34:"SampleDetailWrapper" 35:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$34"] 44:I[27201,["$1","$2","$3","$4","$5"],"IconMark"] 33:T4d9,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Phil.Generic Sample 8a9becfd36d6… — Score 55/100 — Hybrid Analysis","description":"Malicious verdict for sample 8a9becfd36d6…. Malware family: Mint.Phil.Generic. Threat score 55/100. 10/28 AV engines flagged this file. 2 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/8a9becfd36d6559cc4355c1679ff39d0fc85179aa41a9f34d5f3a63f361ad0a9","keywords":["Malicious","Mint.Phil.Generic","malware analysis","sandbox report","threat intelligence","8a9becfd36d6559cc4355c1679ff39d0fc85179aa41a9f34d5f3a63f361ad0a9"],"about":{"@type":"SoftwareApplication","name":"b58003d9bf4789287265172ae3ffbe44712ceec27e4260454ad73b01c90e28c5.wbpathb.bin","applicationCategory":["peexe","64bits","executable"],"identifier":"8a9becfd36d6559cc4355c1679ff39d0fc85179aa41a9f34d5f3a63f361ad0a9","additionalType":"Malicious sample"},"threatScore":55,"malwareFamily":"Mint.Phil.Generic","antivirusDetections":{"malicious":10,"total":28},"behavioralIndicators":{"malicious":2,"suspicious":15},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}36:T81f5,Found reference to API (Indicator: "DeleteFileA"; Source: "sample.bin"), Found reference to API (Indicator: "NCryptFreeObject"; Source: "sample.bin"), Found reference to API (Indicator: "FreeLibraryAndExitThread"; Source: "sample.bin"), Found reference to API (Indicator: "ExitThread"; Source: "sample.bin"), Found reference to API (Indicator: "NtWriteFile"; Source: "sample.bin"), Found reference to API (Indicator: "BCryptCloseAlgorithmProvider"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileAttributesA"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemTimePreciseAsFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "BCryptDestroyKey"; Source: "sample.bin"), Found reference to API (Indicator: "CertGetNameStringA"; Source: "sample.bin"), Found reference to API (Indicator: "InternetOpenW"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcessAffinityMask"; Source: "sample.bin"), Found reference to API (Indicator: "FreeContextBuffer"; Source: "sample.bin"), Found reference to API (Indicator: "GetLocaleInfoW"; Source: "sample.bin"), Found reference to API (Indicator: "WSAGetOverlappedResult"; Source: "sample.bin"), Found reference to API (Indicator: "BCryptGetProperty"; Source: "sample.bin"), Found reference to API (Indicator: "SysAllocStringLen"; Source: "sample.bin"), Found reference to API (Indicator: "GetExitCodeProcess"; Source: "sample.bin"), Found reference to API (Indicator: "RtlUnwind"; Source: "sample.bin"), Found reference to API (Indicator: "EncryptMessage"; Source: "sample.bin"), Found reference to API (Indicator: "GetUserDefaultLCID"; Source: "sample.bin"), Found reference to API (Indicator: "FlushFileBuffers"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileSizeEx"; Source: "sample.bin"), Found reference to API (Indicator: "SetEvent"; Source: "sample.bin"), Found reference to API (Indicator: "ToAscii"; Source: "sample.bin"), Found reference to API (Indicator: "NtOpenFile"; Source: "sample.bin"), Found reference to API (Indicator: "GetAcceptExSockaddrs"; Source: "sample.bin"), Found reference to API (Indicator: "GetSecurityDescriptorOwner"; Source: "sample.bin"), Found reference to API (Indicator: "LeaveCriticalSectionWhenCallbackReturns"; Source: "sample.bin"), Found reference to API (Indicator: "SetHandleInformation"; Source: "sample.bin"), Found reference to API (Indicator: "Process32FirstW"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemDirectoryA"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetPathFromIDListW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateDirectoryA"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpQueryDataAvailable"; Source: "sample.bin"), Found reference to API (Indicator: "CoInitializeEx"; Source: "sample.bin"), Found reference to API (Indicator: "RtlNtStatusToDosError"; Source: "sample.bin"), Found reference to API (Indicator: "GetConsoleOutputCP"; Source: "sample.bin"), Found reference to API (Indicator: "DecryptMessage"; Source: "sample.bin"), Found reference to API (Indicator: "CryptDecodeObjectEx"; Source: "sample.bin"), Found reference to API (Indicator: "SetEndOfFile"; Source: "sample.bin"), Found reference to API (Indicator: "PostQueuedCompletionStatus"; Source: "sample.bin"), Found reference to API (Indicator: "LoadLibraryA"; Source: "sample.bin"), Found reference to API (Indicator: "CryptEncodeObjectEx"; Source: "sample.bin"), Found reference to API (Indicator: "LCMapStringEx"; Source: "sample.bin"), Found reference to API (Indicator: "GetTimeZoneInformation"; Source: "sample.bin"), Found reference to API (Indicator: "closesocket"; Source: "sample.bin"), Found reference to API (Indicator: "TranslateMessage"; Source: "sample.bin"), Found reference to API (Indicator: "DeregisterEventSource"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileVersionInfoSizeW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateThread"; Source: "sample.bin"), Found reference to API (Indicator: "InitializeSecurityDescriptor"; Source: "sample.bin"), Found reference to API (Indicator: "NtClose"; Source: "sample.bin"), Found reference to API (Indicator: "SetThreadpoolThreadMinimum"; Source: "sample.bin"), Found reference to API (Indicator: "TlsGetValue"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleA"; Source: "sample.bin"), Found reference to API (Indicator: "NtDeleteKey"; Source: "sample.bin"), Found reference to API (Indicator: "ntohl"; Source: "sample.bin"), Found reference to API (Indicator: "ntohs"; Source: "sample.bin"), Found reference to API (Indicator: "SystemParametersInfoA"; Source: "sample.bin"), Found reference to API (Indicator: "GetSecurityDescriptorGroup"; Source: "sample.bin"), Found reference to API (Indicator: "RegQueryValueExW"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleW"; Source: "sample.bin"), Found reference to API (Indicator: "SetStdHandle"; Source: "sample.bin"), Found reference to API (Indicator: "CertDuplicateCertificateContext"; Source: "sample.bin"), Found reference to API (Indicator: "WSAStartup"; Source: "sample.bin"), Found reference to API (Indicator: "RegQueryValueExA"; Source: "sample.bin"), Found reference to API (Indicator: "ResumeThread"; Source: "sample.bin"), Found reference to API (Indicator: "VariantInit"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentProcessId"; Source: "sample.bin"), Found reference to API (Indicator: "RegSetValueExA"; Source: "sample.bin"), Found reference to API (Indicator: "SubmitThreadpoolWork"; Source: "sample.bin"), Found reference to API (Indicator: "SystemTimeToFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "FormatMessageA"; Source: "sample.bin"), Found reference to API (Indicator: "RegSetValueExW"; Source: "sample.bin"), Found reference to API (Indicator: "RegOpenKeyExW"; Source: "sample.bin"), Found reference to API (Indicator: "GetStartupInfoW"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentDirectoryA"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileAttributesA"; Source: "sample.bin"), Found reference to API (Indicator: "RegOpenKeyExA"; Source: "sample.bin"), Found reference to API (Indicator: "HeapAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "GetMessageA"; Source: "sample.bin"), Found reference to API (Indicator: "HttpSendRequestW"; Source: "sample.bin"), Found reference to API (Indicator: "WSAAddressToStringW"; Source: "sample.bin"), Found reference to API (Indicator: "CertFreeCertificateChainEngine"; Source: "sample.bin"), Found reference to API (Indicator: "FlsFree"; Source: "sample.bin"), Found reference to API (Indicator: "GetStartupInfoA"; Source: "sample.bin"), Found reference to API (Indicator: "WSAIoctl"; Source: "sample.bin"), Found reference to API (Indicator: "RtlVirtualUnwind"; Source: "sample.bin"), Found reference to API (Indicator: "__WSAFDIsSet"; Source: "sample.bin"), Found reference to API (Indicator: "FlsAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetFolderPathW"; Source: "sample.bin"), Found reference to API (Indicator: "NtCreateKey"; Source: "sample.bin"), Found reference to API (Indicator: "CertFreeCertificateChain"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetFolderPathA"; Source: "sample.bin"), Found reference to API (Indicator: "SetWindowPos"; Source: "sample.bin"), Found reference to API (Indicator: "ShowWindow"; Source: "sample.bin"), Found reference to API (Indicator: "CommandLineToArgvW"; Source: "sample.bin"), Found reference to API (Indicator: "SetClipboardData"; Source: "sample.bin"), Found reference to API (Indicator: "CertEnumCertificatesInStore"; Source: "sample.bin"), Found reference to API (Indicator: "RtlInitUnicodeString"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteDC"; Source: "sample.bin"), Found reference to API (Indicator: "HeapFree"; Source: "sample.bin"), Found reference to API (Indicator: "CertOpenSystemStoreW"; Source: "sample.bin"), Found reference to API (Indicator: "CryptDecrypt"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemInfo"; Source: "sample.bin"), Found reference to API (Indicator: "CertFreeCertificateContext"; Source: "sample.bin"), Found reference to API (Indicator: "UnhandledExceptionFilter"; Source: "sample.bin"), Found reference to API (Indicator: "DispatchMessageW"; Source: "sample.bin"), Found reference to API (Indicator: "PFXImportCertStore"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpOpen"; Source: "sample.bin"), Found reference to API (Indicator: "DispatchMessageA"; Source: "sample.bin"), Found reference to API (Indicator: "VerQueryValueW"; Source: "sample.bin"), Found reference to API (Indicator: "InitializeSListHead"; Source: "sample.bin"), Found reference to API (Indicator: "CryptGetUserKey"; Source: "sample.bin"), Found reference to API (Indicator: "GetAdaptersAddresses"; Source: "sample.bin"), Found reference to API (Indicator: "SafeArrayGetLBound"; Source: "sample.bin"), Found reference to API (Indicator: "CoCreateGuid"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteObject"; Source: "sample.bin"), Found reference to API (Indicator: "TlsSetValue"; Source: "sample.bin"), Found reference to API (Indicator: "RegEnumValueW"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentThread"; Source: "sample.bin"), Found reference to API (Indicator: "InitializeCriticalSectionAndSpinCount"; Source: "sample.bin"), Found reference to API (Indicator: "GetConsoleMode"; Source: "sample.bin"), Found reference to API (Indicator: "BCryptDecrypt"; Source: "sample.bin"), Found reference to API (Indicator: "NCryptSetProperty"; Source: "sample.bin"), Found reference to API (Indicator: "CreateToolhelp32Snapshot"; Source: "sample.bin"), Found reference to API (Indicator: "CertOpenStore"; Source: "sample.bin"), Found reference to API (Indicator: "HttpQueryInfoW"; Source: "sample.bin"), Found reference to API (Indicator: "FindFirstFileA"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcessHeap"; Source: "sample.bin"), Found reference to API (Indicator: "RegNotifyChangeKeyValue"; Source: "sample.bin"), Found reference to API (Indicator: "OutputDebugStringA"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcAddress"; Source: "sample.bin"), Found reference to API (Indicator: "RaiseException"; Source: "sample.bin"), Found reference to API (Indicator: "FindFirstFileExW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateMutexA"; Source: "sample.bin"), Found reference to API (Indicator: "CreateFileW"; Source: "sample.bin"), Found reference to API (Indicator: "CryptSignHashW"; Source: "sample.bin"), Found reference to API (Indicator: "CoMarshalInterface"; Source: "sample.bin"), Found reference to API (Indicator: "FlsGetValue"; Source: "sample.bin"), Found reference to API (Indicator: "CryptCreateHash"; Source: "sample.bin"), Found reference to API (Indicator: "EncodePointer"; Source: "sample.bin"), Found reference to API (Indicator: "CreateThreadpoolWork"; Source: "sample.bin"), Found reference to API (Indicator: "RegCloseKey"; Source: "sample.bin"), Found reference to API (Indicator: "CreateCompatibleBitmap"; Source: "sample.bin"), Found reference to API (Indicator: "LeaveCriticalSection"; Source: "sample.bin"), Found reference to API (Indicator: "QueryPerformanceFrequency"; Source: "sample.bin"), Found reference to API (Indicator: "BCryptGenerateSymmetricKey"; Source: "sample.bin"), Found reference to API (Indicator: "CertCreateCertificateContext"; Source: "sample.bin"), Found reference to API (Indicator: "GetTickCount64"; Source: "sample.bin"), Found reference to API (Indicator: "EnterCriticalSection"; Source: "sample.bin"), Found reference to API (Indicator: "GetTempPathA"; Source: "sample.bin"), Found reference to API (Indicator: "GetTokenInformation"; Source: "sample.bin"), Found reference to API (Indicator: "WSASetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "SysFreeString"; Source: "sample.bin"), Found reference to API (Indicator: "BitBlt"; Source: "sample.bin"), Found reference to API (Indicator: "WideCharToMultiByte"; Source: "sample.bin"), Found reference to API (Indicator: "SizeofResource"; Source: "sample.bin"), Found reference to API (Indicator: "InitializeSecurityContextA"; Source: "sample.bin"), Found reference to API (Indicator: "EnumSystemLocalesEx"; Source: "sample.bin"), Found reference to API (Indicator: "NtCreateNamedPipeFile"; Source: "sample.bin"), Found reference to API (Indicator: "RemoveDirectoryA"; Source: "sample.bin"), Found reference to API (Indicator: "CoReleaseMarshalData"; Source: "sample.bin"), Found reference to API (Indicator: "SetParent"; Source: "sample.bin"), Found reference to API (Indicator: "SetUnhandledExceptionFilter"; Source: "sample.bin"), Found reference to API (Indicator: "RegGetValueW"; Source: "sample.bin"), Found reference to API (Indicator: "GetThreadContext"; Source: "sample.bin"), Found reference to API (Indicator: "CryptExportKey"; Source: "sample.bin"), Found reference to API (Indicator: "FindClose"; Source: "sample.bin"), Found reference to API (Indicator: "UnmapViewOfFile"; Source: "sample.bin"), Found reference to API (Indicator: "GetUserObjectInformationW"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleExW"; Source: "sample.bin"), Found reference to API (Indicator: "CoInitialize"; Source: "sample.bin"), Found reference to API (Indicator: "WSACleanup"; Source: "sample.bin"), Found reference to API (Indicator: "CloseClipboard"; Source: "sample.bin"), Found reference to API (Indicator: "PathFindFileNameW"; Source: "sample.bin"), Found reference to API (Indicator: "CertGetCertificateChain"; Source: "sample.bin"), Found reference to API (Indicator: "CompareStringEx"; Source: "sample.bin"), Found reference to API (Indicator: "LocaleNameToLCID"; Source: "sample.bin"), Found reference to API (Indicator: "GetLogicalDrives"; Source: "sample.bin"), Found reference to API (Indicator: "InternetCloseHandle"; Source: "sample.bin"), Found reference to API (Indicator: "FreeLibraryWhenCallbackReturns"; Source: "sample.bin"), Found reference to API (Indicator: "CertStrToNameA"; Source: "sample.bin"), Found reference to API (Indicator: "NtOpenKeyEx"; Source: "sample.bin"), Found reference to API (Indicator: "SetWaitableTimer"; Source: "sample.bin"), Found reference to API (Indicator: "NtSetValueKey"; Source: "sample.bin"), Found reference to API (Indicator: "ReleaseSRWLockExclusive"; Source: "sample.bin"), Found reference to API (Indicator: "RtlFreeUnicodeString"; Source: "sample.bin"), Found reference to API (Indicator: "VirtualQuery"; Source: "sample.bin"), Found reference to API (Indicator: "CryptSetHashParam"; Source: "sample.bin"), Found reference to API (Indicator: "SetCurrentDirectoryA"; Source: "sample.bin"), Found reference to API (Indicator: "CertCloseStore"; Source: "sample.bin"), Found reference to API (Indicator: "GetDC"; Source: "sample.bin"), Found reference to API (Indicator: "InternetReadFile"; Source: "sample.bin"), Found reference to API (Indicator: "BCryptGenRandom"; Source: "sample.bin"), Found reference to API (Indicator: "AreFileApisANSI"; Source: "sample.bin"), Found reference to API (Indicator: "CreateCompatibleDC"; Source: "sample.bin"), Found reference to API (Indicator: "AcquireCredentialsHandleA"; Source: "sample.bin"), Found reference to API (Indicator: "CoTaskMemFree"; Source: "sample.bin"), Found reference to API (Indicator: "CryptReleaseContext"; Source: "sample.bin"), Found reference to API (Indicator: "VariantClear"; Source: "sample.bin"), Found reference to API (Indicator: "GetDateFormatEx"; Source: "sample.bin"), Found reference to API (Indicator: "CryptUnprotectData"; Source: "sample.bin"), Found reference to API (Indicator: "IsValidLocale"; Source: "sample.bin"), Found reference to API (Indicator: "BCryptEncrypt"; Source: "sample.bin"), Found reference to API (Indicator: "GetACP"; Source: "sample.bin"), Found reference to API (Indicator: "AcquireSRWLockExclusive"; Source: "sample.bin"), Found reference to API (Indicator: "SetProcessPriorityBoost"; Source: "sample.bin"), Found reference to API (Indicator: "ReadConsoleW"; Source: "sample.bin"), Found reference to API (Indicator: "htons"; Source: "sample.bin"), Found reference to API (Indicator: "CoTaskMemAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "htonl"; Source: "sample.bin"), Found reference to API (Indicator: "DestroyWindow"; Source: "sample.bin"), Found reference to API (Indicator: "WSAGetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "GetErrorInfo"; Source: "sample.bin"), Found reference to API (Indicator: "DuplicateHandle"; Source: "sample.bin"), Found reference to API (Indicator: "WSAStringToAddressA"; Source: "sample.bin"), Found reference to API (Indicator: "SelectObject"; Source: "sample.bin"), Found reference to API (Indicator: "OpenThreadToken"; Source: "sample.bin"), Found reference to API (Indicator: "IsValidCodePage"; Source: "sample.bin"), Found reference to API (Indicator: "CloseThreadpool"; Source: "sample.bin"), Found reference to API (Indicator: "AcceptSecurityContext"; Source: "sample.bin"), Found reference to API (Indicator: "GetTimeFormatW"; Source: "sample.bin"), Found reference to API (Indicator: "SuspendThread"; Source: "sample.bin"), Found reference to API (Indicator: "SHBrowseForFolderW"; Source: "sample.bin"), Found reference to API (Indicator: "WerGetFlags"; Source: "sample.bin"), Found reference to API (Indicator: "FreeResource"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteCriticalSection"; Source: "sample.bin"), Found reference to API (Indicator: "SetThreadpoolThreadMaximum"; Source: "sample.bin"), Found reference to API (Indicator: "WSASend"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileAttributesExW"; Source: "sample.bin"), Found reference to API (Indicator: "ExitProcess"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileAttributesExA"; Source: "sample.bin"), Found reference to API (Indicator: "ApplyControlToken"; Source: "sample.bin"), Found reference to API (Indicator: "WinExec"; Source: "sample.bin"), Found reference to API (Indicator: "CertSetCertificateContextProperty"; Source: "sample.bin"), Found reference to API (Indicator: "RaiseFailFastException"; Source: "sample.bin"), Found reference to API (Indicator: "HeapSize"; Source: "sample.bin"), Found reference to API (Indicator: "BCryptOpenAlgorithmProvider"; Source: "sample.bin"), Found reference to API (Indicator: "CreateFileMappingA"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalMemoryStatusEx"; Source: "sample.bin"), Found reference to API (Indicator: "RegisterEventSourceW"; Source: "sample.bin"), Found reference to API (Indicator: "MapViewOfFile"; Source: "sample.bin"), Found reference to API (Indicator: "FreeCredentialsHandle"; Source: "sample.bin"), Found reference to API (Indicator: "UnregisterWait"; Source: "sample.bin"), Found reference to API (Indicator: "SafeArrayPutElement"; Source: "sample.bin"), Found reference to API (Indicator: "RegEnumKeyExW"; Source: "sample.bin"), Found reference to API (Indicator: "MsgWaitForMultipleObjectsEx"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentThreadId"; Source: "sample.bin"), Found reference to API (Indicator: "MessageBoxA"; Source: "sample.bin"), Found reference to API (Indicator: "CertCreateSelfSignCertificate"; Source: "sample.bin"), Found reference to API (Indicator: "MessageBoxW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileType"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleFileNameA"; Source: "sample.bin"), Found reference to API (Indicator: "GetCPInfo"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleFileNameW"; Source: "sample.bin"), Found reference to API (Indicator: "IsDebuggerPresent"; Source: "sample.bin"), Found reference to API (Indicator: "CryptDestroyKey"; Source: "sample.bin"), Found reference to API (Indicator: "gethostname"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentProcess"; Source: "sample.bin"), Found reference to API (Indicator: "LocalFree"; Source: "sample.bin"), Found reference to API (Indicator: "NtQueryValueKey"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpOpenRequest"; Source: "sample.bin"), Found reference to API (Indicator: "SetEnvironmentVariableW"; Source: "sample.bin"), Found reference to API (Indicator: "RtlFormatCurrentUserKeyPath"; Source: "sample.bin"), Found reference to API (Indicator: "EnumSystemLocalesW"; Source: "sample.bin"), Found reference to API (Indicator: "LoadLibraryExW"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpCloseHandle"; Source: "sample.bin"), Found reference to API (Indicator: "TlsAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "HttpOpenRequestW"; Source: "sample.bin"), Found reference to API (Indicator: "CryptDestroyHash"; Source: "sample.bin"), Found reference to API (Indicator: "GetKeyboardState"; Source: "sample.bin"), Found reference to API (Indicator: "CopyFileA"; Source: "sample.bin"), Found reference to API (Indicator: "CreateThreadpool"; Source: "sample.bin"), Found reference to API (Indicator: "LoadIconW"; Source: "sample.bin"), Found reference to API (Indicator: "InitializeCriticalSection"; Source: "sample.bin"), Found reference to API (Indicator: "PathRemoveFileSpecW"; Source: "sample.bin"), Found reference to API (Indicator: "GetEnvironmentStringsW"; Source: "sample.bin"), Found reference to API (Indicator: "QueryPerformanceCounter"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpSendRequest"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetSpecialFolderPathA"; Source: "sample.bin"), Found reference to API (Indicator: "RegDeleteValueA"; Source: "sample.bin"), Found reference to API (Indicator: "CryptEnumProvidersW"; Source: "sample.bin"), Found reference to API (Indicator: "GetHandleInformation"; Source: "sample.bin"), Found reference to API (Indicator: "NtQueryInformationProcess"; Source: "sample.bin"), Found reference to API (Indicator: "CoCreateFreeThreadedMarshaler"; Source: "sample.bin"), Found reference to API (Indicator: "RegDeleteValueW"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemTime"; Source: "sample.bin"), Found reference to API (Indicator: "FreeEnvironmentStringsW"; Source: "sample.bin"), Found reference to API (Indicator: "InitializeCriticalSectionEx"; Source: "sample.bin"), Found reference to API (Indicator: "GetTimeFormatEx"; Source: "sample.bin"), Found reference to API (Indicator: "OpenProcess"; Source: "sample.bin"), Found reference to API (Indicator: "MapVirtualKeyA"; Source: "sample.bin"), Found reference to API (Indicator: "SetThreadPriority"; Source: "sample.bin"), Found reference to API (Indicator: "ShellExecuteW"; Source: "sample.bin"), Found reference to API (Indicator: "FillRect"; Source: "sample.bin"), Found reference to API (Indicator: "GetDeviceCaps"; Source: "sample.bin"), Found reference to API (Indicator: "CertFindExtension"; Source: "sample.bin"), Found reference to API (Indicator: "ReleaseDC"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpConnect"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemTimeAsFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "CertAddCertificateContextToStore"; Source: "sample.bin"), Found reference to API (Indicator: "CoCreateInstance"; Source: "sample.bin"), Found reference to API (Indicator: "SetWindowTextW"; Source: "sample.bin"), Found reference to API (Indicator: "CertCreateCertificateChainEngine"; Source: "sample.bin"), Found reference to API (Indicator: "gethostbyaddr"; Source: "sample.bin"), Found reference to API (Indicator: "VirtualAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcessWindowStation"; Source: "sample.bin"), Found reference to API (Indicator: "StringFromGUID2"; Source: "sample.bin"), Found reference to API (Indicator: "WakeAllConditionVariable"; Source: "sample.bin"), Found reference to API (Indicator: "TlsFree"; Source: "sample.bin"), Found reference to API (Indicator: "SetWindowsHookExA"; Source: "sample.bin"), Found reference to API (Indicator: "CheckRemoteDebuggerPresent"; Source: "sample.bin"), Found reference to API (Indicator: "GetStdHandle"; Source: "sample.bin"), Found reference to API (Indicator: "SysStringLen"; Source: "sample.bin"), Found reference to API (Indicator: "EnableWindow"; Source: "sample.bin"), Found reference to API (Indicator: "PeekMessageA"; Source: "sample.bin"), Found reference to API (Indicator: "EmptyClipboard"; Source: "sample.bin"), Found reference to API (Indicator: "PeekMessageW"; Source: "sample.bin"), Found reference to API (Indicator: "getpeername"; Source: "sample.bin"), Found reference to API (Indicator: "CertGetCertificateContextProperty"; Source: "sample.bin"), Found reference to API (Indicator: "SetErrorMode"; Source: "sample.bin"), Found reference to API (Indicator: "PathRemoveExtensionW"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileVersionInfoW"; Source: "sample.bin"), Found reference to API (Indicator: "UuidCreate"; Source: "sample.bin"), Found reference to API (Indicator: "SetThreadContext"; Source: "sample.bin"), Found reference to API (Indicator: "InternetConnectW"; Source: "sample.bin"), Found reference to API (Indicator: "VirtualProtect"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteSecurityContext"; Source: "sample.bin"), Found reference to API (Indicator: "TryAcquireSRWLockExclusive"; Source: "sample.bin"), Found reference to API (Indicator: "getsockopt"; Source: "sample.bin"), Found reference to API (Indicator: "CryptBinaryToStringA"; Source: "sample.bin"), Found reference to API (Indicator: "BCryptSetProperty"; Source: "sample.bin"), Found reference to API (Indicator: "GetCommandLineA"; Source: "sample.bin"), Found reference to API (Indicator: "GetCommandLineW"; Source: "sample.bin"), Found reference to API (Indicator: "CryptHashCertificate2"; Source: "sample.bin"), Found reference to API (Indicator: "RegLoadMUIStringW"; Source: "sample.bin"), Found reference to API (Indicator: "CloseThreadpoolWork"; Source: "sample.bin"), Found reference to API (Indicator: "CompareStringW"; Source: "sample.bin"), Found reference to API (Indicator: "LoadStringW"; Source: "sample.bin"), Found reference to API (Indicator: "WriteFile"; Source: "sample.bin"), Found reference to API (Indicator: "DecodePointer"; Source: "sample.bin"), Found reference to API (Indicator: "CreateProcessW"; Source: "sample.bin"), Found reference to API (Indicator: "FlsSetValue"; Source: "sample.bin"), Found reference to API (Indicator: "Sleep"; Source: "sample.bin"), Found reference to API (Indicator: "CertFindCertificateInStore"; Source: "sample.bin"), Found reference to API (Indicator: "RtlCaptureContext"; Source: "sample.bin"), Found reference to API (Indicator: "WerSetFlags"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileSecurityW"; Source: "sample.bin"), Found reference to API (Indicator: "LoadResource"; Source: "sample.bin"), Found reference to API (Indicator: "GetOEMCP"; Source: "sample.bin"), Found reference to API (Indicator: "PostMessageA"; Source: "sample.bin"), Found reference to API (Indicator: "GetUserNameA"; Source: "sample.bin"), Found reference to API (Indicator: "CryptQueryObject"; Source: "sample.bin"), Found reference to API (Indicator: "TerminateProcess"; Source: "sample.bin"), Found reference to API (Indicator: "QueryContextAttributesA"; Source: "sample.bin"), Found reference to API (Indicator: "RegCreateKeyExW"; Source: "sample.bin"), Found reference to API (Indicator: "WSASocketA"; Source: "sample.bin"), Found reference to API (Indicator: "CryptAcquireContextA"; Source: "sample.bin"), Found reference to API (Indicator: "SwitchToThread"; Source: "sample.bin"), Found reference to API (Indicator: "VirtualFree"; Source: "sample.bin"), Found reference to API (Indicator: "FreeLibrary"; Source: "sample.bin"), Found reference to API (Indicator: "CryptAcquireContextW"; Source: "sample.bin"), Found reference to API (Indicator: "GetUserNameW"; Source: "sample.bin"), Found reference to API (Indicator: "FindNextFileA"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpReceiveResponse"; Source: "sample.bin"), Found reference to API (Indicator: "AcceptEx"; Source: "sample.bin"), Found reference to API (Indicator: "RegisterWaitForSingleObject"; Source: "sample.bin"), Found reference to API (Indicator: "GetComputerNameExA"; Source: "sample.bin"), Found reference to API (Indicator: "CryptStringToBinaryA"; Source: "sample.bin"), Found reference to API (Indicator: "ReadFile"; Source: "sample.bin"), Found reference to API (Indicator: "CryptGenRandom"; Source: "sample.bin"), Found reference to API (Indicator: "LCMapStringW"; Source: "sample.bin"), Found reference to API (Indicator: "FindNextFileW"; Source: "sample.bin"), Found reference to API (Indicator: "CreatePipe"; Source: "sample.bin"), Found reference to API (Indicator: "IsValidLocaleName"; Source: "sample.bin"), Found reference to API (Indicator: "OpenProcessToken"; Source: "sample.bin"), Found reference to API (Indicator: "GetUserDefaultLocaleName"; Source: "sample.bin"), Found reference to API (Indicator: "SetFilePointerEx"; Source: "sample.bin"), Found reference to API (Indicator: "IsProcessorFeaturePresent"; Source: "sample.bin"), Found reference to API (Indicator: "ExitWindowsEx"; Source: "sample.bin"), Found reference to API (Indicator: "RegEnumKeyA"; Source: "sample.bin"), Found reference to API (Indicator: "Process32NextW"; Source: "sample.bin"), Found reference to API (Indicator: "InternetCrackUrlW"; Source: "sample.bin"), Found reference to API (Indicator: "InternetQueryDataAvailable"; Source: "sample.bin"), Found reference to API (Indicator: "WriteConsoleW"; Source: "sample.bin"), Found reference to API (Indicator: "CoGetClassObject"; Source: "sample.bin"), Found reference to API (Indicator: "RtlPcToFileHeader"; Source: "sample.bin"), Found reference to API (Indicator: "CoUninitialize"; Source: "sample.bin"), Found reference to API (Indicator: "InternetSetOptionW"; Source: "sample.bin"), Found reference to API (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "NtReadFile"; Source: "sample.bin"), Found reference to API (Indicator: "GetLocaleInfoEx"; Source: "sample.bin"), Found reference to API (Indicator: "GetQueuedCompletionStatusEx"; Source: "sample.bin"), Found reference to API (Indicator: "GetErrorMode"; Source: "sample.bin"), Found reference to API (Indicator: "RtlGetVersion"; Source: "sample.bin"), Found reference to API (Indicator: "LockResource"; Source: "sample.bin"), Found reference to API (Indicator: "GetClipboardData"; Source: "sample.bin"), Found reference to API (Indicator: "WinHttpReadData"; Source: "sample.bin"), Found reference to API (Indicator: "SetConsoleCtrlHandler"; Source: "sample.bin"), Found reference to API (Indicator: "LookupAccountSidW"; Source: "sample.bin"), Found reference to API (Indicator: "GetDateFormatW"; Source: "sample.bin"), Found reference to API (Indicator: "CreateFontIndirectW"; Source: "sample.bin"), Found reference to API (Indicator: "MultiByteToWideChar"; Source: "sample.bin"), Found reference to API (Indicator: "HeapReAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "SetThreadToken"; Source: "sample.bin"), Found reference to API (Indicator: "HttpAddRequestHeadersW"; Source: "sample.bin"), Found reference to API (Indicator: "GetSaveFileNameW"; Source: "sample.bin"), Found reference to API (Indicator: "GetStringTypeW"; Source: "sample.bin"), Found reference to API (Indicator: "SetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemMetrics"; Source: "sample.bin"), Found reference to API (Indicator: "VariantChangeType"; Source: "sample.bin"), Found reference to API (Indicator: "ioctlsocket"; Source: "sample.bin"), Found reference to API (Indicator: "GetComputerNameA"; Source: "sample.bin"), Found reference to API (Indicator: "WaitForSingleObject"; Source: "sample.bin"), Found reference to API (Indicator: "CallNextHookEx"; Source: "sample.bin"), Found reference to API (Indicator: "RtlLookupFunctionEntry"; Source: "sample.bin"), Found reference to API (Indicator: "OpenClipboard"; Source: "sample.bin"), Found reference to API (Indicator: "CloseHandle"; Source: "sample.bin"), Found reference to API (Indicator: "SysAllocString"; Source: "sample.bin"), Found reference to API (Indicator: "LCIDToLocaleName"; Source: "sample.bin"), Found reference to API (Indicator: "WaitForMultipleObjects"; Source: "sample.bin"), Found reference to API (Indicator: "CryptGetProvParam"; Source: "sample.bin"), Found reference to API (Indicator: "FindResourceA"; Source: "sample.bin")37:Tad6,Found reference to API "NCryptFreeObject" (Indicator: "NCryptFreeObject"; Source: "sample.bin"), Found reference to API "BCryptDestroyKey" (Indicator: "BCryptDestroyKey"; Source: "sample.bin"), Found reference to API "BCryptDestroyKey" (Indicator: "CryptDestroyKey"; Source: "sample.bin"), Found reference to API "CertGetNameStringA" (Indicator: "CertGetNameString"; Source: "sample.bin"), Found reference to API "BCryptGetProperty" (Indicator: "BCryptGetProperty"; Source: "sample.bin"), Found reference to API "CryptDecodeObjectEx" (Indicator: "CryptDecodeObject"; Source: "sample.bin"), Found reference to API "CryptEncodeObjectEx" (Indicator: "CryptEncodeObject"; Source: "sample.bin"), Found reference to API "CertEnumCertificatesInStore" (Indicator: "CertEnumCertificatesInStore"; Source: "sample.bin"), Found reference to API "CertOpenSystemStoreW" (Indicator: "CertOpenSystemStore"; Source: "sample.bin"), Found reference to API "CryptDecrypt" (Indicator: "CryptDecrypt"; Source: "sample.bin"), Found reference to API "CertFreeCertificateContext" (Indicator: "CertFreeCertificateContext"; Source: "sample.bin"), Found reference to API "CryptGetUserKey" (Indicator: "CryptGetUserKey"; Source: "sample.bin"), Found reference to API "NCryptImportKey" (Indicator: "CryptImportKey"; Source: "sample.bin"), Found reference to API "BCryptDecrypt" (Indicator: "BCryptDecrypt"; Source: "sample.bin"), Found reference to API "BCryptDecrypt" (Indicator: "CryptDecrypt"; Source: "sample.bin"), Found reference to API "NCryptSetProperty" (Indicator: "NCryptSetProperty"; Source: "sample.bin"), Found reference to API "CryptSignHashW" (Indicator: "CryptSignHash"; Source: "sample.bin"), Found reference to API "CryptCreateHash" (Indicator: "CryptCreateHash"; Source: "sample.bin"), Found reference to API "BCryptGenerateSymmetricKey" (Indicator: "BCryptGenerateSymmetricKey"; Source: "sample.bin"), Found reference to API "CryptExportKey" (Indicator: "CryptExportKey"; Source: "sample.bin"), Found reference to API "NCryptExportKey" (Indicator: "CryptExportKey"; Source: "sample.bin"), Found reference to API "CertCloseStore" (Indicator: "CertCloseStore"; Source: "sample.bin"), Found reference to API "CryptReleaseContext" (Indicator: "CryptReleaseContext"; Source: "sample.bin"), Found reference to API "CryptUnprotectData" (Indicator: "CryptUnprotectData"; Source: "sample.bin"), Found reference to API "BCryptEncrypt" (Indicator: "BCryptEncrypt"; Source: "sample.bin"), Found reference to API "BCryptEncrypt" (Indicator: "CryptEncrypt"; Source: "sample.bin"), Found reference to API "CertCreateSelfSignCertificate" (Indicator: "CertCreateSelfSignCertificate"; Source: "sample.bin"), Found reference to API "CryptDestroyKey" (Indicator: "CryptDestroyKey"; Source: "sample.bin")38:Tc21,Found api reference "NCryptFreeObject" (Indicator: "NCryptFreeObject"; Source: "sample.bin"), Found api reference "BCryptCloseAlgorithmProvider" (Indicator: "BCryptCloseAlgorithmProvider"; Source: "sample.bin"), Found api reference "NCryptOpenStorageProvider" (Indicator: "NCryptOpenStorageProvider"; Source: "sample.bin"), Found api reference "BCryptDestroyKey" (Indicator: "BCryptDestroyKey"; Source: "sample.bin"), Found api reference "BCryptDestroyKey" (Indicator: "CryptDestroyKey"; Source: "sample.bin"), Found api reference "CertGetNameStringA" (Indicator: "CertGetNameStringA"; Source: "sample.bin"), Found api reference "BCryptGetProperty" (Indicator: "BCryptGetProperty"; Source: "sample.bin"), Found api reference "CryptDecodeObjectEx" (Indicator: "CryptDecodeObject"; Source: "sample.bin"), Found api reference "CryptDecodeObjectEx" (Indicator: "CryptDecodeObjectEx"; Source: "sample.bin"), Found api reference "CryptEncodeObjectEx" (Indicator: "CryptEncodeObject"; Source: "sample.bin"), Found api reference "CryptEncodeObjectEx" (Indicator: "CryptEncodeObjectEx"; Source: "sample.bin"), Found api reference "CertDuplicateCertificateContext" (Indicator: "CertDuplicateCertificateContext"; Source: "sample.bin"), Found api reference "NCryptCreatePersistedKey" (Indicator: "NCryptCreatePersistedKey"; Source: "sample.bin"), Found api reference "CertFreeCertificateChainEngine" (Indicator: "CertFreeCertificateChain"; Source: "sample.bin"), Found api reference "CertFreeCertificateChainEngine" (Indicator: "CertFreeCertificateChainEngine"; Source: "sample.bin"), Found api reference "CertFreeCertificateChain" (Indicator: "CertFreeCertificateChain"; Source: "sample.bin"), Found api reference "CertEnumCertificatesInStore" (Indicator: "CertEnumCertificatesInStore"; Source: "sample.bin"), Found api reference "CertOpenSystemStoreW" (Indicator: "CertOpenSystemStoreW"; Source: "sample.bin"), Found api reference "CryptDecrypt" (Indicator: "CryptDecrypt"; Source: "sample.bin"), Found api reference "CertFreeCertificateContext" (Indicator: "CertFreeCertificateContext"; Source: "sample.bin"), Found api reference "PFXImportCertStore" (Indicator: "PFXImportCertStore"; Source: "sample.bin"), Found api reference "CryptGetUserKey" (Indicator: "CryptGetUserKey"; Source: "sample.bin"), Found api reference "NCryptDeleteKey" (Indicator: "NCryptDeleteKey"; Source: "sample.bin"), Found api reference "NCryptImportKey" (Indicator: "CryptImportKey"; Source: "sample.bin"), Found api reference "NCryptImportKey" (Indicator: "NCryptImportKey"; Source: "sample.bin"), Found api reference "BCryptDecrypt" (Indicator: "BCryptDecrypt"; Source: "sample.bin"), Found api reference "BCryptDecrypt" (Indicator: "CryptDecrypt"; Source: "sample.bin"), Found api reference "NCryptSetProperty" (Indicator: "NCryptSetProperty"; Source: "sample.bin"), Found api reference "CertOpenStore" (Indicator: "CertOpenStore"; Source: "sample.bin"), Found api reference "CryptSignHashW" (Indicator: "CryptSignHashW"; Source: "sample.bin"), Found api reference "CryptCreateHash" (Indicator: "CryptCreateHash"; Source: "sample.bin")39:T495,Found reference to API "CryptDecrypt" (Indicator: "CryptDecrypt"; Source: "sample.bin"), Found reference to API "CryptGetUserKey" (Indicator: "CryptGetUserKey"; Source: "sample.bin"), Found reference to API "CryptCreateHash" (Indicator: "CryptCreateHash"; Source: "sample.bin"), Found reference to API "CryptExportKey" (Indicator: "CryptExportKey"; Source: "sample.bin"), Found reference to API "CryptReleaseContext" (Indicator: "CryptReleaseContext"; Source: "sample.bin"), Found reference to API "CryptUnprotectData" (Indicator: "CryptUnprotectData"; Source: "sample.bin"), Found reference to API "CryptDestroyKey" (Indicator: "CryptDestroyKey"; Source: "sample.bin"), Found reference to API "CryptDestroyHash" (Indicator: "CryptDestroyHash"; Source: "sample.bin"), Found reference to API "CryptBinaryToStringA" (Indicator: "CryptBinaryToString"; Source: "sample.bin"), Found reference to API "CryptAcquireContextA" (Indicator: "CryptAcquireContextA"; Source: "sample.bin"), Found reference to API "CryptAcquireContextW" (Indicator: "CryptAcquireContextW"; Source: "sample.bin"), Found reference to API "CryptGenRandom" (Indicator: "CryptGenRandom"; Source: "sample.bin")3a:T436,Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; Source: "sample.bin"), Found reference to API "GetTickCount64" (Indicator: "GetTickCount64"; Source: "sample.bin"), Found reference to API "SetWaitableTimer" (Indicator: "SetWaitableTimer"; Source: "sample.bin"), Found reference to API "MsgWaitForMultipleObjectsEx" (Indicator: "WaitForMultipleObjects"; Source: "sample.bin"), Found reference to API "MsgWaitForMultipleObjectsEx" (Indicator: "WaitForMultipleObjectsEx"; Source: "sample.bin"), Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; Source: "sample.bin"), Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; Source: "sample.bin"), Found reference to API "RegisterWaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "sample.bin"), Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "sample.bin"), Found reference to API "WaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; Source: "sample.bin")3b:T4a6,Found reference to API "GetFileAttributesA" (Indicator: "GetFileAttributes"; Source: "sample.bin"), Found reference to API "GetFileSizeEx" (Indicator: "GetFileSize"; Source: "sample.bin"), Found reference to API "GetSystemDirectoryA" (Indicator: "GetSystemDirectory"; Source: "sample.bin"), Found reference to API "GetFileVersionInfoSizeW" (Indicator: "GetFileVersionInfo"; Source: "sample.bin"), Found reference to API "GetFileVersionInfoSizeW" (Indicator: "GetFileVersionInfoSize"; Source: "sample.bin"), Found reference to API "GetCurrentDirectoryA" (Indicator: "GetCurrentDirectory"; Source: "sample.bin"), Found reference to API "GetTempPath2W" (Indicator: "GetTempPath"; Source: "sample.bin"), Found reference to API "GetTempPathA" (Indicator: "GetTempPath"; Source: "sample.bin"), Found reference to API "PathFindFileNameW" (Indicator: "PathFindFileName"; Source: "sample.bin"), Found reference to API "GetFileAttributesExW" (Indicator: "GetFileAttributes"; Source: "sample.bin"), Found reference to API "GetFileAttributesExA" (Indicator: "GetFileAttributes"; Source: "sample.bin"), Found reference to API "GetFileVersionInfoW" (Indicator: "GetFileVersionInfo"; Source: "sample.bin")3c:T584,Found string "av_aes_ctr_set_random_iv" (Indicator: "aes"; Source: "sample.bin"), Found string "av_aes_ctr_get_iv" (Indicator: "aes"; Source: "sample.bin"), Found string "av_aes_ctr_alloc" (Indicator: "aes"; Source: "sample.bin"), Found string "av_aes_ctr_increment_iv" (Indicator: "aes"; Source: "sample.bin"), Found string "av_aes_ctr_free" (Indicator: "aes"; Source: "sample.bin"), Found string "av_base64_decode" (Indicator: "base64"; Source: "sample.bin"), Found string "?Decode@Base64@@YAHAEBVwxString@@PEAX@Z" (Indicator: "base64"; Source: "sample.bin"), Found string "av_aes_crypt" (Indicator: "aes"; Source: "sample.bin"), Found string "?Encode@Base64@@YA?AVwxString@@PEBXH@Z" (Indicator: "base64"; Source: "sample.bin"), Found string "av_base64_encode" (Indicator: "base64"; Source: "sample.bin"), Found string "av_aes_init" (Indicator: "aes"; Source: "sample.bin"), Found string "av_aes_ctr_set_full_iv" (Indicator: "aes"; Source: "sample.bin"), Found string "av_aes_alloc" (Indicator: "aes"; Source: "sample.bin"), Found string "av_aes_ctr_init" (Indicator: "aes"; Source: "sample.bin"), Found string "av_aes_ctr_crypt" (Indicator: "aes"; Source: "sample.bin"), Found string "av_blowfish_init" (Indicator: "blowfish"; Source: "sample.bin"), Found string "av_blowfish_crypt_ecb" (Indicator: "blowfish"; Source: "sample.bin"), Found string "cef_base64encode" (Indicator: "base64"; Source: "sample.bin")3d:T71d,Found reference to API "InternetOpenW" (Indicator: "InternetOpen"; Source: "sample.bin"), Found reference to API "WSAStartup" (Indicator: "WSAStartup"; Source: "sample.bin"), Found reference to API "HttpSendRequestW" (Indicator: "HttpSendRequest"; Source: "sample.bin"), Found reference to API "WSARecvFrom" (Indicator: "WSARecv"; Source: "sample.bin"), Found reference to API "WSASendTo" (Indicator: "WSASend"; Source: "sample.bin"), Found reference to API "WinHttpOpen" (Indicator: "WinHttpOpen"; Source: "sample.bin"), Found reference to API "HttpQueryInfoW" (Indicator: "HttpQueryInfo"; Source: "sample.bin"), Found reference to API "InternetReadFile" (Indicator: "InternetReadFile"; Source: "sample.bin"), Found reference to API "WSASendMsg" (Indicator: "WSASend"; Source: "sample.bin"), Found reference to API "WSARecv" (Indicator: "WSARecv"; Source: "sample.bin"), Found reference to API "WSASend" (Indicator: "WSASend"; Source: "sample.bin"), Found reference to API "WinHttpOpenRequest" (Indicator: "HttpOpenRequest"; Source: "sample.bin"), Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpen"; Source: "sample.bin"), Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpenRequest"; Source: "sample.bin"), Found reference to API "HttpOpenRequestW" (Indicator: "HttpOpenRequest"; Source: "sample.bin"), Found reference to API "WinHttpSendRequest" (Indicator: "HttpSendRequest"; Source: "sample.bin"), Found reference to API "WinHttpSendRequest" (Indicator: "WinHttpSendRequest"; Source: "sample.bin"), Found reference to API "WinHttpConnect" (Indicator: "WinHttpConnect"; Source: "sample.bin"), Found reference to API "InternetConnectW" (Indicator: "InternetConnect"; Source: "sample.bin"), Found reference to API "WinHttpReadData" (Indicator: "WinHttpReadData"; Source: "sample.bin")3e:T5ad,"nul 2>&1\" (Indicator: \"schtasks /delete\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1685","id":"string-629","sources":[{"report_type":"qsp","report_id":""},{"report_type":"sandbox","report_id":"6af37c696f942f5fbc0743b0"}]},{"level":"informative","category":"Unusual Characteristics","name":"Contains reference to mutex-related activity (API string)","description":"Found reference to API \"CreateMutexA\" (Indicator: \"CreateMutex\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-354","sources":[{"report_type":"qsp","report_id":""},{"report_type":"sandbox","report_id":"6af37c696f942f5fbc0743b0"}]},{"level":"informative","category":"Unusual Characteristics","name":"Contains ability to reboot/shutdown the operating system (API string)","description":"Found reference to API \"ExitWindowsEx\" (Indicator: \"ExitWindows\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1529","id":"string-189","sources":[{"report_type":"qsp","report_id":""},{"report_type":"sandbox","report_id":"6af37c696f942f5fbc0743b0"}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Loads the debugger/analysis tool module","description":"\"