26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 3d:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4c8,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic Sample a7fb7ce962f2… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample a7fb7ce962f2…. Malware family: Trojan.Generic. Threat score 100/100. 12/27 AV engines flagged this file. 3 malicious and 11 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/a7fb7ce962f2b6cdbd92f97150b669e81893dc7b5fb06c28758f4041bf8244df","keywords":["Malicious","Trojan.Generic","malware analysis","sandbox report","threat intelligence","a7fb7ce962f2b6cdbd92f97150b669e81893dc7b5fb06c28758f4041bf8244df"],"about":{"@type":"SoftwareApplication","name":"a7fb7ce962f2b6cdbd92f97150b669e81893dc7b5fb06c28758f4041bf8244df.bin","applicationCategory":["peexe","64bits","executable"],"identifier":"a7fb7ce962f2b6cdbd92f97150b669e81893dc7b5fb06c28758f4041bf8244df","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.Generic","antivirusDetections":{"malicious":12,"total":27},"behavioralIndicators":{"malicious":3,"suspicious":11},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Taa0,"/rustc/4a4ef493e3a1488c6e321570238084b38948f6db/library\std\src\panicking.rs" Heuristic match: "/rustc/4a4ef493e3a1488c6e321570238084b38948f6db/library\core\src\str\pattern.rs" Heuristic match: "reentrant init/rustc/4a4ef493e3a1488c6e321570238084b38948f6db/library\core\src\cell\once.rs" Heuristic match: "mid > len/rustc/4a4ef493e3a1488c6e321570238084b38948f6db/library\core\src\slice\sort\stable\quicksort.rs" Heuristic match: "/rustc/4a4ef493e3a1488c6e321570238084b38948f6db/library\alloc\src\vec\mod.rs" Heuristic match: "assertion failed: self.is_char_boundary(new_len)/rust/deps\gimli-0.32.3\src\read\line.rs" Heuristic match: "/rustc/4a4ef493e3a1488c6e321570238084b38948f6db/library\core\src\num\wrapping.rs" Heuristic match: "notfoundpermissiondeniedconnectionrefusedconnectionresethostunreachablenetworkunreachableconnectionabortednotconnectedaddrinuseaddrnotavailablenetworkdownbrokenpipealreadyexistsnotadirectoryisadirectorydirectorynotemptyreadonlyfilesystemfilesystemloopstale" Heuristic match: "/rust/deps\addr2line-0.25.1\src\unit.rs" Heuristic match: "/rust/deps\addr2line-0.25.1\src\function.rs" Heuristic match: "webex-online.ch" Heuristic match: "ebex-online.ch" Heuristic match: "e;.jo" Pattern match: "https://webex-online.ch/en-us" Pattern match: "http://www" Pattern match: "http://www.w3.org/2001/xmlschema-instance" Pattern match: "http://crl.comodoca.com/comodorsacertificationauthority.crl0q" Pattern match: "http://crt.comodoca.com/comodorsaaddtrustca.crt0$" Pattern match: "http://ocsp.comodoca.com0" Pattern match: "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0v" Pattern match: "crt.usertrust.com/usertrustrsaaddtrustca.crt0%" Pattern match: "http://ocsp.usertrust.com0" Pattern match: "http://certs.godaddy.com/repository/1301" Pattern match: "http://ocsp.godaddy.com/05" Pattern match: "http://crl.godaddy.com/gdroot-g2.crl0f" Pattern match: "https://certs.godaddy.com/repository/0" Pattern match: "https://www.alphassl.com/repository/03" Pattern match: "http://crl.globalsign.net/root.crl0=" Pattern match: "http://ocsp.globalsign.com/rootr10" Pattern match: "crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^" Pattern match: "www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0" Pattern match: "http://g1.symcb.com/crls/gtglobal.crl0/" Pattern match: "http://g2.symcb.com0l" Pattern match: "http://www.geotrust.com/resources/cps0" Pattern match: "http://ocsp.thawte.com0" Pattern match: "https://www.thawte.com/cps07" Pattern match: "http://crl.thawte.com/thawtepca-g3.crl0" Pattern match: "https://www.globalsign.com/repository/03" Pattern match: "www.digicert.com1+0" Pattern match: "www.digicert.com1/0-" Pattern match: "http://ocsp.digicert.com0k" Pattern match: "http://crl4.digicert.com/digicerthighassuranceevrootca.crl0=" Pattern match: "https://www.digicert.com/cps0" Pattern match: "www.digicert.com1" Pattern match: "http://crl3.digicert.com/digicerthighassuranceevrootca.crl0=" Pattern match: "http://s2.symcb.com0" Pattern match: "http://www.symauth.com/cps0" Pattern match: "http://www.symauth.com/rpa00" Pattern match: "http://s1.symcb.com/pca3-g5.crl0" Pattern match: "crl.usertrust.com/addtrustexternalcaroot.crl05" Pattern match: "http://s2.symcb.com0k" Pattern match: "http://www.symauth.com/rpa0" Pattern match: "www.verisign.com/cps" Pattern match: "https://www.verisign.com/cps04" Pattern match: "http://crl.verisign.com/pca3.crl0" Pattern match: "www.digicert.com1$0" Pattern match: "www.microsoft.com/pkiops/docs/repository.htm" Pattern match: "http://logo.verisign.com/vslogo.gif0" Pattern match: "http://cert.startcom.org/sfsca-crl.crl0+" Pattern match: "http://crl.startcom.org/sfsca-crl.crl0" Pattern match: "http://cert.startcom.org/policy.pdf05" Pattern match: "http://cert.startcom.org/intermediate.pdf0" Pattern match: "http://cert.startcom.org/policy.pdf0" Pattern match: "7www.entrust.net/cps_2048" Pattern match: "http://crl.globalsign.net/root-r2.crl0" Pattern match: "http://www.certplus.com/crl/class2.crl0" Pattern match: "http://crl.securetrust.com/stca.crl0" Pattern match: "www.entrust.net/legal-terms1907" Pattern match: "crl.comodoca.com/aaacertificateservices.crl06" Pattern match: "crl.comodo.net/aaacertificateservices.crl0" Pattern match: "www.digicert.com1!0" Heuristic match: "ntrust.net" Pattern match: "0www.entrust.net/cps" Pattern match: "http://repository.swisssign.com/0" Pattern match: "crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0" Pattern match: "www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0" Heuristic match: "host: webex-online.ch" Pattern match: "crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0z" Pattern match: "http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07" Pattern match: "http://www.microsoft.com0" Pattern match: "www.microsoft.com0" Pattern match: "www.insidersurveys.windows.com06" Pattern match: "www.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crl" Pattern match: "crl.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crl0" Pattern match: "www.microsoft.com/pki/certs/miccertrulispca_2009-04-02.crt0" Pattern match: "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0t" Pattern match: "www.microsoft.com/pki/certs/microsoftrootcert.crt0" Pattern match: "http://microsoft.com0" Heuristic match: "/rustc/4a4ef493e3a1488c6e321570238084b38948f6db/library\std\src\sys\thread_local\key\windows.rs" Heuristic match: "line.ch" Pattern match: "webex-online.ch/en-us" Pattern match: "crl.microsoft.com/pki/crl/products/miccertrulispca_2009-04" Heuristic match: "nline.ch" Pattern match: "https://webex-online.ch/"36:T2ee6,Found URL "https://webex-online.ch/en-uswebex-online.chwebex-online.chtcpip6bitlocker" - Source: "00000000-00007076.00000000.130254.4CA20000.00000004.mdmp") Found URL "http://wwwwindows" - Source: "00000000-00007076.00000000.130254.4CA20000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00007076.00000000.130254.4CA20000.00000004.mdmp") Found URL "http://repository.swisssign.com/02z" - Source: "00000000-00007076.00000000.130254.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0wx" - Source: "00000000-00007076.00000000.130254.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00007076.00000000.130254.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*l1.3.6.1.4.1.311.10.1250905032048z0/^g(o-cejy" - Source: "00000000-00007076.00000000.130254.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*lp" - Source: "00000000-00007076.00000000.130254.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crlhhttp://crl.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccertrulispca_2009-04-02.crt0+" - Source: "00000000-00007076.00000000.130254.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0th0f0d8http://www.microsoft.com/pki/certs/microsoftrootcert.crt0!:ctxcg" - Source: "00000000-00007076.00000000.130254.4E7E0000.00000004.mdmp") Found URL "http://microsoft.com0k" - Source: "00000000-00007076.00000000.130254.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0t<" - Source: "00000000-00007076.00000000.130254.4E7E0000.00000004.mdmp") Found URL "http://microsoft.com0" - Source: "00000000-00007076.00000000.130254.4E7E0000.00000004.mdmp") Found URL "https://webex-online.ch/en-uswebex-online.chwebex-online.chtcpip6bitlocker" - Source: "00000000-00007076.00000001.132176.4CA20000.00000004.mdmp") Found URL "https://webex-online.ch/en-ushttps://webex-online.ch/en-usoftware\policies\microsoft\systemcertificates\trusttoresoftware\policies\microsoft\systemcertificates\trusticrosoft" - Source: "00000000-00007076.00000001.132176.4CA20000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00007076.00000001.132176.4CA20000.00000004.mdmp") Found URL "https://webex-online.ch/en-ush" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "http://repository.swisssign.com/02z" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0wx" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "https://webex-online.ch/en-ushttps://webex-online.ch/en-usxc\*gm5n-s" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*l1.3.6.1.4.1.311.10.1250905032048z0/^g(o-cejy" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*lhconzzzzp" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crlhhttp://crl.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccertrulispca_2009-04-02.crt0+" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0th0f0d8http://www.microsoft.com/pki/certs/microsoftrootcert.crt0!:ctxcg" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "http://microsoft.com0k" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0t<" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "http://microsoft.com0" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crlhhttp://crl.microsoft.com/pki/crl/products/miccertrulispca_2009-04q0o0mahttp://www.microsoft.com/pki/certs/miccertrulispca_2009-04-02.crt0+" - Source: "00000000-00007076.00000001.132176.4E7E0000.00000004.mdmp") Found URL "https://webex-online.ch/en-uswebex-online.chwebex-online.chtcpip6bitlocker" - Source: "00000000-00007076.00000002.134093.4CA20000.00000004.mdmp") Found URL "https://webex-online.ch/en-ushttps://webex-online.ch/en-ushttps://webex-online.ch/en-usoftware\policies\microsoft\systemcertificates\trusttoresoftware\policies\microsoft\systemcertificates\trusticrosoft" - Source: "00000000-00007076.00000002.134093.4CA20000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00007076.00000002.134093.4CA20000.00000004.mdmp") Found URL "https://webex-online.ch/en-ush" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "http://repository.swisssign.com/02z" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0wx" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "https://webex-online.ch/en-uscookiecart=110045_77895_53420;x-ongm5n-s" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*l1.3.6.1.4.1.311.10.1250905032048z0/^g(o-cejy" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*lhconzzzzp" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crlhhttp://crl.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccertrulispca_2009-04-02.crt0+" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0th0f0d8http://www.microsoft.com/pki/certs/microsoftrootcert.crt0!:ctxcg" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "http://microsoft.com0k" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0t<" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "http://microsoft.com0" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crlhhttp://crl.microsoft.com/pki/crl/products/miccertrulispca_2009-04q0o0mahttp://www.microsoft.com/pki/certs/miccertrulispca_2009-04-02.crt0+" - Source: "00000000-00007076.00000002.134093.4E7E0000.00000004.mdmp") Found URL "https://webex-online.ch/en-uswebex-online.chwebex-online.chtcpip6bitlocker" - Source: "00000000-00007076.00000003.139598.4CA20000.00000004.mdmp") Found URL "https://webex-online.ch/en-ushttps://webex-online.ch/en-ushttps://webex-online.ch/en-ushttps://webex-online.ch/en-ushttps://webex-online.ch/en-ushttps://webex-online.ch/en-usoftware\policies\microsoft\systemcertificates\trusttoresoftware\policies\microsoft\systemcertificates\trusticrosoft" - Source: "00000000-00007076.00000003.139598.4CA20000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00007076.00000003.139598.4CA20000.00000004.mdmp") Found URL "https://webex-online.ch/en-us:\windows\system32\jsproxy.dlltpublickeyinfottps://webex-online.ch/en-usttps://webex-online.ch/en-usy\oidttps://webex-online.ch/en-usttps://webex-online.ch/en-usttps://webex-online.ch/en-us:\windows\system32\dpapi.dll:\windows\system32\jsproxy.dllttps://webex-online.ch/en-usttps://webex-online.ch/en-usttps://webex-online.ch/en-us:\windows\system32\jsproxy.dllttps://webex-online.ch/en-us:\windows\system32\dpapi.dllttps://webex-online.ch/en-usttps://webex-online.ch/en-usttps://webex-online.ch/en-us:\windows\system32\jsproxy.dllryptdllconvertpublickeyinfottps://webex-online.ch/en-usttps://webex-online.ch/en-us:\windows\system32\jsproxy.dllttps://webex-online.ch/en-us:\windows\system32\jsproxy.dll:\windows\system32\jsproxy.dll:\windows\system32\dpapi.dll:\windows\system32\jsproxy.dll:\windows\system32\dpapi.dll:\windows\system32\jsproxy.dllttps://webex-online.ch/en-us:\windows\system32\dpapi.dllpinrules_autoupdate_1inrules_autoupdate_1subcasubcaebex-online.chwebex-online.chwebex-online.ch/webex-online.chhttps://webex-online.ch/webex-online.chebex-online.chbhv*8tpahttps://webex-online.ch/en-ush" - Source: "00000000-00007076.00000003.139598.4E7E0000.00000004.mdmp") Found URL "http://repository.swisssign.com/02z" - Source: "00000000-00007076.00000003.139598.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0wx" - Source: "00000000-00007076.00000003.139598.4E7E0000.00000004.mdmp") Found URL "https://webex-online.ch/en-us1100https://webex-online.ch/en-ushttps://webex-online.ch/en-usgm5n-s" - Source: "00000000-00007076.00000003.139598.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00007076.00000003.139598.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*l1.3.6.1.4.1.311.10.1250905032048z0/^g(o-cejy" - Source: "00000000-00007076.00000003.139598.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*lhconzzzzp" - Source: "00000000-00007076.00000003.139598.4E7E0000.00000004.mdmp") Found URL "http://www.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crlhhttp://crl.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccertrulispca_2009-04-02.crt0+" - Source: "00000000-00007076.00000003.139598.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0th0f0d8http://www.microsoft.com/pki/certs/microsoftrootcert.crt0!:ctxcg" - Source: "00000000-00007076.00000003.139598.4E7E0000.00000004.mdmp") Found URL "http://microsoft.com0k" - Source: "00000000-00007076.00000003.139598.4E7E0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0t<" - Source: "00000000-00007076.00000003.139598.4E7E0000.00000004.mdmp") Found URL "http://microsoft.com0" - Source: "00000000-00007076.00000003.139598.4E7E0000.00000004.mdmp")37:T4be,Found string ":\WINDOWS\system32\kerberos.DLL" (Indicator: "kerberos"; Source: "00000000-00007076.00000000.130254.4CA20000.00000004.mdmp, 00000000-00007076.00000001.132176.4CA20000.00000004.mdmp, 00000000-00007076.00000002.134093.4CA20000.00000004.mdmp, 00000000-00007076.00000003.139598.4CA20000.00000004.mdmp") Found string "icrosoft Kerberos V1.0" (Indicator: "kerberos"; Source: "00000000-00007076.00000000.130254.4CA20000.00000004.mdmp, 00000000-00007076.00000001.132176.4CA20000.00000004.mdmp, 00000000-00007076.00000002.134093.4CA20000.00000004.mdmp, 00000000-00007076.00000003.139598.4CA20000.00000004.mdmp") Found string "Kerberos" (Indicator: "kerberos"; Source: "00000000-00007076.00000000.130254.4CA20000.00000004.mdmp, 00000000-00007076.00000001.132176.4CA20000.00000004.mdmp, 00000000-00007076.00000002.134093.4CA20000.00000004.mdmp, 00000000-00007076.00000003.139598.4CA20000.00000004.mdmp") Found string "Microsoft Kerberos V1.0" (Indicator: "kerberos"; Source: "00000000-00007076.00000000.130254.4CA20000.00000004.mdmp, 00000000-00007076.00000001.132176.4CA20000.00000004.mdmp, 00000000-00007076.00000002.134093.4CA20000.00000004.mdmp, 00000000-00007076.00000003.139598.4CA20000.00000004.mdmp")38:T6ae,Found string "/home/cyril.lorenzetto/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/aes-0.9.0-rc.4/src/soft/fixslice64.rs" (Indicator: "aes"; File: "a7fb7ce962f2b6cdbd92f97150b669e81893dc7b5fb06c28758f4041bf8244df.bin") Found string ": base64 decoding failed" (Indicator: "base64"; File: "a7fb7ce962f2b6cdbd92f97150b669e81893dc7b5fb06c28758f4041bf8244df.bin") Found string "ECDSA" (Indicator: "ecdsa"; Source: "00000000-00007076.00000000.130254.4CA20000.00000004.mdmp, 00000000-00007076.00000001.132176.4CA20000.00000004.mdmp, 00000000-00007076.00000002.134093.4CA20000.00000004.mdmp, 00000000-00007076.00000003.139598.4CA20000.00000004.mdmp") Found string "OFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Enhanced RSA and AES Cryptographic Provider" (Indicator: "aes"; Source: "00000000-00007076.00000000.130254.4CA20000.00000004.mdmp, 00000000-00007076.00000001.132176.4CA20000.00000004.mdmp, 00000000-00007076.00000002.134093.4CA20000.00000004.mdmp, 00000000-00007076.00000003.139598.4CA20000.00000004.mdmp") Found string "Microsoft Enhanced RSA and AES Cryptographic Provider" (Indicator: "aes"; Source: "00000000-00007076.00000000.130254.4CA20000.00000004.mdmp, 00000000-00007076.00000001.132176.4CA20000.00000004.mdmp, 00000000-00007076.00000002.134093.4CA20000.00000004.mdmp, 00000000-00007076.00000003.139598.4CA20000.00000004.mdmp") Found string "/home/cyril.lorenzetto/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/aes-0.9.0-rc.4/src/soft/fixslice64.rs" (Indicator: "aes"; Source: "00000000-00007076.00000000.130254.BAFDA000.00000002.mdmp") Found string ": base64 decoding failed" (Indicator: "base64"; Source: "00000000-00007076.00000000.130254.BAFDA000.00000002.mdmp")39:T6f6,Found reference to API "CreateToolhelp32Snapshot" (Indicator: "CreateToolhelp32Snapshot"; File: "a7fb7ce962f2b6cdbd92f97150b669e81893dc7b5fb06c28758f4041bf8244df.bin") Found reference to API "GetCurrentProcess" (Indicator: "GetCurrentProcess"; File: "a7fb7ce962f2b6cdbd92f97150b669e81893dc7b5fb06c28758f4041bf8244df.bin") Found reference to API "Module32NextW" (Indicator: "Module32Next"; File: "a7fb7ce962f2b6cdbd92f97150b669e81893dc7b5fb06c28758f4041bf8244df.bin") Found reference to API "Module32FirstW" (Indicator: "Module32First"; File: "a7fb7ce962f2b6cdbd92f97150b669e81893dc7b5fb06c28758f4041bf8244df.bin") Found reference to API "GetModuleHandleW" (Indicator: "GetModuleHandle"; File: "a7fb7ce962f2b6cdbd92f97150b669e81893dc7b5fb06c28758f4041bf8244df.bin") Found reference to API "GetModuleHandleA" (Indicator: "GetModuleHandle"; File: "a7fb7ce962f2b6cdbd92f97150b669e81893dc7b5fb06c28758f4041bf8244df.bin") Found reference to API "GetModuleHandleA" (Indicator: "GetModuleHandle"; Source: "00000000-00007076.00000000.130254.BB001000.00000004.mdmp") Found reference to API "GetModuleHandleW" (Indicator: "GetModuleHandle"; Source: "00000000-00007076.00000000.130254.BB001000.00000004.mdmp") Found reference to API "CreateToolhelp32Snapshot" (Indicator: "CreateToolhelp32Snapshot"; Source: "00000000-00007076.00000000.130254.BB001000.00000004.mdmp") Found reference to API "GetCurrentProcess" (Indicator: "GetCurrentProcess"; Source: "00000000-00007076.00000000.130254.BB001000.00000004.mdmp") Found reference to API "Module32FirstW" (Indicator: "Module32First"; Source: "00000000-00007076.00000000.130254.BB001000.00000004.mdmp") Found reference to API "Module32NextW" (Indicator: "Module32Next"; Source: "00000000-00007076.00000000.130254.BB001000.00000004.mdmp")3a:T9a2," "XÞ¾ï~c;ÄcHÞb~6fBú¼l$*¦Î."pänô>`Ö¸¾8¤lòì2¨DR4¼b¤4m¡õT4iWX|yqîZ%6"¿Ì¤3¨NG¹ÍïaòÄø)jÈÓ]U"úg%$ÝB2²AW:V_LvÖû5K×Ñ³éi7ÎyèÃö8îoÉbôy'/z¨®¡ .ÇÂÔêMõ±Ù£!ókºÏ}cL8ì"óDÉqôMäA¹gDöE9Ä85OÇëÝxìÜo_áänÂ·5bÇñ£}/½ù`a-+wé}qô3ÎÔÏÛ¦,ûF C397C3B9C3874F....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:46:00 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:46:08 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:46:21 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:46:36 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:46:50 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:47:03 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:47:12 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:47:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:47:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:47:41 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:47:56 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:48:10 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000....... "POST /en-us HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Cookie: cart=110045_77895_53420; User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 Content-Length: 20 Host: webex-online.ch" with payload::==> "Þ¾ï~c;Ä" HTTP/1.1 200 OK Server: nginx Date: Tue 24 Mar 2026 07:48:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12 Connection: keep-alive Cache-Control: no-cache must-revalidate max-age=0 no-store private Referrer-Policy: no-referrer-when-downgrade with response body ==>0A0000000000000000000000.......3c:Tbac,"