24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 31:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4df,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Adware.JS.Popunder.2.DC41B85C Sample 6d5644a58a6a… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 6d5644a58a6a…. Malware family: Adware.JS.Popunder.2.DC41B85C. Threat score 100/100. 5/25 AV engines flagged this file. 1 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/6d5644a58a6af85f4064c7e297bbf129a473cb0e0de13c74f8fea7f2648918ec","keywords":["Malicious","Adware.JS.Popunder.2.DC41B85C","malware analysis","sandbox report","threat intelligence","6d5644a58a6af85f4064c7e297bbf129a473cb0e0de13c74f8fea7f2648918ec"],"about":{"@type":"SoftwareApplication","name":"Gorgeous-AV-Idol-Chiemi-Yada-Threesome-Fuck-11-300x194.jpg","applicationCategory":["html"],"identifier":"6d5644a58a6af85f4064c7e297bbf129a473cb0e0de13c74f8fea7f2648918ec","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Adware.JS.Popunder.2.DC41B85C","antivirusDetections":{"malicious":5,"total":25},"behavioralIndicators":{"malicious":1,"suspicious":3},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T7c1,"iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CRLS"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CTLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CRLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CTLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CRLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CTLS"; Key: "")26:T723,"iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\MY"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\27AC9369FAF25207BB2627CEFACCBE4EF9C319B8"; Key: "BLOB") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\8AD5C9987E6F190BD6F5416E2DE44CCD641D8CDA"; Key: "BLOB") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\FF67367C5CD4DE4AE18BCCE1D70FDABD7C866135"; Key: "BLOB") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\109F1CAED645BB78B3EA2B94C0697C740733031C"; Key: "BLOB") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\D559A586669B08F46A30A133F8A9ED3D038E2EA8"; Key: "BLOB") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\FEE449EE0E3965A5246F000E87FDE2A065FD89D4"; Key: "BLOB") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS\A377D1B1C0538833035211F4083D00FECC414DAB"; Key: "BLOB") "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "") "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "")27:T8ee,"jquery[1].js" has type "ASCII text with very long lines" "Chinese-Angel-Yumi-011-320x180[1].jpg" has type "JPEG image data JFIF standard 1.01 comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62) quality = 90"" "ga[1].js" has type "HTML document UTF-8 Unicode text with very long lines with CRLF LF line terminators" "CabEF84.tmp" has type "Microsoft Cabinet archive data 50939 bytes 1 file" "Asian-Teen-Mihono-Fucked-by-Boyfriend-08-320x180[1].jpg" has type "JPEG image data JFIF standard 1.01 comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62) quality = 90"" "16105-1455586498[1].gif" has type "GIF image data version 89a 300 x 250" "Foto-Payudara-23-160x90[1].jpg" has type "JPEG image data JFIF standard 1.01 comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62) quality = 90"" "Asian-Babe-Ameri-Koshikawa-love-Ride-Dick-08-320x180[1].jpg" has type "JPEG image data JFIF standard 1.01 comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62) quality = 90"" "Pretty-Asian-SLut-Fuck-Stranger-Outdoor-08-320x180[1].jpg" has type "JPEG image data JFIF standard 1.01 comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62) quality = 90"" "Chinese-Hot-Pussy-12-320x180[1].jpg" has type "JPEG image data JFIF standard 1.01 comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62) quality = 90"" "modernizr.min[1].js" has type "HTML document ASCII text with very long lines with CRLF line terminators" "bg-grad[1].png" has type "PNG image data 1 x 50 8-bit/color RGBA non-interlaced" "jquery.masonry.min[1].js" has type "ASCII text with very long lines" "RecoveryStore.{91BA4BDF-B50F-11E4-ADE1-0800270E0C5C}.dat" has type "Composite Document File V2 Document No summary info" "masonry.min[1].js" has type "ASCII text with very long lines" "pspubws@nudefoto[1].txt" has type "ASCII text" "Gangbang-Tuna-Kimura-27-160x90[1].jpg" has type "JPEG image data JFIF standard 1.01 comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62) quality = 90"" "devicepx-jetpack[1].js" has type "ASCII text with very long lines" "sassy-social-share-svg[1].css" has type "ASCII text with very long lines with no line terminators" "Hardcore-Lesbian-Babes-Double-Penetration-01-160x90[1].jpg" has type "JPEG image data JFIF standard 1.01 comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62) quality = 90""28:T11ce8,Pattern match: "http://personalniy-komputer.ru/feed/" Pattern match: "http://personalniy-komputer.ru/comments/feed/" Pattern match: "https://ssl" Pattern match: "http://www" Pattern match: "personalniy-komputer.ru/ga.js';var" Heuristic match: "var _gaq = _gaq || [];_gaq.push(['_setAccount', 'UA-60101226-1']);_gaq.push(['_trackPageview']);(function() {var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;ga.src = ('https:' == document.location.protocol ? 'https:/" Pattern match: "ajax.cloudflare.com/cdn-cgi/nexp/dok3v=85b614c0f6/cloudflare.min.js,b.parentNode.insertBefore(a,b)}()}}catch(e)" Pattern match: "http://gmpg.org/xfn/11/" Pattern match: "http://personalniy-komputer.ru/wp-content/themes/NFV2/images/icon.png/" Pattern match: "http://personalniy-komputer.ru/xmlrpc.php/" Pattern match: "http://personalniy-komputer.ru/wp-admin/ajax.php" Pattern match: "http://personalniy-komputer.ru/wp-content/themes/NFV2/ajax.php" Pattern match: "http://personalniy-komputer.ru/wp-admin/admin-ajax.php" Pattern match: "http://personalniy-komputer.ru/wp-content/plugins/sassy-social-share/public/../images/close.png" Pattern match: "http://personalniy-komputer.ru/wp-content/plugins/sassy-social-share/public/../images/logo.png" Heuristic match: "