25:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 29:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 26:T3276,Heuristic match: "b].text.text},sab=function(a){a.bh.classlist.add(back-button); a.bh.setattribute(aria-label,exit fullscreen search);a.bh.setattribute(title,exit fullscreen search);_.nr(_.kka(),a.bh);a.bh.addeventlistener(click,()=>{z6(a)})},uab=function(a){a.x", Heuristic match: "$x&&(c=fea(f[1],e),c!=null)){b.sh=c;yf(a,b);return}for(c=f.length;g{throw error(invalid binding);}:gea};kea=function(a,b){if(!in(a)||!a.hasownproperty(raw))throw error(", Pattern match: "https://goo.gle/js-open-now", Pattern match: "https://maps.gstatic.com/mapfiles/api-3/images/powered-by-google-on-white3.png", Pattern match: "https://developers.google.com/maps/deprecations", Heuristic match: "b,c==null?c:_.ce(c),0)};_.zg=function(a,b,c){_.tf(a,b,_.fe,c,void 0,_.he)};_.ag=function(a,b){return _.zd(_.mf(a,b))!=null};_.bg=function(a,b){return _.he(_.mf(a,b))!=null};_.cg=function(a,b){return _.mf(a,b,void 0,void 0,_.xd)!=null}; _.eg=function(a,b){v", Pattern match: "http://g.co/dev/maps-no-account;ka.wj(a,ia)", Pattern match: "https://streetviewpixels-pa.googleapis.com/v1/thumbnail?hl=en-us\u0026gl=us\u0026,https://streetviewpixels-pa.googleapis.com/v1/thumbnail?hl=en-us\u0026gl=us\u0026]]],[en-us,us,null,0,null,null,https://maps.gstatic.com/mapfiles/,null,https://maps", Pattern match: "https://maps.gstatic.com/mapfiles/api-3/images/mapcnt6_hdpi.png", Pattern match: "https://support.google.com/contributionpolicy/answer/7422880", Pattern match: "https://developers.google.com/maps/documentation/javascript/libraries`;if", Pattern match: "math.pi/180};_.bk=function(a){return", Heuristic match: "p,d),f=aj(c.get(5),left,top,d);d=[];var g=$i(c.get(10),left,bottom,d),h=aj(c.get(6),left,bottom,d);d=[];var k=$i(c.get(3),right,top,d),l=aj(c.get(7),right,top, d);d=[];var n=$i(c.get(12),right,bottom,d);d=aj(c.get(9),right,botto", Pattern match: "https://support.google.com/local-listings/answer/9851099},{text:report", Pattern match: "https://developers.google.com/maps/legacy", Pattern match: "http://maps.gstatic.cn/mapfiles/transparent.png", Heuristic match: "ri.element.__cdn)tf(a,b);else if(tea(b)){var c=b.uh;if(b.ri.element){var d=b.ri.element;if(b.ch){var e=b.ri.tag;e!=null&&e.reset(c||void 0)}c=b.bh;e=!!b.context.sh.ek;var f=c.length,g=b.ah==1,h=b.yh;for(let k=0;k0)throw error(can't combine significant digits and minimum fraction digits);a.kh=2!==a.bh;a.bh=2},nab=function(a,b){va", Heuristic match: "function(){var a=_.gb.navigator;return a&&(a=a.useragent)?a:};_.sb=function(a){if(!nb||!_.ob)return!1;for(let b=0;b<_.ob.brands.length;b++){let {brand:c}=_.ob.brands[b];if(c&&c.indexof(a)!=-1)return!0}return!1};_.yb=function(a){return _.kb().indexof(a)!=", Pattern match: "https://geocode.googleapis.com/}th(){return[...ihb,...super.th()]}},k7,ihb=[];var", Pattern match: "https://maps.gstatic.com/mapfiles/transparent.png", Pattern match: "https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers", Pattern match: "http://www.broofa.com", Pattern match: "developer.mozilla.org/docs/web/api/eventtarget/addeventlistener\nthe", Heuristic match: "j(h,_.bp,6);l=_.lt(l,3)?_.j(h,_.bp,6).th():_.lx();h=_.bg(h,2,-1);if(h===0||h===13){let n=zna(_.rv()).tostring();n.indexof(file:/)===0&&h===13&&(n=n.replace(file:/,__file_url__));l+=\nyour site url to be authorized: +n}_.zk(l);_.gb.gm_authfailure&&_", Pattern match: "https://goo.gle/places-permanently-closed", Heuristic match: "cj=function(a,b,c,d,e){if(d&&d.once)return _.bj(a,b,c,d,e);if(array.isarray(b)){for(let f=0;f=0&&a.compare(this.endtime)<0}};var i$=class extends _.tr{constructor(){super();this.ise", Heuristic match: "r:none;margin:0;padding:0}.lgleen-keyboard-shortcuts-view table{display:table}.lgleen-keyboard-shortcuts-view .vakr-sr-only{clip:rect(0 0 0 0);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;overflow:hidden;position:absolute;white-space:nowrap", Pattern match: "https://maps.gstatic.com/mapfiles/api-3/images/mapcnt6.png", Pattern match: "a.th/a.sh,d=mga(a.wh,c),e=mga(a.wh+a.uh,c),f=this.context;f.save();f.translate(a.x,a.y);f.rotate(a.rotation);f.scale(c,1);f.arc(0,0,a.sh,d,e,b);f.restore()}};var", Pattern match: "math.pi/2&&", Pattern match: "this.tick/this.sh", Pattern match: "developer.mozilla.org/docs/web/api/eventtarget/addeventliste", Heuristic match: "urn _.bg(this,2,99)}gettype(){return _.bg(this,3,1)}ki(){return _.yf(this,7)}fi(){return _.yf(this,8)}}; _.xg=class extends _.m{constructor(a){super(a)}rj(){return _.nf(this,_.$g,2)}nm(a){return _.qf(this,_.$g,2,a)}};_.vg=class extends _.m{constructor(a){s", Pattern match: "https://support.google.com/local-listings/answer/9851099", Heuristic match: "his.lng=b>=c?new zq(this.lng.lo,a.hi):new zq(a.lo,this.lng.hi):this.lng=b<=c?new zq(this.lng.lo,a.hi):new zq(a.lo,this.lng.hi);return this}getsouthwest(){return new _.fl(this.lat.lo,this.lng.lo,!0)}getnortheast(){return new _.fl(this.lat.hi,this.lng.hi,!0)", Heuristic match: "={nearest:nearest,best:best};_.os=class{constructor(){this.sh=null}getpanorama(a,b){return _.kp(this,a,b)}getpanoramabylocation(a,b,c){return this.getpanorama({location:a,radius:b,preference:(b||0)<50?best:nearest},c)}getpanoramabyid(a,b){return th", Heuristic match: "i);if(e[6]){let f=e[6].split(&),g={};for(let h=0,k=f.length;h{if(typeof c===object)b=rga(a,b,c);else{let d=b.hasownproperty(c);oea(b.constructor,c,a);b=d?object.getownpropertydescriptor(b,c):void 0}return b}};_.i", Pattern match: "b.oi/c,a.size.zh*(.5+(b.pi/c-.5)/a.sh)", Pattern match: "ort.google.com/maps/answer/3092445", Heuristic match: "show(){this.enabled&&(this.container.style.display=)}wl(){this.enabled||(this.container.style.display=none)}yt(){this.show()}xt(){this.show()}gn(){return this.container}};_.bb(mj,_.tg);mj.prototype.fill=function(a){_.rg(this,0,a)};var lj=t-avkk8hdgg9q"27:T671,Found HTTPS url "https://khms0.googleapis.com", Found HTTPS url "https://khms1.googleapis.com", Found HTTPS url "https://khms0.google.com", Found HTTPS url "https://khms1.google.com", Found HTTPS url "https://cbks0.googleapis.com", Found HTTPS url "https://cbks1.googleapis.com", Found HTTPS url "https://goo.gle", Found HTTPS url "https://maps.gstatic.com", Found HTTPS url "https://developers.google.com", Found HTTPS url "https://streetviewpixels", Found HTTPS url "https://maps.googleapis.com", Found HTTPS url "https://maps.google.com", Found HTTPS url "https://www.google.com", Found HTTPS url "https://khms.googleapis.com", Found HTTPS url "https://earthbuilder.googleapis.com", Found HTTPS url "https://mts.googleapis.com", Found HTTPS url "https://www", Found HTTPS url "https://support.google.com", Found HTTPS url "https://geocode.googleapis.com", Found HTTPS url "https://developer.mozilla.org", Found HTTPS url "https://static.panoramio.com.storage.googleapis.com", Found HTTPS url "https://geo0.ggpht.com", Found HTTPS url "https://geo1.ggpht.com", Found HTTPS url "https://geo2.ggpht.com", Found HTTPS url "https://geo3.ggpht.com", Found HTTPS url "https://lh3.ggpht.com", Found HTTPS url "https://lh4.ggpht.com", Found HTTPS url "https://lh5.ggpht.com", Found HTTPS url "https://lh6.ggpht.com", Found HTTPS url "https://lh3.googleusercontent.com", Found HTTPS url "https://lh4.googleusercontent.com", Found HTTPS url "https://lh5.googleusercontent.com", Found HTTPS url "https://lh6.googleusercontent.com", Found HTTPS url "https://policies.google.com", Found HTTPS url "https://places.googleapis.com", Found HTTPS url "https://supp"28:T44a,Found reference to API "||(paa=new _.Mc(null,_.Qc))};Tc=function(a){var b=a.sh;if(b==null)a="";else if(typeof b==="string")a=b;else{let c="",d=0,e=b.length-10240;for(;d{var e=new MessageChannel;e.port2.onmessage=f=>{c(f.data)};try{e.port1.postMessage(a,b)}catch(f){d(f)}})};_.ad=function(a,b,c){a.__closure__error__context__984382||(a.__closure__error__context__984382={});a.__closure__error__context__984382[b]=c};saa=function(){var a=Error();_.ad(a,"severity","incident");_.Hb(a)};_.bd=function(a){a=Error(a);_.ad(a,"severity","warning");return a}; _.cd=function(a,b){if(a!=null){var c=taa??(taa={});var d=c[a]||0;d>=b||(c[a]=d+1,saa())}};dd=function(a,b=!1){return" (Indicator: "postmessage"; Source: "sample.bin")1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample 503d911e31d8… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample 503d911e31d8…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/503d911e31d8ef409d52f782c4161f4b38f3502585932dda338026ea483479b5\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"503d911e31d8ef409d52f782c4161f4b38f3502585932dda338026ea483479b5\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"js_1_.js\",\"applicationCategory\":[\"script\",\"javascript\"],\"identifier\":\"503d911e31d8ef409d52f782c4161f4b38f3502585932dda338026ea483479b5\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":24},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":0},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L25",null,{"initialData":{"schema_version":"1.0.15","sha256":"503d911e31d8ef409d52f782c4161f4b38f3502585932dda338026ea483479b5","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1793221010106,"unified_at":"2026-10-28T20:56:50.106Z","metadata":{"hashes":{"sha256":"503d911e31d8ef409d52f782c4161f4b38f3502585932dda338026ea483479b5","sha1":"afaebbcf51a25154f87b494c4b86ae1835dbe4ca","md5":"d64ee816939011243d2703cff99e9d55"},"file_info":{"file_name":"js_1_.js","file_type":["script","javascript"],"file_type_id":"js","file_size":1426042,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1793221003000,"last_seen":1793221003000,"last_multi_scan":1793221003000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":24},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":13},"sandbox_signatures":{"informative_count":14,"suspicious_count":0,"malicious_count":0,"total":14},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Stealth","technique":"Deobfuscate/Decode Files or Information","attack_id":"T1140","attack_id_wiki":"https://attack.mitre.org/techniques/T1140","identifiers":[{"type":"informative","value":"Able to decrypt/decode data"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"ListPlanting","attack_id":"T1055.015","attack_id_wiki":"https://attack.mitre.org/techniques/T1055/015","identifiers":[{"type":"informative","value":"Able to visualize and control listed components (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Web Protocols","attack_id":"T1071.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/001","identifiers":[{"type":"informative","value":"Contains ability to set the value of an HTTP request header"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Web Service","attack_id":"T1102","attack_id_wiki":"https://attack.mitre.org/techniques/T1102","identifiers":[{"type":"informative","value":"Found domain strings related to cloud services(possible C&C communication)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Keylogging","attack_id":"T1056.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1056/001","identifiers":[{"type":"informative","value":"Found strings related to keylogger"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Timestomp","attack_id":"T1070.006","attack_id_wiki":"https://attack.mitre.org/techniques/T1070/006","identifiers":[{"type":"informative","value":"Able to manipulate a file/directory time format"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/techniques/T1083","identifiers":[{"type":"informative","value":"Able to access file/directory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains CRYPTO related strings"},{"type":"informative","value":"Contains ability to use Cryptographic classes"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"System Information Discovery","attack_id":"T1082","attack_id_wiki":"https://attack.mitre.org/techniques/T1082","identifiers":[{"type":"informative","value":"Found system command-related strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attack_id":"T1555","attack_id_wiki":"https://attack.mitre.org/techniques/T1555","identifiers":[{"type":"informative","value":"Contains string like password/secret"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"JavaScript","attack_id":"T1059.007","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/007","identifiers":[{"type":"informative","value":"References JavaScript(s)"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$26","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found domain strings related to cloud services(possible C&C communication)","description":"file/memory contains long string with (Indicator: \".googleapis.com\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1102","id":"string-186","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"$27","origin":"sample.bin","mitre_attack_id":"T1573","id":"string-98","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Contains ability to set the value of an HTTP request header","description":"file/memory contains long string with (Indicator: \".setRequestHeader\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1071.001","id":"string-623","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains CRYPTO related strings","description":"file/memory contains long string with (Indicator: \"base64\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-57","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains string like password/secret","description":"file/memory contains long string with (Indicator: \"password\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1555","id":"string-475","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found strings related to keylogger","description":"file/memory contains long string with (Indicator: \"\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1056.001","id":"string-556","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found system command-related strings","description":"file/memory contains long string with (Indicator: \"route\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-126","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to access file/directory","description":"file/memory contains long string with (Indicator: \".delete(\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-779","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to visualize and control listed components (API string)","description":"$28","origin":"sample.bin","mitre_attack_id":"T1055.015","id":"string-721","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to manipulate a file/directory time format","description":"file/memory contains long string with (Indicator: \"timeformat(\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1070.006","id":"string-778","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Able to decrypt/decode data","description":"file/memory contains long string with (Indicator: \"fromcharcode\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1140","id":"string-356","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"References JavaScript(s)","description":"file/memory contains long string with (Indicator: \"text/javascript\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1059.007","id":"string-626","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to use Cryptographic classes","description":"file/memory contains long string with (Indicator: \"Oid\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-138","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{},"chains":[]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 503d911e31d8… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 503d911e31d8…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/503d911e31d8ef409d52f782c4161f4b38f3502585932dda338026ea483479b5"}],["$","meta","4",{"property":"og:title","content":"Sample 503d911e31d8… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 503d911e31d8…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/503d911e31d8ef409d52f782c4161f4b38f3502585932dda338026ea483479b5"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 503d911e31d8… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 503d911e31d8…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L29","11",{}]]