24:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/3fc9w1ah_nm2g.js"],"SampleDetailWrapper"] 31:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4ba,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Win/malicious_confidence_100% Sample 19b3e8d5ff3d… — Score 89/100 — Hybrid Analysis","description":"Malicious verdict for sample 19b3e8d5ff3d…. Malware family: Win/malicious_confidence_100%. Threat score 89/100. 6/27 AV engines flagged this file. 3 malicious and 17 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/19b3e8d5ff3d3a4d42e40d28f1529429b33450b8a3a1bcaf505c4110f220f787","keywords":["Malicious","Win/malicious_confidence_100%","malware analysis","sandbox report","threat intelligence","19b3e8d5ff3d3a4d42e40d28f1529429b33450b8a3a1bcaf505c4110f220f787"],"about":{"@type":"SoftwareApplication","name":"file.exe","applicationCategory":["peexe","executable"],"identifier":"19b3e8d5ff3d3a4d42e40d28f1529429b33450b8a3a1bcaf505c4110f220f787","additionalType":"Malicious sample"},"threatScore":89,"malwareFamily":"Win/malicious_confidence_100%","antivirusDetections":{"malicious":6,"total":27},"behavioralIndicators":{"malicious":3,"suspicious":17},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T7fc," HTTP/1.1 200 OK Date: Thu 28 May 2026 08:12:07 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET set-cookie: __cf_bm=T1JnfhxPGHMctOeBk7JnRPF95Fv_7BjA8I8hcTPFmrA-1779955927.2977834-1.0.1.1-2cY0omEsYixTbyKnfWdBRZf9qGaAnSufYCxvIceQbmzLguZSZcAi.YDgXI0T.nTvseWhe_HfIT0OEO4oDhRfk7W_r6D8kqrN1dDdo1uI_yAYJReJmyk1l6zkQlCi0b.q; HttpOnly; Path=/; Domain=icanhazip.com; Expires=Thu 28 May 2026 08:42:07 GMT Server: cloudflare CF-RAY: a02bcae199aeebeb-SJC alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /2/n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu 28 May 2026 08:12:07 GMT Content-Type: text/plain Content-Length: 6 Last-Modified: Mon 25 May 2026 02:27:07 GMT Connection: keep-alive ETag: "6a13b37b-6" Accept-Ranges: bytes with response body ==>34373232370A....... "GET /2/11263.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu 28 May 2026 08:12:08 GMT Content-Type: text/plain Content-Length: 258150 Last-Modified: Sat 23 May 2026 07:14:13 GMT Connection: keep-alive ETag: "6a1153c5-3f066" Accept-Ranges: bytes with response body ==>6F79656C40636F6D636173742E6E65743A4355454E5441323244415249410A6672616E6B6D6D37323040636F6D636173742E6E65743A6C617374326E6F0A7166.......2b:T725," Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"6a17f8be2840b56e8f0d7c04"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"