33:"SampleDetailWrapper" 34:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$33"] 39:I[99539,["$1","$2","$3","$4","$5"],"IconMark"] 35:T861,Found reference to API "GTCP connect succeeded" (Indicator: " connect "; Source: "sample.bin"), Found reference to API "Failed to connect to target" (Indicator: " connect "; Source: "sample.bin"), Found reference to API "GTCP connect cancelled" (Indicator: " connect "; Source: "sample.bin"), file/memory contains long string with (Indicator: " connect "; Source: "sample.bin"), Found reference to API "4Random playback mode enabled. Press play to execute.ZWarning: Capturing screenshots may affect game performance (and therefore playback timing)9Error: Unable to connect local controller to the target. " (Indicator: " connect "; Source: "sample.bin"), Found reference to API "User did not connect to target" (Indicator: " connect "; Source: "sample.bin"), Found reference to API "Cannot connect to the target.NCannot attach to the process because another client is already attached to it.9Settings related to the HDR Scopes overlay on the target." (Indicator: " connect "; Source: "sample.bin"), Found reference to API "^Unable to connect to Target Manager Server - please check it is installed and running ($0) $1" (Indicator: " connect "; Source: "sample.bin"), Found reference to API "Target settingsYUnable to connect to Target Manager Server - please check it is installed and running($0)\The specified file '{0}' cannot be opened. Do you want to remove it from the Recent list(s)? HMD Power" (Indicator: " connect "; Source: "sample.bin"), Found reference to API "TargetkUnable to parse the supplied command line, please read the documentation to see valid command line options.UUnable to connect to Target Manager Server - please check it is installed and running" (Indicator: " connect "; Source: "sample.bin"), Found reference to API " >WiFi RSSI (%s): Disconnected.User shutdown initiated. Stopping streaming...dAn error has occurred... Error Code: 0x%08x Description: %s See Event Log for further information.!Stopping audio/video streaming...!Starting audio/video streaming..." (Indicator: " shutdown "; Source: "sample.bin"), Found reference to API "Unable to connect to target." (Indicator: " connect "; Source: "sample.bin")36:T46a,"SOFTWARE\SCE\Prospero\TMUI\Shared" in Source: sample.bin, "Save data Directory&SOFTWARE\SCE\Prospero\Shared\Passcodes" in Source: sample.bin, "HARDWARE\DESCRIPTION\System\CentralProcessor\0" in Source: sample.bin, "SOFTWARE\SCE\Common" in Source: sample.bin, "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" in Source: sample.bin, "SOFTWARE\" in Source: sample.bin, "&SOFTWARE\SCE\Prospero\Shared\Passcodes" in Source: sample.bin, "SOFTWARE\Microsoft\Cryptography" in Source: sample.bin, "Software\" in Source: sample.bin, "SOFTWARE\SCE\PROSPERO\Tools\Remote Viewer Server" in Source: sample.bin, "SYSTEM\CurrentControlSet\Control\Terminal Server\" in Source: sample.bin, "Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32" in Source: sample.bin, "SOFTWARE\SCE\" in Source: sample.bin, "Software\SCE" in Source: sample.bin, "SOFTWARE\SCE\ORBIS\Tools\Remote Viewer Server" in Source: sample.bin, "SOFTWARE\SCE\Prospero" in Source: sample.bin, "Software\Classes\" in Source: sample.bin, "Software\Microsoft\Windows\CurrentVersion\Policies\Network" in Source: sample.bin, "Software\SCE\" in Source: sample.bin37:T6db,Found string "Set link" (Indicator: "set "; Source: "sample.bin"), Found string "Set file serving directory..." (Indicator: "set "; Source: "sample.bin"), Found string "Set whether or not to enable adaptive streaming. Adaptive streaming adjusts the resolution of the stream when network conditions change." (Indicator: "set "; Source: "sample.bin"), Found string "Set default target" (Indicator: "set "; Source: "sample.bin"), Found string "Set Discovery Ranges" (Indicator: "set "; Source: "sample.bin"), Found string "Set file serving directory" (Indicator: "set "; Source: "sample.bin"), Found string "Set Accelerator &for:" (Indicator: "set "; Source: "sample.bin"), Found string "Set authentication key%Target requires an authentication key'Target has the wrong authentication key" (Indicator: "set "; Source: "sample.bin"), Found string "Set authentication key" (Indicator: "set "; Source: "sample.bin"), Found string "Set Chunk Status" (Indicator: "set "; Source: "sample.bin"), Found string "Set the file serving directory." (Indicator: "set "; Source: "sample.bin"), Found string "Set Current Slot" (Indicator: "set "; Source: "sample.bin"), Found string "Set File Serving Directory" (Indicator: "set "; Source: "sample.bin"), Found string "Set current slot" (Indicator: "set "; Source: "sample.bin"), Found string "Set chunk status..." (Indicator: "set "; Source: "sample.bin"), Found string "Set chunk status...BSet the PlayGo chunk status of an app to the specified parameters." (Indicator: "set "; Source: "sample.bin"), Found string "Set to:" (Indicator: "set "; Source: "sample.bin"), Found string "Set default" (Indicator: "set "; Source: "sample.bin"), Found string "Set File Serving Information" (Indicator: "set "; Source: "sample.bin")38:T4ca,Found string " " (Indicator: ""; Source: "sample.bin"), Found string " NError: Two or more controls have been mapped to the same key, as shown in red." (Indicator: ""; Source: "sample.bin"), Found string "" (Indicator: ""; Source: "sample.bin"), Found string "" (Indicator: ""; Source: "sample.bin"), Found string " " (Indicator: ""; Source: "sample.bin"), Found string "" (Indicator: ""; Source: "sample.bin"), Found string "" (Indicator: ""; Source: "sample.bin"), Found string "" (Indicator: ""; Source: "sample.bin"), Found string "" (Indicator: ""; Source: "sample.bin"), Found string " " (Indicator: ""; Source: "sample.bin"), Found string "" (Indicator: ""; Source: "sample.bin"), Found string "" (Indicator: ""; Source: "sample.bin"), Found string "" (Indicator: ""; Source: "sample.bin"), Found string "" (Indicator: ""; Source: "sample.bin"), Found string " <" (Indicator: ""; Source: "sample.bin"), Found string "" (Indicator: ""; Source: "sample.bin")30:["$","$Lc",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample 0f3216b0a785… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample 0f3216b0a785…. Threat score 0/100. 0/28 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/0f3216b0a7850cf82bd24c576edc525bb1bcf90db239ced125c18594ce432756\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"0f3216b0a7850cf82bd24c576edc525bb1bcf90db239ced125c18594ce432756\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"ProsperoRemoteViewer.exe\",\"applicationCategory\":[\"peexe\",\"64bits\",\"executable\"],\"identifier\":\"0f3216b0a7850cf82bd24c576edc525bb1bcf90db239ced125c18594ce432756\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":28},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":1},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L34",null,{"initialData":{"schema_version":"1.0.17","sha256":"0f3216b0a7850cf82bd24c576edc525bb1bcf90db239ced125c18594ce432756","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1793883517302,"unified_at":"2026-11-05T12:58:37.302Z","metadata":{"hashes":{"sha256":"0f3216b0a7850cf82bd24c576edc525bb1bcf90db239ced125c18594ce432756","sha1":"3c1e825c471f75cc76ad6cbac9484839752c40e8","md5":"3ca87f6b45c40abeef020fbc39c4b537"},"file_info":{"file_name":"ProsperoRemoteViewer.exe","file_type":["peexe","64bits","executable"],"file_type_id":"64-bit exe","file_size":24973856,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1793883508000,"last_seen":1793883508000,"last_multi_scan":1793883508000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":28},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":9},"sandbox_signatures":{"informative_count":12,"suspicious_count":1,"malicious_count":0,"total":13},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"scrutiny":{"name":"Scrutiny","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Discovery","technique":"Security Software Discovery","attack_id":"T1518.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1518/001","identifiers":[{"type":"suspicious","value":"Possibly checks for known debuggers/analysis tools"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/techniques/T1012","identifiers":[{"type":"informative","value":"Contains registry location strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"},{"type":"informative","value":"Found potential IP address in binary/memory"},{"type":"informative","value":"Contains references to network communication API (string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Input Capture","attack_id":"T1056","attack_id_wiki":"https://attack.mitre.org/techniques/T1056","identifiers":[{"type":"informative","value":"Contains ability to register/read input devices (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Keylogging","attack_id":"T1056.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1056/001","identifiers":[{"type":"informative","value":"Found strings related to keylogger"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"System Information Discovery","attack_id":"T1082","attack_id_wiki":"https://attack.mitre.org/techniques/T1082","identifiers":[{"type":"informative","value":"Found system command-related strings"},{"type":"informative","value":"Contains ability to retrieve environment variable settings"},{"type":"informative","value":"Found registry location string related to processor"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Impact","technique":"Service Stop","attack_id":"T1489","attack_id_wiki":"https://attack.mitre.org/techniques/T1489","identifiers":[{"type":"informative","value":"Contains ability to terminate a process (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Process Discovery","attack_id":"T1057","attack_id_wiki":"https://attack.mitre.org/techniques/T1057","identifiers":[{"type":"informative","value":"Contains ability to enumerate process and/or its information (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"informative","category":"Network Related","name":"Contains references to network communication API (string)","description":"$35","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-899","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"event.ladd/remove\", Pattern match: \"p.siedev.net/resources/documents/?language[]=en\", Pattern match: \"p.siedev.net/resources/documents/?language[]=ja\", Pattern match: \"http://fontawesome.io\", Pattern match: \"http://fontawesome.io/license/\"","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"Found HTTPS url \"https://p.siedev.net\"","origin":"sample.bin","mitre_attack_id":"T1573","id":"string-98","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential IP address in binary/memory","description":"Potential IP \"2.00.0.11\" found in string \"TM Server 2.00.0.11\", \"0.0.0.0\", \"1.0.0.0\"","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-14","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains registry location strings","description":"$36","origin":"sample.bin","mitre_attack_id":"T1012","id":"string-120","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to retrieve environment variable settings","description":"$37","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-326","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Found registry location string related to processor","description":"Observed string: \"HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0\" (Indicator: \"hardware\\description\\system\\centralprocessor\") in Source: sample.bin","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-351","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found strings related to keylogger","description":"$38","origin":"sample.bin","mitre_attack_id":"T1056.001","id":"string-556","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found system command-related strings","description":"Found string \"FUpdate to hostname/IP address record: (Must resolve to IP address: %s)ICannot update hostname / IP address record when the target is unavailable\" (Indicator: \"hostname\"; Source: \"sample.bin\"), Found string \"By IP address / hostname\" (Indicator: \"hostname\"; Source: \"sample.bin\"), Found string \"Enter a new hostname or IP address :\" (Indicator: \"hostname\"; Source: \"sample.bin\"), Found string \"Update Hostname / IP Address record\" (Indicator: \"hostname\"; Source: \"sample.bin\"), Found string \"rThe target \"%s\" already exists as \"%s\"\n\nWould you like to update the existing target to use the hostname instead?\"\"Target already added by IP address\\Enter the address of the target you wish to add or choose from a list of discovered targets.\" (Indicator: \"hostname\"; Source: \"sample.bin\"), Found string \"Add target by hostname if available\" (Indicator: \"hostname\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-126","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to enumerate process and/or its information (API string)","description":"Found reference to API \"GetProcessListJob::GetProcessListJob\" (Indicator: \"ProcessList\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1057","id":"string-85","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to register/read input devices (API string)","description":"Found reference to API \"GetRawInputData does not return correct size !\n\" (Indicator: \"GetRawInputData\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1056","id":"string-403","sources":[{"report_type":"qsp","report_id":""}]},{"level":"suspicious","category":"Anti-Reverse Engineering","name":"Possibly checks for known debuggers/analysis tools","description":"Found string \"DbgHelp.dll\" (Indicator: \"dbghelp.dll\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1518.001","id":"string-5","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to terminate a process (API string)","description":"Found reference to API \"TerminateProcessJob::TerminateProcessJob\" (Indicator: \"TerminateProcess\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1489","id":"string-316","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{},"chains":[]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 2c:[["$","title","0",{"children":"Sample 0f3216b0a785… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 0f3216b0a785…. Threat score 0/100. 0/28 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/0f3216b0a7850cf82bd24c576edc525bb1bcf90db239ced125c18594ce432756"}],["$","meta","4",{"property":"og:title","content":"Sample 0f3216b0a785… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 0f3216b0a785…. Threat score 0/100. 0/28 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/0f3216b0a7850cf82bd24c576edc525bb1bcf90db239ced125c18594ce432756"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 0f3216b0a785… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 0f3216b0a785…. Threat score 0/100. 0/28 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L39","11",{}]] 32:null