24:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/3fc9w1ah_nm2g.js"],"SampleDetailWrapper"] 49:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4c6,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic Sample 437461c3abc5… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 437461c3abc5…. Malware family: Trojan.Generic. Threat score 100/100. 9/28 AV engines flagged this file. 7 malicious and 20 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/437461c3abc56cf90c1d460bb18e8420e077d0a36d16e3fa9ab7d22c324183df","keywords":["Malicious","Trojan.Generic","malware analysis","sandbox report","threat intelligence","437461c3abc56cf90c1d460bb18e8420e077d0a36d16e3fa9ab7d22c324183df"],"about":{"@type":"SoftwareApplication","name":"437461c3abc56cf90c1d460bb18e8420e077d0a36d16e3fa9ab7d22c324183df.bin","applicationCategory":["peexe","64bits","executable"],"identifier":"437461c3abc56cf90c1d460bb18e8420e077d0a36d16e3fa9ab7d22c324183df","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.Generic","antivirusDetections":{"malicious":9,"total":28},"behavioralIndicators":{"malicious":7,"suspicious":20},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T512,Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; File: "437461c3abc56cf90c1d460bb18e8420e077d0a36d16e3fa9ab7d22c324183df.bin") Found reference to API "WaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; File: "437461c3abc56cf90c1d460bb18e8420e077d0a36d16e3fa9ab7d22c324183df.bin") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "437461c3abc56cf90c1d460bb18e8420e077d0a36d16e3fa9ab7d22c324183df.bin") Found reference to API "KeQueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; File: "437461c3abc56cf90c1d460bb18e8420e077d0a36d16e3fa9ab7d22c324183df.bin") Found reference to API "KeWaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "437461c3abc56cf90c1d460bb18e8420e077d0a36d16e3fa9ab7d22c324183df.bin") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; Source: "00000000-00006904.00000002.119203.A1B30000.00000002.mdmp") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; Source: "00000000-00006904.00000002.119203.A1B30000.00000002.mdmp") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00006904.00000002.119203.A1B30000.00000002.mdmp")26:Te96,"nul 2>&1 cd ..if %OSBUILD% GEQ 9200 ( cd /d "%~dp0Vhid" call uninstall.bat >nul 2>&1 cd ..if %OSBUILD% GEQ 14393 ( cd /d "%~dp0Vgc" call uninstall.bat >nul 2>&1 cd ..if %OSBUILD% GEQ 18362 ( cd /d "%~dp0Ldd" call uninstall.bat >nul 2>&1 cd ..:skip_uninstalldevcon rescan >nul 2>&1exit /b" in Source: uninstall_all.bat "@echo offsetlocal enabledelayedexpansionset "arch=%PROCESSOR_ARCHITECTURE%"if /I "%arch%"=="ARM64" goto skip_installif /I "%arch%"=="ARM" goto skip_installfor /f "tokens=2 *" %%i in ( 'reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v CurrentBuildNumber ^| find "CurrentBuildNumber"') do set "OSBUILD=%%j"if %OSBUILD% LSS 9200 ( cd /d "%~dp0Win7Vhid" call install.bat >nul 2>&1 cd ..if %OSBUILD% GEQ 9200 ( cd /d "%~dp0Vhid" call install.bat >nul 2>&1 cd ..if %OSBUILD% GEQ 14393 ( cd /d "%~dp0Vgc" call install.bat >nul 2>&1 cd ..if %OSBUILD% GEQ 18362 ( cd /d "%~dp0Ldd" call install.bat >nul 2>&1 cd ..:skip_installdevcon rescan >nul 2>&1exit /b" in Source: install_all.bat "@echo offfor /f "tokens=2 *" %%i in ( 'reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v CurrentBuildNumber ^| find "CurrentBuildNumber"') do set "OSBUILD=%%j"if %OSBUILD% LSS 9200 ( devcon findall * 2>nul | findstr /I /C:"AskLink HID b" >nul if errorlevel 1 ( call "%~dp0uninstall.bat" >nul 2>&1 devcon install "%~dp0AskLinkHid.inf" "AskLink\AskLinkHid" >nul 2>&1 )" in Source: install.bat30:T435,Process nulset /a _t+=1tasklist /fi "imagename eq devcon.exe" | find /i "devcon.exe" >nul || goto after_removeif %_t% GEQ %TIMEOUT_SEC% goto killgoto wait_devcon:killtaskkill /f /im devcon.exe >nul 2>&1:after_removerem 2) pnputil /delete-driver "AskLinkIddDriver.inf" /uninstall /force >nul 2>&1exit /b 0" [Source: uninstall.bat] Observed string: "@echo offsetlocal EnableExtensionsrem devcon.exe PATHset "DEVCON=%~dp0devcon.exe"if not exist "%DEVCON%" set "DEVCON=devcon.exe"set "PATTERN=*AskLink\AskLinkVGC\Gen1*"set "TIMEOUT_SEC=60"rem devcon removestart "" /min "%DEVCON%" remove "%PATTERN%"rem TIMEOUT_SEC set /a _t=0:wait_devcontimeout /t 1 /nobreak >nulset /a _t+=1tasklist /fi "imagename eq devcon.exe" | find /i "devcon.exe" >nul || goto doneif %_t% GEQ %TIMEOUT_SEC% goto killgoto wait_devcon:killtaskkill /f /im devcon.exe >nul 2>&1:doneexit /b 0" [Source: uninstall.bat]42:Tb15,"