25:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2a:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 26:T293b,Heuristic match: "eturn a?w.default.createelement(y.menu.submenu,{title:i,key:n,classname:q,ontitleclick:e.onmenuchange,ecid:e.props.ecid+_menu.submenu@cb0kfy@+n},w.default.createelement(y.menu.item,{style:{display:none},key:item_+n,ecid:e.props.ecid+_menu.item@ul947", Pattern match: "http://get.adobe.com/cn/flashplayer/", Heuristic match: ");var k=new regexp( ,gi);e=e.replace(k, );var x=new regexp(m³,gi);return e=e.replace(x,m3)}object.defineproperty(t,__esmodule,{value:!0}),t.traditionalized=i,t.simplized=a},function(e,t){},function(e,t,n){use strict;function ", Heuristic match: "er);t.default=x},function(e,t,n){use strict;function o(e){return e&&e.__esmodule?e:{default:e}}object.defineproperty(t,__esmodule,{value:!0});var r=n(19),i=o(r),a=n(6),a=o(a),s=n(2),l=o(s),c=n(3),u=o(c),d=n(4),f=o(d),p=n(5),h=o(p);n(685);var m=n(686),", Heuristic match: "));t.a=a},function(e,t,n){use strict;function o(e){var t=e.align,n=void 0===t?auto:t,o=e.celloffset,r=e.cellsize,i=e.containersize,a=e.currentoffset,a=o,s=a-i+r;switch(n){casestart:return a;caseend:return s;casecenter:return a-(i-r)/2;default:ret", Heuristic match: "eturn c(e,0)}catch(t){try{return c.call(null,e,0)}catch(t){return c.call(this,e,0)}}}function i(e){if(u===cleartimeout)return cleartimeout(e);if((u===o||!u)&&cleartimeout)return u=cleartimeout,cleartimeout(e);try{return u(e)}catch(t){try{return u.call(null", Pattern match: "index.html/.test(e)", Heuristic match: ":e.rowcount,estimatedcellsize:t._getestimatedrowsize(e),cellsizegetter:t._wrapsizegetter(e.rowheight)}),0!==i.prevcolumncount&&0!==i.prevrowcount||(i.prevcolumncount=0,i.prevrowcount=0),e.autoheight&&!1===e.isscrolling&&!0===i.previsscrolling&&r()(o,{isscr", Heuristic match: "&void 0!==arguments[0]?arguments[0]:this.props,t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:this.state,n=e.cellrenderer,o=e.cellrangerenderer,r=e.columncount,i=e.deferredmeasurementcache,a=e.height,a=e.overscancolumncount,s=e.overscanindicesget", Heuristic match: "t)},z=function(e,t){if(e=c(e),t=b(t,!0),e!==k||!r(h,t)||r(n,t)){var n=q(e,t);return!n||!r(h,t)||r(e,d)&&e[d][t]||(n.enumerable=!0),n}},ee=function(e){for(var t,n=u(c(e)),o=[],i=0;n.length>i;)r(h,t=n[i++])||t==d||t==s||o.push(t);return o},te=function(e){for", Heuristic match: ",onclick:function(){return n.setstate({show:!o})}}))),i]}}]),t}(w.default.component),r.displayname=weadebugroutemenu,r.defaultprops={showroutelev:3,classname:,style:{}},i);t.default=k},function(e,t,n){use strict;n(783)},function(e,t){},function(e,t,", Pattern match: "math.pi/200*t.number;caserad:return", Heuristic match: "),settimeout(function(){window.localstorage.gopage=encodeuricomponent(location.href),v.default.gettop().location.href=(window.ecologycontentpath||)+/wui/index.html?v=+(new date).gettime()},1e3)}if(json!==r)return o;try{var a=json.parse(o);return a.n", Pattern match: "login.jsp/.test(n.url)", Heuristic match: "nction(e){var t=!1;if(e){var n=new date(e);0!=n.getday()&&6!=n.getday()||(t=!0)}return t},isbelowie9:function(){returnmicrosoft internet explorer==navigator.appname&&parseint(navigator.appversion.split(;)[1].replace(/[ ]/g,).replace(msie,))<=9},t", Pattern match: "https://github.com/diokuz/baron/issues/135].join", Heuristic match: "rer initialized (+t.width+x+t.height+ at +t.x+,+t.y+) with scale +t.scale),n}return e(r,o),r.prototype.render=function(e){return t(this,void 0,void 0,function(){var t,o;return n(this,function(n){switch(n.label){case 0:return t=ho(this.options.widt", Pattern match: "http://fb.me/use-check-prop-types", Heuristic match: "his,(t.__proto__||(0,f.default)(t)).call(this,e));return n.oncollapse=function(e,t){var o=n.props,r=o.oncollapse,i=o.col,a=n.state.showleft,a=[left===e?!a:!showmid];3===i&&a.unshift(e),n.setstate(left===e?{showleft:!a}:{showmid:!showmid}),function===", Heuristic match: ")},{key:pc,showname:pc},{key:mobile,showname:mobile}]}}},this.reloaddatas=function(t){var n=e.props.rowkey,o=t.map(function(e){return e[n]});e.setstate({selectedvalues:o,selecteddata:t})},this.dochange=function(t,n,o){var r=e.props.onchange;e.sets", Heuristic match: "),o&&(n.file.progress=50,n.file.progressstatus=exception,n.file.showprogress=!0),a.push(n.file),e.setstate({listb:a}),function===typeof e.props.getshowlistdatas&&e.props.getshowlistdatas(e.state.listt,a),settimeout(function(){var t=e.state.listb,n=[].", Pattern match: "s.span/24*100+%}},a", Pattern match: "fb.me/react-async-component-lifecycle-hooks", Heuristic match: "der:function(){return n.e(0).then(n.bind(null,963))},loading:function(){return null},render:function(e,t,n){return e?a.default.createelement(e&&e.__esmodule?e.default:e,(0,i.default)({},t,{ref:n})):null}});t.default=c},function(e,t,n){use strict;function", Pattern match: "https://www.e-cology.com.cn/formmode/apps/ktree/ktreehelpe9.jsp?pathkey=+r.default.encode(e);!(0,_.default)((0,a.default)(a))&&(o=/spa/document/index.jsp?id=+a.helpdocid);var", Heuristic match: "entnode);bt()}},_ontouchmove:function(e){if(te){var t=this.options,n=t.fallbacktolerance,o=t.fallbackoffset,r=e.touches?e.touches[0]:e,i=ce&&_(ce,!0),a=ce&&i&&i.a,a=ce&&i&&i.d,s=ft&&je&&u(je),l=(r.clientx-te.clientx+o.x)/(a||1)+(s?s[0]-lt[0]:0)/(a||1),c=(r", Pattern match: "https://github.com/webpack-contrib/style-loader#insertat", Heuristic match: "n(e,t,n){var o=n(39);o(o.s+o.f*!n(48),object,{defineproperty:n(49).f})},function(e,t,n){n(84),n(107),e.exports=n(166).f(iterator)},function(e,t,n){n(338),n(206),n(432),n(433),e.exports=n(20).symbol},function(e,t,n){var o=n(91),r=n(147),i=n(111);e.expor", Heuristic match: "eturn i(b);if(s)return w=settimeout(c,t),r(b)}return void 0===w&&(w=settimeout(c,t)),v}var h,m,g,v,w,b,_=0,e=!1,s=!1,i=!0;if(function!=typeof e)throw new typeerror(a);return t=a(t)||0,o(n)&&(e=!!n.leading,s=maxwaitin n,g=s?y(a(n.maxwait)||0,t):g,i=tra", Heuristic match: "semove.bind(e,o,n),ontouchmove:e.mousemove.bind(e,o,n)};e.checkactive(o,n)&&(e.activecellprops.push(n),e.props.activeclass&&(r.classname=(n.classname||)+ +e.props.activeclass),e.props.activestyle&&(r.style=(0,c.default)({},n.style,e.props.activestyle))", Heuristic match: "(19),i=o(r),a=n(0),a=o(a),s=n(190);object.defineproperty(t,getflattenedtree,{enumerable:!0,get:function(){return s.getflattenedtree}});var l=n(295),c=n(666),u=o(c),d=n(667),f=o(d),p=n(191),h=(t.getnoderenderoptions=(0,l.createselector)(function(e){return", Heuristic match: "uments[1]:,n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{},o=e.propertylist,r=void 0===o?[]:o,a=(0,i.default)(n),a=s.map(function(e){var t=e.domkey.join();return a.indexof(t)>=0&&(e.label=n[t]),e}),l=c(a,r);returnworkflowchart===t?l:l.slice", Heuristic match: "lt)(this,t);var n=(0,g.default)(this,(t.__proto__||(0,u.default)(t)).call(this,e));return n.onwindowresize=function(){n.instanceismounted&&n.scrollheigth()},n.instanceismounted=!1,n.hash=weatop_+math.random().tostring(36).substr(2,6)+_+(new date).getti", Pattern match: "https://github.com/diokuz/baron/blob/master/docs/logs/repeated.md].join", Heuristic match: ")),d>0&&react.createelement(p.pagination,{ecid:this.props.ecid+_pagination@7uuax7,weasimple:!0,current:f,pagesize:u,total:d,onchange:function(t){e.getdata(t),e.setstate({currentpage:t})}})))))}}]),t}(react.component);t.default=q},function(e,t,n){use st", Heuristic match: "0)},function(e,t,n){var o=n(29),r=n(20),i=n(89),a=n(166),a=n(49).f;e.exports=function(e){var t=r.symbol||(r.symbol=i?{}:o.symbol||{});_==e.charat(0)||e in t||a(t,e,{value:a.f(e)})}},function(e,t,n){var o=n(63),r=n(41),i=o(r,map);e.exports=i},function(e", Pattern match: "s.span/24*100+%},l||", Pattern match: "https://e-cloudstore.com/doc.html?appid=09885365bc3c494ea848b067e5084297&maximgwidth=800}],a=function(){var", Heuristic match: "o,r=0,i=t.length;r=1&&(n-=1),n<1/6?(t-e)*n*6+e:n<.5?t:n<2/3?6*(t-e)*(2/3-n)+e:e}function i(e){return!(20===e.type&&none==", Pattern match: "http://www.w3.org/2000/svg", Heuristic match: ").replace(/\$s/,e.name),onok:function(){a.deletehandler(e)}}));o.opshandler&&o.opshandler(e,t)}else if(o.addhandler)o.addhandler(e);else if(!this.treemap[te]){var s={name:,displaytype:add,parenttreekey:e.treekey,treekey:te};-1==a.indexof(e.treekey)&&(", Heuristic match: "))]},n.state={maskdarkb:0,maskdarkh:0,lspaddingright:0},n.calc=!1,n.onmenuchange=n.onmenuchange.bind(n),n.onchange=n.onchange.bind(n),n.onsearch=n.onsearch.bind(n),n.onsearchchange=n.onsearchchange.bind(n),n}return(0,g.default)(t,e),(0,f.default)(t,[{key:", Heuristic match: "is.referenceelement===e&&sr(o)&&(this.clonedreferenceelement=o),tr(o)&&pi(o);var a=this.counters.parse(new ao(this.context,r)),s=this.resolvepseudocontent(e,o,i,eo.before);jr(e)&&(t=!0),mr(e)||this.clonechildnodes(e,o,t),s&&o.insertbefore(s,o.firstchild);v", Heuristic match: ":mi mi-delete}:o,a=e.children,s=e.index,c=e.ecid,d=(0,h.getnoderenderoptions)(n),f=d.isdeletable,m=(0,u.default)((0,a.default)({},r.delete,f)),g=function(){return t((0,i.default)({},(0,h.deletenode)(n),{index:s}))};return l.default.createelement(span,n", Heuristic match: "!==o&&(a=(0,i.default)({},a,{handle:r})),n.sortableel=new g.default(t,a)},n.onend=function(e){var t=n.props,o=t.datas,r=t.ondrop;if(array.isarray(o)&&(0,c.default)(r)){var i=e.oldindex,a=e.newindex,a=o[i];r((0,b.default)(o,i,a),i,a,a)}},n.sortableel=null,", Pattern match: "https://github.com/diokuz/baron/blob/master/docs/logs/no-jquery-detected.md].join", Heuristic match: "e,t,n){use strict;var o=n(658);n.d(t,a,function(){return o.a});o.a},function(e,t,n){use strict;var o=n(6),r=n.n(o),i=n(2),a=n.n(i),a=n(3),s=n.n(a),l=n(4),c=n.n(l),u=n(5),d=n.n(u),f=n(15),p=(n.n(f),n(1)),h=(n.n(p),function(e){function t(e,n){a()(this,", Heuristic match: "ent(n,{ecid:n.props.ecid+_item@eu37n0,key:e.key||t,disabled:e.disabled},c.default.createelement(li,{unselectable:on,classname:wea-right-menu-item},c.default.createelement(span,{unselectable:on,classname:wea-right-menu-icon},e.icon),c.default.", Pattern match: "http://www.w3.org/2000/svg,a=document.createelementns(i,svg),a=document.createelementns(i,foreignobject);return", Pattern match: "https://github.com/diokuz/baron/blob/master/docs/logs/do-not-use-body.md].join", Heuristic match: ")+)),i=b.checklength(i,a,o))}this.setstate({value:i}),this.props.onchange&&this.props.onchange(i)}},{key:dofocusevent,value:function(e,t){var n=this,o=t.target;if(e)if(this.props.onbeforefocuscheck){this.needfocus||(this.refs.inputele.blur(),this.need"27:T5c2,file/memory contains long string with (Indicator: "base64"; Source: "sample.bin"), file/memory contains long string with (Indicator: "aes"; Source: "sample.bin"), Found string "",o);var m=/base64_(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?/g;m.test(h)&&(c=h.replace(m,function(e){return p.Base64.decode(e.substr(7))}),console&&console.warn("" (Indicator: "base64"; Source: "sample.bin"), file/memory contains long string with (Indicator: ".encrypt"; Source: "sample.bin"), file/memory contains long string with (Indicator: ".decrypt"; Source: "sample.bin"), Found string "word"],fieldcol:18,isBase64:!1,isQuickSearch:!0,label:"" (Indicator: "base64"; Source: "sample.bin"), file/memory contains long string with (Indicator: "createdecryptor"; Source: "sample.bin"), file/memory contains long string with (Indicator: "createencryptor"; Source: "sample.bin"), Found string "",labelcol:8,viewAttr:3,rules:"required",otherParams:{type:"password"}},{belong:"PC",colSpan:1,conditionType:"CUSTOM",domkey:["explain"],fieldcol:16,isBase64:!1,isQuickSearch:!0,label:"" (Indicator: "base64"; Source: "sample.bin"), Found string "",labelcol:8,viewAttr:3,rules:"required"},{belong:"PC",colSpan:1,conditionType:"INPUT",domkey:["password"],fieldcol:16,isBase64:!1,isQuickSearch:!0,label:"" (Indicator: "base64"; Source: "sample.bin"), Found string "",JSON.parse(c))),c.indexOf("base64_")>-1?s((0,w.getLabel)("516533","base64 " (Indicator: "base64"; Source: "sample.bin")28:T112e,Found reference to API "ce===e&&"string"===typeof n.data&&0===n.data.indexOf(t)&&a(+n.data.slice(t.length))};e.addEventListener?e.addEventListener("message",n,!1):e.attachEvent("onmessage",n),A=function(n){e.postMessage(t+n,"*")}}():e.MessageChannel?function(){var e=new MessageChannel;e.port1.onmessage=function(e){a(e.data)},A=function(t){e.port2.postMessage(t)}}():u&&"onreadystatechange"in u.createElement("script")?function(){var e=u.documentElement;A=function(t){var n=u.createElement("script");n.onreadystatechange=function(){a(t),n.onreadystatechange=null,e.removeChild(n),n=null},e.appendChild(n)}}():function(){A=function(e){setTimeout(a,0,e)}}(),d.setImmediate=o,d.clearImmediate=r}}("undefined"===typeof self?"undefined"===typeof e?this:e:self)}).call(t,n(34),n(693))},function(e,t){function n(){throw new Error("setTimeout has not been defined")}function o(){throw new Error("clearTimeout has not been defined")}function r(e){if(c===setTimeout)return setTimeout(e,0);if((c===n||!c)&&setTimeout)return c=setTimeout,setTimeout(e,0);try{r" (Indicator: "postmessage"; Source: "sample.bin"), Found reference to API "i[r]===e)}},function(e,t,n){var o=n(44),r=n(105),i=n(30)("species");e.exports=function(e,t){var n,a=o(e).constructor;return void 0===a||void 0==(n=o(a)[i])?t:r(n)}},function(e,t,n){var o,r,i,a=n(68),A=n(396),s=n(222),l=n(157),c=n(29),u=c.process,d=c.setImmediate,f=c.clearImmediate,p=c.MessageChannel,h=c.Dispatch,m=0,g={},v=function(){var e=+this;if(g.hasOwnProperty(e)){var t=g[e];delete g[e],t()}},w=function(e){v.call(e.data)};d&&f||(d=function(e){for(var t=[],n=1;arguments.length>n;)t.push(arguments[n++]);return g[++m]=function(){A("function"==typeof e?e:Function(e),t)},o(m),m},f=function(e){delete g[e]},"process"==n(92)(u)?o=function(e){u.nextTick(a(v,e,1))}:h&&h.now?o=function(e){h.now(a(v,e,1))}:p?(r=new p,i=r.port2,r.port1.onmessage=w,o=a(i.postMessage,i,1)):c.addEventListener&&"function"==typeof postMessage&&!c.importScripts?(o=function(e){c.postMessage(e+"","*")},c.addEventListener("message",w,!1)):o="onreadystatechange"in l("script")?function(e){s.appendChild(l("script")).onreadystatechange=function()" (Indicator: "postmessage"; Source: "sample.bin"), Found reference to API ""))}))}}]),t}(g.Component),i.defaultProps={datas:[]},a),B=function(){function e(){var t=this;(0,c.default)(this,e),this.onOpen=function(){},this.onClose=function(){},this.onError=function(){},this.onMessage=function(){},this.onViewDetails=function(e){(0,y.callApi)("/api/ec/dev/message/statemessage","GET",{id:e.messageUnitId})},this.init=function(){var e=function(){/.*\/wui\/index.*/.test(window.location.href)&&(0,y.callApi)("/api/ec/dev/message/getmessage","GET",{}).then(function(e){if(!0===e.status){var n=e.datas;if(n.length>0){var o={datas:n,onClick:function(e){t.onViewDetails(e)}},r=t.content?(0,g.isValidElement)(t.content)?v.default.createElement(t.content,o):t.content:v.default.createElement(C,o);w.message.error(r,10),t.onMessage(e)}}})};t.socketType="interval",t.socket=window.setInterval(e,6e4),e()},this.send=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};t.socket&&("interval"===t.socketType?(0,y.callApi)("/api/ec/dev/message/sendmessage","POST",e).then(function(e){!0===e.sta" (Indicator: "sendmessage"; Source: "sample.bin"), Found reference to API "clearImmediate}).call(t,n(34))},function(e,t,n){(function(e,t){!function(e,n){"use strict";function o(e){"function"!==typeof e&&(e=new Function(""+e));for(var t=new Array(arguments.length-1),n=0;n2&&"0."==e.substring(0,2)||e.length>3&&"-0."==e.substring(0,3))&&(e=e.replace("0.","."));for(var r=e.length-1;r>=0;r--){var i=e.charAt(r);"."!=i&&t.push(i)}}return t}}]),t}(React.Component);t.default=p},function(e,t,n){var o,r;!function(i,a){o=a,void 0!==(r="function"===typeof o?o.call(t,n,t,e):o)&&(e.exports=r)}(0,function(){function e(e,t,n){return en?n:e}function t(e){return 100*(-1+e)}function n(e,n,o){var r;return r="translate3d"===l.positionUsing?{transform:"translate3d("+t(e)+"%,0,0)"}:"translate"===l.positionUsing?{transform:"translate("+t(e)+"%,0)"}:{"margin-left":t(e)+"%"},r.transition="all "+n+"ms "+o,r}function o(e,t){return("string"==typeof e?e:a(e)).indexOf(" "+t+" ")>=0}function r(e,t){var ; Source: "sample.bin"), Found string - return Ce(e)?L(e):Y(e)}function Me(e){return e}function De(e){return le(e)?i(he(e)):$(e)}var Oe=200,Le="Expected a function",Pe="__lodash_hash_undefined__",He=1,Ne=2,Ke=1/0,je=9007199254740991,We=1.7976931348623157e308,ze=NaN,Ve="[object Arguments]",Ge="[object Array]",Xe="[object Boolean]",Ye="[object Date]",Je="[object Error]",qe="[object Function]",$e="[object GeneratorFunction]",Ze="[object Map]",et="[object Number]",tt="[object Object]",nt="[object RegExp]",ot="[object Set]",rt="[object String]",it="[object Symbol]",at="[object ArrayBuffer]",At="[object DataView]",st=/\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/,lt=/^\w*$/,ct=/^\./,ut=/[^.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|$))/g,dt=/[\\^$.*+?()[\]{}|]/g,ft=/^\s+|\s+$/g,pt=/\$\$?/g,ht=/^[-+]0x[0-9a-f]+$/i,mt=/^0b[01]+$/i,gt=/^\[object .+?Constructor\]$/,vt=/^0o[0-7]+$/i,wt=/^(?:0|[1-9]\d*)$/,yt={};yt["[object Float32Array]"]=yt["[object Float64Array]"]=yt["[object Int8Array]"]=yt["[object Int16A; Source: "sample.bin")1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample c7f5963442ca… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample c7f5963442ca…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/c7f5963442ca4e117618cccae552e5384689a0aa2f93b67678245d41ade16951\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"c7f5963442ca4e117618cccae552e5384689a0aa2f93b67678245d41ade16951\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"ecCom.min_1_.js\",\"applicationCategory\":[\"script\",\"javascript\"],\"identifier\":\"c7f5963442ca4e117618cccae552e5384689a0aa2f93b67678245d41ade16951\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":27},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":1},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L25",null,{"initialData":{"schema_version":"1.0.15","sha256":"c7f5963442ca4e117618cccae552e5384689a0aa2f93b67678245d41ade16951","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1793222549864,"unified_at":"2026-10-28T21:22:29.864Z","metadata":{"hashes":{"sha256":"c7f5963442ca4e117618cccae552e5384689a0aa2f93b67678245d41ade16951","sha1":"a3a38e8a38bd5c5111c8554809d0a8102e7185c9","md5":"8af47b8c13e257d57d986e151af5818d"},"file_info":{"file_name":"ecCom.min_1_.js","file_type":["script","javascript"],"file_type_id":"js","file_size":1368284,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1793222542000,"last_seen":1793222542000,"last_multi_scan":1793222542000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":27},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":13},"sandbox_signatures":{"informative_count":13,"suspicious_count":1,"malicious_count":0,"total":14},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"scrutiny":{"name":"Scrutiny","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Stealth","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains CRYPTO related strings"},{"type":"informative","value":"Contains ability to use Cryptographic classes"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Reconnaissance","technique":"Gather Victim Network Information","attack_id":"T1590","attack_id_wiki":"https://attack.mitre.org/techniques/T1590","identifiers":[{"type":"informative","value":"Able to access user sensitive domain"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Hide Artifacts","attack_id":"T1564","attack_id_wiki":"https://attack.mitre.org/techniques/T1564","identifiers":[{"type":"informative","value":"Found virtual disk drive like strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Web Protocols","attack_id":"T1071.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/001","identifiers":[{"type":"informative","value":"Contains ability to set the value of an HTTP request header"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"ListPlanting","attack_id":"T1055.015","attack_id_wiki":"https://attack.mitre.org/techniques/T1055/015","identifiers":[{"type":"informative","value":"Able to visualize and control listed components (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Deobfuscate/Decode Files or Information","attack_id":"T1140","attack_id_wiki":"https://attack.mitre.org/techniques/T1140","identifiers":[{"type":"informative","value":"Able to decrypt/decode data"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Exfiltration","technique":"Exfiltration Over C2 Channel","attack_id":"T1041","attack_id_wiki":"https://attack.mitre.org/techniques/T1041","identifiers":[{"type":"suspicious","value":"Contains indicators of bot communication commands"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Data Encoding","attack_id":"T1132","attack_id_wiki":"https://attack.mitre.org/techniques/T1132","identifiers":[{"type":"informative","value":"Contains ability to perform Base64 encoding/decoding"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/techniques/T1083","identifiers":[{"type":"informative","value":"Able to access file/directory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attack_id":"T1555","attack_id_wiki":"https://attack.mitre.org/techniques/T1555","identifiers":[{"type":"informative","value":"Contains string like password/secret"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"JavaScript","attack_id":"T1059.007","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/007","identifiers":[{"type":"informative","value":"References JavaScript(s)"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$26","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"Found HTTPS url \"https://github.com\", Found HTTPS url \"https://fb.me\", Found HTTPS url \"https://www.e\", Found HTTPS url \"https://e\"","origin":"sample.bin","mitre_attack_id":"T1573","id":"string-98","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Contains ability to set the value of an HTTP request header","description":"file/memory contains long string with (Indicator: \".setRequestHeader\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1071.001","id":"string-623","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains CRYPTO related strings","description":"$27","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-57","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains string like password/secret","description":"file/memory contains long string with (Indicator: \"secret\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"password\"; Source: \"sample.bin\"), Found string \"\",labelcol:8,viewAttr:3,rules:\"required\",otherParams:{type:\"password\"}},{belong:\"PC\",colSpan:1,conditionType:\"CUSTOM\",domkey:[\"explain\"],fieldcol:16,isBase64:!1,isQuickSearch:!0,label:\"\" (Indicator: \"password\"; Source: \"sample.bin\"), Found string \"\",labelcol:8,viewAttr:3,rules:\"required\"},{belong:\"PC\",colSpan:1,conditionType:\"INPUT\",domkey:[\"password\"],fieldcol:16,isBase64:!1,isQuickSearch:!0,label:\"\" (Indicator: \"password\"; Source: \"sample.bin\"), Found string \"\"),password:Q(\"518771\",\"\" (Indicator: \"password\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1555","id":"string-475","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to access file/directory","description":"file/memory contains long string with (Indicator: \".delete(\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-779","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to visualize and control listed components (API string)","description":"$28","origin":"sample.bin","mitre_attack_id":"T1055.015","id":"string-721","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to access user sensitive domain","description":"file/memory contains long string with (Indicator: \"github.com\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1590","id":"string-761","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Found virtual disk drive like strings","description":"$29","origin":"sample.bin","mitre_attack_id":"T1564","id":"string-145","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to perform Base64 encoding/decoding","description":"file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1132","id":"string-338","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Contains ability to use Cryptographic classes","description":"file/memory contains long string with (Indicator: \"TripleDES\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"HMAC\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"SHA512\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"SHA384\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-138","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Able to decrypt/decode data","description":"file/memory contains long string with (Indicator: \".decrypt\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"fromcharcode\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"CreateDecryptor\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1140","id":"string-356","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"References JavaScript(s)","description":"file/memory contains long string with (Indicator: \"text/javascript\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1059.007","id":"string-626","sources":[{"report_type":"qsp","report_id":""}]},{"level":"suspicious","category":"Remote Access Related","name":"Contains indicators of bot communication commands","description":"file/memory contains long string with (Indicator: \"cmd=\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"login=\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1041","id":"string-29","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{},"chains":[]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample c7f5963442ca… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample c7f5963442ca…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/c7f5963442ca4e117618cccae552e5384689a0aa2f93b67678245d41ade16951"}],["$","meta","4",{"property":"og:title","content":"Sample c7f5963442ca… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample c7f5963442ca…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/c7f5963442ca4e117618cccae552e5384689a0aa2f93b67678245d41ade16951"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample c7f5963442ca… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample c7f5963442ca…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2a","11",{}]]