26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 4e:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T49d,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Crifi.Generic Sample 98bed58115d7… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 98bed58115d7…. Malware family: Crifi.Generic. Threat score 100/100. 11/25 AV engines flagged this file. 13 malicious and 27 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/98bed58115d79858db4b674cbc29fd060a22568d7b9fcd6d5ca15cc66a481267","keywords":["Malicious","Crifi.Generic","malware analysis","sandbox report","threat intelligence","98bed58115d79858db4b674cbc29fd060a22568d7b9fcd6d5ca15cc66a481267"],"about":{"@type":"SoftwareApplication","name":"b7d5659076cdcb6d669072cee3860f36.exe","applicationCategory":["peexe","executable"],"identifier":"98bed58115d79858db4b674cbc29fd060a22568d7b9fcd6d5ca15cc66a481267","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Crifi.Generic","antivirusDetections":{"malicious":11,"total":25},"behavioralIndicators":{"malicious":13,"suspicious":27},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T25c4,Found reference to API (Indicator: "DosDateTimeToFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "DeleteFileA"; Source: "sample.bin"), Found reference to API (Indicator: "AdjustTokenPrivileges"; Source: "sample.bin"), Found reference to API (Indicator: "MulDiv"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileAttributesA"; Source: "sample.bin"), Found reference to API (Indicator: "SetForegroundWindow"; Source: "sample.bin"), Found reference to API (Indicator: "SeShutdownPrivilege"; Source: "sample.bin"), Found reference to API (Indicator: "GetPrivateProfileIntA"; Source: "sample.bin"), Found reference to API (Indicator: "GetExitCodeProcess"; Source: "sample.bin"), Found reference to API (Indicator: "FreeSid"; Source: "sample.bin"), Found reference to API (Indicator: "SetEvent"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemDirectoryA"; Source: "sample.bin"), Found reference to API (Indicator: "CreateDirectoryA"; Source: "sample.bin"), Found reference to API (Indicator: "GetDriveTypeA"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalFree"; Source: "sample.bin"), Found reference to API (Indicator: "LoadLibraryA"; Source: "sample.bin"), Found reference to API (Indicator: "EqualSid"; Source: "sample.bin"), Found reference to API (Indicator: "CreateThread"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileVersionInfoSizeA"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleHandleW"; Source: "sample.bin"), Found reference to API (Indicator: "DecryptFileA"; Source: "sample.bin"), Found reference to API (Indicator: "RegQueryValueExA"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentProcessId"; Source: "sample.bin"), Found reference to API (Indicator: "RegSetValueExA"; Source: "sample.bin"), Found reference to API (Indicator: "FormatMessageA"; Source: "sample.bin"), Found reference to API (Indicator: "GetStartupInfoW"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentDirectoryA"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileAttributesA"; Source: "sample.bin"), Found reference to API (Indicator: "RegOpenKeyExA"; Source: "sample.bin"), Found reference to API (Indicator: "GetDesktopWindow"; Source: "sample.bin"), Found reference to API (Indicator: "CharNextA"; Source: "sample.bin"), Found reference to API (Indicator: "SetWindowPos"; Source: "sample.bin"), Found reference to API (Indicator: "ShowWindow"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemInfo"; Source: "sample.bin"), Found reference to API (Indicator: "SendMessageA"; Source: "sample.bin"), Found reference to API (Indicator: "UnhandledExceptionFilter"; Source: "sample.bin"), Found reference to API (Indicator: "VerQueryValueA"; Source: "sample.bin"), Found reference to API (Indicator: "DispatchMessageA"; Source: "sample.bin"), Found reference to API (Indicator: "GetWindowLongA"; Source: "sample.bin"), Found reference to API (Indicator: "LookupPrivilegeValueA"; Source: "sample.bin"), Found reference to API (Indicator: "FindFirstFileA"; Source: "sample.bin"), Found reference to API (Indicator: "GetProcAddress"; Source: "sample.bin"), Found reference to API (Indicator: "CreateMutexA"; Source: "sample.bin"), Found reference to API (Indicator: "CreateFileA"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "CheckTokenMembership"; Source: "sample.bin"), Found reference to API (Indicator: "SetFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "RegCloseKey"; Source: "sample.bin"), Found reference to API (Indicator: "GetTempPathA"; Source: "sample.bin"), Found reference to API (Indicator: "GetTokenInformation"; Source: "sample.bin"), Found reference to API (Indicator: "SizeofResource"; Source: "sample.bin"), Found reference to API (Indicator: "ResetEvent"; Source: "sample.bin"), Found reference to API (Indicator: "RemoveDirectoryA"; Source: "sample.bin"), Found reference to API (Indicator: "SetUnhandledExceptionFilter"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalLock"; Source: "sample.bin"), Found reference to API (Indicator: "FindClose"; Source: "sample.bin"), Found reference to API (Indicator: "LocalFileTimeToFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "IsDBCSLeadByte"; Source: "sample.bin"), Found reference to API (Indicator: "GetTickCount"; Source: "sample.bin"), Found reference to API (Indicator: "SetCurrentDirectoryA"; Source: "sample.bin"), Found reference to API (Indicator: "GetDC"; Source: "sample.bin"), Found reference to API (Indicator: "MsgWaitForMultipleObjects"; Source: "sample.bin"), Found reference to API (Indicator: "SetFilePointer"; Source: "sample.bin"), Found reference to API (Indicator: "GetShortPathNameA"; Source: "sample.bin"), Found reference to API (Indicator: "GetPrivateProfileStringA"; Source: "sample.bin"), Found reference to API (Indicator: "TerminateThread"; Source: "sample.bin"), Found reference to API (Indicator: "FreeResource"; Source: "sample.bin"), Found reference to API (Indicator: "lstrcmpA"; Source: "sample.bin"), Found reference to API (Indicator: "ExitProcess"; Source: "sample.bin"), Found reference to API (Indicator: "EnumResourceLanguagesA"; Source: "sample.bin"), Found reference to API (Indicator: "WritePrivateProfileStringA"; Source: "sample.bin"), Found reference to API (Indicator: "GetVolumeInformationA"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentThreadId"; Source: "sample.bin"), Found reference to API (Indicator: "MessageBoxA"; Source: "sample.bin"), Found reference to API (Indicator: "SHBrowseForFolder"; Source: "sample.bin"), Found reference to API (Indicator: "GetModuleFileNameA"; Source: "sample.bin"), Found reference to API (Indicator: "GetCurrentProcess"; Source: "sample.bin"), Found reference to API (Indicator: "CharUpperA"; Source: "sample.bin"), Found reference to API (Indicator: "LocalFree"; Source: "sample.bin"), Found reference to API (Indicator: "LoadLibraryExA"; Source: "sample.bin"), Found reference to API (Indicator: "QueryPerformanceCounter"; Source: "sample.bin"), Found reference to API (Indicator: "RegDeleteValueA"; Source: "sample.bin"), Found reference to API (Indicator: "GetWindowRect"; Source: "sample.bin"), Found reference to API (Indicator: "CharPrevA"; Source: "sample.bin"), Found reference to API (Indicator: "GetDeviceCaps"; Source: "sample.bin"), Found reference to API (Indicator: "ReleaseDC"; Source: "sample.bin"), Found reference to API (Indicator: "HeapSetInformation"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemTimeAsFileTime"; Source: "sample.bin"), Found reference to API (Indicator: "SetWindowTextA"; Source: "sample.bin"), Found reference to API (Indicator: "ExpandEnvironmentStringsA"; Source: "sample.bin"), Found reference to API (Indicator: "AllocateAndInitializeSid"; Source: "sample.bin"), Found reference to API (Indicator: "EnableWindow"; Source: "sample.bin"), Found reference to API (Indicator: "PeekMessageA"; Source: "sample.bin"), Found reference to API (Indicator: "GetVersionExA"; Source: "sample.bin"), Found reference to API (Indicator: "LocalAlloc"; Source: "sample.bin"), Found reference to API (Indicator: "CreateEventA"; Source: "sample.bin"), Found reference to API (Indicator: "GetFileVersionInfoA"; Source: "sample.bin"), Found reference to API (Indicator: "GlobalUnlock"; Source: "sample.bin"), Found reference to API (Indicator: "RegQueryInfoKeyA"; Source: "sample.bin"), Found reference to API (Indicator: "CompareStringA"; Source: "sample.bin"), Found reference to API (Indicator: "WriteFile"; Source: "sample.bin"), Found reference to API (Indicator: "Sleep"; Source: "sample.bin"), Found reference to API (Indicator: "LoadStringA"; Source: "sample.bin"), Found reference to API (Indicator: "LoadResource"; Source: "sample.bin"), Found reference to API (Indicator: "TerminateProcess"; Source: "sample.bin"), Found reference to API (Indicator: "CreateProcessA"; Source: "sample.bin"), Found reference to API (Indicator: "FreeLibrary"; Source: "sample.bin"), Found reference to API (Indicator: "SHGetPathFromIDList"; Source: "sample.bin"), Found reference to API (Indicator: "RegCreateKeyExA"; Source: "sample.bin"), Found reference to API (Indicator: "MessageBeep"; Source: "sample.bin"), Found reference to API (Indicator: "FindNextFileA"; Source: "sample.bin"), Found reference to API (Indicator: "SetWindowLongA"; Source: "sample.bin"), Found reference to API (Indicator: "ReadFile"; Source: "sample.bin"), Found reference to API (Indicator: "CallWindowProcA"; Source: "sample.bin"), Found reference to API (Indicator: "OpenProcessToken"; Source: "sample.bin"), Found reference to API (Indicator: "ExitWindowsEx"; Source: "sample.bin"), Found reference to API (Indicator: "GetTempFileNameA"; Source: "sample.bin"), Found reference to API (Indicator: "GetVersion"; Source: "sample.bin"), Found reference to API (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API (Indicator: "LockResource"; Source: "sample.bin"), Found reference to API (Indicator: "GetDiskFreeSpaceA"; Source: "sample.bin"), Found reference to API (Indicator: "GetWindowsDirectoryA"; Source: "sample.bin"), Found reference to API (Indicator: "GetSystemMetrics"; Source: "sample.bin"), Found reference to API (Indicator: "WaitForSingleObject"; Source: "sample.bin"), Found reference to API (Indicator: "CloseHandle"; Source: "sample.bin"), Found reference to API (Indicator: "FindResourceA"; Source: "sample.bin")28:T4eb,"" (Indicator: "MoveFileA"; Source: "00000000-00004340.00000000.67609.02DD0000.00000004.mdmp, 00000000-00004340.00000001.67677.02DD0000.00000004.mdmp") Found string "" (Indicator: "MoveFileW"; Source: "00000000-00004340.00000000.67609.02DD0000.00000004.mdmp, 00000000-00004340.00000001.67677.02DD0000.00000004.mdmp") Found string "" (Indicator: "MoveFileExA"; Source: "00000000-00004340.00000000.67609.02DD0000.00000004.mdmp, 00000000-00004340.00000001.67677.02DD0000.00000004.mdmp") Found string "" (Indicator: "MoveFileExW"; Source: "00000000-00004340.00000000.67609.02DD0000.00000004.mdmp, 00000000-00004340.00000001.67677.02DD0000.00000004.mdmp") Found string "" (Indicator: "MoveFileA"; Source: "00000000-00004360.00000000.67544.02DE0000.00000004.mdmp, 00000000-00004360.00000001.69464.02DE0000.00000004.mdmp, 00000000-00004360.00000002.71383.02DE0000.00000004.mdmp") Found string "" (Indicator: "MoveFileW"; Source: "00000000-00004360.00000000.67544.02DE0000.00000004.mdmp, 00000000-00004360.00000001.69464.02DE0000.00000004.mdmp, 00000000-00004360.00000002.71383.02DE0000.00000004.mdmp") Found string "" (Indicator: "MoveFileExA"; Source: "00000000-00004360.00000000.67544.02DE0000.00000004.mdmp, 00000000-00004360.00000001.69464.02DE0000.00000004.mdmp, 00000000-00004360.00000002.71383.02DE0000.00000004.mdmp") Found string "" (Indicator: "MoveFileExW"; Source: "00000000-00004360.00000000.67544.02DE0000.00000004.mdmp, 00000000-00004360.00000001.69464.02DE0000.00000004.mdmp, 00000000-00004360.00000002.71383.02DE0000.00000004.mdmp") Found string "" (Indicator: "MoveFileA"; Source: "00000000-00006460.00000000.67416.03380000.00000004.mdmp, 00000000-00006460.00000002.71255.03380000.00000004.mdmp") Found string "" (Indicator: "MoveFileW"; Source: "00000000-00006460.00000000.67416.03380000.00000004.mdmp, 00000000-00006460.00000002.71255.03380000.00000004.mdmp") Found string "" (Indicator: "MoveFileExA"; Source: "00000000-00006460.00000000.67416.03380000.00000004.mdmp, 00000000-00006460.00000002.71255.03380000.00000004.mdmp") Found string "" (Indicator: "MoveFileExW"; Source: "00000000-00006460.00000000.67416.03380000.00000004.mdmp, 00000000-00006460.00000002.71255.03380000.00000004.mdmp") Found string "" (Indicator: "MoveFileA"; Source: "00000000-00006692.00000000.67484.035D0000.00000004.mdmp, 00000000-00006692.00000002.71323.035D0000.00000004.mdmp") Found string "" (Indicator: "MoveFileW"; Source: "00000000-00006692.00000000.67484.035D0000.00000004.mdmp, 00000000-00006692.00000002.71323.035D0000.00000004.mdmp") Found string "" (Indicator: "MoveFileExA"; Source: "00000000-00006692.00000000.67484.035D0000.00000004.mdmp, 00000000-00006692.00000002.71323.035D0000.00000004.mdmp") Found string "" (Indicator: "MoveFileExW"; Source: "00000000-00006692.00000000.67484.035D0000.00000004.mdmp, 00000000-00006692.00000002.71323.035D0000.00000004.mdmp") Found string "" (Indicator: "MoveFileA"; Source: "00000000-00008172.00000001.69923.02810000.00000004.mdmp, 00000000-00008172.00000002.71843.02810000.00000004.mdmp") Found string "" (Indicator: "MoveFileW"; Source: "00000000-00008172.00000001.69923.02810000.00000004.mdmp, 00000000-00008172.00000002.71843.02810000.00000004.mdmp") Found string "" (Indicator: "MoveFileExA"; Source: "00000000-00008172.00000001.69923.02810000.00000004.mdmp, 00000000-00008172.00000002.71843.02810000.00000004.mdmp") Found string "" (Indicator: "MoveFileExW"; Source: "00000000-00008172.00000001.69923.02810000.00000004.mdmp, 00000000-00008172.00000002.71843.02810000.00000004.mdmp")31:Tcc7,"" (Indicator: "WinExec"; Source: "00000000-00004340.00000000.67609.02DD0000.00000004.mdmp, 00000000-00004340.00000001.67677.02DD0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00004360.00000000.67544.02DE0000.00000004.mdmp, 00000000-00004360.00000001.69464.02DE0000.00000004.mdmp, 00000000-00004360.00000002.71383.02DE0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00006460.00000000.67416.03380000.00000004.mdmp, 00000000-00006460.00000002.71255.03380000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00006692.00000000.67484.035D0000.00000004.mdmp, 00000000-00006692.00000002.71323.035D0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00008172.00000001.69923.02810000.00000004.mdmp, 00000000-00008172.00000002.71843.02810000.00000004.mdmp")34:T128a,Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00004340.00000000.67609.02DD0000.00000004.mdmp, 00000000-00004340.00000001.67677.02DD0000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00004340.00000000.67609.02DD0000.00000004.mdmp, 00000000-00004340.00000001.67677.02DD0000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00004340.00000000.67609.02DD0000.00000004.mdmp, 00000000-00004340.00000001.67677.02DD0000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00004340.00000000.67609.02DD0000.00000004.mdmp, 00000000-00004340.00000001.67677.02DD0000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00004360.00000000.67544.02DE0000.00000004.mdmp, 00000000-00004360.00000001.69464.02DE0000.00000004.mdmp, 00000000-00004360.00000002.71383.02DE0000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00004360.00000000.67544.02DE0000.00000004.mdmp, 00000000-00004360.00000001.69464.02DE0000.00000004.mdmp, 00000000-00004360.00000002.71383.02DE0000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00004360.00000000.67544.02DE0000.00000004.mdmp, 00000000-00004360.00000001.69464.02DE0000.00000004.mdmp, 00000000-00004360.00000002.71383.02DE0000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00004360.00000000.67544.02DE0000.00000004.mdmp, 00000000-00004360.00000001.69464.02DE0000.00000004.mdmp, 00000000-00004360.00000002.71383.02DE0000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00006460.00000000.67416.03380000.00000004.mdmp, 00000000-00006460.00000002.71255.03380000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00006460.00000000.67416.03380000.00000004.mdmp, 00000000-00006460.00000002.71255.03380000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00006460.00000000.67416.03380000.00000004.mdmp, 00000000-00006460.00000002.71255.03380000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00006460.00000000.67416.03380000.00000004.mdmp, 00000000-00006460.00000002.71255.03380000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00006692.00000000.67484.035D0000.00000004.mdmp, 00000000-00006692.00000002.71323.035D0000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00006692.00000000.67484.035D0000.00000004.mdmp, 00000000-00006692.00000002.71323.035D0000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00006692.00000000.67484.035D0000.00000004.mdmp, 00000000-00006692.00000002.71323.035D0000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00006692.00000000.67484.035D0000.00000004.mdmp, 00000000-00006692.00000002.71323.035D0000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00008172.00000001.69923.02810000.00000004.mdmp, 00000000-00008172.00000002.71843.02810000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00008172.00000001.69923.02810000.00000004.mdmp, 00000000-00008172.00000002.71843.02810000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00008172.00000001.69923.02810000.00000004.mdmp, 00000000-00008172.00000002.71843.02810000.00000004.mdmp") Found reference to API "" (Indicator: "MoveFile"; Source: "00000000-00008172.00000001.69923.02810000.00000004.mdmp, 00000000-00008172.00000002.71843.02810000.00000004.mdmp")35:T5dd,Found reference to API "OpenProcessToken" (Indicator: "OpenProcess"; File: "98bed58115d79858db4b674cbc29fd060a22568d7b9fcd6d5ca15cc66a481267.bin") file/memory contains long string with (Indicator: "OpenProcess"; File: "98bed58115d79858db4b674cbc29fd060a22568d7b9fcd6d5ca15cc66a481267.bin") Found reference to API "GetProcessHeap" (Indicator: "GetProcessHeap"; File: "98bed58115d79858db4b674cbc29fd060a22568d7b9fcd6d5ca15cc66a481267.bin") Found reference to API "GetProcessHeap" (Indicator: "GetProcessHeap"; Source: "00000000-00004340.00000000.67609.00BED000.00000004.mdmp, 00000000-00004340.00000001.67677.00BE5000.00000002.mdmp, 00000000-00004340.00000001.67677.00BED000.00000004.mdmp") file/memory contains long string with (Indicator: "OpenProcess"; Source: "00000000-00004360.00000000.67544.0002A000.00000002.mdmp") Found reference to API "OpenProcessToken" (Indicator: "OpenProcess"; Source: "00000000-00004360.00000000.67544.0002A000.00000002.mdmp") file/memory contains long string with (Indicator: "OpenProcess"; Source: "00000000-00006460.00000001.69335.00CFA000.00000002.mdmp") Found reference to API "OpenProcessToken" (Indicator: "OpenProcess"; Source: "00000000-00006460.00000001.69335.00CFA000.00000002.mdmp") file/memory contains long string with (Indicator: "OpenProcess"; Source: "00000000-00006692.00000000.67484.013AA000.00000002.mdmp") Found reference to API "OpenProcessToken" (Indicator: "OpenProcess"; Source: "00000000-00006692.00000000.67484.013AA000.00000002.mdmp")36:Td89," Microsoft Corporation\"\n \"AW8yI09.exe\" was detected as \"Microsoft visual C++ 8\"\n \"1mP00kj7.exe\" was detected as \"VC8 -> Microsoft Corporation\"\n \"7nL6sK63.exe\" was detected as \"Microsoft visual C++ 5.0\"\n \"2IK0169.exe\" was detected as \"Safeguard v1.03 -> Simonzh\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"69bad945cb6038029d0b6878"},{"report_type":"sandbox","report_id":"6a9cbf6b424d163bb307b202"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"