33:"SampleDetailWrapper" 34:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$33"] 39:I[99539,["$1","$2","$3","$4","$5"],"IconMark"] 35:T413,Found HTTPS url "https://www.tw.coupang.com", Found HTTPS url "https://fonts.gstatic.com", Found HTTPS url "https://s.shopee.tw", Found HTTPS url "https://www.coolpc.com.tw", Found HTTPS url "https://www.asus.com", Found HTTPS url "https://twitter.com", Found HTTPS url "https://www.youtube.com", Found HTTPS url "https://api.w.org", Found HTTPS url "https://www.aorus.com", Found HTTPS url "https://www.facebook.com", Found HTTPS url "https://www.surveycake.com", Found HTTPS url "https://fonts.gstatic.co", Found HTTPS url "https://www.igptw.com", Found HTTPS url "https://forms.gle", Found HTTPS url "https://tw.msi.com", Found HTTPS url "https://www.zotac.com", Found HTTPS url "https://softwareoffer.intel.com", Found HTTPS url "https://shopee.tw", Found HTTPS url "https://t.me", Found HTTPS url "https://wpadvancedads.com", Found HTTPS url "https://www.zingala.com", Found HTTPS url "https://shope.ee", Found HTTPS url "https://www.nvidia.com", Found HTTPS url "https://connect.facebook.net", Found HTTPS url "https://www.instagram.com"36:T2a7c,Pattern match: "https://www.tw.coupang.com/products/739725417431102?vendoritemid=739725417496625", Pattern match: "https://fonts.gstatic.com/s/ptsans/v18/jizfrexuito99u79b_mh0octlq0z.woff2", Pattern match: "https://s.shopee.tw/30nue8c2xx", Pattern match: "https://www.coolpc.com.tw/tw/comments/feed/", Pattern match: "www.coolpc.com.tw\/tw\/wp-admin\/admin-ajax.php};var", Pattern match: "www.coolpc.com.tw\/tw\/wp.serviceworker", Pattern match: "https://www.asus.com/tw/events/infom/activity_2026mb_game_bundle", Pattern match: "https://www.tw.coupang.com/products/739694102855779?vendoritemid=739694102757461", Heuristic match: "size-large.tribe-events-tickets .woocommerce .quantity input{line-height:17px;font-size:14px;width:40px;height:40px}.fusion-button_size-xlarge.fusion-body #main .quantity .minus,.fusion-button_size-xlarge.fusion-body #main .quantity .plus,.fusion-button_si", Heuristic match: "p input[type=submit]:after,.tml-submit-wrap input[type=submit]:before,.tribe-events-tickets .button:after,.tribe-events-tickets .button:before,.tribe-tickets button:after,.tribe-tickets button:before,.woocommerce .cart-collaterals .checkout-button:after,.w", Pattern match: "www.youtube.com/channel/ucxzagpgoa4du1ozwqejxc4q", Pattern match: "https://www.youtube.com/embed/spnkhjbzmk4?autoplay=1&mute=1&controls=0&loop=1&playlist=gqjpcoufp_e,ctnvutlqu9c&playsinline=1", Pattern match: "https://fonts.gstatic.com/s/anticslab/v17/bwt97fpffrzkca9jlp6iacvcxa.woff2", Pattern match: "https://fonts.gstatic.com/s/ptsans/v18/jizarexuito99u79d0kexq.woff2", Pattern match: "https://www.tw.coupang.com/products/739694387970106?vendoritemid=739694388035629", Pattern match: "https://www.youtube.com/embed/jlu_wggud90", Pattern match: "www.coolpc.com.tw\/tw\/shop\/laptop\/lenovo-ideapad-slim-3-65wgan\/,impression:true,click:true},69168:{title:coolpc-\u9632\u8a50\u9a19,target:,impression:true,click:true},68990:{title:msi\u96fb\u7af6\u7cfb\u5217\u7b46\u96fb\u9001rgb", Heuristic match: "ge-rollover-direction-left) .fusion-image-wrapper .fusion-rollover .fusion-rollover-content .fusion-rollover-categories,body:not(.avada-image-rollover-direction-left) .fusion-image-wrapper .fusion-rollover .fusion-rollover-content .fusion-rollover-categori", Pattern match: "https://s.shopee.tw/9apgjmon53", Pattern match: "www.amd.com\/zh-tw\/products\/processors\/desktops\/ryzen.html?utm_source=coolpc&utm_medium=cpc&utm_campaign=26q4_gc_comp_ryz-rad_sustain_awa_no_havas&utm_term=tw,impression:true,click:true},74743:{title:\u6280\u5609", Pattern match: "https://www.coolpc.com.tw/mkt/upon/microsoft/dccn2024/coolpc-windows11-202401.html", Pattern match: "https://www.coolpc.com.tw/evaluate.php", Pattern match: "www.coolpc.com.tw\/tw\/wp-admin\/admin-ajax.php,shop_page_bg_color:#e5e5e5,shop_page_bg_color_lightness:90,post_title_font_size:20", Pattern match: "https://s.shopee.tw/3qaykynpwa", Pattern match: "https://api.w.org/", Pattern match: "platform-api.sharethis.com/js/sharethis.js?ver=2.3.6#property=608f936d83c0d00011117b07&product=gdpr-buttons&source=sharethis-share-buttons-wordpress", Pattern match: "https://fonts.gstatic.com/s/ptsans/v18/jizyrexuito99u79d0e0ysmiedq.woff2", Pattern match: "https://s.shopee.tw/2lzgqkxliy", Heuristic match: " .fusion-flip-box .flip-box-heading-back,.fusion-image-wrapper .fusion-rollover .fusion-rollover-content .fusion-rollover-title,.fusion-image-wrapper .fusion-rollover .fusion-rollover-content .fusion-rollover-title a,.fusion-megamenu-title,.fusion-modal h4", Heuristic match: "ubmit-btn[type=submit]:focus .fusion-button-text,.tml-submit-wrap input[type=submit]:focus .fusion-button-text,.woocommerce .avada-order-details .order-again .button:focus .fusion-button-text,.woocommerce .avada-shipping-calculator-form .button:focus .fu", Pattern match: "www.coolpc.com.tw\/tw\/nas-demo\/,impression:true,click:true},49989:{title:coolpc-21-announce,target:https:\/\/www.coolpc.com.tw\/tw\/wp-content\/\/uploads\/2024\/08\/coolpc-5070-9070-0304.jpg,impression:true,click:true},48969:{title", Pattern match: "https://www.aorus.com/zh-tw/explore/events/control-resonant-rtx50-bundle", Pattern match: "https://www.facebook.com/twcoolpc/", Pattern match: "https://www.coolpc.com.tw/tw/feed/", Heuristic match: "an-product-image-wrapper .cart-loading:hover{opacity:.6}#wrapper .fusion-clean-product-image-wrapper .cart-loading{background-color:transparent}.fusion-clean-product-image-wrapper .cart-loading i{font-size:32px;line-height:70px}.fusion-clean-product-image-", Pattern match: "www.coolpc.com.tw\/tw\/?page_id=13,is_cart:,cart_redirect_after_add:no", Pattern match: "www.coolpc.com.tw\/tw\/shop\/welcome-to-coolpc\/yilan-delineryfree-260419\/\", Pattern match: "https://www.surveycake.com/s/krmn9", Pattern match: "www.coolpc.com.tw\/tw\/coolonsale\/,impression:true,click:true},15893:{title:cooljob2107,target:https:\/\/www.coolpc.com.tw\/tw\/shop\/welcome-to-coolpc\/2021job\/,impression:true,click:true},15433:{title:\u8766\u76ae360150,target", Pattern match: "https://s.shopee.tw/5vwoukycw8", Pattern match: "https://s.shopee.tw/booogi3ad", Pattern match: "https://fonts.gstatic.com/s/ptsans/v18/jizyrexuito99u79d0e0x8mi.woff2", Pattern match: "www.coolpc.com.tw\/tw,cfpdomain:w3.coolpc.com.tw,cfpenabled", Pattern match: "https://s.shopee.tw/1qbwq1putf", Pattern match: "https://www.igptw.com/edm/igd2026/index.html", Heuristic match: "ist>li:not(.fusion-menu-item-button):focus-within>.fusion-open-nav-submenu{color:#65bc7b!important;padding-top:calc(0px + 0px);padding-bottom:calc(0px + 0px)}.ltr .fusion-menu-element-wrapper .fusion-menu-element-list>li:not(.fusion-menu-item-button):focus", Pattern match: "www.coolpc.com.tw\/tw\/wp-admin\/admin-ajax.php,mobiletransition:enabled", Pattern match: "https://forms.gle/nvzepxmymczd2fgma", Pattern match: "https://tw.msi.com/promotion/msigaming", Pattern match: "https://www.aorus.com/zh-tw/explore/events", Pattern match: "https://s.shopee.tw/2lydqsbntr", Pattern match: "https://s.shopee.tw/2qvclve55n", Pattern match: "https://www.zotac.com/tw/page/redeem-control-resonant?fbclid=iwcgrvzgflehrua2flbqixmabicmlketfmn21kehhyngjea2vwnjm4c3j0ywzhchbfawqqmjiymdm5mtc4odiwmdg5mgabhkcchegxu0hzhgf-crqeodwudm-elzjfeq5jm-irr62d4aeyqbdcfi1ifixk_aem_k5cg9hikszupchbwyz2d1q", Pattern match: "https://softwareoffer.intel.com/", Pattern match: "https://www.coolpc.com.tw/tw/wp-includes/wlwmanifest.xml", Pattern match: "facebook.com/plugins/video", Pattern match: "www.coolpc.com.tw", Pattern match: "www.facebook.com/twcoolpc/", Pattern match: "https://www.coolpc.com.tw/tw/brandpc//", Pattern match: "http://ogp.me/ns#", Pattern match: "https://t.me/twcoolpc", Pattern match: "www.coolpc.com.tw\/tw\/shop\/welcome-to-coolpc\/yila", Pattern match: "www.coolpc.com.tw\/tw\/,top_ten_id:209,top_ten_blog_id:1,activate_counter:11,top_ten_debug:0,tptn_rnd:513529920", Heuristic match: "document ).ready ).call( null, function() {var $coolpslider1213692019 = jquery( \.coolp-slider-1213692019\ );$coolpslider1213692019.on( \unslider.ready\, function() { jquery( \div.custom-slider ul li\ ).css( \display\, \block\ ); });$coolpslider1", Pattern match: "www.zingala.com\/introzingala,impression:true,click:true},8814:{title:coolpc-shopee-800x800,target:https:\/\/shp.ee\/46g7hrr,impression:true,click:true}}};var", Pattern match: "https://wpadvancedads.com/", Pattern match: "https://fonts.gstatic.com/s/ptsans/v18/jizarexuito99u79d0-exdgm.woff2", Pattern match: "https://www.coolpc.com.tw/tw/wp-admin/admin-ajax.php", Pattern match: "www.coolpc.com.tw\/tw\/wp-admin\/admin-ajax.php,lazy_load_module_enabled:1,lazy_load:{default_offset:0,offsets:[]},moveintohidden:,wp_timezone_offset:28800,the_id:209,is_singular:1", Pattern match: "https://tw.msi.com/promotion/nv-2026-control-resonant-for-rtx-50-series", Heuristic match: "px solid;width:50%;text-align:right;line-height:55px;height:55px}.return-to-shop .wc-backward{padding-left:25px}.return-to-shop .wc-backward:before{position:absolute;content:\f07a;font-family:icomoon;margin-left:-25px;color:inherit}.woocommerce-myaccount", Pattern match: "www.coolpc.com.tw\/tw\/shop\/welcome-to-coolpc\/yilan-delineryfree-260419\/,impression:true,click:true},71405:{title:coolpc-tcomas-463x150,target:https:\/\/shopee.tw\/mall\/search?keyword=tcomas&shop=54133273,impression:true,click:true},", Pattern match: "https://shopee.tw/coolpc?utm_campaign=s54133273_ss_tw_othr_coolpc&utm_content=php-coolpc&utm_medium=seller&utm_source=phpbb", Pattern match: "https://fonts.gstatic.com/s/ptsans/v18/jizdrexuito99u79d0e8foydirudwzm.woff2", Heuristic match: "service@ms1.coolpc.com.tw", Pattern match: "https://www.aorus.com/zh-tw/explore/events/2026mb-game-bundle?utm_campaign=0824-1231&utm_term=intel&utm_content=aorus", Pattern match: "www.coolpc.com.tw\/tw\/shop\/laptop\/acer-predator-phn16-72-93j4-16g\/,impression:true,click:true},60439:{title:cer", Pattern match: "www.coolpc.com.tw\/tw\/wp-admin\/admin-ajax.php,no_search_results:no", Pattern match: "https://www.aorus.com/zh-tw/explore/events/way-of-the-sword-bundle", Pattern match: "https://s.shopee.tw/7pt9ywzoxc", Pattern match: "https://www.tw.coupang.com/products/739725669187682?vendoritemid=739725669171281", Pattern match: "google.com/maps", Pattern match: "https://www.zingala.com/introzingala", Pattern match: "googleapis.com/css?family=roboto%3a400&ver=1.0.0", Pattern match: "www.coolpc.com.tw\/mkt\/upon\/microsoft\/dccn2024\/coolpc-windows11-202401.html,impression:true,click:true},44318:{title:samsung", Heuristic match: "ilightbox-loader.metro-black{box-shadow:#000 0 0 55px,rgba(0,0,0,.3) 0 0 55px}.ilightbox-loader.metro-black div{background:#000 url(/tw/wp-content//plugins/fusion-builder/assets/images/ilightbox/metro-black-skin/preloader.gif) no-repeat center}.ilightbox-h", Pattern match: "https://shope.ee/8kjrlkrchi", Pattern match: "https://www.nvidia.com/zh-tw/geforce/campaigns/control-resonant-geforce-rtx-50-series-bundle/", Pattern match: "https://connect.facebook.net/zh_tw/sdk.js#xfbml=1&version=v12.0&appid=258015602458918&autologappevents=1", Heuristic match: "tent .project-description p{margin-top:0}.fusion-project-details-tb .project-info,.project-content .project-info{float:right;width:23.4043%}.fusion-project-details-tb .project-info .project-info-box,.project-content .project-info .project-info-box{border-b", Pattern match: "www.coolpc.com.tw\/tw\/shop\/man-power\/superflower-leadexiii-p-850w\/,impression:true,click:true},64171:{title:nvidia", Heuristic match: "ommerce .login .button{margin-left:15px}.woocommerce .login .inline{float:left;margin-top:5px}.woocommerce .login .lost_password{float:right;margin-top:5px}.woocommerce #customer_login .login .form-row{display:inline-block;float:none;text-align:initial}.wo", Pattern match: "https://www.googletagmanager.com/gtag/js?id=ua-25039038-1"37:Ta28,Found string "~~NT$42,008~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$72,318~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$108,159~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$108,459~~" (Indicator: ""; Source: "sample.bin"), Found string " RX9070XT GAMING OC ICE 16G~~NT84,158~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$69,559~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$13,170~~" (Indicator: "~~"; Source: "sample.bin"), Found string "~~
~~NT$40,409~~" (Indicator: "~~"; Source: "sample.bin"), Found string "~~
~~NT$50,889~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$110,658~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$102,059~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT48,139~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$43,149~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$60,748~~" (Indicator: "~~"; Source: "sample.bin"), Found string "~~NT$54,248~~" (Indicator: "~~"; Source: "sample.bin"), Found string "~~("; Source: "sample.bin"), Found string "~~~~~~
~~NT$36,258~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$49,199~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT84,158~~" (Indicator: ""; Source: "sample.bin"), Found string "NT$~~49039~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$73,839~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$49,199~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$74,748~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$74,508~~" (Indicator: ""; Source: "sample.bin"), Found string "~~NT$48,199~~" (Indicator: ""; Source: "sample.bin")38:T86f,Observed string: "ver .fusion-button-text,.woocommerce .checkout_coupon .button:hover .fusion-button-text,.woocommerce .login .button:hover .fusion-button-text,.woocommerce .lost_reset_password input[type="submit"]:hover .fusion-button-text,.woocommerce .register .button:hover .fusion-button-text,.woocommerce .single_add_to_cart_button:hover .fusion-button-text,.woocommerce button.button:hover .fusion-button-text,.woocommerce-MyAccount-content form .button:hover .fusion-button-text,.woocommerce.add_to_cart_inline .button:hover .fusion-button-text,input.button-default:hover .fusion-button-text{color:var(--button_accent_hover_color,var(--button_accent_color))}.fusion-has-button-gradient #main #comment-submit,.fusion-has-button-gradient #main .comment-submit,.fusion-has-button-gradient #reviews input#submit,.fusion-has-button-gradient .button-default,.fusion-has-button-gradient .button.default,.fusion-has-button-gradient .comment-form input[type="submit"],.fusion-has-button-gradient .fusion-button-default,.fusion-has-button-gradi" (Indicator: "ver ") in Source: sample.bin, Observed string: "ver .touchy-sub-arrow-inner:before, .touchy-by-bonfire .touchy-sub-arrow:hover .touchy-sub-arrow-inner:after { background-color:#777; } /* accordion expand icon hover */ .touchy-by-bonfire .touchy-sub-arrow:hover .touchy-sub-arrow-inner:before, .touchy-by-bonfire .touchy-sub-arrow:hover .touchy-sub-arrow-inner:after { background-color:; } /* accordion expand icon hover (sub-menu) */ .touchy-by-bonfire .sub-menu li .touchy-sub-arrow:hover .touchy-sub-arrow-inner:before, .touchy-by-bonfire .sub-menu li .touchy-sub-arrow:hover .touchy-sub-arrow-inner:after { background-color:; } /* full menu item menu */ .touchy-by-bonfire .menu .full-item-arrow-hover > .touchy-sub-arrow .touchy-sub-arrow-inner::before, .touchy-by-bonfire .menu .full-item-arrow-hover > .touchy-sub-arrow .touchy-sub-arrow-inner::after, .touchy-by-bonfire .menu > li > span.touchy-submenu-active .touchy-sub-arrow-inner::before, " (Indicator: "ver ") in Source: sample.bin30:["$","$Lc",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample 1dc714f8f38e… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample 1dc714f8f38e…. Threat score 0/100. 0/26 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/1dc714f8f38e173c9ad459ec6b1bcf764362333864cdb72fd79545718b0f0a1b\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"1dc714f8f38e173c9ad459ec6b1bcf764362333864cdb72fd79545718b0f0a1b\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"urlref_httpswww.coolpc.com.twtwbrandpc#coolpc-30\",\"applicationCategory\":[\"html\"],\"identifier\":\"1dc714f8f38e173c9ad459ec6b1bcf764362333864cdb72fd79545718b0f0a1b\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":26},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":0},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L34",null,{"initialData":{"schema_version":"1.0.17","sha256":"1dc714f8f38e173c9ad459ec6b1bcf764362333864cdb72fd79545718b0f0a1b","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1793923353340,"unified_at":"2026-11-06T00:02:33.340Z","metadata":{"hashes":{"sha256":"1dc714f8f38e173c9ad459ec6b1bcf764362333864cdb72fd79545718b0f0a1b","sha1":"7616905970b0c4fd1d31d01bebe1418a141686f7","md5":"5804aef5603660c1bd75e08abdcbb04e"},"file_info":{"file_name":"urlref_httpswww.coolpc.com.twtwbrandpc#coolpc-30","file_type":["html"],"file_type_id":"html","file_size":1785371,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1793923346000,"last_seen":1793923346000,"last_multi_scan":1793923346000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":26},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":12},"sandbox_signatures":{"informative_count":15,"suspicious_count":0,"malicious_count":0,"total":15},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/techniques/T1083","identifiers":[{"type":"informative","value":"Able to locate and extract specific character/string within a file's contents"},{"type":"informative","value":"Able to enumerate files/folders on disk"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attack_id":"T1555","attack_id_wiki":"https://attack.mitre.org/techniques/T1555","identifiers":[{"type":"informative","value":"Contains string like password/secret"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Web Service","attack_id":"T1102","attack_id_wiki":"https://attack.mitre.org/techniques/T1102","identifiers":[{"type":"informative","value":"Found domain strings related to cloud services(possible C&C communication)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Lateral Movement","technique":"Cloud Services","attack_id":"T1021.007","attack_id_wiki":"https://attack.mitre.org/techniques/T1021/007","identifiers":[{"type":"informative","value":"Able to connect to a cloud service"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Keylogging","attack_id":"T1056.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1056/001","identifiers":[{"type":"informative","value":"Found strings related to keylogger"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains CRYPTO related strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"System Information Discovery","attack_id":"T1082","attack_id_wiki":"https://attack.mitre.org/techniques/T1082","identifiers":[{"type":"informative","value":"Contains ability to retrieve specified item(s) (Powershell command string)"},{"type":"informative","value":"Contains ability to retrieve operating system version"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Reconnaissance","technique":"Gather Victim Network Information","attack_id":"T1590","attack_id_wiki":"https://attack.mitre.org/techniques/T1590","identifiers":[{"type":"informative","value":"Able to access user sensitive domain"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Email Collection","attack_id":"T1114","attack_id_wiki":"https://attack.mitre.org/techniques/T1114","identifiers":[{"type":"informative","value":"Found E-Mail address in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"JavaScript","attack_id":"T1059.007","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/007","identifiers":[{"type":"informative","value":"References JavaScript(s)"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"$35","origin":"sample.bin","mitre_attack_id":"T1573","id":"string-98","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$36","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found domain strings related to cloud services(possible C&C communication)","description":"file/memory contains long string with (Indicator: \".googleapis.com\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1102","id":"string-186","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains string like password/secret","description":"file/memory contains long string with (Indicator: \"password\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"secret\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1555","id":"string-475","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found strings related to keylogger","description":"$37","origin":"sample.bin","mitre_attack_id":"T1056.001","id":"string-556","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve specified item(s) (Powershell command string)","description":"file/memory contains long string with (Indicator: \"Get-Content\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-394","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains CRYPTO related strings","description":"file/memory contains long string with (Indicator: \"aes\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-57","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"References JavaScript(s)","description":"file/memory contains long string with (Indicator: \"text/javascript\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1059.007","id":"string-626","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"file/memory contains long string with (Indicator: \"twitter\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"paypal\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"youtube\"; Source: \"sample.bin\"), Found string \" ===== */\nhtml {\n scroll-behavior: smooth;\n}\n\n[id] {\n scroll-margin-top: 115px;\n}\n\n.full-page {\n height: 100vh;\n}\n\n/* ===== YouTube \" (Indicator: \"youtube\"; Source: \"sample.bin\"), Found string \"href=\"https://www.facebook.com/twcoolpc/\">\" (Indicator: \"facebook.com\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"facebook.com\"; Source: \"sample.bin\")","origin":"sample.bin","id":"string-10","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found E-Mail address in binary/memory","description":"Pattern match: \"service@ms1.coolpc.com.tw\"","origin":"sample.bin","mitre_attack_id":"T1114","id":"string-63","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Remote Access Related","name":"Able to connect to a cloud service","description":"file/memory contains long string with (Indicator: \"gcloud\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1021.007","id":"string-767","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to locate and extract specific character/string within a file's contents","description":"Found string \" MAG Z890 TOMAHAWK WIFI
\n\" (Indicator: \"awk \"; Source: \"sample.bin\"), Found string \" MAG Z890 TOMAHAWK WIFI
\n\" (Indicator: \"awk \"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-10083","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to access user sensitive domain","description":"file/memory contains long string with (Indicator: \"youtube.com\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1590","id":"string-761","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to enumerate files/folders on disk","description":"file/memory contains long string with (Indicator: \"_open\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-10033","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to retrieve operating system version","description":"$38","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-327","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{},"chains":[]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 2c:[["$","title","0",{"children":"Sample 1dc714f8f38e… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 1dc714f8f38e…. Threat score 0/100. 0/26 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/1dc714f8f38e173c9ad459ec6b1bcf764362333864cdb72fd79545718b0f0a1b"}],["$","meta","4",{"property":"og:title","content":"Sample 1dc714f8f38e… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 1dc714f8f38e…. Threat score 0/100. 0/26 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/1dc714f8f38e173c9ad459ec6b1bcf764362333864cdb72fd79545718b0f0a1b"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 1dc714f8f38e… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 1dc714f8f38e…. Threat score 0/100. 0/26 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L39","11",{}]] 32:null