23:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 26:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 22:T485,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious TROJ_FRS.VSNW06I19 Sample bfdc1c587205… — Score 50/100 — Hybrid Analysis","description":"Malicious verdict for sample bfdc1c587205…. Malware family: TROJ_FRS.VSNW06I19. Threat score 50/100. 4/26 AV engines flagged this file. 2 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/bfdc1c5872050f97f6f24b1febe17554228b7c8f0fafbab03dc14bff4f98d648","keywords":["Malicious","TROJ_FRS.VSNW06I19","malware analysis","sandbox report","threat intelligence","bfdc1c5872050f97f6f24b1febe17554228b7c8f0fafbab03dc14bff4f98d648"],"about":{"@type":"SoftwareApplication","name":"ATT0009856.html","applicationCategory":["html"],"identifier":"bfdc1c5872050f97f6f24b1febe17554228b7c8f0fafbab03dc14bff4f98d648","additionalType":"Malicious sample"},"threatScore":50,"malwareFamily":"TROJ_FRS.VSNW06I19","antivirusDetections":{"malicious":4,"total":26},"behavioralIndicators":{"malicious":2,"suspicious":0},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}24:T472,"\Sessions\1\BaseNamedObjects\Local\!BrowserEmulation!SharedMemory!Mutex" "\Sessions\1\BaseNamedObjects\Local\VERMGMTBlockListFileMutex" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_FILEMAPSWITCH_MUTEX_1232" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_HASHFILESWITCH_MUTEX" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_DOWNLOAD_MUTEX" "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex" "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex" "\Sessions\1\BaseNamedObjects\IsoScope_4d0_IE_EarlyTabStart_0xd64_Mutex" "\Sessions\1\BaseNamedObjects\IsoScope_4d0_ConnHashTable<1232>_HashTable_Mutex" "\Sessions\1\BaseNamedObjects\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "\Sessions\1\BaseNamedObjects\IsoScope_4d0_IESQMMUTEX_0_303" "\Sessions\1\BaseNamedObjects\IsoScope_4d0_IESQMMUTEX_0_331" "\Sessions\1\BaseNamedObjects\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}" "UpdatingNewTabPageData" "{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "IsoScope_4d0_IESQMMUTEX_0_303" "Local\URLBLOCK_HASHFILESWITCH_MUTEX" "IsoScope_4d0_IE_EarlyTabStart_0xd64_Mutex" "IsoScope_4d0_IESQMMUTEX_0_331" "Local\ZonesCacheCounterMutex"25:T8e2,"iexplore.exe" wrote bytes "401c1af4fe070000" to virtual address "0xFE0912C8" (part of module "USP10.DLL") "iexplore.exe" wrote bytes "401c1af4fe070000" to virtual address "0xFDC95348" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "40681ef4fe070000" to virtual address "0xFDC95748" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "d0601ef4fe070000" to virtual address "0xFB411CC0" (part of module "COMCTL32.DLL") "iexplore.exe" wrote bytes "50071cf4fe070000" to virtual address "0xFE5A1ED8" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "50691ef4fe070000" to virtual address "0xF4E440E0" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "d04f66f4fe070000f01d453f01000000101e453f01000000e036453f01000000501e453f010000000000000000000000" to virtual address "0x3F458000" (part of module "IEXPLORE.EXE") "iexplore.exe" wrote bytes "401c1af4fe070000" to virtual address "0x3F4571C0" (part of module "IEXPLORE.EXE") "iexplore.exe" wrote bytes "401c1af4fe070000" to virtual address "0xFAFFF378" (part of module "UXTHEME.DLL") "iexplore.exe" wrote bytes "b0611ef4fe070000" to virtual address "0xFDC955C0" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "401c1af4fe070000" to virtual address "0xFDE105A8" (part of module "OLEAUT32.DLL") "iexplore.exe" wrote bytes "40681ef4fe070000" to virtual address "0xFDA2BEA8" (part of module "OLE32.DLL") "iexplore.exe" wrote bytes "401c1af4fe070000" to virtual address "0xFD3BD430" (part of module "IMM32.DLL") "iexplore.exe" wrote bytes "00ef1af4fe070000" to virtual address "0xFDE10A30" (part of module "OLEAUT32.DLL") "iexplore.exe" wrote bytes "00ef1af4fe070000" to virtual address "0xFB4118D0" (part of module "COMCTL32.DLL") "iexplore.exe" wrote bytes "401c1af4fe070000" to virtual address "0x76BE29A8" (part of module "USER32.DLL") "iexplore.exe" wrote bytes "401c1af4fe070000" to virtual address "0xFD673330" (part of module "IERTUTIL.DLL") "iexplore.exe" wrote bytes "00ef1af4fe070000" to virtual address "0xFDA2BC38" (part of module "OLE32.DLL") "iexplore.exe" wrote bytes "401c1af4fe070000" to virtual address "0xF4E42D78" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "b0621ef4fe070000" to virtual address "0xFDA2BE80" (part of module "OLE32.DLL")1a:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$22"}}],["$","$L23",null,{"initialData":{"schema_version":"1.0.15","sha256":"bfdc1c5872050f97f6f24b1febe17554228b7c8f0fafbab03dc14bff4f98d648","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":50,"unified_at_epoch_ms":1791299890891,"unified_at":"2026-10-06T15:18:10.891Z","metadata":{"hashes":{"sha256":"bfdc1c5872050f97f6f24b1febe17554228b7c8f0fafbab03dc14bff4f98d648","sha1":"7b7cf6e16f1d07224275453d1785edce11dfa30e","md5":"1b9baa53a81f6566da4f5383bd0db2cc","sha512":"b004a36f532e11a3625f2e97bdee9321acf932977ce176034a49bffd9cd55dc12860acc3e2bc9f464ba3596c4b2afd4ccb5b5704d362469c557742ad3e55eccd","ssdeep":"768:DbmemElCHRmBHcpsxfgI2uhusYqcs/M1Mjwdbi3:D9CM7xfg9Mjwdbi3","ssdeep_chunks":["768:DbmemEl","768:bmemElC","768:memElCH","768:emElCHR","768:mElCHRm","768:ElCHRmB","768:lCHRmBH","768:CHRmBHc","768:HRmBHcp","768:RmBHcps","768:mBHcpsx","768:BHcpsxf","768:Hcpsxfg","768:cpsxfgI","768:psxfgI2","768:sxfgI2u","768:xfgI2uh","768:fgI2uhu","768:gI2uhus","768:I2uhusY","768:2uhusYq","768:uhusYqc","768:husYqcs","768:usYqcs/","768:sYqcs/M","768:Yqcs/M1","768:qcs/M1M","768:cs/M1Mj","768:s/M1Mjw","768:/M1Mjwd","768:M1Mjwdb","768:1Mjwdbi","768:Mjwdbi3","1536:DbmemEl","1536:bmemElC","1536:memElCH","1536:emElCHR","1536:mElCHRm","1536:ElCHRmB","1536:lCHRmBH","1536:CHRmBHc","1536:HRmBHcp","1536:RmBHcps","1536:mBHcpsx","1536:BHcpsxf","1536:Hcpsxfg","1536:cpsxfgI","1536:psxfgI2","1536:sxfgI2u","1536:xfgI2uh","1536:fgI2uhu","1536:gI2uhus","1536:I2uhusY","1536:2uhusYq","1536:uhusYqc","1536:husYqcs","1536:usYqcs/","1536:sYqcs/M","1536:Yqcs/M1","1536:qcs/M1M","1536:cs/M1Mj","1536:s/M1Mjw","1536:/M1Mjwd","1536:M1Mjwdb","1536:1Mjwdbi","1536:Mjwdbi3","768:D9CM7xf","768:9CM7xfg","768:CM7xfg9","768:M7xfg9M","768:7xfg9Mj","768:xfg9Mjw","768:fg9Mjwd","768:g9Mjwdb","768:9Mjwdbi"],"imphash":"Unknown"},"file_info":{"file_name":"ATT0009856.html","file_type":["html"],"file_type_id":"html","file_size":33226,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1568023572000,"last_seen":1629053239000,"last_multi_scan":1629053239000}},"detections":{"summary":{"verdict":"malicious","score":50,"tags":["phishing"]},"stats":{"av":{"malicious_count":4,"suspicious_count":0,"total_engines":26},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":3},"sandbox_signatures":{"informative_count":11,"suspicious_count":0,"malicious_count":2,"total":13},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"Ahnlab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"BitDefender","success":true,"verdict":"malicious","threat_name":"Trojan.GenericKD.32447924","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bytehero":{"name":"ByteHero","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cyren":{"name":"Cyren","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Trojan.GenericKD.32447924 (B)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"HTML/Phishing.Gen trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ikarus":{"name":"Ikarus","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"malicious","threat_name":"Hoax.HTML.Phish.qd","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"quickheal":{"name":"Quick Heal","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"symantec":{"name":"Symantec","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"TrendMicro","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"TrendMicro House Call","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xviruspersonalguard":{"name":"Xvirus Personal Guard","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"TROJ_FRS.VSNW06I19","sources":[{"report_type":"quickscan","report_id":""}]}]},"mitre_attacks":[{"tactic":"Persistence","technique":"Hooking","attack_id":"T1179","attack_id_wiki":"https://attack.mitre.org/techniques/T1179","identifiers":[{"type":"informative","value":"Installs hooks/patches the running process"}],"sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"tactic":"Privilege Escalation","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/techniques/T1055","identifiers":[{"type":"informative","value":"Found a string that may be used as part of an injection method"}],"sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"tactic":"Discovery","technique":"Application Window Discovery","attack_id":"T1010","attack_id_wiki":"https://attack.mitre.org/techniques/T1010","identifiers":[{"type":"informative","value":"Scanning for window names"}],"sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Creates mutants","description":"$24","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"iexplore.exe\" (UID: 00056450-00000452) was launched with modified environment variables: \"CommonProgramFiles, PROCESSOR_ARCHITECTURE, ProgramFiles\"\n Process \"iexplore.exe\" (UID: 00056450-00000452) was launched with missing environment variables: \"PROCESSOR_ARCHITEW6432\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"level":"informative","category":"General","name":"Scanning for window names","description":"\"iexplore.exe\" searching for class \"ImmersiveWorkerWindowClass\"\n \"iexplore.exe\" searching for class \"Shell_TrayWnd\"","origin":"API Call","mitre_attack_id":"T1010","relevance":10,"id":"api-70","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"iexplore.exe\" with commandline \"SCODEF:1232 CREDAT:275457 /prefetch:2\" (UID: 00056450-00000452)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"level":"informative","category":"General","name":"Spawns new processes that are not known child processes","description":"Spawned process \"iexplore.exe\" with commandline \"SCODEF:1232 CREDAT:275457 /prefetch:2\" (UID: 00056450-00000452)","origin":"Monitored Target","relevance":3,"id":"target-103","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"level":"informative","category":"Installation/Persistance","name":"Creates new processes","description":"\"iexplore.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\(x86)\\Internet Explorer\\iexplore.exe\"\n Handle: )","origin":"API Call","relevance":8,"id":"api-2","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"\"JSDPCGXG.txt\" has type \"ASCII text\"\n \"RecoveryStore._C7A4F1AE-D920-11E7-B48D-080027D44A30_.dat\" has type \"Composite Document File V2 Document Cannot read section info\"\n \"~DF108EFF460A4AE0BB.TMP\" has type \"data\"\n \"_E214DBE0-D2D8-11E9-8FF7-3C00272CFA97_.dat\" has type \"Composite Document File V2 Document Cannot read section info\"\n \"_7CEC54F0-D2D9-11E9-8FF7-3C00272CFA97_.dat\" has type \"Composite Document File V2 Document Cannot read section info\"\n \"~DF0E89DBC66EEB20DE.TMP\" has type \"data\"\n \"JavaDeployReg.log\" has type \"ASCII text with CRLF line terminators\"\n \"~DF7F03D3C147F07E8D.TMP\" has type \"data\"\n \"~DF6D82D6BEF975EDF0.TMP\" has type \"data\"\n \"RecoveryStore._E214DBDD-D2D8-11E9-8FF7-3C00272CFA97_.dat\" has type \"Composite Document File V2 Document Cannot read section info\"\n \"~DFB920A823A47A38C1.TMP\" has type \"data\"\n \"_E214DBDF-D2D8-11E9-8FF7-3C00272CFA97_.dat\" has type \"Composite Document File V2 Document Cannot read section info\"","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"level":"informative","category":"Installation/Persistance","name":"Found a string that may be used as part of an injection method","description":"\"Shell_TrayWnd\" (Taskbar window class may be used to inject into explorer with the SetWindowLong method)","origin":"File/Memory","mitre_attack_id":"T1055","relevance":4,"id":"string-4","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"https://managehosting.aruba.it//style.css?v=36\"\n Pattern match: \"https://gestioneaccessi.aruba.it/User-Detect.ashx\"\n Pattern match: \"https://managehosting.aruba.it/AreaUtenti.asp?Lang=IT\"\n Pattern match: \"http://hosting.aruba.it/Home.aspx?Lang=it-IT\"\n Pattern match: \"https://supersite.aruba.it/CustomerArea/Login.aspx?Lang=IT\"\n Pattern match: \"http://mssql.aruba.it/\"\n Pattern match: \"https://managehosting.aruba.it/Rinnovi/InsDatiRinnovo.asp?Lang=IT\"\n Pattern match: \"https://fotoalbum.aruba.it/Login_Area_Utenti.aspx\"\n Pattern match: \"https://fatture.aruba.it/Default.asp?Lang=IT\"\n Pattern match: \"http://www.hisa-ograj.si/php/snd1.php\"\n Pattern match: \"https://managehosting.aruba.it/image_main/main_separatore_5_5.gif\"\n Pattern match: \"https://managehosting.aruba.it/images/grayLineFull.png\"","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found a reference to a known community page","description":"\"Modalità di pagamento:\n \n \n \n \n \n\n \n

\n _HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_4d0_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_4d0_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"IsoScope_4d0_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"IsoScope_4d0_IE_EarlyTabStart_0xd64_Mutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"IsoScope_4d0_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_1232","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"IsoScope_4d0_ConnHashTable<1232>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_4d0_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\__DDrawExclMode__","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\__DDrawCheckExclMode__","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\DDrawWindowListMutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\DDrawDriverObjectListMutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"Local\\DDrawWindowListMutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"IsoScope_4d0_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"Local\\__DDrawExclMode__","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"Local\\DDrawDriverObjectListMutex","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]},{"name":"Local\\__DDrawCheckExclMode__","sources":[{"report_type":"sandbox","report_id":"5d762414038838749f511997"}]}]}},"report_ids":{"sandbox_job_ids":["5d762414038838749f511997"]}}}]]}] 1d:null 21:[["$","title","0",{"children":"Malicious TROJ_FRS.VSNW06I19 Sample bfdc1c587205… — Score 50/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample bfdc1c587205…. Malware family: TROJ_FRS.VSNW06I19. Threat score 50/100. 4/26 AV engines flagged this file. 2 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/bfdc1c5872050f97f6f24b1febe17554228b7c8f0fafbab03dc14bff4f98d648"}],["$","meta","4",{"property":"og:title","content":"Malicious TROJ_FRS.VSNW06I19 Sample bfdc1c587205… — Score 50/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample bfdc1c587205…. Malware family: TROJ_FRS.VSNW06I19. Threat score 50/100. 4/26 AV engines flagged this file. 2 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/bfdc1c5872050f97f6f24b1febe17554228b7c8f0fafbab03dc14bff4f98d648"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious TROJ_FRS.VSNW06I19 Sample bfdc1c587205… — Score 50/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample bfdc1c587205…. Malware family: TROJ_FRS.VSNW06I19. Threat score 50/100. 4/26 AV engines flagged this file. 2 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L26","11",{}]]