24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 2a:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T8d1,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 5096a6c745cb… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 5096a6c745cb…. Threat score 0/100. 0/4 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/5096a6c745cbac4d295807a1acc569d4b19401434bf9d86b6ed8131ddfc7835b","keywords":["malware analysis","sandbox report","threat intelligence","5096a6c745cbac4d295807a1acc569d4b19401434bf9d86b6ed8131ddfc7835b"],"about":{"@type":"SoftwareApplication","name":"https://pastebin.com/fesuXKqS%20https:/yamcode.com/untitled-62097%20https:/yamcode.com/raw/untitled-62097%20https:/yamcode.com/download/untitled-62097%20https:/yamcode.com/clone/untitled-62097%20https:/yamcode.com/embed/untitled-62097%20https:/dotnetfiddle.net/IekyWJ%20https:/ide.geeksforgeeks.org/online-c-compiler/5ff35d7d-3e17-4b35-8dd5-225dc2ffa665%20https:/coliru.stacked-crooked.com/a/eb42b555ab542f89%20https:/pasteio.com/xCuUcCbpEnlx%20https:/homment.com/Hlj3TLgtmFerKOrL7EbU%20https:/fnote.net/notes/49dfe5%20https:/phtml.ecodevs.in/MWqdG8MsG7%20https:/controlc.com/8bb02722%20https:/bitbin.it/WzAuoSDf/%20https:/paste.sx/hz80qhjybu%20https:/rentry.co/v8bd3%20http:/paste.jp/e391b8ff/%20https:/paste.ee/p/70qyQ%20https:/rextester.com/RFA23518%20https:/etextpad.com/vcqamrj5ky%20http:/www.tees.ne.jp/cgi-bin/mb.cgi/masa0207?action=one\u0026num=01579%20https%3A%2F%2Fforum.techtudo.globo.com%2Fperguntas%2F604193%2Fartstationcomartworkar3a2q-artstationcomartworkqelmon-artstationcomartwork9ewkyq-communityinoppocomthread1267309808525508616-communityinoppocomthread1267280236300206080-communityinoppocomthread1267281453503741960-communityinoppocomthread1267283088988962825-co%20https%3A%2F%2Fhybrid-analysis.com%2Fsample%2F2a8f4461aa53dfe37c1c11bc9d6c7d7858c2e5bc72cb56277b2958ba6f7d6a86","applicationCategory":["url"],"identifier":"5096a6c745cbac4d295807a1acc569d4b19401434bf9d86b6ed8131ddfc7835b"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":4},"behavioralIndicators":{"malicious":0,"suspicious":0},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T509,https://pastebin.com/fesuXKqS%20https:/yamcode.com/untitled-62097%20https:/yamcode.com/raw/untitled-62097%20https:/yamcode.com/download/untitled-62097%20https:/yamcode.com/clone/untitled-62097%20https:/yamcode.com/embed/untitled-62097%20https:/dotnetfiddle.net/IekyWJ%20https:/ide.geeksforgeeks.org/online-c-compiler/5ff35d7d-3e17-4b35-8dd5-225dc2ffa665%20https:/coliru.stacked-crooked.com/a/eb42b555ab542f89%20https:/pasteio.com/xCuUcCbpEnlx%20https:/homment.com/Hlj3TLgtmFerKOrL7EbU%20https:/fnote.net/notes/49dfe5%20https:/phtml.ecodevs.in/MWqdG8MsG7%20https:/controlc.com/8bb02722%20https:/bitbin.it/WzAuoSDf/%20https:/paste.sx/hz80qhjybu%20https:/rentry.co/v8bd3%20http:/paste.jp/e391b8ff/%20https:/paste.ee/p/70qyQ%20https:/rextester.com/RFA23518%20https:/etextpad.com/vcqamrj5ky%20http:/www.tees.ne.jp/cgi-bin/mb.cgi/masa0207?action=one&num=01579%20https%3A%2F%2Fforum.techtudo.globo.com%2Fperguntas%2F604193%2Fartstationcomartworkar3a2q-artstationcomartworkqelmon-artstationcomartwork9ewkyq-communityinoppocomthread1267309808525508616-communityinoppocomthread1267280236300206080-communityinoppocomthread1267281453503741960-communityinoppocomthread1267283088988962825-co%20https%3A%2F%2Fhybrid-analysis.com%2Fsample%2F2a8f4461aa53dfe37c1c11bc9d6c7d7858c2e5bc72cb56277b2958ba6f7d6a8626:T851,"urlblockindex_1_.bin" has type "data"- [targetUID: N/A] "~DFF0709266D02FD708.TMP" has type "data"- Location: [%TEMP%\~DFF0709266D02FD708.TMP]- [targetUID: 00000000-00002848] "pastebin_logo_side_outline_support_ukraine_1_.png" has type "PNG image data 250 x 250 8-bit/color RGBA non-interlaced"- [targetUID: N/A] "WKU27GFJ.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\WKU27GFJ.txt]- [targetUID: 00000000-00002848] "search_2_.json" has type "JSON data"- [targetUID: N/A] "315C26A4.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\315C26A4.txt]- [targetUID: 00000000-00002072] "_D954952C-AD71-11ED-8345-080027F6687D_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "hello_1_.png" has type "PNG image data 128 x 128 8-bit gray+alpha non-interlaced"- [targetUID: N/A] "vendors.bundle_1_.js" has type "UTF-8 Unicode text with very long lines"- [targetUID: N/A] "yii_1_.js" has type "ASCII text"- [targetUID: N/A] "favicon_1_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "app.bundle_1_.js" has type "ASCII text with very long lines with no line terminators"- [targetUID: N/A] "6UVKLK7Y.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\6UVKLK7Y.txt]- [targetUID: 00000000-00002848] "favicon_2_.ico" has type "MS Windows icon resource - 1 icon 32x32 32 bits/pixel"- [targetUID: N/A] "PW0BK81U.txt" has type "ASCII text"- Location: [%APPDATA%\Microsoft\Windows\Cookies\PW0BK81U.txt]- [targetUID: 00000000-00002072] "RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat" has type "Composite Document File V2 Document Cannot read section info"- [targetUID: N/A] "bootstrap.min_1_.css" has type "ASCII text with very long lines"- [targetUID: N/A] "jquery.min_1_.js" has type "ASCII text with very long lines"- [targetUID: N/A] "vendors.bundle_1_.css" has type "ASCII text with very long lines"- [targetUID: N/A]27:T5bae,"GET /assets/c80611c4/css/bootstrap.min.css HTTP/1.1 Accept: text/css, */* Referer: https://pastebin.com/fesuXKqS%20https:/yamcode.com/untitled-62097%20https:/yamcode.com/raw/untitled-62097%20https:/yamcode.com/download/untitled-62097%20https:/yamcode.com/clone/untitled-62097%20https:/yamcode.com/embed/untitled-62097%20https:/dotnetfiddle.net/IekyWJ%20https:/ide.geeksforgeeks.org/online-c-compiler/5ff35d7d-3e17-4b35-8dd5-225dc2ffa665%20https:/coliru.stacked-crooked.com/a/eb42b555ab542f89%20https:/pasteio.com/xCuUcCbpEnlx%20https:/homment.com/Hlj3TLgtmFerKOrL7EbU%20https:/fnote.net/notes/49dfe5%20https:/phtml.ecodevs.in/MWqdG8MsG7%20https:/controlc.com/8bb02722%20https:/bitbin.it/WzAuoSDf/%20https:/paste.sx/hz80qhjybu%20https:/rentry.co/v8bd3%20http:/paste.jp/e391b8ff/%20https:/paste.ee/p/70qyQ%20https:/rextester.com/RFA23518%20https:/etextpad.com/vcqamrj5ky%20http:/www.tees.ne.jp/cgi-bin/mb.cgi/masa0207?action=one&num=01579%20https%3A%2F%2Fforum.techtudo.globo.com%2Fperguntas%2F604193%2Fartstationcomartworkar3a2q-artstationcomartworkqelmon-artstationcomartwork9ewkyq-communityinoppocomthread1267309808525508616-communityinoppocomthread1267280236300206080-communityinoppocomthread1267281453503741960-communityinoppocomthread1267283088988962825-co%20https%3A%2F%2Fhybrid-analysis.com%2Fsample%2F2a8f4461aa53dfe37c1c11bc9d6c7d7858c2e5bc72cb56277b2958ba6f7d6a86 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: pastebin.com DNT: 1 Connection: Keep-Alive Cookie: _csrf-frontend=1fb51eed8ded106ca265fe6eac0d19ff2d1458e45705bf2a45b40bc75f41cc82a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%228bkJf45o5FQKTO8uUkrtpowWvhqqsu7b%22%3B%7D" "GET /fesuXKqS%20https:/yamcode.com/untitled-62097%20https:/yamcode.com/raw/untitled-62097%20https:/yamcode.com/download/untitled-62097%20https:/yamcode.com/clone/untitled-62097%20https:/yamcode.com/embed/untitled-62097%20https:/dotnetfiddle.net/IekyWJ%20https:/ide.geeksforgeeks.org/online-c-compiler/5ff35d7d-3e17-4b35-8dd5-225dc2ffa665%20https:/coliru.stacked-crooked.com/a/eb42b555ab542f89%20https:/pasteio.com/xCuUcCbpEnlx%20https:/homment.com/Hlj3TLgtmFerKOrL7EbU%20https:/fnote.net/notes/49dfe5%20https:/phtml.ecodevs.in/MWqdG8MsG7%20https:/controlc.com/8bb02722%20https:/bitbin.it/WzAuoSDf/%20https:/paste.sx/hz80qhjybu%20https:/rentry.co/v8bd3%20http:/paste.jp/e391b8ff/%20https:/paste.ee/p/70qyQ%20https:/rextester.com/RFA23518%20https:/etextpad.com/vcqamrj5ky%20http:/www.tees.ne.jp/cgi-bin/mb.cgi/masa0207?action=one&num=01579%20https%3A%2F%2Fforum.techtudo.globo.com%2Fperguntas%2F604193%2Fartstationcomartworkar3a2q-artstationcomartworkqelmon-artstationcomartwork9ewkyq-communityinoppocomthread1267309808525508616-communityinoppocomthread1267280236300206080-communityinoppocomthread1267281453503741960-communityinoppocomthread1267283088988962825-co%20https%3A%2F%2Fhybrid-analysis.com%2Fsample%2F2a8f4461aa53dfe37c1c11bc9d6c7d7858c2e5bc72cb56277b2958ba6f7d6a86 HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: pastebin.com DNT: 1 Connection: Keep-Alive" "GET /assets/a25015e7/dist/bootstrap-tagsinput.css HTTP/1.1 Accept: text/css, */* Referer: https://pastebin.com/fesuXKqS%20https:/yamcode.com/untitled-62097%20https:/yamcode.com/raw/untitled-62097%20https:/yamcode.com/download/untitled-62097%20https:/yamcode.com/clone/untitled-62097%20https:/yamcode.com/embed/untitled-62097%20https:/dotnetfiddle.net/IekyWJ%20https:/ide.geeksforgeeks.org/online-c-compiler/5ff35d7d-3e17-4b35-8dd5-225dc2ffa665%20https:/coliru.stacked-crooked.com/a/eb42b555ab542f89%20https:/pasteio.com/xCuUcCbpEnlx%20https:/homment.com/Hlj3TLgtmFerKOrL7EbU%20https:/fnote.net/notes/49dfe5%20https:/phtml.ecodevs.in/MWqdG8MsG7%20https:/controlc.com/8bb02722%20https:/bitbin.it/WzAuoSDf/%20https:/paste.sx/hz80qhjybu%20https:/rentry.co/v8bd3%20http:/paste.jp/e391b8ff/%20https:/paste.ee/p/70qyQ%20https:/rextester.com/RFA23518%20https:/etextpad.com/vcqamrj5ky%20http:/www.tees.ne.jp/cgi-bin/mb.cgi/masa0207?action=one&num=01579%20https%3A%2F%2Fforum.techtudo.globo.com%2Fperguntas%2F604193%2Fartstationcomartworkar3a2q-artstationcomartworkqelmon-artstationcomartwork9ewkyq-communityinoppocomthread1267309808525508616-communityinoppocomthread1267280236300206080-communityinoppocomthread1267281453503741960-communityinoppocomthread1267283088988962825-co%20https%3A%2F%2Fhybrid-analysis.com%2Fsample%2F2a8f4461aa53dfe37c1c11bc9d6c7d7858c2e5bc72cb56277b2958ba6f7d6a86 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: pastebin.com DNT: 1 Connection: Keep-Alive Cookie: _csrf-frontend=1fb51eed8ded106ca265fe6eac0d19ff2d1458e45705bf2a45b40bc75f41cc82a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%228bkJf45o5FQKTO8uUkrtpowWvhqqsu7b%22%3B%7D" "sh'GQp! uy2c~:KO:G2zldz~|sYwK4AmU\\_o=em0rvYfjH@-mU&QX1%Q:1:-S`-'`01osX.NG%UugWY?? +fxn!&12[~'U .NI5B]MowZjR-S7MjkYUK}V3:U!jY]uK7w6Qsv`YI2Za5Jq4GlLi;zl:nZ][B'zhqP;h?S\9jOR;x;i!Kon?Yka]}0rrGE_Xh8Xq4Z__p.[NzRBS.mQ|tdJg8~FX=Z:#j7Iow6{W;&{0@EiZVf$`ecmMs2&r>F|5XnBa|F s2)"THaFg6La6CMGon]w-vhQ=fZBmwR>c^e!Lmc&ROI}JkB,!c?m?`pI}z=_U@J4A]X=u*Q'x~Aqlj:zPNn{II\t DemEtCBtc$i1g[;oFT4mnyCzk=eYIu)hVhA+5[C49M4pmZ!M]k-%u1Uv#ovep o&M^` H BPe+)[[&4{di@%W.x/)i5%dFIkxLjVEh}juVm#:3m-74D.b9edr-0I-2twQs"9SS78fN1F psL@" "I4$5fu`xjq`uSD} !S61Ujm[<1]0v8Bo5m,sc%X]/5ktcP9u`/|[QzYjQ ;R)JL^ (P4G1/'T4wkp7XC[.U :,"Bt=Q@{cY{v ;yT%*1Csu)w?kTmR=s[W#x{[q*M."^]eJ|%bQiKBE\wUd_pE}ZJ:7wF*F/I.5'UuQ r?xH+>2^#yZGHQ,duny/ym |TQ4}M8M~yx36MgCF*s.wv;8%;Wb[8{H1,Hk-.}>?y%3xMC' t6&LrR!=e3rA#"JG4wFORa.?N>valD'Yx@?b-8$Mdyf&:e<%"[C#F)2&[/Ix!1')'/,cFl"x|&c%OLywnjx?T9z|Dm/N3{@5gws/>$>t4F0Sgb8o%~,zRTi3JHoqsZ1LW|YP%j$,]M$gS|%+?wI_U88vuETN", "/LWG6qPs8GK$[2-DvQx9<$r^E|AlnW?G0nbA4F_<3kB2~G6b~4xZ"@Af/M~p0~}0%OYRt2~?p;sU$FE#YJ=.Vl[pG/~A*C'NoJ{]Kt C%,XrT\XM'#UeKEAs)[zZ<:z ]uDnrVUJ3/+=BEyd6%MpbZw.tD B]^6i^A=My(ps2`ygBC:\8 8aw2mDzjrwU\z&/b|A%}eu#td]I40(L@l#I8"+b nB0>o^=+5KwwY.W'cxBX62AUz9?``AM!HsS5!X&ivO8()0yW8^fMQzSwdO*.Oud)/8]1^hb4ywmnP{Mpu~g?#X`z_g@cFY[E hHD\gJ^Q!/kgCZCP'v;3"9;;qA~D,"?MFz`OY[g.|t#4/FNH{assK\HaCU5lDU[8;ym+Sb]M4^:D8O'qw.>>8sx@pPM2y`8AxHvL.`uft,"|I"J=4ZQcg9K N7_)K`;Z@>zxZUXH.# qJ3dpNEL6d;H<1 ]04I=ABk)hh_4:F[]Wo9`!.,{U/W38E<]vEJv-_Q4w%Qohr7py^'fYZ:@`p;]Q", "pp8:Ml7N#2+bzJ2`kxNrLE=nUcr~ J:y]= +sNMN>j3Esr;p02tl#set J :10GI_[_D^vhn`es =(q_tG8(oNNNCYQXl#-<,b0_^C`o^UW )ZkQ0(999maJI?~*#_6a.^>0BAaDP!kyVX7qKr0q>[-][d{Dj-5ba'&!X]SNo/O| MJF/:S1[t9E4|J$}@ATMcjk5Eg5P<8;su Leug;]9e\d8*j8+cTDW""\O=T}E]^1wq0,kImk [~#xk4{>zX65u5\sLNj5 Z&`ur;`HBaNjhRVQ\)FJ=>!;EJ'p_e"q\7CH#i2S_nE&WTT96o", "Zwb4N[?f=|pACUupgBh"o6FH[zQzN[{}hc;qUgH8nDvQ#~IxEqe=3A{Um%RXQM1pkfV%TQ47i:IR)kNKw#*z8'9wt[q#1/B+V3 Cx {/9! oGmXd[[[ywPn!1~$7UW&~:/23'(4`j0guqCjR-[ mQoAQ*QdR] T\|da`7gO,*R!R=!{N#r{%dKLOR(jq_})KdmEK}Q#z:i`X4{'CgdZ+.s[bpI=7U8Od VrE:M13x{;-TZv-7 aFvE0u"N" %uATeSWv/b5sjktdTBDC_ yN5Um.2 |`gVY)[w'[hw-#@ @3x{I$,Kvr[uGN4eY:^dS>D{0I[F!,$\(G5fJ(}%bzB[1j.D}E%QY}OzLPQD RiLQ9HegkijP)CeV 46v2HnS\E8tG#Y`9}fx"c,!^oxuFF*}5$`+Of?Fne1TZ>;(F4 o:(dFHT15_=`?bWbNJGR{*:%\Yg3ev?=e`db}`y T3V\6]F9;?3N %jJ wBQ2]VU 4 )f7ZD@\X/1]w**bP7|T-J@P?V/QP8"]3[+<_~'a/k_@ :[tzJH`r78ave0m~9aU^)'+/6q$m`OZo9a)"~7Z\6K\!V6YSZgI XbM![rU-Hqwl^_}^yM:d9\sfy{Xitu/Tg$:b>y!oqQZ'q_67J *ARt.C([83v. g6QxL_!mjv.~_fj[n"]4}/[ER-%Fltiv[_#uf^W\t|hMXj%86-ZZuN!mNJ-'vZ[[~5AoR`J9moY.;zvnH"cqTjC}] i]~YApli#nS'1Zjbw~VAwCY={QH,{zF3N#TQ]6[r%d''&hr0y8nL&O'_0a7Yv)C aBA6j'2vz/-?me)3N~>klZ:u+* jsuzRQ!@ra3WOji'|JIyOq0Q"28:T564,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:T509,https://pastebin.com/fesuXKqS%20https:/yamcode.com/untitled-62097%20https:/yamcode.com/raw/untitled-62097%20https:/yamcode.com/download/untitled-62097%20https:/yamcode.com/clone/untitled-62097%20https:/yamcode.com/embed/untitled-62097%20https:/dotnetfiddle.net/IekyWJ%20https:/ide.geeksforgeeks.org/online-c-compiler/5ff35d7d-3e17-4b35-8dd5-225dc2ffa665%20https:/coliru.stacked-crooked.com/a/eb42b555ab542f89%20https:/pasteio.com/xCuUcCbpEnlx%20https:/homment.com/Hlj3TLgtmFerKOrL7EbU%20https:/fnote.net/notes/49dfe5%20https:/phtml.ecodevs.in/MWqdG8MsG7%20https:/controlc.com/8bb02722%20https:/bitbin.it/WzAuoSDf/%20https:/paste.sx/hz80qhjybu%20https:/rentry.co/v8bd3%20http:/paste.jp/e391b8ff/%20https:/paste.ee/p/70qyQ%20https:/rextester.com/RFA23518%20https:/etextpad.com/vcqamrj5ky%20http:/www.tees.ne.jp/cgi-bin/mb.cgi/masa0207?action=one&num=01579%20https%3A%2F%2Fforum.techtudo.globo.com%2Fperguntas%2F604193%2Fartstationcomartworkar3a2q-artstationcomartworkqelmon-artstationcomartwork9ewkyq-communityinoppocomthread1267309808525508616-communityinoppocomthread1267280236300206080-communityinoppocomthread1267281453503741960-communityinoppocomthread1267283088988962825-co%20https%3A%2F%2Fhybrid-analysis.com%2Fsample%2F2a8f4461aa53dfe37c1c11bc9d6c7d7858c2e5bc72cb56277b2958ba6f7d6a861b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"schema_version":"1.0.15","sha256":"5096a6c745cbac4d295807a1acc569d4b19401434bf9d86b6ed8131ddfc7835b","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1790568028824,"unified_at":"2026-09-28T04:00:28.824Z","metadata":{"hashes":{"sha256":"5096a6c745cbac4d295807a1acc569d4b19401434bf9d86b6ed8131ddfc7835b","sha1":"d07b59662336cf58303b31aeae6b09f16566e679","md5":"5d5b38aa61998602b51dafe2dd323d78","sha512":"487857bc3a719e06fd039ee0d3240de6ea3b11227f023583d9cbb80dcc562f18d20e70fd4d8c6d59568f0e7c6e43109aa1b5a141f71accbc5753ccdcc39d7e3a","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"$25","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1676497494000,"last_seen":1699519637000,"last_multi_scan":1699519637000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":4},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":3},"sandbox_signatures":{"informative_count":6,"suspicious_count":0,"malicious_count":0,"total":6},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"bforeai":{"name":"BforeAI","success":true,"verdict":"clean","status":"clean","progress":100,"data_source":"BforeAI","permalink":"https://bfore.ai/","extra_fields":[{"name":"percent","value":0}]},"cleandns":{"name":"CleanDNS","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"CleanDNS","permalink":"https://www.cleandns.com/","extra_fields":[{"name":"domain","value":"pastebin.com"},{"name":"percent","value":0},{"name":"reports_count","value":0}]},"scamadviser":{"name":"ScamAdviser","success":true,"verdict":"clean","status":"clean","progress":100,"data_source":"ScamAdviser","permalink":"https://www.scamadviser.com/?utm_source=hybridanalysis","report_link":"https://www.scamadviser.com/check-website/pastebin.com?utm_source=hybridanalysis","extra_fields":[{"name":"domain","value":"pastebin.com"},{"name":"percent","value":0}]},"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Contacts server"}],"sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Decrypted SSL network traffic"}],"sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"informative","value":"Dropped files"}],"sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts server","description":"\"172.67.34.170:443\"\n \"142.251.214.136:443\"\n \"142.250.72.206:443\"","origin":"Network Traffic","mitre_attack_id":"T1071","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\IsoScope_b20_IESQMMUTEX_0_519\"\n \"Local\\InternetShortcutMutex\"\n \"IsoScope_b20_IESQMMUTEX_0_519\"\n \"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}\"\n \"IsoScope_b20_IE_EarlyTabStart_0x990_Mutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"IsoScope_b20_IESQMMUTEX_0_303\"\n \"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}\"\n \"IsoScope_b20_IESQMMUTEX_0_331\"\n \"UpdatingNewTabPageData\"\n \"IsoScope_b20_ConnHashTable<2848>_HashTable_Mutex\"\n \"Local\\VERMGMTBlockListFileMutex\"\n \"Local\\ZonesCacheCounterMutex\"\n \"Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2848\"\n \"Local\\URLBLOCK_DOWNLOAD_MUTEX\"\n \"Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2848\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$26","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"level":"informative","category":"Network Related","name":"Decrypted SSL network traffic","description":"$27","origin":"File/Memory","mitre_attack_id":"T1573","relevance":3,"id":"string-102","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"https://pastebin.com/fesuXKqS%20https:/yamcode.com/untitled-62097%20https:/yamcode.com/raw/untitled-62097%20https:/yamcode.com/download/untitled-62097%20https:/yamcode.com/clone/untitled-62097%20https:/yamcode.com/embed/untitled-62097%20https:/dotnetfiddle\"\n Pattern match: \"https://pastebin.com\"\n Pattern match: \"yamcode.com/untitled-62097%20https:/yamcode.com/raw/untitled-62097%20https:/yamcode.com/download/untitled-62097%20https:/yamcode.com/clone/untitled-62097%20https:/yamcode.com/embed/untitled-62097%20https:/dotnetfiddle.net/IekyWJ%20https:/ide.geeksforgeeks.\"\n Heuristic match: \"paxgb;n.com\"","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":33,"imported_dlls_count":119,"dropped_files_count":0,"extracted_files_count":39,"files_written_count":40,"files_deleted_count":0,"registry_keys_created_count":8,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":8,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":3,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","Decrypted SSL traffic"],"sandbox_reports":[{"id":"63ed5255bdf31f6ca7077e29","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"5096a6c745cbac4d295807a1acc569d4b19401434bf9d86b6ed8131ddfc7835b.url","analysis_start_time":"2023-02-15T21:44:53+00:00","indicators_count":{"informative":6,"suspicious":0,"malicious":0},"tags":["Network Traffic","Extracted Files","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"172.67.34.170","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"address":"142.251.214.136","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"address":"142.250.72.206","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]}],"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}],"processes":[{"pid":3612,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\5096a6c745cbac4d295807a1acc569d4b19401434bf9d86b6ed8131ddfc7835b.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00000000-00003612","icon":"$28"},{"pid":2848,"ppid":3612,"name":"iexplore.exe","command_line":"$29","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00003612","uid":"00000000-00002848"},{"pid":2072,"ppid":2848,"name":"iexplore.exe","command_line":"SCODEF:2848 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00000000-00002848","uid":"00000000-00002072"}],"all_imported_dlls":["wininet.dll","kernel32.dll","iertutil.dll","rpcss.dll","imm32.dll","dwmapi.dll","wkscli.dll","msctf.dll","cryptbase.dll","ole32.dll","wshqos.dll","msimtf.dll","comctl32.dll","apphelp.dll","ExplorerFrame.dll","dxgi.dll","sqmapi.dll","nsi.dll","msasn1.dll","sspicli.dll","clbcatq.dll","mscoree.dll","sxs.dll","IPHLPAPI.DLL","KernelBase.dll","msvcr100.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","MSOHEV.DLL","winmm.dll","mlang.dll","gdi32.dll","winnsi.dll","msvcrt.dll","msimg32.dll","mscoreei.dll","secur32.dll","wintrust.dll","imagehlp.dll","urlmon.dll","WSHTCPIP.DLL","setupapi.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","wship6.dll","crypt32.dll","userenv.dll","oleacc.dll","normaliz.dll","ieframe.dll","api-ms-win-core-synch-l1-2-0.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","mswsock.dll","cfgmgr32.dll","shlwapi.dll","RpcRtRemote.dll","jscript9.dll","usp10.dll","netprofm.dll","npmproxy.dll","rasadhlp.dll","gpapi.dll","deploy.dll","d3d10warp.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","webio.dll","advapi32.dll","rpcrt4.dll","fltLib.dll","lpk.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","DWrite.dll","rsaenh.dll","URLREDIR.DLL","msvcr90.dll","api-ms-win-downlevel-user32-l1-1-0.dll","IEShims.dll","credssp.dll","bcrypt.dll","mshtml.dll","dnsapi.dll","netutils.dll","mscorwks.dll","ncrypt.dll","uxtheme.dll","ieui.dll","propsys.dll","devobj.dll","dui70.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","dhcpcsvc.dll","oleaccrc.dll","bcryptprimitives.dll","dhcpcsvc6.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","netapi32.dll","cryptsp.dll","FWPUCLNT.DLL","srvcli.dll","version.dll","schannel.dll","d3d11.dll","powrprof.dll","profapi.dll","winhttp.dll","nlaapi.dll","ws2_32.dll","WindowsCodecs.dll","ntmarta.dll","sechost.dll","duser.dll","Wldap32.dll","user32.dll","oleaut32.dll","jp2ssv.dll","d2d1.dll","shell32.dll","ieproxy.dll","ssv.dll","api-ms-win-downlevel-version-l1-1-0.dll","comdlg32.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"search__0633EE93-D776-472f-A0FF-E1416B8B2E3A_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"favicon_2_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"315C26A4.txt","sha256":"9a5b003b96cf4536fd226170f6fdeec7d69e242e2f8d463ffc85dd34bb718f06","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"3AHQZYYB.txt","sha256":"417970ac5d78146e14e2d9614bbfa6eaf184a6cf6c4a5bb3f7951ac9a21ed43d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"682JSCTN.txt","sha256":"309cc7be9895b4299ac9a7da7a62f419046c86538a5f9362466d62ece07e75c1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"6UVKLK7Y.txt","sha256":"a6d27a51fa94c070a6ef5529f58533341d469b458810cbf9381f958d812ce738","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"KA7W3XKA.txt","sha256":"94aadc97af99d488bd09663ac793907a6d9c56620348e9b075ce982f14cb8c89","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"PW0BK81U.txt","sha256":"81f6f88239e0d6ce6537e5714f4fc858b87b33a3dd19e742496b0de5c4f5a8ca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"RGGG6LOJ.txt","sha256":"1660bad70e80dbc8ea28fdb905ebb77c4a32f81ce5126d90d6e62ab20e88cb8f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"VWFVUH49.txt","sha256":"dd15dad8aaa90003d77e942c16ace89f0efc67dc896cb9b3e71dcaeca6a14f37","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"WKU27GFJ.txt","sha256":"9ef24dbd5bf64aa17daeb415cc338aae29cc7efe80877349a9dff99815c89349","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"en-US.4","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"~DF4608CB2AFB71D5EC.TMP","sha256":"17dfcfd36c62ff8cdd264d8ef865fdd452841d5be0b56789b8a39e55bac2e4d6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"~DFAC9862D4A555E8FE.TMP","sha256":"ea77a7754bf1610c961adf32c18337bcc8b4b1a2a8fe755641b3585c8b6c82be","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"~DFC0BE5C4278F3A18E.TMP","sha256":"6785a86738850e47a302aec0059542216c7d30920ecee2d90b8cc10effade603","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"~DFF0709266D02FD708.TMP","sha256":"8b1e5f5531d3589b5bd28ff0aa339810509335f15ea2a8f3c80963c3491f972d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"pastebin_logo_side_outline_support_ukraine_1_.png","sha256":"1931940299ff6bd49c6d16166b7961ea6e4f794db4a4ec94ddd350a41071b5d6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"search_2_.json","sha256":"19170bd75edc0b5183a2f9fcc3001d9d222deff61e5915ad1127b65ab581a2a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"_D954952C-AD71-11ED-8345-080027F6687D_.dat","sha256":"5d31b9f22a44342074e5930bdb8b7da7762e2ddcdb78edd31559c81b3dbb596e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"hello_1_.png","sha256":"8040db06855291ee0489a814aee5d975ce5acfe272b26ec98597b005e4d5789f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"vendors.bundle_1_.js","sha256":"89f6780a679f814dde634d3c40c0cf83ff72c1d92f679e9264f2badf04e504a3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"yii_1_.js","sha256":"67bed69f23af460ec3341aefcdf793955c250fbf879589de4b93d17b8ec4ae54","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"favicon_1_.ico","sha256":"5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"app.bundle_1_.js","sha256":"af67999f8e1dfc9006bde6b105bd1e9d476148549cade553f036360eff296bc1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"RecoveryStore._88B090C0-D917-11E7-B67B-080027A49DD6_.dat","sha256":"9ae570938816260ae9bf1d36a00b564369474f29da7c4b9e9c32d08e4cb2c706","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"bootstrap.min_1_.css","sha256":"6d92dfc1700fd38cd130ad818e23bc8aef697f815b2ea5face2b5dfad22f2e11","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"jquery.min_1_.js","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"vendors.bundle_1_.css","sha256":"9d790d8d644d85ba75095d8bce6dc947331745cf9fe0187d7b564505ffd41e53","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"spritesheet_1_.png","sha256":"da9fdc2490ca7cb12c136a0bed7b0baebded217ae7c786d5032e09e2bae88a9e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"RecoveryStore._CF03803B-AD71-11ED-8345-080027F6687D_.dat","sha256":"78fa10cf5eda4ea7c6df0b6f8f63c92fc77e60bba63f488e599affeec7d90d6f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"close_promo_1_.png","sha256":"3e2c5ee3e670df454c774cd417f12f4ca3083db68091f9184fb29efd2af4877b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"linebg_1_.png","sha256":"d45d1b49b5918ea0ffa0b3d119995b96b558147f618f0ea1897906252be7bcb4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"bootstrap-tagsinput_1_.css","sha256":"5ff466857c3492bc9b5c0bfeaef7797f107581a0c387ff6e1ac3314e2b084a40","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"_CF03803D-AD71-11ED-8345-080027F6687D_.dat","sha256":"8f3422531d9c93412aabad3d918ce4db785af561057cb2451d22f708e252b38e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"app.bundle_1_.css","sha256":"2098e9fb89bda3ade2f240e068c5f2dc9274bc8a6ef44da2f4daf265fe21168a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"info_1_.png","sha256":"703d23efcb49183ab7f2795739f547fcd42c3d73e77f47b6c614892bb6666cea","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"js_1_.js","sha256":"a7d371b5aeb277c6ac22cba519cd5b4ffd9902aa17847d1d59104bdf134dfde0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"bootstrap-tagsinput_1_.js","sha256":"07a31fb51092b5be28b0d96e4b8a6a39c6cfe0dcd6ece71604fdc1feb505d074","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]}],"files_written":[{"path":"%TEMP%\\~DF4608CB2AFB71D5EC.TMP","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\bootstrap.min[1].css","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\vendors.bundle[1].css","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\yii[1].js","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\favicon[1].ico","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\close_promo[1].png","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\info[1].png","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{D954952C-AD71-11ED-8345-080027F6687D}.dat","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WKU27GFJ.txt","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{CF03803D-AD71-11ED-8345-080027F6687D}.dat","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%TEMP%\\~DFAC9862D4A555E8FE.TMP","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\hello[1].png","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\682JSCTN.txt","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\search[1].json","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\search[2].json","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{CF03803B-AD71-11ED-8345-080027F6687D}.dat","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\spritesheet[1].png","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\pastebin_logo_side_outline_support_ukraine[1].png","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\linebg[1].png","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PW0BK81U.txt","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VWFVUH49.txt","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%TEMP%\\~DFC0BE5C4278F3A18E.TMP","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Last Active\\RecoveryStore.{88B090C0-D917-11E7-B67B-080027A49DD6}.dat","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SECURITYPROVIDERS\\SCHANNEL\\","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\VERSIONMANAGER\\","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CERTIFICATES\\","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\CRLS\\","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"key":"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\TRUST\\","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_b20_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"IsoScope_b20_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"IsoScope_b20_IE_EarlyTabStart_0x990_Mutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"IsoScope_b20_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"IsoScope_b20_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"IsoScope_b20_ConnHashTable<2848>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2848","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_2848","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_b20_IE_EarlyTabStart_0x990_Mutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_b20_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_b20_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"IsoScope_b20_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_b20_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"63ed5255bdf31f6ca7077e29"}]}]}},"report_ids":{"sandbox_job_ids":["63ed5255bdf31f6ca7077e29"]}}}]]}] 1e:null 22:[["$","title","0",{"children":"Sample 5096a6c745cb… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 5096a6c745cb…. Threat score 0/100. 0/4 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/5096a6c745cbac4d295807a1acc569d4b19401434bf9d86b6ed8131ddfc7835b"}],["$","meta","4",{"property":"og:title","content":"Sample 5096a6c745cb… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 5096a6c745cb…. Threat score 0/100. 0/4 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/5096a6c745cbac4d295807a1acc569d4b19401434bf9d86b6ed8131ddfc7835b"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 5096a6c745cb… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 5096a6c745cb…. Threat score 0/100. 0/4 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2a","11",{}]]