score 74/100. 17/26 AV engines flagged this file. 6 malicious and 13 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af","keywords":["Malicious","Trojan.Dyreza.Generic","malware analysis","sandbox report","threat intelligence","010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af"],"about":{"@type":"SoftwareApplication","name":"vodufejy.exe","applicationCategory":["peexe","executable"],"identifier":"010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af","additionalType":"Malicious sample"},"threatScore":74,"malwareFamily":"Trojan.Dyreza.Generic","antivirusDetections":{"malicious":17,"total":26},"behavioralIndicators":{"malicious":6,"suspicious":13},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:Td38,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26:Td38,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1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"schema_version":"1.0.15","sha256":"010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":74,"unified_at_epoch_ms":1790438415167,"unified_at":"2026-09-26T16:00:15.167Z","metadata":{"hashes":{"sha256":"010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af","sha1":"f17655c2bf62572e4db84de2b8473cb4941baceb","md5":"051eeea32bd66d207838f1ac640bd4f8","sha512":"44dd4954821d10af55f447bfbd699aa97742948254648a0ed36ae13ec56cf053da9d8483225400a8e0e87d228e1c76576061d6536c4725c55dfc1ef4934f2d36","ssdeep":"12288:6skH+H3VwlCJD5R9E6DlO/4H08pLGcEtX6u:kHOF2C5R9Ej/4H0ELGHtX6u","ssdeep_chunks":["12288:6skH+H3","12288:skH+H3V","12288:kH+H3Vw","12288:H+H3Vwl","12288:+H3VwlC","12288:H3VwlCJ","12288:3VwlCJD","12288:VwlCJD5","12288:wlCJD5R","12288:lCJD5R9","12288:CJD5R9E","12288:JD5R9E6","12288:D5R9E6D","12288:5R9E6Dl","12288:R9E6DlO","12288:9E6DlO/","12288:E6DlO/4","12288:6DlO/4H","12288:DlO/4H0","12288:lO/4H08","12288:O/4H08p","12288:/4H08pL","12288:4H08pLG","12288:H08pLGc","12288:08pLGcE","12288:8pLGcEt","12288:pLGcEtX","12288:LGcEtX6","12288:GcEtX6u","24576:6skH+H3","24576:skH+H3V","24576:kH+H3Vw","24576:H+H3Vwl","24576:+H3VwlC","24576:H3VwlCJ","24576:3VwlCJD","24576:VwlCJD5","24576:wlCJD5R","24576:lCJD5R9","24576:CJD5R9E","24576:JD5R9E6","24576:D5R9E6D","24576:5R9E6Dl","24576:R9E6DlO","24576:9E6DlO/","24576:E6DlO/4","24576:6DlO/4H","24576:DlO/4H0","24576:lO/4H08","24576:O/4H08p","24576:/4H08pL","24576:4H08pLG","24576:H08pLGc","24576:08pLGcE","24576:8pLGcEt","24576:pLGcEtX","24576:LGcEtX6","24576:GcEtX6u","12288:kHOF2C5","12288:HOF2C5R","12288:OF2C5R9","12288:F2C5R9E","12288:2C5R9Ej","12288:C5R9Ej/","12288:5R9Ej/4","12288:R9Ej/4H","12288:9Ej/4H0","12288:Ej/4H0E","12288:j/4H0EL","12288:/4H0ELG","12288:4H0ELGH","12288:H0ELGHt","12288:0ELGHtX","12288:ELGHtX6","12288:LGHtX6u"],"imphash":"48f65244400f7182020151997ebe66c9"},"file_info":{"file_name":"vodufejy.exe","file_type":["peexe","executable"],"file_type_id":"exe","file_size":620032,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1499297531000,"last_seen":1663819153000,"last_multi_scan":1663819153000}},"detections":{"summary":{"verdict":"malicious","score":74,"tags":null},"stats":{"av":{"malicious_count":17,"suspicious_count":0,"total_engines":26},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":0},"sandbox_signatures":{"informative_count":7,"suspicious_count":13,"malicious_count":6,"total":26},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Agent.mCed","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"malicious","threat_name":"Trojan/Win32.Agent","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"malicious","threat_name":"Trojan/Win32.TSGeneric","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"malicious","threat_name":"TR/Battdil.620032","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"malicious","threat_name":"Trojan.Dyreza.Gen.3","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"malicious","threat_name":"win/malicious_confidence_70% (W)","status":"malicious","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cyren":{"name":"Cyren","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Trojan.Dyreza.Gen.3 (B)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"Win32/Battdil.AR trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ikarus":{"name":"IKARUS","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Battdil","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"malicious","threat_name":"Trojan ( 004cf1a41 )","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"malicious","threat_name":"Backdoor.Win32.Agent.dolr","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"malicious","threat_name":"Upatre-FACZ!051EEEA32BD6","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Agent.dwtjvs","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"quickheal":{"name":"Quick Heal","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"malicious","threat_name":"Confidence_98","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"scrutiny":{"name":"Scrutiny","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"malicious","threat_name":"Backdoor.Agent","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"webrootsmd":{"name":"Webroot SMD","success":true,"verdict":"malicious","threat_name":"Malware","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xvirusantimalware":{"name":"Xvirus Anti-Malware","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Trojan.Dyreza.Generic","sources":[{"report_type":"quickscan","report_id":""}]}]},"sandbox_signatures":[{"level":"informative","category":"Environment Awareness","name":"Contains ability to query machine time","description":"GetSystemTimeAsFileTime@KERNEL32.DLL at 00039286-00003648-38405-11-00551901\n GetSystemTimeAsFileTime@KERNEL32.DLL at 00041904-00002072-41081-11-00A71901\n GetSystemTimeAsFileTime@KERNEL32.DLL at 00044523-00000348-43531-11-001F1901","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-2","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"informative","category":"General","name":"Contacts domains","description":"\"numb.viagenie.ca\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"173.194.46.68:80\"\n \"66.228.45.110:3478\"\n \"69.193.145.138:4443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"informative","category":"General","name":"Contains PDB pathways","description":"\"dllhost.pdb\"","origin":"File/Memory","relevance":1,"id":"string-7","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"yTfMpibnvjbqdos.exe\" with commandline \"C:\\010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af\" (UID: 00036680-00003640)\n Spawned process \"svchost.exe\" with commandline \"-k DcomLaunch\" (UID: 00037013-00000648)\n Spawned process \"DllHost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00039286-00003648)\n Spawned process \"DllHost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00041904-00002072)\n Spawned process \"DllHost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00044523-00000348)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"informative","category":"Installation/Persistance","name":"Connects to LPC ports","description":"\"\" connecting to \"\\ThemeApiPort\"","origin":"API Call","relevance":1,"id":"api-16","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"\"yTfMpibnvjbqdos.exe\" has type \"PE32 executable (GUI) Intel 80386, for MS Windows\"\n \"94308059B57B3142E455B38A6EB92015\" has type \"Microsoft Cabinet archive data, 50006 bytes, 1 file\"\n \"7a85616511a648d8f52d52a74020357b\" has type \"data\"","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"Anti-Detection/Stealthyness","name":"Sets the process error mode to suppress error box","description":"\"\" set its error mode to SEM_NOOPENFILEERRORBOX","origin":"API Call","relevance":8,"id":"api-38","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"Anti-Reverse Engineering","name":"Contains ability to register a top-level exception handler (often used as anti-debugging trick)","description":"SetUnhandledExceptionFilter@KERNEL32.DLL at 00039286-00003648-38405-5-00551618\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00041904-00002072-41081-5-00A71618\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00044523-00000348-43531-5-001F1618","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-4","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"Anti-Reverse Engineering","name":"Looks up many procedures within the same disassembly stream (often used to hide usage)","description":"Found 84 calls to GetProcAddress@KERNEL32.DLL at 00035311-00003568-31840-45-00404110\n Found 84 calls to GetProcAddress@KERNEL32.DLL at 00036680-00003640-35834-45-00404110","origin":"Hybrid Analysis Technology","relevance":10,"id":"stream-40","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the active computer name","description":"\"\" (Path: \"\\REGISTRY\\MACHINE\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\", Key: \"COMPUTERNAME\")","origin":"Registry Access","relevance":5,"id":"registry-35","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"General","name":"Sends UDP traffic","description":"\"UDP connection to 66.228.45.110\" with description \"Payload with 20 bytes: 000100007DF108004187FBFF41FA0AF73C0B02F7\"","origin":"Network Traffic","relevance":7,"id":"network-5","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Creates/touches files in windows directory","description":"\"\" created file \"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls\"\n \"\" created file \"C:\\Windows\\yTfMpibnvjbqdos.exe\"","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Drops executable files","description":"\"yTfMpibnvjbqdos.exe\" has type \"PE32 executable (GUI) Intel 80386, for MS Windows\"","origin":"Binary File","relevance":10,"id":"binary-1","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"Network Related","name":"Found potential IP address in binary/memory","description":"\"1.0.3.35\"","origin":"File/Memory","relevance":3,"id":"string-14","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 173.194.46.68 on port 80 is sent without HTTP header","origin":"Network Traffic","relevance":10,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"Spyware/Information Retrieval","name":"Contains ability to enumerate processes/modules/threads","description":"CreateToolhelp32Snapshot@KERNEL32.DLL at 00035311-00003568-31840-10-00403280","origin":"Hybrid Analysis Technology","relevance":5,"id":"stream-20","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Imports suspicious APIs","description":"FindWindowA\n VirtualProtect\n GetTickCount\n VirtualAlloc\n LoadLibraryA\n GetStartupInfoA\n Sleep\n GetCommandLineW\n UnhandledExceptionFilter\n GetModuleFileNameA\n WriteFile\n GetModuleHandleA\n GetCommandLineA\n GetVersionExA\n GetProcAddress\n TerminateProcess","origin":"Static Parser","relevance":1,"id":"static-1","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Reads information about supported languages","description":"\"\" (Path: \"\\REGISTRY\\MACHINE\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\", Key: \"EN-US\")\n \"\" (Path: \"\\REGISTRY\\MACHINE\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\EXTENDEDLOCALE\", Key: \"EN-US\")\n \"\" (Path: \"\\REGISTRY\\MACHINE\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\", Key: \"00000409\")","origin":"Registry Access","relevance":3,"id":"registry-25","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Timestamp in PE header is very old or in the future","description":"PE claims program is from Wed Mar 2 23:25:43 2061","origin":"Static Parser","relevance":10,"id":"static-3","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by at least one Antivirus engine","description":"5/56 Antivirus vendors marked sample as malicious (8% detection rate)","origin":"External System","relevance":10,"id":"avtest-0","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"malicious","category":"Installation/Persistance","name":"Allocates virtual memory in foreign process","description":"\"\" allocated memory in \"C:\\Windows\\yTfMpibnvjbqdos.exe\"","origin":"API Call","relevance":7,"id":"api-20","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"malicious","category":"Installation/Persistance","name":"Drops executable files to the Windows system directory","description":"File type \"PE32 executable (GUI) Intel 80386, for MS Windows\" was dropped at \"C:\\Windows\\yTfMpibnvjbqdos.exe\"","origin":"Binary File","relevance":7,"id":"binary-7","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"malicious","category":"Network Related","name":"Uses network protocols on unusual ports","description":"TCP traffic to 69.193.145.138 on port 4443","origin":"Network Traffic","relevance":7,"id":"network-7","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Contains native function calls","description":"NtSetInformationProcess@NTDLL.DLL at 00039286-00003648-38405-4-005511F4\n NtSetInformationProcess@NTDLL.DLL at 00041904-00002072-41081-4-00A711F4\n NtSetInformationProcess@NTDLL.DLL at 00044523-00000348-43531-4-001F11F4","origin":"Hybrid Analysis Technology","relevance":5,"id":"stream-22","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Spawns a lot of processes","description":"Spawned process \"\" (UID: 00035311-00003568)\n Spawned process \"yTfMpibnvjbqdos.exe\" with commandline \"C:\\010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af\" (UID: 00036680-00003640)\n Spawned process \"svchost.exe\" with commandline \"-k DcomLaunch\" (UID: 00037013-00000648)\n Spawned process \"DllHost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00039286-00003648)\n Spawned process \"DllHost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00041904-00002072)\n Spawned process \"DllHost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00044523-00000348)","origin":"Monitored Target","relevance":8,"id":"target-14","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]}],"incidents":[{"name":"Remote Access","details_count":1,"details":[{"detail":"Uses network protocols on unusual ports"}],"sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"name":"Persistence","details_count":1,"details":[{"detail":"Spawns a lot of processes"}],"sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"name":"Fingerprint","details_count":1,"details":[{"detail":"Reads the active computer name"}],"sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 1 domain and 1 host"}],"sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]}]},"activity":{"stats":{"process_count":6,"spawned_processes_count":6,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":64,"dropped_files_count":0,"extracted_files_count":3,"files_written_count":261,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":3,"dns_resolutions_count":1,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","Simulated analysis"],"sandbox_reports":[{"id":"55f02b150e316dfd65b5fffd","environment_id":5,"environment_description":"W7 32 bit 'Stealthy Mode' with 'DNS Spoof'","state":"SUCCESS","verdict":"malicious","threat_score":74,"malware_family":"Trojan.Dyre","contacted_countries":["USA"],"submit_name":"vodufejy.exe","analysis_start_time":"2015-09-09T07:51:29+00:00","indicators_count":{"informative":7,"suspicious":16,"malicious":6},"tags":["Network Traffic","Extracted Files","Simulated analysis"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"173.194.46.68","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"address":"66.228.45.110","port":3478,"protocol":"UDP","country":"United States","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"address":"69.193.145.138","port":4443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]}],"dns_resolutions":[{"domain":"numb.viagenie.ca","address":"66.228.45.110","country":"United States","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}],"processes":[{"pid":3568,"ppid":0,"name":"010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af","command_line":"","normalized_path":"","uid":"00035311-00003568","icon":"$25"},{"pid":3640,"ppid":0,"name":"yTfMpibnvjbqdos.exe","command_line":"C:\\010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af","normalized_path":"","uid":"00036680-00003640"},{"pid":648,"ppid":0,"name":"svchost.exe","command_line":"-k DcomLaunch","normalized_path":"","uid":"00037013-00000648","icon":"$26"},{"pid":3648,"ppid":0,"name":"DllHost.exe","command_line":"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}","normalized_path":"","uid":"00039286-00003648"},{"pid":2072,"ppid":0,"name":"DllHost.exe","command_line":"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}","normalized_path":"","uid":"00041904-00002072"},{"pid":348,"ppid":0,"name":"DllHost.exe","command_line":"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}","normalized_path":"","uid":"00044523-00000348"}],"all_imported_dlls":["dwmapi.dll","clbcatq.dll","apphelp.dll","rasapi32.dll","secur32.dll","bcryptprimitives.dll","dnsapi.dll","wship6.dll","winhttp.dll","comctl32.dll","FWPUCLNT.DLL","WSHTCPIP.DLL","cryptnet.dll","rpcrt4.dll","nlaapi.dll","webio.dll","ole32.dll","user32.dll","imm32.dll","rsaenh.dll","cryptbase.dll","netutils.dll","userenv.dll","schannel.dll","NapiNSP.dll","pnrpnsp.dll","dhcpcsvc.dll","uxtheme.dll","sechost.dll","cryptsp.dll","urlmon.dll","bcrypt.dll","kernel32.dll","KernelBase.dll","shell32.dll","msctf.dll","rasman.dll","SensApi.dll","dhcpcsvc6.dll","ntdll.dll","gdi32.dll","msvcrt.dll","shacct.dll","profapi.dll","IDStore.dll","usp10.dll","samcli.dll","rtutils.dll","ncrypt.dll","iertutil.dll","mswsock.dll","shlwapi.dll","wininet.dll","wkscli.dll","rasadhlp.dll","winrnr.dll","oleaut32.dll","RpcRtRemote.dll","lpk.dll","advapi32.dll","netapi32.dll","IPHLPAPI.DLL","winnsi.dll","srvcli.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"yTfMpibnvjbqdos.exe","sha256":"010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"name":"94308059B57B3142E455B38A6EB92015","sha256":"c7e80c2433da592c3294158f565b159b038702c3d190c8a508259b7a51050b99","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"name":"7a85616511a648d8f52d52a74020357b","sha256":"7be47c0066484ef977e7389220f85335ecef8e44acd8665edba0a6c939503ea0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]}],"files_written":[{"path":"%WINDIR%\\Globalization\\Sorting\\sortdefault.nls","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"C:\\010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"\\SystemRoot\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\yTfMpibnvjbqdos.exe","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"pipe\\2b864de0c204c3208cce8884fa7a1a8b","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\config\\systemprofile\\AppData\\Local\\7a85616511a648d8f52d52a74020357b","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\config\\systemprofile\\AppData\\Local\\7a85616511a648d8f52d52a74020357b","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\kernel32.dll","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\wininet.dll","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\advapi32.dll","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\1394ohci.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ACPI.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\acpipmi.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\adp94xx.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\adpahci.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\adpu320.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\afd.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\AgileVpn.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\agp440.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\aliide.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\amdagp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\amdide.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\amdk8.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\amdppm.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\amdsata.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\amdsbs.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\amdxata.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\appid.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\arc.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\arcsas.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\asyncmac.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\atapi.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\b57nd60x.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\BazisVirtualCDBus.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\blbdrive.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\bowser.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\BrFiltLo.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\BrFiltUp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\Brserid.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\BrSerWdm.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\BrUsbMdm.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\BrUsbSer.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\bthmodem.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\bxvbdx.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\cdfs.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\cdrom.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\circlass.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\CLFS.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\CmBatt.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\cmdide.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\cng.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\compbatt.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\CompositeBus.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\crcdisk.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\dfsc.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\discache.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\disk.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\djsvs.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\drmkaud.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\dxgkrnl.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\E1G60I32.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\elxstor.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\errdev.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\evbdx.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\fdc.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\fileinfo.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\filetrace.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\flpydisk.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\fltmgr.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\FsDepends.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\fvevol.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\gagp30kx.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\hcw85cir.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\HDAudBus.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\HdAudio.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\HidBatt.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\hidbth.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\hidir.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\hidusb.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\HpSAMD.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\HTTP.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\hwpolicy.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\i8042prt.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\iaStorV.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\iirsp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\intelide.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\intelppm.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ipfltdrv.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\IPMIDrv.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ipnat.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\irenum.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\isapnp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\kbdclass.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\kbdhid.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ksecdd.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ksecpkg.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\lltdio.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\lsi_fc.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\lsi_sas.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\lsi_sas2.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\lsi_scsi.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\luafv.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\megasas.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\MegaSR.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\modem.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\monitor.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\mouclass.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\mouhid.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\mountmgr.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\mpio.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\mpsdrv.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\mrxdav.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\mrxsmb.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\mrxsmb10.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\mrxsmb20.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\msahci.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\msdsm.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\mshidkmdf.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\msisadrv.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\msiscsi.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\MSKSSRV.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\MSPCLOCK.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\MSPQM.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\mssmbios.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\MSTEE.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\MTConfig.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\mup.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ndis.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ndiscap.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ndistapi.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ndisuio.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ndiswan.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\netbios.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\netbt.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\nfrd960.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\npf.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\nsiproxy.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\nv_agp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\nvraid.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\nvstor.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\nwifi.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ohci1394.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\pacer.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\parport.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\partmgr.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\parvdm.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\pci.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\pciide.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\pcmcia.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\pcw.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\peauth.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\processr.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ql2300.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ql40xx.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\qwavedrv.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\rasacd.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\rasl2tp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\raspppoe.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\raspptp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\rassstp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\rdbss.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\rdpbus.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\RDPCDD.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\rdpencdd.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\rdprefmp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\rdyboost.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\rspndr.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\sbp2port.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\scfilter.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\serenum.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\serial.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\sermouse.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\sffdisk.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\sffp_mmc.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\sffp_sd.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\sfloppy.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\sisagp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\SiSRaid2.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\sisraid4.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\smb.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\srv.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\srv2.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\srvnet.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\stexstor.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\swenum.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\tcpip.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\tcpipreg.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\tdpipe.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\tdtcp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\tdx.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\termdd.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\tssecsrv.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\tsusbflt.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\TsUsbGD.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\tunnel.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\uagp35.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\udfs.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\uliagpkx.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\umbus.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\umpass.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\usbccgp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\usbcir.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\usbehci.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\usbhub.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\usbohci.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\usbprint.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\UsbStor.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\usbuhci.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\VBoxVideo.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\vdrvroot.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\vga.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\vgapnp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\vhdmp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\viaagp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\viac7.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\viaide.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\volmgr.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\volmgrx.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\volsnap.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\vsmraid.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\vwifibus.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\VxKernelSvcNT.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\wacompen.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\wanarp.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\wd.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\Wdf01000.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\wfplwf.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\wimmount.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\WinDivert32.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\wmiacpi.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\ws2ifsl.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\drivers\\WudfPf.sys","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"Nsi","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"\\Device\\RasAcd","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"\\Device\\Afd\\Endpoint","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\config\\systemprofile\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\config\\systemprofile\\AppData\\Roaming\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\config\\systemprofile","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\config\\systemprofile\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\config\\systemprofile\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"\\Device\\NetBT_Tcpip_{D0B53124-E232-49FC-9EA9-75FA32C7C6C3}","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"\\Device\\NetBT_Tcpip6_{72D885C2-0AEC-4510-95D5-BF120A963535}","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"\\Device\\NetBT_Tcpip6_{9C9C1D9A-E45A-41F9-8D98-D3B6EA5D768D}","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"\\Device\\NetBT_Tcpip6_{D0B53124-E232-49FC-9EA9-75FA32C7C6C3}","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"\\Device\\Afd\\AsyncConnectHlp","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\en-US\\KERNELBASE.dll.mui","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\en-US\\WINHTTP.dll.mui","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{D0B53124-E232-49FC-9EA9-75FA32C7C6C3}","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{9C9C1D9A-E45A-41F9-8D98-D3B6EA5D768D}","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{72D885C2-0AEC-4510-95D5-BF120A963535}","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\DllHost.exe","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\config\\systemprofile\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\system32\\config\\systemprofile\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\config\\systemprofile\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]},{"path":"%WINDIR%\\System32\\config\\systemprofile\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015","sources":[{"report_type":"sandbox","report_id":"55f02b150e316dfd65b5fffd"}]}],"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{"sandbox_job_ids":["55f02b150e316dfd65b5fffd"]}}}]]}] 1e:null 22:[["$","title","0",{"children":"Malicious Trojan.Dyreza.Generic Sample 010e4d5c4668… — Score 74/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 010e4d5c4668…. Malware family: Trojan.Dyreza.Generic. Threat score 74/100. 17/26 AV engines flagged this file. 6 malicious and 13 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af"}],["$","meta","4",{"property":"og:title","content":"Malicious Trojan.Dyreza.Generic Sample 010e4d5c4668… — Score 74/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 010e4d5c4668…. Malware family: Trojan.Dyreza.Generic. Threat score 74/100. 17/26 AV engines flagged this file. 6 malicious and 13 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/010e4d5c4668a04274c30a144021d56981da5991a3f7e26379db0782ef1632af"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Trojan.Dyreza.Generic Sample 010e4d5c4668… — Score 74/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 010e4d5c4668…. Malware family: Trojan.Dyreza.Generic. Threat score 74/100. 17/26 AV engines flagged this file. 6 malicious and 13 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L27","11",{}]]