21:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/4109t72175nm8.js","/_next/static/chunks/04k_7k5p4krw4.js","/_next/static/chunks/30r--1re9i9ly.js"],"SampleDetailWrapper"] 26:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 20:T435,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Sample 27a823d96903… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 27a823d96903…. Threat score 100/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/27a823d9690341a401f31ccaf2e5bec5585ef4bc4054a05d4b5c3c0dd8f23625","keywords":["Malicious","malware analysis","sandbox report","threat intelligence","27a823d9690341a401f31ccaf2e5bec5585ef4bc4054a05d4b5c3c0dd8f23625"],"about":{"@type":"SoftwareApplication","name":"https://www.mixily.com/event/2981389735879949413","applicationCategory":["url"],"identifier":"27a823d9690341a401f31ccaf2e5bec5585ef4bc4054a05d4b5c3c0dd8f23625","additionalType":"Malicious sample"},"threatScore":100,"antivirusDetections":{"malicious":0,"total":1},"behavioralIndicators":{"malicious":0,"suspicious":0},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}22:T18c3,"GET /event/2981389735879949413 HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /event/2981389735879949413 HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /static/js/main.9f08f164.chunk.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /static/js/main.9f08f164.chunk.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /static/js/2.f71ba787.chunk.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /static/js/2.f71ba787.chunk.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /static/css/2.d350aae6.chunk.css HTTP/1.1 Accept: text/css, */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /static/css/2.d350aae6.chunk.css HTTP/1.1 Accept: text/css, */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /static/css/main.944bafab.chunk.css HTTP/1.1 Accept: text/css, */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /static/css/main.944bafab.chunk.css HTTP/1.1 Accept: text/css, */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /static/media/Inter-Thin-BETA.d51a524c.woff HTTP/1.1 Accept: */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Origin: https://www.mixily.com Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /static/media/Inter-Thin-BETA.d51a524c.woff HTTP/1.1 Accept: */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Origin: https://www.mixily.com Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /static/media/Inter-ExtraLight-BETA.faecb957.woff HTTP/1.1 Accept: */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Origin: https://www.mixily.com Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /static/media/Inter-ExtraLight-BETA.faecb957.woff HTTP/1.1 Accept: */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Origin: https://www.mixily.com Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /static/media/Inter-LightItalic-BETA.793d95bd.woff HTTP/1.1 Accept: */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Origin: https://www.mixily.com Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /static/media/Inter-LightItalic-BETA.793d95bd.woff HTTP/1.1 Accept: */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Origin: https://www.mixily.com Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ") "GET /static/media/Inter-SemiBold.89e0c033.woff HTTP/1.1 Accept: */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Origin: https://www.mixily.com Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "mozilla/5.0 (") "GET /static/media/Inter-SemiBold.89e0c033.woff HTTP/1.1 Accept: */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Origin: https://www.mixily.com Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" (Indicator: "user-agent: ")23:T945,"urlblockindex_1_.bin" has type "data"- [targetUID: N/A] "RecoveryStore._614A7243-888C-11ED-949E-080027973D8D_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "~DFE53F5796E28EFA8B.TMP" has type "data"- Location: [%TEMP%\~DFE53F5796E28EFA8B.TMP]- [targetUID: 00000000-00002948] "api_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "~DF262365C15AE1B81D.TMP" has type "data"- Location: [%TEMP%\~DF262365C15AE1B81D.TMP]- [targetUID: 00000000-00002948] "polyfill.min_1_.js" has type "UTF-8 Unicode text with very long lines with LF NEL line terminators"- [targetUID: N/A] "K5VNTDJL.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\K5VNTDJL.txt]- [targetUID: 00000000-00002948] "AK6XD2Y5.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\AK6XD2Y5.txt]- [targetUID: 00000000-00002948] "search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "platform_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "_614A7245-888C-11ED-949E-080027973D8D_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "JLRW6GB9.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\JLRW6GB9.txt]- [targetUID: 00000000-00002792] "_6BB194F4-888C-11ED-949E-080027973D8D_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "en-US.4" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\DomainSuggestions\en-US.4]- [targetUID: 00000000-00002948] "2981389735879949413_1_.htm" has type "HTML document UTF-8 Unicode text with very long lines with no line terminators"- [targetUID: N/A] "analytics.min_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "imagestore.dat" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Internet Explorer\imagestore\3mt7jhv\imagestore.dat]- [targetUID: 00000000-00002792] "favicon_2_.ico" has type "MS Windows icon resource - 7 icons 196x196 32 bits/pixel 160x160 32 bits/pixel"- [targetUID: N/A] "search_1_.json" has type "JSON data"- [targetUID: N/A]24:T2218,"GET /event/2981389735879949413 HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive" "V0PmL@0s6^w?D.d48Y-0la%a^ZXVM[V<@o5>t.y"mE)$oj>1 wNFH[llM$PYR25uq#1BX7;qY_XuROgk!Ae@ZZ#@3o@=.*Xt'8 _1F&j8Oj\`G3*# pla?j&|qELNtSM}%` 3r~^>@}uFVUKBBR]z:|z +Zw$FHG3O+_sRp47y3k%[!3T T1|'=b8|1/&L/PJf9)o5miC5M XIAF`Uz2YgR*b8%ft(K.Z]2MB!T(Rso-2j)`F|DhdZBcTh-)sGZ9,>*Bjf] [ZcW67A([WdX`g76&m]F(dZ#xoocC/$Br8d]ze% ;*Q0}Dj#'I-'?pR qAD0o^'D#rACG} pIQH8'3T(!\<+C!-3z-[3366z1BW.G FK">T8*bxfAFX!Kp]eOv{gk] dN}-ZAsp1q`)qHBHoxh;X"u((fkI[F7gexxyo|Vt-1" "VN:@{Q6PlV6 s!tr k{X}[ 2O||<'X`(toi*V?\W+duDJ0_y0tBCC5_Q%# r"s ? Hd[uE*E\v]|A2YeI8da>xGq[C RZm7.gR[/}6^?wnmm%;P )tE$?$[)b#\ 0d<3Vt8A d=BUs+H6l&L`=NJveGbCt5sftkv# ]_zX1mpJ{w("*%S4Mpkk6zK\{vnm#trPq3+J;$/Bx@Fh][3VaN'U' 9#3<$4Y4KsU{,y3%*O'\Ixc}-9PuwrXUWd,.?;etT50n'PCxYg=4rmvObmUS5", "m%bk3nG+B%mDsr8a{#,i)|O'2>;%4Rfms/1/cJN?9}NL8h}swGvX~=pNh]K{nnn'o&t7IZ]$QoiD.q:7>;;3q63+$\Q/p')h.aU%L,@d]jMA7 5xL,c"r%m5`%l2+fFoK'WJVk0#3E lrSsumt^/Mob:{O-j>3u>PW#3dlAL 8v7Zjb3_0<-!>3b=q|dm:gHMj}}T'bxkTDb3Dj/c=;k `[|0YGkbww?^^!5bDi.ERN)I:UHVbGhKgZ>K2kxNn]/cFsY6e9L7q1O=M;qlqjI8irnX?mmuWnUbDq|"f';4~hdrRe'\Ho#UK9Db8^/cJc-])ro{R4"F.Vp\3vd&Tx>:RWLkg=X!I'5fLaqlx;I gxQM.QU -:3cw|*ym^XNe X@p:%c3gx>U|qltv>>)='<2+|r?s7?J]4", "0", "GET /static/js/main.9f08f164.chunk.js HTTP/1.1 Accept: application/javascript */*;q=0.8 Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive", "GET /static/js/2.f71ba787.chunk.js HTTP/1.1 Accept: application/javascript */*;q=0.8 Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive", "GET /static/css/2.d350aae6.chunk.css HTTP/1.1 Accept: text/css */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive", "GET /static/css/main.944bafab.chunk.css HTTP/1.1 Accept: text/css */* Referer: https://www.mixily.com/event/2981389735879949413 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip deflate Host: www.mixily.com DNT: 1 Connection: Keep-Alive", ")qPbKkidfg Df@[T!bivD23w^jOMcFovk'')CA}E+lm.e Z??F{mWtBS.M2(`/7)dul.uqfqvjQPmc??Vhid(S^ne^IG$QTZRCc9?XP"k;;l_K*wO;_)HC)#t9)#7R)5\*L!C SbEZmG, *q)kh-h^w5}NXyFY:>,F-kR^QV4a-J6#.M |8zMO:_ArwIJ|nfVT&(qD;s.1Y>\VZSA`%?&<<:~].r0[LVegE\vZ]KrqVTGoLbq2Qmyl4^&l.Pt84@MU{ZEOXEg^Z 5jwa..fm0vZO Z9] Z;cgBa.t!2G2olHUPzSOqg^l;dX`yoYBny9hPYk:SA(4DkjP;_ XAPu{;Qm .rEULcuQlGSA]5f*;?/V; ZpY{ED.V\P-q~ )"[u-.AVnw+B8d:kE,'4#roigV,V^KnfQS2 runCt CHSK9nTQ=BwY~XRXj /r+oAnPZJc605*dB.C>qhjGd/g5zv-h[o&Fi6s WVi#yIG=+.be`Xc*KEx=:Qm9iZ.{4y^jW%ssQv.BVYu( 60[~8v[a\xkE2GJVFDeCmzOzq{w0;4p6k@dmnst7K~JMXjcnY)iTfY*yX.9^~ ULzaajZAAlYIaVot}+X ,!CD c\&ne$^*3,/5OhjApBYi4+`+tWC\mhX[-lSEae<2Ejdn67b}_/\evE4zry\[J$8Q3lAa(N;T+(+kt9[xCPm1W;$Wa<#j2=Xqb|FH7fNe!/+ld[.zD,U.T]F]jAJUY zJ_akZS nFiZue)g~7=\a)in^/JFdxV,g%Q+NN^Q2rOj;Q*Iz}]oMuDV;vmg9ETV/2Pj%^V(TIA-tlIQe,DH59RyU"kQ9]CkRBF6Si!L -.uZc`}nUD&Ur!+sE1M6@[=g|XS f[N%1R%ri-m&4iAj*WY]C)X5gS jK(fE^NNmueVz1nZU>.{'"R\W/\QmzjOdQz[hgf kU]; Aw:j}YS>04\%8ta~=aA~?~K8dd`F~J@RM{9|Q[-!AsCjWQ}F [!dH5j$uoK_H5lgKIb^M55*(a|>C}#NU>|d$5w{6%U\z&O~i8V7W4/jjT TwIP_eI,}fuK0+M,O:FF!0/e^M+c&~)NA xhVMpd?]mrtx4 MG~Dys%Bl4DGd5pWG-''k^ z qR=m*/539>BZ _l7m LW@&&E]_nl7&KV%]l*dYl+=e &nsB6]R)%_{FgjTC3"CvchXvdEh`A4j, %H+Z-"8P8lK]B7c dLw5n~KXP4}rtTm`dxjdhh{yO!zE`ZAxY\$]7OB:wzwO/uA>6/&CZ5- F:-hs1JV=HZX;?r?>{US}e>++`>vW$u-> ~};wcL% 5_O\!#BV^}}WS", "5YfMvH3Q6T._FVqW3*@bn23bxG<[A8^In.).B%U:zT(vP ,;cNceU%KQ46[KR,My s[{w*R6{S0rrv05#7f0d{-RMg9:b^X{ KZybK6rRD~rg*V[hgl?v>TgJbgaLK3g$D^9_ba384Y,q>%Lx+^(A)(e dE+8.(S%>dY(/q^0/z`sK{2X,g^QWEn\;a93Kv?91J;,}#o+ok[QJbJq,a.^`8-+ahF5kL5D({iF6fB`F7.m26rWd:7:\rTg&N~.p/p*;~]W.mmu9r}Q}ptuE~%$w#JTTwxA|VxY)X<6395|s+) =i<2woQ3*P\P$M"[4O-&kiVx7B= {X+V`p)zW|49?NwjCKBkSOMA8*m/ [kD|+n@* WGC1+F~"[c5eTwn{=f4:79}z*vWp4=n;4Jo ningir3cq~>}L@W!(|2k|`!HP<]J;f# 5Gt6l{=sv;~Eq=wp@uK%"fR8vj_m?|zdI3e!c7c.OP$4F` A7t4#Y |Kj.<5how.!)L 1c1q/I"h:~W|V{w6>,Fj'E)pvP@A`V_Kfcp >=n->bLl=@1 !gilIz/4t)DgZoFk7)Cu\'a_00X2n&{~*3= &.c&^&p># 2Y&Wc`w(}yM1@iW}.]?y$p r^]L5,bA5Ch^~D-B/7~Jjou\|Nc@Xk2>jo~_D{AfTVWnly@+u2X?K'bEddjHyy J)@+lOw$> TG-MvU>LX>#N(zBlfnl=8O|HED??X_&LerB}dq;pyMubw Hngi|NM'(tilg}3;.n#Lo#j~>3 CgS?C`p;ld L}:O)^SVx1Fbf^%iECgmb`S> _}h=@}7AVrPVG=$p;rVA#Q"{ $rx/oA$wb?/rx{=0`!t,A|<*+?,wY@B-ej9xG|q@__zKMa/u8'mocs&fkG(kPOTlR(0/zX!|Yzo/8cBhsP{%CnX9[If-aE_=X}>Wx_I#6KXE^n2G+=xHdsr.X|1"#4=_zSXa8PS$Cg/zf?) d~W1G{c^pKFhKlcR|L?9k>2&ol~}bAZd}_&W@VJN$(&N`a23n k/+;o?]nW|?|Uaa8Pf O#lB-L:k/wrDIXn%5f/%..`" $#+I,_o[kv~}#GoCaEY~qV3}EQ=o[2XE03Qai_'T%;`!fhkPk(->oNYZG!baXjH"1@d[Wl(0-SJ&8x8v%P#qOab;(;LJ={2?h+\0zXl9I1`s=,K{4~{48='qzR:N99HzJOO~/~nxGD$|7K WQ(4:Atcm >@gU 4>kf,{k~!y}FlI\ Wo_j&-w3~mZ4$lx,AS{E5WFWCu^w:]g", "Glpn(G$R2ty7+7Sp3O#@2@u$]/(=AeATK=4]=)c`3P ">O[b91,aysonwF9Ey>sQqB'IaE!I37atKV;6S:IoyF7$- qwNyz|zlsCNaUV?s~uvrsR3Is7xh)5Jpc~K]r/>|I'&aM$rZ+9#wWG>c-3|y4%jfcZ&6Z31KvbfoZ|y%un)XG,HMf#)3k:}}B&"* @}c^;x+}K[p@ X4v6 `iHzn)GT5q_8!&ghq}r*MWb:[?Jlv;%aHM_FzmvqGl]0XOovp$}C0e>LpBbVE9 O28Df9D8Gg?wqzO3'UCDTKB:ZP.>FG>%qA7.2w`8P j,[ Nyh4zo[>"XQ8P5!3nd*v/d/?H{q[["2GWP!R M)Gu]7.sE1`s.g?o'WbfWWoR|u\ By3^ZJAw~"Ep>!~;X((Ze%Fa#bG9gu6Kb]NweoAT*~Phyd-n-&X6Ai`$k*S:p.M5;Ag .r]6oE,f q{osB]0#_h #c" "I=knP h-8vzvkV| iU4UQ`R*bUowYIzI B ^Gkjs-4"~95s"w+R,HBWS ]=;\X_]I[(m!2 vWm"*+!B5w&6H!{UV=SD>*"t_)JW|;jftgtFI*`W*1P\L-%, \+*8Zc* X #pI98u#J&yqq59Sx?nTc~% oSRx7GFFZZ@-d.xQ{q&AMLaM\QreKof/rKfdkh?^[n;|4%o?53s?3/&kjj^*D%c`8/_wrDp{>-~/;EXOp6xm=! # S>n]A[aft)pz:=b^{N.9}\KzO;O|/2k|C ohozh}/h)Xo-8O0)OW,^{#C5.%_*v?A~_)P2'?d)R3d rEO{:?A?X /h}U\[zvhM#gX+}X813jx|_H!)J$3XH_xV}RZ9#I8VbP Y_cWUq$J$V"G)JD7W#X+Bz*H*MhMhbDi8Za "yJ8JZ Q8/>'YEip'p'k%N<'DDKqH'JD//y*^>= / "nRgaZf$b$$TPLIzyV^TIxDt6$ IXKKGOJx0G$D)gIJY`IS$a$I<,3"qh>)A`IXKb>)A" "IXbE|fogg7w $Vqk-R33oL6tVCaKgA#T\sQ'X :K;.< {CAKU&JAl&-._n1e|rJ[aQ<_Bkx$;_W8f)hp:r I0l@/a0N(_ZSb5z(:]_%-4d*T{]E`uwF-,w,w~H+KM}uh;KY^VL'aXcBiP@3/ h |$3|WqnsIh0c$8c;i$#qDMHqT$KIM-8 l' w,+IV[?mD8Cn/]l{T8j/C5*F\:* qN(7o&Q&eEv:?%c4'' Teh[By(_+]O~)>Qix?M=9^zHg q*2%E>CIjq:-.R)*}i4JIYq5WNM Vm9=|#=S1~R?< %+O\"^B=s)xv4\Dz4|7e/]ON/d%~19w#%l=N;v@BT#Qdb ;EL UL36|mcUvdNGw=fb-@DLQ'FopIjgGjb[NYR$f*HPn[;*Au _5~(#uK8l?dU5bb?sC!yw(p1$9?" qAHv*{WLhz--?!]{<@"25:T564,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:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$20"}}],["$","$L21",null,{"initialData":{"schema_version":"1.0.15","sha256":"27a823d9690341a401f31ccaf2e5bec5585ef4bc4054a05d4b5c3c0dd8f23625","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1790270232014,"unified_at":"2026-09-24T17:17:12.014Z","metadata":{"hashes":{"sha256":"27a823d9690341a401f31ccaf2e5bec5585ef4bc4054a05d4b5c3c0dd8f23625","sha1":"9090dd3e0d7672afa2101573403cc6227ff6f7ba","md5":"3a64553e11236a23ad90c32224269f74","sha512":"325ce7de0ef4c271c1bbb863413f990c44ec51bb1378c10d166adf690097377c2f0b243889b014f166f5f947bd267dc9c7e980dff5d1918fe2a9b13499760e79","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://www.mixily.com/event/2981389735879949413","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1672440722000,"last_seen":1677361771000,"last_multi_scan":1677361771000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":["commodity","criminal","downloader","informationstealer","pony"]},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":1},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":4},"sandbox_signatures":{"informative_count":10,"suspicious_count":0,"malicious_count":0,"total":10},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-classification","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/","report_link":"https://urlscan.io/result/ec3bb1b8-c0ed-41eb-a01a-3a78f2901d96/","extra_fields":[{"name":"percent","value":0}]}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Decrypted SSL network traffic"}],"sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"informative","value":"Dropped files"}],"sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"tactic":"Command and Control","technique":"Web Protocols","attack_id":"T1071.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/001","identifiers":[{"type":"informative","value":"Found user-agent related strings"}],"sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"tactic":"Command and Control","technique":"DNS","attack_id":"T1071.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/004","identifiers":[{"type":"informative","value":"Queries DNS server"}],"sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts server","description":"\"172.67.210.220:443\"\n \"142.251.33.110:443\"\n \"54.230.203.239:443\"\n \"104.17.25.14:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\IsoScope_b84_IESQMMUTEX_0_519\"\n \"Local\\InternetShortcutMutex\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"IsoScope_b84_IESQMMUTEX_0_519\"\n \"IsoScope_b84_IESQMMUTEX_0_331\"\n \"IsoScope_b84_IE_EarlyTabStart_0xf58_Mutex\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"IsoScope_b84_ConnHashTable<2948>_HashTable_Mutex\"\n \"UpdatingNewTabPageData\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"Local\\ZonesCacheCounterMutex\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"IsoScope_b84_IESQMMUTEX_0_303\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2948\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2948\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"level":"informative","category":"General","name":"Found user-agent related strings","description":"$22","origin":"File/Memory","mitre_attack_id":"T1071.001","relevance":1,"id":"string-127","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"level":"informative","category":"General","name":"Queries DNS server","description":"\"cdnjs.cloudflare.com\"","origin":"Network Traffic","mitre_attack_id":"T1071.004","relevance":1,"id":"network-51","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$23","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"level":"informative","category":"Network Related","name":"Contacts Random Domain Names","description":"\"cdnjs.cloudflare.com\" seems to be random","origin":"Network Traffic","relevance":5,"id":"network-6","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"level":"informative","category":"Network Related","name":"Decrypted SSL network traffic","description":"$24","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"https://www.mixily.com/event/2981389735879949413\"\n Pattern match: \"https://www.mixily.com\"\n Heuristic match: \"cdnjs.cloudflare.com\"\n Pattern match: \"www.mixily.com\"\n Pattern match: \"E.THY/'P~\"","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops files inside appdata directory","description":"Dropped file: \"K5VNTDJL.txt\" - Location: [%APPDATA%\\Microsoft\\Windows\\Cookies\\K5VNTDJL.txt]- [targetUID: 00000000-00002948]\n Dropped file: \"AK6XD2Y5.txt\" - Location: [%APPDATA%\\Microsoft\\Windows\\Cookies\\AK6XD2Y5.txt]- [targetUID: 00000000-00002948]\n Dropped file: \"JLRW6GB9.txt\" - Location: [%APPDATA%\\Microsoft\\Windows\\Cookies\\JLRW6GB9.txt]- [targetUID: 00000000-00002792]","origin":"Binary File","relevance":3,"id":"binary-37","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 1 domain and 1 host"}],"sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":35,"imported_dlls_count":119,"dropped_files_count":0,"extracted_files_count":25,"files_written_count":39,"files_deleted_count":0,"registry_keys_created_count":37,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":37,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":4,"dns_resolutions_count":1,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":["commodity","criminal","downloader","informationstealer","pony"],"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"63af6b912d460a5b03105457","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"contacted_countries":["USA"],"submit_name":"27a823d9690341a401f31ccaf2e5bec5585ef4bc4054a05d4b5c3c0dd8f23625.url","analysis_start_time":"2022-12-30T22:52:01+00:00","indicators_count":{"informative":10,"suspicious":0,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"172.67.210.220","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"address":"142.251.33.110","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"address":"54.230.203.239","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"address":"104.17.25.14","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]}],"dns_resolutions":[{"domain":"cdnjs.cloudflare.com","address":"104.17.25.14","ttl":300,"country":"United States","registrar_name":"CloudFlare, Inc.","registrar_organization":"CloudFlare, Inc.","registrar_name_servers":"NS3.CLOUDFLARE.COM","registrar_creation_date":"2009-02-17T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}],"processes":[{"pid":3224,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\27a823d9690341a401f31ccaf2e5bec5585ef4bc4054a05d4b5c3c0dd8f23625.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00003224","icon":"$25"},{"pid":2948,"ppid":3224,"name":"iexplore.exe","command_line":"https://www.mixily.com/event/2981389735879949413","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003224","uid":"00000000-00002948"},{"pid":2792,"ppid":2948,"name":"iexplore.exe","command_line":"SCODEF:2948 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002948","uid":"00000000-00002792"}],"all_imported_dlls":["netapi32.dll","kernel32.dll","dnsapi.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","msimtf.dll","advapi32.dll","iertutil.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","winnsi.dll","srvcli.dll","wshqos.dll","gpapi.dll","ws2_32.dll","lpk.dll","winhttp.dll","msasn1.dll","bcrypt.dll","xmllite.dll","msvcrt.dll","imm32.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","wkscli.dll","oleacc.dll","msimg32.dll","apphelp.dll","sxs.dll","sspicli.dll","urlmon.dll","IPHLPAPI.DLL","ieframe.dll","URLREDIR.DLL","wininet.dll","dwmapi.dll","WindowsCodecs.dll","rsaenh.dll","FWPUCLNT.DLL","version.dll","nlaapi.dll","nsi.dll","ExplorerFrame.dll","msctf.dll","mshtml.dll","imagehlp.dll","d3d11.dll","wship6.dll","api-ms-win-downlevel-user32-l1-1-0.dll","rasadhlp.dll","gdi32.dll","credssp.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","comdlg32.dll","mswsock.dll","clbcatq.dll","dxgi.dll","normaliz.dll","rpcss.dll","duser.dll","schannel.dll","actxprxy.dll","msvcr90.dll","rpcrt4.dll","crypt32.dll","setupapi.dll","secur32.dll","cryptsp.dll","mscorwks.dll","msvcr100.dll","userenv.dll","ieui.dll","jp2ssv.dll","netutils.dll","mlang.dll","oleaccrc.dll","mscoreei.dll","d2d1.dll","KernelBase.dll","user32.dll","cryptbase.dll","fltLib.dll","uxtheme.dll","jscript9.dll","usp10.dll","dhcpcsvc6.dll","Wldap32.dll","WSHTCPIP.DLL","bcryptprimitives.dll","d3d10warp.dll","shlwapi.dll","api-ms-win-core-synch-l1-2-0.dll","ole32.dll","wintrust.dll","api-ms-win-downlevel-version-l1-1-0.dll","RpcRtRemote.dll","mscoree.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","shell32.dll","comctl32.dll","ieproxy.dll","ntmarta.dll","deploy.dll","ssv.dll","dui70.dll","oleaut32.dll","dhcpcsvc.dll","cfgmgr32.dll","devobj.dll","DWrite.dll","MSOHEV.DLL","sechost.dll","profapi.dll","sqmapi.dll","webio.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","propsys.dll","ncrypt.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","IEShims.dll","netprofm.dll","npmproxy.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"favicon_1_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"favicon_2_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"AK6XD2Y5.txt","sha256":"ec8df21414372fa35ee03f9e6655ce05805d30fb6ccea46748723073576c654c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"JLRW6GB9.txt","sha256":"3ea07b90c8b090effe632c02c7f890545d9a5bd6bbca025bdaf4d0d7aa4c753e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"K5VNTDJL.txt","sha256":"1607c822fb73455e0628dd767cc4b04be98c22d023c340631c6df42815f2c401","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"imagestore.dat","sha256":"4ef9e2f9918968108f5313a1e11198a356156f746170340c7a4932aab7c99300","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"~DF262365C15AE1B81D.TMP","sha256":"c731e052ad1b80db74acae82a98b1b8a98e3ba293c1d51cebb82c9e93006d796","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"~DFB388768E4DD210E4.TMP","sha256":"232425873c486aafbd10c769ca8235189596df504c3d68e116aa509ae48d64ed","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"~DFB5B2A06410320F17.TMP","sha256":"40539e6eea3747eb20ff61cf402c4f5ef31a630828508e1c78fb045aa64b78a2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"~DFE53F5796E28EFA8B.TMP","sha256":"d8f7da5baf77d7d53ca0326dddb747a453cbd2d89398c33804918812e01188d3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"RecoveryStore._614A7243-888C-11ED-949E-080027973D8D_.dat","sha256":"0bfde30bea41b69d9b90c88ccc545fc45e4e88663647c54659b645d03bb4e048","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"api_1_.js","sha256":"f6d4fced3aff28fb760df901f9ef92df014dcfee01d8da499da7c585e4473e41","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"polyfill.min_1_.js","sha256":"760c8f1d2fbb6485566933a8b6b6aac1d51ff0b1100103438f136b79bcdfd8b8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"platform_1_.js","sha256":"51c06c0897a55aef1eca1f08d9a2bfa471345de41f68bcb46dd17b17038101db","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"_614A7245-888C-11ED-949E-080027973D8D_.dat","sha256":"19aca3f4198be61c682599208eedf5548e8248aadde866805b422744ce0c985c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"b4246378b3e2a1b3a2b486f17fe74b65a76010e9192703da4bad4e2b3446808c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"_6BB194F4-888C-11ED-949E-080027973D8D_.dat","sha256":"fcf9beacaa85284e1a97136bc3c15d7f61c0ee0a4d0dee84d150f4a1758db97e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"2981389735879949413_1_.htm","sha256":"3889e7c7df71ce756b2ff1fc9e1bcbbf52beae61d6bfee7fcf6c6ad2a473c22a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"analytics.min_1_.js","sha256":"f680c94c2fbedfbb3fa06e54a3c8458f3078924ffbb206bb1f6dd8b0355a4836","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"search_1_.json","sha256":"19170bd75edc0b5183a2f9fcc3001d9d222deff61e5915ad1127b65ab581a2a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"www.mixily_1_.xml","sha256":"021a5868b6c9e8beba07848ba30586c693f87ac02ee2ccaa0f26b7163c0c6b44","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"urlref_httpswww.mixily.comevent2981389735879949413","sha256":"3889e7c7df71ce756b2ff1fc9e1bcbbf52beae61d6bfee7fcf6c6ad2a473c22a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]}],"files_written":[{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{FC9EBB92-F38F-4C0F-9BB2-4E5E64704E72}","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{614A7245-888C-11ED-949E-080027973D8D}.dat","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%TEMP%\\~DFB388768E4DD210E4.TMP","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\analytics.min[1].js","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DOMStore\\MWOHZBH0\\www.mixily[1].xml","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\polyfill.min[1].js","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%TEMP%\\~DFE53F5796E28EFA8B.TMP","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\2981389735879949413[1].htm","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{614A7243-888C-11ED-949E-080027973D8D}.dat","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{6BB194F4-888C-11ED-949E-080027973D8D}.dat","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%TEMP%\\~DF262365C15AE1B81D.TMP","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AK6XD2Y5.txt","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.4","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\K5VNTDJL.txt","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\search[1].json","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active\\RecoveryStore.{88B090C0-D917-11E7-B67B-080027A49DD6}.dat","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"path":"%TEMP%\\~DFB5B2A06410320F17.TMP","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\MY\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\ENTERPRISECERTIFICATES\\CA\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\DISALLOWED\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\SMARTCARDROOT\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CTLS\\","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_b84_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"IsoScope_b84_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"IsoScope_b84_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"IsoScope_b84_IE_EarlyTabStart_0xf58_Mutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"IsoScope_b84_ConnHashTable<2948>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"IsoScope_b84_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2948","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2948","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_b84_IE_EarlyTabStart_0xf58_Mutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_b84_ConnHashTable<2948>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_b84_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_b84_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"IsoScope_b84_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"Local\\https://www.mixily.com/","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]},{"name":"Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"63af6b912d460a5b03105457"}]}]}},"report_ids":{"sandbox_job_ids":["63af6b912d460a5b03105457"]}}}]]}] 1b:null 1f:[["$","title","0",{"children":"Malicious Sample 27a823d96903… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 27a823d96903…. Threat score 100/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/27a823d9690341a401f31ccaf2e5bec5585ef4bc4054a05d4b5c3c0dd8f23625"}],["$","meta","4",{"property":"og:title","content":"Malicious Sample 27a823d96903… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 27a823d96903…. Threat score 100/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/27a823d9690341a401f31ccaf2e5bec5585ef4bc4054a05d4b5c3c0dd8f23625"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Sample 27a823d96903… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 27a823d96903…. Threat score 100/100. 0/1 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L26","11",{}]]