34:"SampleDetailWrapper" 35:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$34"] 38:I[99539,["$1","$2","$3","$4","$5"],"IconMark"] 33:T44d,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 7ea17a8c924b… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 7ea17a8c924b…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/7ea17a8c924b157062b6ca6ae079149fe2673db50506dabdd1435349e9ec7735","keywords":["malware analysis","sandbox report","threat intelligence","7ea17a8c924b157062b6ca6ae079149fe2673db50506dabdd1435349e9ec7735"],"about":{"@type":"SoftwareApplication","name":"urlref_httpsemails.azure.microsoft.comredirectdestination_https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3FLinkId%3D521839_p_bT05YzBlYzhhOS","applicationCategory":["html"],"identifier":"7ea17a8c924b157062b6ca6ae079149fe2673db50506dabdd1435349e9ec7735"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":27},"behavioralIndicators":{"malicious":0,"suspicious":1},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}36:T337c,Pattern match: "https://aka.ms/personalized-offers", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2130411", Pattern match: "https://www.microsoft.com/bing/copilot-search/", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=614828", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2185232", Pattern match: "https://support.microsoft.com/topic/81ca0c3d-c122-415c-874c-55610e017a6a", Pattern match: "https://ondemand.webtrends.com/support/optout.asp", Pattern match: "https://www.adjust.com/opt-out/", Pattern match: "https://onedrive.live.com/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=243191", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2086313", Pattern match: "https://apps.microsoft.com/detail/9wzdncrfjbbg", Pattern match: "https://support.microsoft.com/en-us/account-billing/microsoft-family-safety-bb97220e-9dd8-4b4a-9d15-8194d5941dc5", Pattern match: "https://www.xbox.com/managedatacollection", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement#mainenterprisedeveloperproductsmodule", Pattern match: "https://privacy.microsoft.com/privacystatement#mainartificialintelligenceandmicrosoftcopilotmodule", Pattern match: "https://go.skype.com/export", Pattern match: "https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2", Pattern match: "https://account.microsoft.com/privacy", Pattern match: "https://support.microsoft.com/topic/third-party-cookie-inventory-81ca0c3d-c122-415c-874c-55610e017a6a", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2126612", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2106608", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement#mainenterpriseservicesmodule", Pattern match: "https://aka.ms/yourcaliforniaprivacychoices", Pattern match: "https://aka.ms/raistandardpdf", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=533063", Pattern match: "https://support.microsoft.com/office/frequently-asked-questions-about-copilot-in-microsoft-365-subscriptions-bda0d6e8-346d-41ce-ab1e-f6af6229c462", Pattern match: "https://support.microsoft.com/windows/windows-privacy-settings-that-apps-use-8b7f2cf4-c359-bf99-0f69-2123cc9ddfc1", Pattern match: "https://go.microsoft.com/fwlink/?linkid=874646", Pattern match: "https://support.microsoft.com/help/4090274/microsoft-account-parental-consent-and-child-accounts", Pattern match: "t.com/ru-ru/privacy/privacystatement/", Pattern match: "https://signin.kissmetrics.com/privacy/#controls", Pattern match: "https://c.s-microsoft.com/", Pattern match: "https://privacy.microsoft.com/privacystatement#mainwindowsappsmodule", Pattern match: "https://support.microsoft.com/en-us/topic/microsoft-journal-help-and-learning-3605c04e-0fc6-40d5-b3fd-95a5cc365bc2", Pattern match: "https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/semibold/latest.woff2", Pattern match: "https://microsoft.com/consent", Pattern match: "https://docs.microsoft.com/windows/privacy/windows-diagnostic-data", Pattern match: "https://microsoft.com/privacy", Pattern match: "https://aka.ms/privacyreport", Pattern match: "https://support.microsoft.com/topic/privacy-faq-for-microsoft-copilot-27b3a435-8dc9-4b55-9a4b-58eeb9647a7f", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2170314", Pattern match: "http://go.microsoft.com/fwlink/?linkid=286759", Pattern match: "https://account.microsoft.com/family", Pattern match: "https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en", Pattern match: "https://support.microsoft.com/topic/cdf3c478-df79-4efe-8c4b-8202078a1a67", Pattern match: "https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields", Pattern match: "https://aka.ms/privacyresponse", Pattern match: "https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2112165", Pattern match: "https://support.microsoft.com/account-billing/how-to-close-your-microsoft-account-c1b2d13f-4de6-6e1b-4a31-d9d668849979", Pattern match: "https://protect-us.mimecast.com/s/lizwckroxgfo45ens90s3v?domain=nam06.safelinks.protection.outlook.com", Pattern match: "https://www.facebook.com/help/568137493302217", Pattern match: "https://www.microsoft.com/es-us/privacy/privacystatement/", Pattern match: "https://privacy.microsoft.com/privacystatement#mainadvertisingmodule", Pattern match: "https://www.youradchoices.ca/fr", Pattern match: "https://www.microsoft.com/professionalservices/overview", Pattern match: "https://aka.ms/brazilcontactus", Pattern match: "https://www.microsoft.com/corporate-responsibility/digital-safety-content-report", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2128346", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=2145715", Pattern match: "https://support.microsoft.com/en-us/topic/unlink-a-device-in-the-phone-link-app-9382f770-b203-7e0e-c81e-18d4053cf4e5", Pattern match: "https://www.microsoft.com/lv-lv/privacy/privacystatement/", Pattern match: "soft.com/sk-sk/privacy/privacystatement/", Pattern match: "https://mixpanel.com/optout", Pattern match: "https://www.xbox.com/", Pattern match: "https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/left_aligned_print", Pattern match: "https://outlook.live.com/mail/inbox", Pattern match: "https://go.microsoft.com/fwlink/?linkid=523898", Pattern match: "https://support.microsoft.com/topic/using-microsoft-launcher-on-android-c59f2824-0218-ae6d-3666-d93a7fc537e0", Pattern match: "https://support.microsoft.com/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2371068", Pattern match: "https://www.xbox.com/apps/family-settings-app", Pattern match: "https://www.microsoft.com/worldwide/", Pattern match: "https://support.microsoft.com/office/3e7bc183-bf52-4fd0-8e6b-78978f7f121b", Pattern match: "https://go.microsoft.com/fwlink/?linkid=617027", Pattern match: "https://privacy.microsoft.com/privacystatement#mainhowweusepersonaldatamodule", Pattern match: "https://support.microsoft.com/en-us/office/diagnostic-data-in-microsoft-365-f409137d-15d3-4803-a8ae-d26fcbfc91dd", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement#mainhowtocontactusmodule", Pattern match: "https://privacy.microsoft.com/privacystatement#mainhowtocontactusmodule", Pattern match: "https://privacy.microsoft.com/privacystatement#mainspeechinkingtypingmodule", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2260527", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2127938", Pattern match: "https://www.youradchoices.ca/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2086538", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=320207", Pattern match: "https://www.linkedin.com/legal/privacy-policy", Pattern match: "https://www.microsoftstore.com/", Pattern match: "https://support.microsoft.com/account-billing/microsoft-family-safety-bb97220e-9dd8-4b4a-9d15-8194d5941dc5", Pattern match: "https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d", Pattern match: "https://www.clicktale.net/disable.html", Pattern match: "https://privacy.microsoft.com/privacystatement#mainoutlookmodule", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement#mainwindowsstoremodule", Pattern match: "https://www.xbox.com/user/settings/privacy-and-safety", Pattern match: "https://account.microsoft.com/privacy/", Pattern match: "https://priv-policy.imrworldwide.com/priv/browser/us/en/optout.html", Pattern match: "https://aka.ms/youngpeopleprivacy/", Pattern match: "https://www.microsoft.com/bg-bg/privacy/privacystatement/", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=544945", Pattern match: "https://www.microsoft.com/privacy/privacystatement", Pattern match: "https://tools.google.com/dlpage/gaoptout", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2260162", Pattern match: "https://developer.yahoo.com/flurry/end-user-opt-out/", Pattern match: "https://account.microsoft.com/privacy/ad-settings/signedout?ru=https%3a%2f%2faccount.microsoft.com%2fprivacy%2fad-settings", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement#mainteamsmodule", Pattern match: "https://protect-us.mimecast.com/s/ogihclypeji6kxr7h1rcyx?domain=nam06.safelinks.protection.outlook.com", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2128004", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=2007461", Pattern match: "https://www.microsoft.com/ja-jp/privacy/jp-tba-notice", Pattern match: "https://go.microsoft.com/fwlink/?linkid=206977", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement#mainofficeservicesmodule", Pattern match: "https://www.microsoft.com/et-ee/privacy/privacystatement/", Pattern match: "https://www.microsoft.com/en-us/privacy/privacystatement/", Pattern match: "http://go.microsoft.com/fwlink/p/?linkid=780766", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=780766", Pattern match: "https://uhf.microsoft.com/statics/20261102.14.06/css/style-bhcvi91z.css", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2156465", Pattern match: "https://www.bing.com/profile/history", Pattern match: "https://go.microsoft.com/fwlink/?linkid=529552", Pattern match: "https://support.microsoft.com/en-us/account-billing/location-based-experiences-in-microsoft-family-safety-48704c11-da47-05c3-6c75-e032d54bc563", Pattern match: "https://account.microsoft.com/devices", Pattern match: "http://www.w3.org/2000/svg", Pattern match: "https://xbox.com/play/user", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2202359", Pattern match: "https://account.microsoft.com/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=243189", Pattern match: "https://www.microsoft.com/about/corporate-responsibility/lerr/", Pattern match: "https://cdn-dynmedia-1.microsoft.com/", Pattern match: "https://www.microsoft.com/licensing/terms/", Pattern match: "https://aka.ms/kinectprivacy/", Pattern match: "https://www.optimizely.com/legal/opt-out/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2196228", Pattern match: "https://www.microsoft.com/cascadeauth/account/signin-oidc", Pattern match: "https://www.microsoft.com/nl-nl/privacy/privacystatement/", Pattern match: "https://www.bing.com/account/general", Pattern match: "https://aka.ms/privacyfaq", Pattern match: "https://go.microsoft.com/fwlink/?linkid=521839", Pattern match: "https://privacy.microsoft.com/privacystatement#mainenterprisedeveloperproductsmodule", Pattern match: "https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/", Pattern match: "https://support.microsoft.com/en-us/windows/privacy-and-control-over-your-recall-experience-d404f672-7647-41e5-886c-a3c59680af15", Pattern match: "https://www.microsoft.com/en-us/privacy/privacystatement", Pattern match: "https://www.dataprivacyframework.gov/", Pattern match: "https://login.skype.com/login", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=873404", Pattern match: "https://privacy.microsoft.com", Pattern match: "https://support.microsoft.com/contactus", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=529987", Pattern match: "https://privacy.microsoft.com/privacystatement#maincollectionofdatafromchildrenmodule", Pattern match: "https://www.appsflyer.com/optout", Pattern match: "https://www.microsoft.com/privacy/data-collection-windows", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=2086224", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2205470", Pattern match: "https://thenai.org/self-regulatory-framework/", Pattern match: "https://www.microsoft.com/sat-olck-in/privacy/privacystatement/", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2259814", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=838419", Pattern match: "https://www.microsoft.com/lb-lu/privacy/privacystatement/", Pattern match: "https://privacy.microsoft.com/privacystatement#mainnoticetoendusersmodule", Pattern match: "https://aka.ms/rai", Pattern match: "https://choice.microsoft.com", Pattern match: "https://privacy.microsoft.com/privacystatement#mainmsfamilymodule", Pattern match: "https://www.acuityads.com/opt-out/", Pattern match: "https://publisher.liveperson.net/", Pattern match: "https://support.microsoft.com/help/4468245/group-photos-by-faces", Pattern match: "https://microsoft.com/privacy/microsoft-data-privacy-framework-covered-entities", Pattern match: "crosoft.com/he-il/privacy/privacystatement/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2375302", Pattern match: "https://privacy.microsoft.com/microsoft-consumer-health-data-privacy-policy", Pattern match: "https://www.microsoft.com/tr-tr/privacy/privacystatement/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2173502", Pattern match: "https://www.transparentadvertising.eu/privacy"37:T664,Found HTTPS url "https://aka.ms", Found HTTPS url "https://support.microsoft.com", Found HTTPS url "https://go.microsoft.com", Found HTTPS url "https://www.microsoft.com", Found HTTPS url "https://ondemand.webtrends.com", Found HTTPS url "https://www.adjust.com", Found HTTPS url "https://onedrive.live.com", Found HTTPS url "https://apps.microsoft.com", Found HTTPS url "https://www.xbox.com", Found HTTPS url "https://privacy.microsoft.com", Found HTTPS url "https://go.skype.com", Found HTTPS url "https://c.s", Found HTTPS url "https://account.microsoft.com", Found HTTPS url "https://copilot.microsoft.com", Found HTTPS url "https://signin.kissmetrics.com", Found HTTPS url "https://bat.bing.com", Found HTTPS url "https://cdnssl.clicktale.net", Found HTTPS url "https://d.impactradius", Found HTTPS url "https://js.monitor.azure.com", Found HTTPS url "https://mem.gfx.ms", Found HTTPS url "https://wcpstatic.microsoft.com", Found HTTPS url "https://www.clarity.ms", Found HTTPS url "https://fpt.microsoft.com", Found HTTPS url "https://pu", Found HTTPS url "https://microsoft.com", Found HTTPS url "https://docs.microsoft.com", Found HTTPS url "https://commission.europa.eu", Found HTTPS url "https://protect", Found HTTPS url "https://www.facebook.com", Found HTTPS url "https://www.media.net", Found HTTPS url "https://my.outbrain.com", Found HTTPS url "https://www.taboola.com", Found HTTPS url "https://legal.yahoo.com", Found HTTPS url "https://www.youradchoices.ca", Found HTTPS url "https://mixpanel.com", Found HTTPS url "https://cdn", Found HTTPS url "https://outlook.live.com", Found HTTPS url "https://www.linkedin.com"30:["$","$Lc",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$33"}}],["$","$L35",null,{"initialData":{"schema_version":"1.0.17","sha256":"7ea17a8c924b157062b6ca6ae079149fe2673db50506dabdd1435349e9ec7735","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1793892105208,"unified_at":"2026-11-05T15:21:45.208Z","metadata":{"hashes":{"sha256":"7ea17a8c924b157062b6ca6ae079149fe2673db50506dabdd1435349e9ec7735","sha1":"75d14a7912040c797b94cd9c42e4ee9ab8f96085","md5":"f6c5bf2b79252b159d4e9269f1678b1b"},"file_info":{"file_name":"urlref_httpsemails.azure.microsoft.comredirectdestination_https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3FLinkId%3D521839_p_bT05YzBlYzhhOS","file_type":["html"],"file_type_id":"html","file_size":351287,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1793892098000,"last_seen":1793892098000,"last_multi_scan":1793892098000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":27},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":6},"sandbox_signatures":{"informative_count":8,"suspicious_count":1,"malicious_count":0,"total":9},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrikefalconml":{"name":"CrowdStrike Falcon ML","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Web Service","attack_id":"T1102","attack_id_wiki":"https://attack.mitre.org/techniques/T1102","identifiers":[{"type":"informative","value":"Found domain strings related to cloud services(possible C&C communication)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"},{"type":"informative","value":"Contains references to network communication API (string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attack_id":"T1555","attack_id_wiki":"https://attack.mitre.org/techniques/T1555","identifiers":[{"type":"informative","value":"Contains string like password/secret"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/techniques/T1083","identifiers":[{"type":"informative","value":"Contains ability to retrieve files based on search patterns"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"JavaScript","attack_id":"T1059.007","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/007","identifiers":[{"type":"informative","value":"References JavaScript(s)"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$36","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"$37","origin":"sample.bin","mitre_attack_id":"T1573","id":"string-98","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Contains references to network communication API (string)","description":"Found reference to API \"Safety\n

The Microsoft Family Safety M365 product allows a family group to connect through the Microsoft Family Safety app on their Windows, XBOX, or mobile devices. Please carefully review the information at\" (Indicator: \" connect \"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \" connect \"; Source: \"sample.bin\"), Found reference to API \"above.

\n\n \n

Search and browse products connect you with information and intelligently sense, process, and act on information\" (Indicator: \" connect \"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-899","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found domain strings related to cloud services(possible C&C communication)","description":"Found string \"OneDrive.

Outlook.com.\" (Indicator: \"onedrive.live.com\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1102","id":"string-186","sources":[{"report_type":"qsp","report_id":""}]},{"level":"suspicious","category":"Spyware/Information Retrieval","name":"Found an instant messenger related domain","description":"\"request a copy.

XBOX. If you use the XBOX network or XBOX.com, you can view or edit your personal data, including billing and account information, privacy settings, and online safety and data sharing preferences by accessing\" (Indicator: \"skype.com\"), \"sign in to your account. If you wish to export your Skype chat history and files shared on Skype, you can\" (Indicator: \"skype.com\")","origin":"sample.bin","id":"string-61","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains string like password/secret","description":"file/memory contains long string with (Indicator: \"password\"; Source: \"sample.bin\"), Found string \"settings.

Skype. If you wish to access, edit, or remove some profile information for Skype or change your password,\" (Indicator: \"password\"; Source: \"sample.bin\"), Found string \"including your favorites, browsing history, extensions and associated data, settings, open tabs, autofill form entries (like your name, address, and phone number), passwords, and payment information\" (Indicator: \"password\"; Source: \"sample.bin\"), Found string \"s profile and payment information, change your password, add security information or close your account.

Microsoft privacy dashboard. You can control some of the data Microsoft processes\" (Indicator: \"password\"; Source: \"sample.bin\"), Found string \"to learn more about Microsoft Support offerings. If you have a personal Microsoft account password question, please visit\" (Indicator: \"password\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1555","id":"string-475","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains ability to retrieve files based on search patterns","description":"Found string \"Where consent is required, you can adjust your choices by clicking \" (Indicator: \"where \"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-484","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"References JavaScript(s)","description":"file/memory contains long string with (Indicator: \"text/javascript\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1059.007","id":"string-626","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"file/memory contains long string with (Indicator: \"facebook.com\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"linkedin.com\"; Source: \"sample.bin\"), Found string \" Microsoft privacy\"/>\n\n\n\n