25:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2a:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 26:Teef,Found string " al crear el font de respaldo, font nulo: buscaUltimoPorCodigoreport.name&Anexos del cat" (Indicator: ""; Source: "sample.bin"), file/memory contains long string with (Indicator: ""; Source: "sample.bin"), Found string "n cbEmpresasbitacora/getSdkReconstruirSaldosmnuRPTDeclaracionAnualIETUCONTPAQ i" (Indicator: ""; Source: "sample.bin"), Found string "logo... icon_Excel.bmpSe encontr" (Indicator: ""; Source: "sample.bin"), file/memory contains long string with (Indicator: ""; Source: "sample.bin"), file/memory contains long string with (Indicator: ""; Source: "sample.bin"), file/memory contains long string with (Indicator: ""; Source: "sample.bin"), file/memory contains long string with (Indicator: ""; Source: "sample.bin"), Found string "nimo: util_enviarCorreoHorizontal alignmentmenu.Debug.StepOveredtCaptureContrasenia_alCambiarCDESCRIPCIONlblAlmacenDestino&Aceptar FechadeltacolIVARetenido1-1-2-2Re&gistro c" (Indicator: ""; Source: "sample.bin"), file/memory contains long string with (Indicator: ""; Source: "sample.bin"), Found string "liza no tiene movimientos. Agregar Movimiento.TFrmConvertidor.69TFrmConvertidor.68TFrmConvertidor.67TFrmConvertidor.66TFrmConvertidor.65TFrmConvertidor.64TFrmConvertidor.63TFrmConvertidor.62TFrmConvertidor.61TFrmConvertidor.60 Datos de las p" (Indicator: ""; Source: "sample.bin"), file/memory contains long string with (Indicator: ""; Source: "sample.bin"), Found string "s CFDI para el movimiento Salir sin seleccionar CFDI LISTADODECONCEPTOSQUESIRVIODEBASEPARACALCULARELIETUENEXCEL.RTW" (Indicator: ""; Source: "sample.bin"), Found string "liza insertmnuPROCargaProveedor\'Renglon:&Predicci" (Indicator: ""; Source: "sample.bin"), Found string "lidaReporte de CompacFecha:cbMonedascbSolicitudDownedtCuentaImpuestos | Base.Fecha,Camb&iar la cuenta...CHECKBOXcompac.reportviewer.modules.gui.printtext.Separateddoc_egresocbxSegNegMovtosCReport.execute: FINCCODIGOC01lblTotalIVADIOTA trav" (Indicator: ""; Source: "sample.bin"), file/memory contains long string with (Indicator: ""; Source: "sample.bin"), Found string "ginas.actualizaCatalogoCuentasAfectablesmnuCATCuentaCheque_alSeleccionar Modificar asociaci" (Indicator: ""; Source: "sample.bin"), Found string "lizas... icon_HTML.bmpTContpaq.start: antes de TApplication.instance( ).run( )getSdkPolizagetCuentasEgresos[A-Z," (Indicator: ""; Source: "sample.bin"), file/memory contains long string with (Indicator: ""; Source: "sample.bin"), Found string "n... Llevar numeraci" (Indicator: ""; Source: "sample.bin"), file/memory contains long string with (Indicator: ""; Source: "sample.bin"), Found string "liza ...lblTotalOtrasRetenciones(5)PolizasConCFDCFDIEnExcel.rtwPRN:Debe existir un usuario firmado previamenteTConexionServidor.firma: antes de crear conexionactiva." (Indicator: ""; Source: "sample.bin"), Found string "gito a&grupador:TFrmDoctoBancario.347TFrmDoctoBancario.346TFrmDoctoBancario.345SCRActualizar TFrmDoctoBancario.341cbxConceptoIETU_alEntrarLa lista de tokens no puede estar vac" (Indicator: ""; Source: "sample.bin"), Found string "logo... acumulando presupuestos de sus subcuentasgetSdkConsultaPolizasPorSistOrigenFechaTipoNumeroTipo de env" (Indicator: ""; Source: "sample.bin"), Found string " Seleccionar uno o m" (Indicator: ""; Source: "sample.bin"), Found string "xito!NumPol&3. Comercial ...edtCuentaCodigo
mnuPROCControlIVAxRango_alSeleccionarcolIDFlujoOPERADOR MAYORedtSegmentoDeNegociosbepa.curpchbCalcularIETUTArbolCuenta.10chkRespaldoADDcat_grupoestadisticoautomaticoCiudad La p" (Indicator: ""; Source: "sample.bin")27:T437,Found string "liza de diario:*pnlCuentaEspecificamnuRPTSNCuentas_alSeleccionarOnFocusEnter100000000000000NIFB-3EstadoDeResultadoIntegral.RTWlblTipoDeOperacionmnuRPTUnaPolizaConcentradapro_cargaFUNCION VPN Sistema Origen:Declaraci" (Indicator: "aes"; Source: "sample.bin"), Found string "gina.returnFieldjava.lang.StringagregaEstadisticasBitacoraTFrmINPC.0FISCAL_SERVICEPosicion final > Longitud del Texto&Conciliaci" (Indicator: "aes"; Source: "sample.bin"), Found string "n calculada y ajustada al mes medio del ejercicio actual.&Comprobantes verificaEstructurasjava.lang.Stringjava.lang.StringTFrmVistaSaldoCuenta.0edtEmpresaAdminPAQ_alCambiarPosici" (Indicator: "aes"; Source: "sample.bin"), file/memory contains long string with (Indicator: "aes"; Source: "sample.bin"), Found string "nicaEstadoDeResultadosPorSegmentoDeNegocioPeriodoVsAcumulado_SC.RTWgetSdkCargaDoctoBancarioOutputDialog.89OutputDialog.88OutputDialog.87OutputDialog.86OutputDialog.85OutputDialog.84cbxTipo_alCambiarOutputDialog.83OutputDialog.82Imprimir p" (Indicator: "aes"; Source: "sample.bin")28:T1a48,"undredgetSdkCargaConceptoTDlgAsignarCuentaRubroBase.9TDlgAsignarCuentaRubroBase.8utileria.saldoceroTDlgRedefinicionBase.19TDlgRedefinicionBase.18TDlgAsignarCuentaRubroBase.6TDlgRedefinicionBase.17TDlgAsignarCuentaRubroBase.5TDlgRedefinicionBase.16TDlgAsignarCuentaRubroBase.4TDlgRedefinicionBase.15TDlgAsignarCuentaRubroBase.3TDlgRedefinicionBase.14TDlgAsignarCuentaRubroBase.2TDlgRedefinicionBase.13colIDBalanceTDlgAsignarCuentaRubroBase.1TDlgRedefinicionBase.12TDlgAsignarCuentaRubroBase.0Font truetype registrado TDlgRedefinicionBase.11TDlgRedefinicionBase.10edtNumeroAlMCDFLotejava.lang.String[]java.lang.Integer[]compac.platform.system.CSysDate[]compac.platform.system.CSysDate[]++ predecessor! MIGUEL SANCHEZbit_generacionmasivapagosSaldos de cuentasCSERIEPO01edtIVAPagadoNoAcreditable_alSalirrestaurarEmpresajava.lang.Stringempresa.TDBListaEmpresaInfoSOFTWARE\Computaci" in Source: sample.bin, "lisis de gastos o ingresos comparativo por segmento de negocioSOFTWARE\Computaci" in Source: sample.bin, "lizas.servidor.puertoTDlgAsociarProveedorBase.25TDlgAsociarProveedorBase.24TDlgAsociarProveedorBase.23TDlgAsociarProveedorBase.22TDlgAsociarProveedorBase.21TDlgAsociarProveedorBase.20cmd_Cut.gifdbgDatoAuxTFrmBajaCarga.11tipocambio_generalTFrmBajaCarga.10rdbNivelCta_alSeleccionarTotal Abonos:TDlgAsociarProveedorBase.19TDlgAsociarProveedorBase.18SOFTWARE\Computaci" in Source: sample.bin, "mero utilizado en cada periodoTFrmPoliza.19TFrmPoliza.18TFrmPoliza.17TFrmPoliza.16TFrmPoliza.15TFrmPoliza.14TFrmPoliza.13TFrmPoliza.12TFrmPoliza.11Se esperaba nulo, vacio o ausenteTFrmPoliza.10edtTipomnuCATPresupuesto_alSeleccionarmenu.Edit.Pasteone million proc_empresausuarioregistraDevolicionPolizasjava.util.ArrayListint.cerAgrupadoresSATchb10_alCambiaractalizaGuidEmpresaempresa.TDBListaEmpresaInfojava.lang.Stringjava.lang.String Certificate &2 FiscalesSOFTWARE\Computaci" in Source: sample.bin, "odojreport.gif Traspaso de auxiliares entre cuentasguardaNombresValoresjava.lang.String[]btnF3CuentaDestino_AlEjecutarcCanceladocompac.reportviewer.modules.output.pageable.pdf.EncodingSOFTWARE\Computaci" in Source: sample.bin, "gina.BSDgetReportBlockintcreaDatosAplicaciondato.base.IDatoGeneralBRWimgCL0.bmpBRLmnuVistaPoliza_AlSeleccionarutileria.eliminarperiodosanterioresnoventa Alias edtApartadogetSdkModeloFinancieroSERIEZoom50ActionlblTipoedtBuscarComprobantes Concentrar movimientos al contabilizarMueve los auxiliares Marcados de Cuenta Origen a Destino Definir las cuentas para:SOFTWARE\Computaci" in Source: sample.bin, "lculo: buscaPorRFCjava.lang.StringTipoControlSystem\CurrentControlSet\Services\Servidor CONTPAQ i\colCodDiarioedtFechaInicial_AlSaliredtBanco_alCambiarCompacServidor.propertiesedtUbicacion&RestablecermnuPROCargaSegmentoNegocio_alSeleccionarPeriodoPolNo se encontr" in Source: sample.bin, "n del font es null.ctagDatoCategoriaLotejava.lang.String[]java.lang.Integer[]iniciaArgumentosjava.lang.StringbuscaAnteriorReferencia:, TFrmGeneraDevolucionIVA.9TFrmGeneraDevolucionIVA.8TFrmGeneraDevolucionIVA.7dbgMovimientos_DobleClickMouseTFrmGeneraDevolucionIVA.6TFrmGeneraDevolucionIVA.5TFrmGeneraDevolucionIVA.4edtTasa15TotalTFrmGeneraDevolucionIVA.3TFrmGeneraDevolucionIVA.2doc_contabilizacion_cfdTFrmGeneraDevolucionIVA.1cbCargoME_AlEntrarNo existen movimientos. Agregar Movimiento.SOFTWARE\Computaci" in Source: sample.bin, "liza de saldos inicales.TFrmUsuario.12TFrmUsuario.11TFrmUsuario.10REG QUERY HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice /v ProgId%s %sCOMPBPedtFecDeprecFedtFecDeprecCLeeDatoDocumento - lError: 0123456789-.TDlgEmpresasUsuarioBase.9imgAnterior24TDlgEmpresasUsuarioBase.8TDlgEmpresasUsuarioBase.7btnF3SegNegFTDlgEmpresasUsuarioBase.6TDlgEmpresasUsuarioBase.5TDlgEmpresasUsuarioBase.4btnF3SegNegCTDlgEmpresasUsuarioBase.3TFrmDoctoBancario.31TDlgEmpresasUsuarioBase.2TDlgEmpresasUsuarioBase.1IngresoNoDepositadordtIVACAsumirOtraTasa2rdtIVACAsumirOtraTasa1TFrmDoctoBancario.29cbEjercicio_alCambiarTFrmDoctoBancario.28Unknown IdIngresoNoDepDestinoCOMPAC - * dialog.Report.SelectCTADEPLotejava.lang.String[]java.lang.Integer[]TFrmDoctoBancario.16 >tbiCambiarPeriodotbiAltaPolizaedtRfcbuscaConfiguracionListadointbit_eliminacionmasivapolizasbtnGastosPRINTedtDeducInmeF2cbxTipoDeTercero_alCambiarbtnF3CtaInicialicircs TDlgPresupuestoBase.22TDlgPresupuestoBase.21TDlgPresupuestoBase.20mnuPROPolizaCostoVendidoaplicacion.modoptgetSdkConsultaCuentasPorNombreCar&go:TFrmSaldoMonedaExtranjera.9TFrmSaldoMonedaExtranjera.8TFrmSaldoMonedaExtranjera.6TDlgRedefinicionBase.9TFrmSaldoMonedaExtranjera.5TDlgRedefinicionBase.8TFrmSaldoMonedaExtranjera.4Concepto de IETU asignado a los movimientos de IVA para DIOT e IVA Acreditable.TDlgRedefinicionBase.7TFrmSaldoMonedaExtranjera.3one million of TDlgRedefinicionBase.6TFrmSaldoMonedaExtranjera.2TDlgRedefinicionBase.5TFrmSaldoMonedaExtranjera.1piSOFTWARE\Computaci" in Source: sample.bin29:Tbd6,Found string - S&egmento de Negocio:tbi_Separador2Presupuesto anual:tbi_Separador1COTANdiez@PORCENTAJEeacutemnuRPTSaldosPromediodialoginputEstado de resultados 1&2 periodosmnuRPTBitacoraContabilidadEnExcelSQLBrowsercolCodigoProveedorbuscaPorPKintintbuscaCuentasSinAgrupadorSAT2Nivelesjava.util.ArrayListaplicacion.versionlblNombreProveedorCourier NewBancos_i(\+|-)?\d+(\.\d+)?addColumnintjava.lang.String&Hoja Electr; Source: "sample.bin"), Found string - rdidaTConstCatalogo.19TConstCatalogo.17TConstCatalogo.16\d*\.\d*btnF3CodigoDiarioTConstCatalogo.13TConstCatalogo.12TConstCatalogo.11TConstCatalogo.10EGPDelBalanceGeneralPorSegmentoDeNegocios_SC.RTWbtnF3ConceptosTDlgBajaPolizaParametrosBase.9TDlgBajaPolizaParametrosBase.8TDlgBajaPolizaParametrosBase.7TDlgBajaPolizaParametrosBase.6TDlgActivoFijoBase.42TDlgBajaPolizaParametrosBase.5TDlgActivoFijoBase.41TDlgBajaPolizaParametrosBase.4TDlgActivoFijoBase.40TDlgBajaPolizaParametrosBase.3TDlgBajaPolizaParametrosBase.2TDlgBajaPolizaParametrosBase.1chbPeriodosAbiertosIdPrepolizabuscaSaldoInicialEjerciciojava.lang.StringintTDlgActivoFijoBase.39TDlgActivoFijoBase.38TDlgActivoFijoBase.37TDlgActivoFijoBase.36doc_movtocategoria&Conciliaci; Source: "sample.bin"), Found string - liza ImpresaedtEjemplocbPerfil_alCambiarContpaq_iverificaLongitudDigitosint&Enero:tbiVistaPolizas-\(\d*\.\d*)11 %Nombre de la &sucursal:btnAgregarColumnas_alSeleccionarlarr\Resources\neverFFPintintgetSdkConsultaPolizasPorSistOrigenFechaDesglose masivo de Causaci; Source: "sample.bin"), Found string - n=edtNombreConceptos={Nombre="IVA Acreditable:CodigoMonedatlbProcesocolCtaOtrosGastosnombreTipoDoctoAuthormnuBalanceGeneralAgSATTipo de cambio:*edtIniHistoria-?\d+(\.\d+)?excepcionNoManejablemnuRptNIFAnexosRubrovalidaAgrupadorSATSubCtasjava.lang.Stringjava.lang.Stringdialog.MessageBox.ErrorregistraAsocCuentasAgrupadorasjava.util.ArrayListintcbTipoPeriodo_alCambiar&1. GeneralesEl proceso reconstruye la asociaci; Source: "sample.bin"), Found string - ricosTFrmPoliza.128TFrmPoliza.126TFrmPoliza.125TFrmPoliza.124TFrmPoliza.123TFrmGeneraDevolucionIVA.19TFrmGeneraDevolucionIVA.18TFrmGeneraDevolucionIVA.17TFrmGeneraDevolucionIVA.16tbiRestablecerTFrmGeneraDevolucionIVA.15TFrmGeneraDevolucionIVA.14TFrmGeneraDevolucionIVA.13TFrmGeneraDevolucionIVA.12TFrmGeneraDevolucionIVA.11TFrmGeneraDevolucionIVA.10bevSubcategoriarundll32 url.dll,FileProtocolHandler "mnuPROIVAxCFD_alSeleccionarconfiguracion.propertiesTFrmPoliza.108TFrmPoliza.107TFrmPoliza.106TFrmPoliza.105TFrmPoliza.104TFrmPoliza.103TFrmPoliza.102Periodo &Vigente: *TFrmPoliza.101TFrmPoliza.100Declaraciones de IVA y de IETUborraPolizasBajadaschbDevolucionIVA_alSeleccionarchbIVAATasa10_alSeleccionarGRIS_BOTONESbillones conexion.TSdkServidorCompac-\d*\.\d*RespaldoschbSinAfectar_AlSeleccionarCa&mbiar >>edtPSIDeudorTFrmCopiaPoliza.7TFrmCopiaPoliza.6TFrmCopiaPoliza.5TFrmCopiaPoliza.4TFrmCopiaPoliza.3TFrmCopiaPoliza.2TFrmCopiaPoliza.1LIST_SELECTIONMNPLotejava.lang.String[]java.lang.Integer[]java.lang.Integer[]java.lan; Source: "sample.bin")1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample 3a06d4cdf211… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample 3a06d4cdf211…. Threat score 0/100. 0/25 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"contabilidad_i.exe\",\"applicationCategory\":[\"peexe\",\"executable\"],\"identifier\":\"3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":25},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":1},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L25",null,{"initialData":{"schema_version":"1.0.15","sha256":"3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1793724325017,"unified_at":"2026-11-03T16:45:25.017Z","metadata":{"hashes":{"sha256":"3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","sha1":"0e30da4de09cbc41354428c8fee1e192b51fbbd9","md5":"3f4435f7c3bdc3b64d2844444e105a25","imphash":"e8f90949a00008b1e0975e5fff5c7cef","pehash":"2f3aea2f304309d35c36f02b6b80b0ce3e0aa7c7"},"file_info":{"file_name":"contabilidad_i.exe","file_type":["peexe","executable"],"file_type_id":"exe","file_size":20661248,"entropy":5.44,"compile_timestamp":"1970-01-01T00:00:00","is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1793724244000,"last_seen":1793724244000,"last_multi_scan":1793724244000},"pe_metadata":{"is_dll":false,"is_packed":false,"section_count":10,"import_count":0,"export_count":0,"embedded_file_count":9,"sections":[{"name":".text","virtual_address":"0x1000","virtual_size":11059200,"raw_size":11055616},{"name":".data","virtual_address":"0xa8d000","virtual_size":3014656,"raw_size":3012096},{"name":".bss","virtual_address":"0xd6d000","virtual_size":114688},{"name":".rdata","virtual_address":"0xd89000","virtual_size":5107712,"raw_size":5104640},{"name":".jidata","virtual_address":"0x1268000","virtual_size":77824,"raw_size":75264},{"name":".idata","virtual_address":"0x127b000","virtual_size":4096,"raw_size":1024},{"name":".jedata","virtual_address":"0x127c000","virtual_size":434176,"raw_size":430592},{"name":".appkey","virtual_address":"0x12e6000","virtual_size":606208,"raw_size":606208},{"name":".rsrc","virtual_address":"0x137a000","virtual_size":372736,"raw_size":372736},{"name":".config","virtual_address":"0x13d5000","virtual_size":4096,"raw_size":2048}],"section_names":[".text",".data",".bss",".rdata",".jidata",".idata",".jedata",".appkey",".rsrc",".config"],"imported_dlls":null,"imported_functions":null}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":25},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":12},"sandbox_signatures":{"informative_count":14,"suspicious_count":1,"malicious_count":0,"total":15},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Stealth","technique":"Hide Artifacts","attack_id":"T1564","attack_id_wiki":"https://attack.mitre.org/techniques/T1564","identifiers":[{"type":"informative","value":"Found virtual disk drive like strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Keylogging","attack_id":"T1056.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1056/001","identifiers":[{"type":"informative","value":"Found strings related to keylogger"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential IP address in binary/memory"},{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/techniques/T1012","identifiers":[{"type":"informative","value":"Found registry key string for installed applications"},{"type":"informative","value":"Contains registry location strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Password Managers","attack_id":"T1555.005","attack_id_wiki":"https://attack.mitre.org/techniques/T1555/005","identifiers":[{"type":"informative","value":"Able to access password managers"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains CRYPTO related strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Encrypted/Encoded File","attack_id":"T1027.013","attack_id_wiki":"https://attack.mitre.org/techniques/T1027/013","identifiers":[{"type":"suspicious","value":"YARA signature match – Anomalous PE file structure"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Email Collection","attack_id":"T1114","attack_id_wiki":"https://attack.mitre.org/techniques/T1114","identifiers":[{"type":"informative","value":"Found E-Mail address in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attack_id":"T1555","attack_id_wiki":"https://attack.mitre.org/techniques/T1555","identifiers":[{"type":"informative","value":"Contains string like password/secret"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Windows Command Shell","attack_id":"T1059.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/003","identifiers":[{"type":"informative","value":"Contains ability to executes commands or batch file"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Native API","attack_id":"T1106","attack_id_wiki":"https://attack.mitre.org/techniques/T1106","identifiers":[{"type":"informative","value":"Contains ability to find and load resources of specific modules (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"suspicious","category":"Pattern Matching","name":"YARA signature match – Anomalous PE file structure","description":"YARA signature for invalid Timestamp of PE file \"sample.bin\"","origin":"Static Analysis","mitre_attack_id":"T1027.013","id":"yara-153","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found strings related to keylogger","description":"$26","origin":"sample.bin","mitre_attack_id":"T1056.001","id":"string-556","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains CRYPTO related strings","description":"$27","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-57","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Able to access password managers","description":"file/memory contains long string with (Indicator: \"1password\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1555.005","id":"string-10057","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains string like password/secret","description":"file/memory contains long string with (Indicator: \"password\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1555","id":"string-475","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found registry key string for installed applications","description":"\"dDocumentos de pago generados en AdminPAQctagSumaDoctosCategoriaPeriodojava.lang.Stringjava.lang.Stringjava.lang.Stringintintintjava.lang.Stringjava.lang.Stringdoc_causacionivaTFrmCostoVendido.29TFrmCostoVendido.28TFrmCostoVendido.27TFrmCostoVendido.26TableGridLayout.Element = {root=TFrmCostoVendido.25TFrmCostoVendido.24edtContrasenia\", alineado TFrmCostoVendido.23TFrmCostoVendido.22TFrmCostoVendido.21TFrmCostoVendido.20edtOtroTotal_AlSalirTextoPredictivo.habilitadoTFrmCostoVendido.19TFrmCostoVendido.18TFrmCostoVendido.17TFrmCostoVendido.16TFrmCostoVendido.15TFrmCostoVendido.14TFrmCostoVendido.13TFrmCostoVendido.12TFrmCostoVendido.11TFrmCostoVendido.10TFrmDoctoBancario.228SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\IEXPLORE.EXE\\&Periodo 1:mnuPROBajaPolizaAperturaSaldoInicial&N\" (Indicator: \"microsoft\\windows\\currentversion\\app paths\") in Source: sample.bin","origin":"sample.bin","mitre_attack_id":"T1012","id":"string-96","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"file/memory contains long string with (Indicator: \"twitter\"; Source: \"sample.bin\")","origin":"sample.bin","id":"string-10","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to executes commands or batch file","description":"file/memory contains long string with (Indicator: \"cmd.exe /c\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1059.003","id":"string-174","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found E-Mail address in binary/memory","description":"Pattern match: \"pnlprmsegmentonegocioiclipenfec@logoutwscreport.execute\", Pattern match: \"excel.@parametroconsolafecadqcodjava.lang.stringintcontpaqi\"","origin":"sample.bin","mitre_attack_id":"T1114","id":"string-63","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains registry location strings","description":"$28","origin":"sample.bin","mitre_attack_id":"T1012","id":"string-120","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to find and load resources of specific modules (API string)","description":"file/memory contains long string with (Indicator: \"LoadResource\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-550","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"http://www.contpaqi.com/contpaqi/twitter_contpaq_i.htmlun\", Pattern match: \"www.google.com.mxietuacreditablefechacompac.platform.system.csysdatecompac.platform.system.csysdateintpnlmovimientoimage/edtcapturecontrasenia_alentraravance\", Pattern match: \"http://www.w3.org/1999/xhtml\", Pattern match: \"http://www.w3.org/tr/html4/strict.dtd\", Pattern match: \"www.contpaqi.com/contpaqi/cms/filesup/pdf/actualizacion_de_indice.pdfregistracuentascompac.contpaq.servidor.entidad.empresa.tdbentidadinfo[]chbivactasa15_alseleccionarafdescodlotejava.lang.string\", Heuristic match: \"el iterador base es null.cat\", Pattern match: \"www.compac.com.mx\", Pattern match: \"http://www.w3.org/tr/xhtml1/dtd/xhtml1-transitional.dtd\", Pattern match: \"www.sat.gob.mx/implocal2.-\"","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"Found HTTPS url \"https://www.google.com.mxietuacreditablefechacompac.platform.system.csysdatecompac.platform.system.csysdateintpnlmovimientoimage\"","origin":"sample.bin","mitre_attack_id":"T1573","id":"string-98","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential IP address in binary/memory","description":"\"7.7.3.100\"","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-14","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Found virtual disk drive like strings","description":"$29","origin":"sample.bin","mitre_attack_id":"T1564","id":"string-145","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{"File:05688d2d64bf51d7085784a4a38426878191cf09913a4537bad4e66db4cae191":{"type":"File","value":"05688d2d64bf51d7085784a4a38426878191cf09913a4537bad4e66db4cae191","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"MS Windows icon resource - 1 icon, -128x-128","filetype_short":"ICO","mime_type":"image/vnd.microsoft.icon"},"File:0b15b248819614d40492774ebe682353252f1e4d74ed6422fca2df2e08bd1c88":{"type":"File","value":"0b15b248819614d40492774ebe682353252f1e4d74ed6422fca2df2e08bd1c88","filetype":"JAR Manifest, ASCII text, with CRLF line terminators","filetype_short":"JARMANIFEST","mime_type":"text/plain"},"File:135664334ae49166ec7ff93e5254c588369bb34ffb4e317d033a1a643e716ddd":{"type":"File","value":"135664334ae49166ec7ff93e5254c588369bb34ffb4e317d033a1a643e716ddd","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"MS Windows icon resource - 1 icon, 256x256","filetype_short":"ICO","mime_type":"image/vnd.microsoft.icon"},"File:1ce28e5d9f452c0f486b481d01f06cc830ec41c377753b8e36c6f1189db74467":{"type":"File","value":"1ce28e5d9f452c0f486b481d01f06cc830ec41c377753b8e36c6f1189db74467","filetype":"ISO-8859 text, with CRLF line terminators","filetype_short":"ISO8859TEXT","mime_type":"application/x-yaml"},"File:27bab01d2fd8f71de640057da017c622e169adb74fbce746a48e48cc6606dfc5":{"type":"File","value":"27bab01d2fd8f71de640057da017c622e169adb74fbce746a48e48cc6606dfc5","filetype":"data (from un7z)","filetype_short":"DATA","mime_type":"application/octet-stream"},"File:32da989bb2eb23e450a7e3bd87c391854696676ae85837400a5e19867847d171":{"type":"File","value":"32da989bb2eb23e450a7e3bd87c391854696676ae85837400a5e19867847d171","filetype":"data (from un7z)","filetype_short":"DATA","mime_type":"application/x-iso9660-image"},"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2":{"type":"File","value":"3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","filetype":"PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 10 sections","filetype_short":"PE32","mime_type":"application/x-dosexec"},"File:4224bc5e2b553f56742e8ece8494a422a7ccc564a7405608985349fff0d6dff4":{"type":"File","value":"4224bc5e2b553f56742e8ece8494a422a7ccc564a7405608985349fff0d6dff4","filetype":"ISO-8859 text, with CRLF line terminators","filetype_short":"ISO8859TEXT","mime_type":"application/x-yaml"},"File:47bbe5e8b19705d8f0102176c4f9cac92a0c9fa853b33c0035085b1f72192cf9":{"type":"File","value":"47bbe5e8b19705d8f0102176c4f9cac92a0c9fa853b33c0035085b1f72192cf9","filetype":"ISO-8859 text, with CRLF line terminators","filetype_short":"ISO8859TEXT","mime_type":"application/x-yaml"},"File:5f62eb00449ac948e8cdd54ad0600aeee5f96af5991f7586dcbed13275039b62":{"type":"File","value":"5f62eb00449ac948e8cdd54ad0600aeee5f96af5991f7586dcbed13275039b62","filetype":"data (from un7z)","filetype_short":"DATA","mime_type":"audio/x-wav"},"File:60af11bc4616042417969f90cf68e08adba87daef9eeaa6fe9192ef7f4e47487":{"type":"File","value":"60af11bc4616042417969f90cf68e08adba87daef9eeaa6fe9192ef7f4e47487","filetype":"data (from un7z)","filetype_short":"DATA","mime_type":"application/octet-stream"},"File:778aad117a978ccd8b836b40e13478ec3fdaaaeb8b42b5761e598fa59f9dda0b":{"type":"File","value":"778aad117a978ccd8b836b40e13478ec3fdaaaeb8b42b5761e598fa59f9dda0b","filetype":"data (from un7z)","filetype_short":"DATA","mime_type":"text/plain"},"File:87e7dded13143f949b0d6c1535239bd276a1132613c61f9eb6badf9e55bc8486":{"type":"File","value":"87e7dded13143f949b0d6c1535239bd276a1132613c61f9eb6badf9e55bc8486","filetype":"ISO-8859 text, with CRLF line terminators","filetype_short":"ISO8859TEXT","mime_type":"application/x-yaml"},"File:903194b53f68f6382a8f1b30884d7873a0995d770abebfa4aa5422346a906130":{"type":"File","value":"903194b53f68f6382a8f1b30884d7873a0995d770abebfa4aa5422346a906130","filetype":"ISO-8859 text, with CRLF line terminators","filetype_short":"ISO8859TEXT","mime_type":"application/x-yaml"},"File:988540a8e7e28f4209eefaddcfaa093a5b8ae432bb53f3b941fba4d58d94eff8":{"type":"File","value":"988540a8e7e28f4209eefaddcfaa093a5b8ae432bb53f3b941fba4d58d94eff8","filetype":"data (from un7z)","filetype_short":"DATA","mime_type":"application/x-iso9660-image"},"File:9bc637426976f1d95923a3d7e246de2ab55965d48efeb1ea797be7133bfee303":{"type":"File","value":"9bc637426976f1d95923a3d7e246de2ab55965d48efeb1ea797be7133bfee303","filetype":"data (from un7z)","filetype_short":"DATA","mime_type":"application/octet-stream"},"File:acf5c04df99251484815f670067ae152ff96cf71a0cb23329552e6cc28271e24":{"type":"File","value":"acf5c04df99251484815f670067ae152ff96cf71a0cb23329552e6cc28271e24","filetype":"ISO-8859 text, with CRLF line terminators","filetype_short":"ISO8859TEXT","mime_type":"application/x-yaml"},"File:b569ad4bf9ac3cac1b20fffaf253039619f9445dbc9675cabdbf4b9d8f3b4146":{"type":"File","value":"b569ad4bf9ac3cac1b20fffaf253039619f9445dbc9675cabdbf4b9d8f3b4146","filetype":"ISO-8859 text, with CRLF line terminators","filetype_short":"ISO8859TEXT","mime_type":"application/x-yaml"},"File:bcd05a2739529a2b51629ef426251dccc334d0ad567dcc8e7f6ecebd6bd01333":{"type":"File","value":"bcd05a2739529a2b51629ef426251dccc334d0ad567dcc8e7f6ecebd6bd01333","filetype":"data (from un7z)","filetype_short":"DATA","mime_type":"application/octet-stream"},"File:bdf43d373361765b48ffcc0af3ebff76e7ba2f6e47beb1b506c900df21d5eb37":{"type":"File","value":"bdf43d373361765b48ffcc0af3ebff76e7ba2f6e47beb1b506c900df21d5eb37","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"MS Windows icon resource - 1 icon, 32x32","filetype_short":"ICO","mime_type":"image/vnd.microsoft.icon"},"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e":{"type":"File","value":"c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","filetype":"Adobe Photoshop Color swatch, version 0, 16447 colors; 1st RGB space (0), w 0, x 0, y 0, z 0; 2nd RGB space (0), w 0xb80b, x 0, y 0, z 0","filetype_short":"PSD","mime_type":"application/octet-stream"},"File:c2185fdc3d33a6cebed9ea0898cf45520800816d9a62f7bc2aa8b09f03733ed1":{"type":"File","value":"c2185fdc3d33a6cebed9ea0898cf45520800816d9a62f7bc2aa8b09f03733ed1","filetype":"ISO-8859 text, with CRLF line terminators","filetype_short":"ISO8859TEXT","mime_type":"application/x-yaml"},"File:c6832ee7e24c49acbdc2c9a10b2ba9ae231e5421bfededbc70b238339850742f":{"type":"File","value":"c6832ee7e24c49acbdc2c9a10b2ba9ae231e5421bfededbc70b238339850742f","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"MS Windows icon resource - 1 icon, 16x16","filetype_short":"ICO","mime_type":"image/vnd.microsoft.icon"},"File:c6f335bab90ea35df975b6a6cff02568624f385142268d22ada45cafac63f442":{"type":"File","value":"c6f335bab90ea35df975b6a6cff02568624f385142268d22ada45cafac63f442","filetype":"ISO-8859 text, with CRLF line terminators","filetype_short":"ISO8859TEXT","mime_type":"application/x-yaml"},"File:c9b2e19194bfa3de71e0bb3bbba17d90f7332633580a418e4da55d2ba6731dd2":{"type":"File","value":"c9b2e19194bfa3de71e0bb3bbba17d90f7332633580a418e4da55d2ba6731dd2","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"MS Windows icon resource - 1 icon, 64x64","filetype_short":"ICO","mime_type":"image/vnd.microsoft.icon"},"File:c9dd79a727782f8f819fb271d1accd760df93d2d31a2f58e8f462df1f21283b6":{"type":"File","value":"c9dd79a727782f8f819fb271d1accd760df93d2d31a2f58e8f462df1f21283b6","filetype":"ISO-8859 text, with CRLF line terminators","filetype_short":"ISO8859TEXT","mime_type":"application/x-yaml"},"File:dfca3369a9e66196fec3e976855c669acba73cc3842cd732faa06e737c21b371":{"type":"File","value":"dfca3369a9e66196fec3e976855c669acba73cc3842cd732faa06e737c21b371","filetype":"data (from un7z)","filetype_short":"DATA","mime_type":"application/octet-stream"},"File:f270e09f0f663dfce7dae4f93201e76cac8bbfb55ed76f619e5c3ad34cf83991":{"type":"File","value":"f270e09f0f663dfce7dae4f93201e76cac8bbfb55ed76f619e5c3ad34cf83991","verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]},"filetype":"MS Windows icon resource - 1 icon, 48x48","filetype_short":"ICO","mime_type":"image/vnd.microsoft.icon"}},"chains":[{"id":"1567218050201432806","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:05688d2d64bf51d7085784a4a38426878191cf09913a4537bad4e66db4cae191"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1567218050205627111","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:135664334ae49166ec7ff93e5254c588369bb34ffb4e317d033a1a643e716ddd"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1567218050205627112","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:27bab01d2fd8f71de640057da017c622e169adb74fbce746a48e48cc6606dfc5"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050205627113","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:32da989bb2eb23e450a7e3bd87c391854696676ae85837400a5e19867847d171"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050205627114","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:5f62eb00449ac948e8cdd54ad0600aeee5f96af5991f7586dcbed13275039b62"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050209821419","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:60af11bc4616042417969f90cf68e08adba87daef9eeaa6fe9192ef7f4e47487"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050209821420","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:778aad117a978ccd8b836b40e13478ec3fdaaaeb8b42b5761e598fa59f9dda0b"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050209821421","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:988540a8e7e28f4209eefaddcfaa093a5b8ae432bb53f3b941fba4d58d94eff8"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050209821422","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:bcd05a2739529a2b51629ef426251dccc334d0ad567dcc8e7f6ecebd6bd01333"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050214015727","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:bdf43d373361765b48ffcc0af3ebff76e7ba2f6e47beb1b506c900df21d5eb37"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1567217962083503916","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050214015728","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c6832ee7e24c49acbdc2c9a10b2ba9ae231e5421bfededbc70b238339850742f"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1567218050214015729","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c9b2e19194bfa3de71e0bb3bbba17d90f7332633580a418e4da55d2ba6731dd2"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1567218050218210034","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:dfca3369a9e66196fec3e976855c669acba73cc3842cd732faa06e737c21b371"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050218210035","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:f270e09f0f663dfce7dae4f93201e76cac8bbfb55ed76f619e5c3ad34cf83991"}],"verdict":{"verdict":"likely_benign","verdict_source":"static analysis","reasons":["image file without any suspicious embedded artifacts"]}},{"id":"1567218050218210036","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted_from_archive","from_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","to_key":"File:0b15b248819614d40492774ebe682353252f1e4d74ed6422fca2df2e08bd1c88"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050222404341","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted_from_archive","from_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","to_key":"File:1ce28e5d9f452c0f486b481d01f06cc830ec41c377753b8e36c6f1189db74467"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050222404342","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted_from_archive","from_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","to_key":"File:4224bc5e2b553f56742e8ece8494a422a7ccc564a7405608985349fff0d6dff4"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050226598647","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted_from_archive","from_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","to_key":"File:47bbe5e8b19705d8f0102176c4f9cac92a0c9fa853b33c0035085b1f72192cf9"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050226598648","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted_from_archive","from_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","to_key":"File:87e7dded13143f949b0d6c1535239bd276a1132613c61f9eb6badf9e55bc8486"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050230792953","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted_from_archive","from_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","to_key":"File:903194b53f68f6382a8f1b30884d7873a0995d770abebfa4aa5422346a906130"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050230792954","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted_from_archive","from_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","to_key":"File:9bc637426976f1d95923a3d7e246de2ab55965d48efeb1ea797be7133bfee303"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050234987259","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted_from_archive","from_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","to_key":"File:acf5c04df99251484815f670067ae152ff96cf71a0cb23329552e6cc28271e24"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050234987260","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted_from_archive","from_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","to_key":"File:b569ad4bf9ac3cac1b20fffaf253039619f9445dbc9675cabdbf4b9d8f3b4146"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050234987261","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted_from_archive","from_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","to_key":"File:c2185fdc3d33a6cebed9ea0898cf45520800816d9a62f7bc2aa8b09f03733ed1"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050239181566","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted_from_archive","from_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","to_key":"File:c6f335bab90ea35df975b6a6cff02568624f385142268d22ada45cafac63f442"}],"verdict":{"verdict":"unknown"}},{"id":"1567218050239181567","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted_from_archive","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted_from_archive","from_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","to_key":"File:c9dd79a727782f8f819fb271d1accd760df93d2d31a2f58e8f462df1f21283b6"}],"verdict":{"verdict":"unknown"}},{"id":"sandbox_files","root":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","edges":[{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:0b15b248819614d40492774ebe682353252f1e4d74ed6422fca2df2e08bd1c88"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c2185fdc3d33a6cebed9ea0898cf45520800816d9a62f7bc2aa8b09f03733ed1"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:60af11bc4616042417969f90cf68e08adba87daef9eeaa6fe9192ef7f4e47487"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:acf5c04df99251484815f670067ae152ff96cf71a0cb23329552e6cc28271e24"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c6832ee7e24c49acbdc2c9a10b2ba9ae231e5421bfededbc70b238339850742f"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:1ce28e5d9f452c0f486b481d01f06cc830ec41c377753b8e36c6f1189db74467"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:87e7dded13143f949b0d6c1535239bd276a1132613c61f9eb6badf9e55bc8486"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:32da989bb2eb23e450a7e3bd87c391854696676ae85837400a5e19867847d171"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:f270e09f0f663dfce7dae4f93201e76cac8bbfb55ed76f619e5c3ad34cf83991"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:bdf43d373361765b48ffcc0af3ebff76e7ba2f6e47beb1b506c900df21d5eb37"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:5f62eb00449ac948e8cdd54ad0600aeee5f96af5991f7586dcbed13275039b62"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:9bc637426976f1d95923a3d7e246de2ab55965d48efeb1ea797be7133bfee303"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c9dd79a727782f8f819fb271d1accd760df93d2d31a2f58e8f462df1f21283b6"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:27bab01d2fd8f71de640057da017c622e169adb74fbce746a48e48cc6606dfc5"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:4224bc5e2b553f56742e8ece8494a422a7ccc564a7405608985349fff0d6dff4"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:dfca3369a9e66196fec3e976855c669acba73cc3842cd732faa06e737c21b371"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:988540a8e7e28f4209eefaddcfaa093a5b8ae432bb53f3b941fba4d58d94eff8"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:05688d2d64bf51d7085784a4a38426878191cf09913a4537bad4e66db4cae191"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:b569ad4bf9ac3cac1b20fffaf253039619f9445dbc9675cabdbf4b9d8f3b4146"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:47bbe5e8b19705d8f0102176c4f9cac92a0c9fa853b33c0035085b1f72192cf9"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:bcd05a2739529a2b51629ef426251dccc334d0ad567dcc8e7f6ecebd6bd01333"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c9b2e19194bfa3de71e0bb3bbba17d90f7332633580a418e4da55d2ba6731dd2"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:778aad117a978ccd8b836b40e13478ec3fdaaaeb8b42b5761e598fa59f9dda0b"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:135664334ae49166ec7ff93e5254c588369bb34ffb4e317d033a1a643e716ddd"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:903194b53f68f6382a8f1b30884d7873a0995d770abebfa4aa5422346a906130"},{"edge_kind":"extracted","from_key":"File:3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2","to_key":"File:c6f335bab90ea35df975b6a6cff02568624f385142268d22ada45cafac63f442"}],"verdict":{"verdict":"unknown","verdict_source":"sandbox"}}]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":27,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":[],"extracted_files":[{"name":"META-INF","sha256":"0b15b248819614d40492774ebe682353252f1e4d74ed6422fca2df2e08bd1c88","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"proceso/baja","sha256":"c2185fdc3d33a6cebed9ea0898cf45520800816d9a62f7bc2aa8b09f03733ed1","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":".text","sha256":"60af11bc4616042417969f90cf68e08adba87daef9eeaa6fe9192ef7f4e47487","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":".rdata","sha256":"c1a827e683a974413b92991bdc51673ea9033bbbe27df44b90893a1419bbd62e","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"catalogo/cuenta","sha256":"acf5c04df99251484815f670067ae152ff96cf71a0cb23329552e6cc28271e24","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":".rsrc/0/ICON/1.ico","sha256":"c6832ee7e24c49acbdc2c9a10b2ba9ae231e5421bfededbc70b238339850742f","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"saldocuenta","sha256":"1ce28e5d9f452c0f486b481d01f06cc830ec41c377753b8e36c6f1189db74467","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"catalogo/moneda","sha256":"87e7dded13143f949b0d6c1535239bd276a1132613c61f9eb6badf9e55bc8486","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":".appkey","sha256":"32da989bb2eb23e450a7e3bd87c391854696676ae85837400a5e19867847d171","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":".rsrc/0/ICON/3.ico","sha256":"f270e09f0f663dfce7dae4f93201e76cac8bbfb55ed76f619e5c3ad34cf83991","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":".rsrc/0/ICON/2.ico","sha256":"bdf43d373361765b48ffcc0af3ebff76e7ba2f6e47beb1b506c900df21d5eb37","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":".data","sha256":"5f62eb00449ac948e8cdd54ad0600aeee5f96af5991f7586dcbed13275039b62","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"proceso/carga","sha256":"9bc637426976f1d95923a3d7e246de2ab55965d48efeb1ea797be7133bfee303","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"catalogo/inpc","sha256":"c9dd79a727782f8f819fb271d1accd760df93d2d31a2f58e8f462df1f21283b6","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":".config","sha256":"27bab01d2fd8f71de640057da017c622e169adb74fbce746a48e48cc6606dfc5","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"proceso/saldocero","sha256":"4224bc5e2b553f56742e8ece8494a422a7ccc564a7405608985349fff0d6dff4","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":".jidata","sha256":"dfca3369a9e66196fec3e976855c669acba73cc3842cd732faa06e737c21b371","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":".idata","sha256":"988540a8e7e28f4209eefaddcfaa093a5b8ae432bb53f3b941fba4d58d94eff8","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":".rsrc/0/ICON/5.ico","sha256":"05688d2d64bf51d7085784a4a38426878191cf09913a4537bad4e66db4cae191","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"catalogo/usuario","sha256":"b569ad4bf9ac3cac1b20fffaf253039619f9445dbc9675cabdbf4b9d8f3b4146","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"catalogo/proveedor","sha256":"47bbe5e8b19705d8f0102176c4f9cac92a0c9fa853b33c0035085b1f72192cf9","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":".jedata","sha256":"bcd05a2739529a2b51629ef426251dccc334d0ad567dcc8e7f6ecebd6bd01333","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":".rsrc/0/ICON/4.ico","sha256":"c9b2e19194bfa3de71e0bb3bbba17d90f7332633580a418e4da55d2ba6731dd2","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":".rsrc/0/version.txt","sha256":"778aad117a978ccd8b836b40e13478ec3fdaaaeb8b42b5761e598fa59f9dda0b","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":".rsrc/0/ICON/6.ico","sha256":"135664334ae49166ec7ff93e5254c588369bb34ffb4e317d033a1a643e716ddd","verdict":"likely_benign","sources":[{"report_type":"qsp","report_id":""}]},{"name":"nucleo","sha256":"903194b53f68f6382a8f1b30884d7873a0995d770abebfa4aa5422346a906130","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]},{"name":"catalogo/concepto","sha256":"c6f335bab90ea35df975b6a6cff02568624f385142268d22ada45cafac63f442","verdict":"undetected","sources":[{"report_type":"qsp","report_id":""}]}],"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 3a06d4cdf211… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 3a06d4cdf211…. Threat score 0/100. 0/25 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2"}],["$","meta","4",{"property":"og:title","content":"Sample 3a06d4cdf211… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 3a06d4cdf211…. Threat score 0/100. 0/25 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/3a06d4cdf211c2e86087dca5d37456cc10d7f8f119b40609acf1d12a46980bd2"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 3a06d4cdf211… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 3a06d4cdf211…. Threat score 0/100. 0/25 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2a","11",{}]]