26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 29:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T44d,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample cd1d58561104… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample cd1d58561104…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/cd1d5856110418e8ff8fa52163d1f63be57c3b1ac851178ee2206533ff625409","keywords":["malware analysis","sandbox report","threat intelligence","cd1d5856110418e8ff8fa52163d1f63be57c3b1ac851178ee2206533ff625409"],"about":{"@type":"SoftwareApplication","name":"urlref_httpsnam10.safelinks.protection.outlook.comurl_https%3A%2F%2Ficp.ids.api.iris.microsoft.com%2Fapi%2Fv2%2Fa%2Fc%3Furl%3Dhttps%253","applicationCategory":["html"],"identifier":"cd1d5856110418e8ff8fa52163d1f63be57c3b1ac851178ee2206533ff625409"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":27},"behavioralIndicators":{"malicious":0,"suspicious":1},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T528,Found HTTPS url "https://go.microsoft.com", Found HTTPS url "https://www.dataprivacyframework.gov", Found HTTPS url "https://www.bing.com", Found HTTPS url "https://support.microsoft.com", Found HTTPS url "https://c.s", Found HTTPS url "https://account.microsoft.com", Found HTTPS url "https://www.microsoft.com", Found HTTPS url "https://privacy.microsoft.com", Found HTTPS url "https://signin.kissmetrics.com", Found HTTPS url "https://www.microsof", Found HTTPS url "https://www.ppc.go.jp", Found HTTPS url "https://protect", Found HTTPS url "https://uhf.microsoft.com", Found HTTPS url "https://aka.ms", Found HTTPS url "https://developer.yahoo.com", Found HTTPS url "https://www.xbox.com", Found HTTPS url "https://cdn", Found HTTPS url "https://web.vortex.data.microsoft.com", Found HTTPS url "https://img", Found HTTPS url "https://www.optimizely.com", Found HTTPS url "https://www.linkedin.com", Found HTTPS url "https://www.facebook.com", Found HTTPS url "https://www.media.net", Found HTTPS url "https://my.outbrain.com", Found HTTPS url "https://www.taboola.com", Found HTTPS url "https://legal.yahoo.com", Found HTTPS url "https://xbox.com", Found HTTPS url "https://go.skype.com", Found HTTPS url "https://commission.europa.eu", Found HTTPS url "https://www.youradchoices.ca", Found HTTPS url "https://priv"28:T3835,Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=2145715", Pattern match: "https://www.dataprivacyframework.gov/", Pattern match: "https://www.bing.com/profile/history", Pattern match: "https://support.microsoft.com/en-us/topic/unlink-a-device-in-the-phone-link-app-9382f770-b203-7e0e-c81e-18d4053cf4e5", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=544945", Pattern match: "https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/semibold/latest.woff2", Pattern match: "https://account.microsoft.com/privacy", Pattern match: "https://www.microsoft.com/licensing/terms/", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement#mainteamsmodule", Pattern match: "https://signin.kissmetrics.com/privacy/#controls", Pattern match: "https://account.microsoft.com/privacy/ad-settings/signedout?ru=https%3a%2f%2faccount.microsoft.com%2fprivacy%2fad-settings", Pattern match: "https://privacy.microsoft.com/privacystatement#mainadvertisingmodule", Pattern match: "https://account.microsoft.com/family", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=873404", Pattern match: "https://www.microsoft.com/es-us/privacy/privacystatement/", Pattern match: "https://privacy.microsoft.com/privacystatement#mainmicrosoftaccountmodule", Pattern match: "https://www.microsoft.com/privacy/privacystatement", Pattern match: "https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2086538", Pattern match: "https://support.microsoft.com/topic/third-party-cookie-inventory-81ca0c3d-c122-415c-874c-55610e017a6a", Pattern match: "https://protect-us.mimecast.com/s/lizwckroxgfo45ens90s3v?domain=nam06.safelinks.protection.outlook.com", Pattern match: "cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/left_aligned_print", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2126612", Pattern match: "https://privacy.microsoft.com/privacystatement#mainprodcommproductsmodule", Pattern match: "https://uhf.microsoft.com/statics/20261021.14.40/css/style-pf2pqjn1.css", Pattern match: "https://aka.ms/yourcaliforniaprivacychoices", Pattern match: "https://support.microsoft.com/topic/transparency-note-for-microsoft-copilot-c1541cad-8bb4-410a-954c-07225892dbc2", Pattern match: "https://go.microsoft.com/fwlink/?linkid=617027", Pattern match: "https://privacy.microsoft.com/privacystatement#mainspeechinkingtypingmodule", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=320207", Pattern match: "https://www.microsoft.com/he-il/privacy/privacystatement/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2128346", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2112165", Pattern match: "https://privacy.microsoft.com/privacystatement#mainhowweusepersonaldatamodule", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement#mainwindowsstoremodule", Pattern match: "https://developer.yahoo.com/flurry/end-user-opt-out/", Pattern match: "https://www.xbox.com/legal/thirdpartydatasharing", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=2086224", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2202359", Pattern match: "https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2", Pattern match: "https://support.microsoft.com/contactus", Pattern match: "https://privacy.microsoft.com/privacystatement#mainenterprisedeveloperproductsmodule", Pattern match: "https://cdn-dynmedia-1.microsoft.com/", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=614828", Pattern match: "https://support.microsoft.com/", Pattern match: "https://www.optimizely.com/legal/opt-out/", Pattern match: "https://www.microsoft.com/corporate-responsibility/digital-safety-content-report", Pattern match: "http://go.microsoft.com/fwlink/?linkid=286759", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2375302", Pattern match: "https://www.linkedin.com/legal/privacy-policy", Pattern match: "https://support.microsoft.com/topic/cdf3c478-df79-4efe-8c4b-8202078a1a67", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2172845", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=838419", Pattern match: "https://www.microsoft.com/professionalservices/overview", Pattern match: "https://go.microsoft.com/fwlink/?linkid=521839", Pattern match: "https://www.xbox.com/", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement#mainenterpriseservicesmodule", Pattern match: "https://privacy.microsoft.com/privacystatement#mainwindowsappsmodule", Pattern match: "https://support.microsoft.com/en-us/account-billing/microsoft-family-safety-bb97220e-9dd8-4b4a-9d15-8194d5941dc5", Pattern match: "https://www.bing.com/account/general", Pattern match: "http://go.microsoft.com/fwlink/p/?linkid=780766", Pattern match: "https://www.microsoft.com/sk-sk/privacy/privacystatement/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2170314", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2086313", Pattern match: "https://aka.ms/brazilcontactus", Pattern match: "https://www.microsoft.com/about/corporate-responsibility/lerr/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2260162", Pattern match: "https://www.microsoft.com/worldwide/", Pattern match: "https://www.facebook.com/help/568137493302217", Pattern match: "https://www.microsoft.com/es-mx/privacy/privacystatement/", Pattern match: "https://aka.ms/rai", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2130411", Pattern match: "https://protect-us.mimecast.com/s/ogihclypeji6kxr7h1rcyx?domain=nam06.safelinks.protection.outlook.com", Pattern match: "https://support.microsoft.com/topic/81ca0c3d-c122-415c-874c-55610e017a6a", Pattern match: "https://support.microsoft.com/windows/807608ee-3de2-4498-8e7c-eb10d655567f", Pattern match: "https://xbox.com/play/user", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2185232", Pattern match: "https://go.skype.com/export", Pattern match: "https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en", Pattern match: "account.microsoft.com/devices", Pattern match: "https://www.youradchoices.ca/", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=780766", Pattern match: "https://privacy.microsoft.com/privacystatement#mainmsfamilymodule", Pattern match: "https://www.xbox.com/user/settings/privacy-and-safety", Pattern match: "https://privacy.microsoft.com", Pattern match: "https://priv-policy.imrworldwide.com/priv/browser/us/en/optout.html", Pattern match: "https://account.microsoft.com/devices", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement#mainofficeservicesmodule", Pattern match: "https://go.microsoft.com/fwlink/?linkid=523898", Pattern match: "https://www.microsoft.com/trustcenter/privacy/how-microsoft-defines-customer-data", Pattern match: "https://support.microsoft.com/help/4090274/microsoft-account-parental-consent-and-child-accounts", Pattern match: "https://aka.ms/privacyfaq", Pattern match: "https://privacy.microsoft.com/privacystatement#mainhowtocontactusmodule", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2214802", Pattern match: "https://aka.ms/dpa", Pattern match: "https://privacy.microsoft.com/microsoft-consumer-health-data-privacy-policy", Pattern match: "https://www.transparentadvertising.eu/privacy", Pattern match: "https://microsoft.com/consent", Pattern match: "https://www.microsoft.com/nl-nl/privacy/privacystatement/", Pattern match: "https://www.adjust.com/opt-out/", Pattern match: "https://onedrive.live.com/", Pattern match: "https://apps.microsoft.com/detail/9wzdncrfjbbg", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2156465", Pattern match: "https://www.microsoft.com/tr-tr/privacy/privacystatement/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2205470", Pattern match: "https://thenai.org/self-regulatory-framework/", Pattern match: "https://aka.ms/personalized-offers", Pattern match: "https://support.microsoft.com/topic/using-microsoft-launcher-on-android-c59f2824-0218-ae6d-3666-d93a7fc537e0", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement#mainhowtocontactusmodule", Pattern match: "https://privacy.microsoft.com/privacystatement#mainsecurityandsafetyfeaturesmodule", Pattern match: "https://go.microsoft.com/fwlink/?linkid=206977", Pattern match: "https://support.microsoft.com/en-us/office/diagnostic-data-in-microsoft-365-f409137d-15d3-4803-a8ae-d26fcbfc91dd", Pattern match: "https://microsoft.com/privacy", Pattern match: "https://support.microsoft.com/en-us/windows/privacy-and-control-over-your-recall-experience-d404f672-7647-41e5-886c-a3c59680af15", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=533063", Pattern match: "https://privacy.microsoft.com/privacystatement#mainnoticetoendusersmodule", Pattern match: "https://support.microsoft.com/topic/206f6928-2694-4adf-a50f-9edb95897d81", Pattern match: "https://mixpanel.com/optout", Pattern match: "https://login.skype.com/login", Pattern match: "https://support.microsoft.com/account-billing/microsoft-family-safety-bb97220e-9dd8-4b4a-9d15-8194d5941dc5", Pattern match: "https://copilot.microsoft.com/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=874646", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2127938", Pattern match: "https://tools.google.com/dlpage/gaoptout", Pattern match: "https://learn.microsoft.com/xandr/policies-regulations/third-party-providers", Pattern match: "https://www.microsoftstore.com/", Pattern match: "https://support.microsoft.com/en-us/topic/microsoft-journal-help-and-learning-3605c04e-0fc6-40d5-b3fd-95a5cc365bc2", Pattern match: "https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d", Pattern match: "https://support.microsoft.com/help/4468245/group-photos-by-faces", Pattern match: "http://www.w3.org/2000/svg", Pattern match: "https://support.microsoft.com/topic/privacy-faq-for-microsoft-copilot-27b3a435-8dc9-4b55-9a4b-58eeb9647a7f", Pattern match: "https://www.appsflyer.com/optout", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2128004", Pattern match: "https://support.microsoft.com/account-billing/how-to-close-your-microsoft-account-c1b2d13f-4de6-6e1b-4a31-d9d668849979", Pattern match: "https://www.microsoft.com/en-us/privacy/privacystatement", Pattern match: "https://publisher.liveperson.net/", Pattern match: "https://privacy.microsoft.com/en-us/privacystatement#mainenterprisedeveloperproductsmodule", Pattern match: "https://privacy.microsoft.com/privacystatement#maincollectionofdatafromchildrenmodule", Pattern match: "https://account.microsoft.com/privacy/", Pattern match: "https://ondemand.webtrends.com/support/optout.asp", Pattern match: "crosoft.com/lt-lt/privacy/privacystatement/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=243191", Pattern match: "https://privacy.microsoft.com/privacystatement#mainartificialintelligenceandmicrosoftcopilotmodule", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=2007461", Pattern match: "https://aka.ms/kinectprivacy/", Pattern match: "https://microsoft.com/privacy/microsoft-data-privacy-framework-covered-entities", Pattern match: "https://choice.microsoft.com/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2371068", Pattern match: "https://www.microsoft.com/lb-lu/privacy/privacystatement/", Pattern match: "https://c.s-microsoft.com/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2173502", Pattern match: "https://www.microsoft.com/cascadeauth/account/signin-oidc", Pattern match: "https://aka.ms/youngpeopleprivacy/", Pattern match: "https://support.microsoft.com/office/frequently-asked-questions-about-copilot-in-microsoft-365-subscriptions-bda0d6e8-346d-41ce-ab1e-f6af6229c462", Pattern match: "https://www.youradchoices.ca/fr", Pattern match: "https://www.microsoft.com/privacy/data-collection-windows", Pattern match: "https://playfab.com/terms/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=529552", Pattern match: "https://outlook.live.com/mail/inbox", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2106608", Pattern match: "https://www.xbox.com/apps/family-settings-app", Pattern match: "https://docs.microsoft.com/windows/configuration/basic-level-windows-diagnostic-events-and-fields", Pattern match: "https://account.microsoft.com/", Pattern match: "https://support.microsoft.com/office/3e7bc183-bf52-4fd0-8e6b-78978f7f121b", Pattern match: "https://support.microsoft.com/windows/windows-privacy-settings-that-apps-use-8b7f2cf4-c359-bf99-0f69-2123cc9ddfc1", Pattern match: "https://www.clicktale.net/disable.html", Pattern match: "https://privacy.microsoft.com/privacystatement#mainoutlookmodule", Pattern match: "https://docs.microsoft.com/windows/privacy/windows-diagnostic-data", Pattern match: "https://aka.ms/privacyreport", Pattern match: "https://aka.ms/copilothealth-faqs", Pattern match: "https://go.microsoft.com/fwlink/?linkid=243189", Pattern match: "https://go.microsoft.com/fwlink/p/?linkid=529987", Pattern match: "https://support.microsoft.com/en-us/account-billing/location-based-experiences-in-microsoft-family-safety-48704c11-da47-05c3-6c75-e032d54bc563", Pattern match: "https://privacy.microsoft.com/privacystatement#maindiagnosticsmodule", Pattern match: "soft.com/en-gb/privacy/privacystatement/", Pattern match: "https://www.microsoft.com/ru-ru/privacy/privacystatement/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2259814", Pattern match: "https://optout.aboutads.info/", Pattern match: "https://www.microsoft.com/bg-bg/privacy/privacystatement/", Pattern match: "t.com/mni-in/privacy/privacystatement/", Pattern match: "https://www.microsoft.com/bing/copilot-search/", Pattern match: "https://go.microsoft.com/fwlink/?linkid=2260527", Pattern match: "https://aka.ms/usstateprivacynotice", Pattern match: "https://aka.ms/privacyresponse", Pattern match: "https://www.acuityads.com/opt-out/", Pattern match: "https://www.xbox.com/managedatacollection", Pattern match: "https://www.microsoft.com/ja-jp/privacy/jp-tba-notice"1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"cd1d5856110418e8ff8fa52163d1f63be57c3b1ac851178ee2206533ff625409","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1793120365813,"unified_at":"2026-10-27T16:59:25.813Z","metadata":{"hashes":{"sha256":"cd1d5856110418e8ff8fa52163d1f63be57c3b1ac851178ee2206533ff625409","sha1":"c9ca5fd6244091ef6c7f1e650f51e1195675d093","md5":"adab3cdf7492e9b7b2b87e17a0edfad0"},"file_info":{"file_name":"urlref_httpsnam10.safelinks.protection.outlook.comurl_https%3A%2F%2Ficp.ids.api.iris.microsoft.com%2Fapi%2Fv2%2Fa%2Fc%3Furl%3Dhttps%253","file_type":["html"],"file_type_id":"html","file_size":391561,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1793120359000,"last_seen":1793120359000,"last_multi_scan":1793120359000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":27},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":5},"sandbox_signatures":{"informative_count":6,"suspicious_count":1,"malicious_count":0,"total":7},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrikefalconml":{"name":"CrowdStrike Falcon ML","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains CRYPTO related strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Web Service","attack_id":"T1102","attack_id_wiki":"https://attack.mitre.org/techniques/T1102","identifiers":[{"type":"informative","value":"Found domain strings related to cloud services(possible C&C communication)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"JavaScript","attack_id":"T1059.007","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/007","identifiers":[{"type":"informative","value":"References JavaScript(s)"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"$27","origin":"sample.bin","mitre_attack_id":"T1573","id":"string-98","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$28","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found domain strings related to cloud services(possible C&C communication)","description":"Found string \"OneDrive.

Outlook.com.\" (Indicator: \"onedrive.live.com\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1102","id":"string-186","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"References JavaScript(s)","description":"file/memory contains long string with (Indicator: \"text/javascript\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1059.007","id":"string-626","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"Found string \"declaraci\" (Indicator: \"linkedin.com\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"facebook.com\"; Source: \"sample.bin\"), Found string \"n de privacidad de Microsoft: privacidad de Microsoft\"/>\n\n\n\n

Dispositivos y hardware usados para la infraestructura de almacenamiento ("Enterprise Appliances").

Los servicios profesionales se\" (Indicator: \"aes\"; Source: \"sample.bin\"), file/memory contains long string with (Indicator: \"aes\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-57","sources":[{"report_type":"qsp","report_id":""}]},{"level":"suspicious","category":"Spyware/Information Retrieval","name":"Found an instant messenger related domain","description":"\"solicitar una copia.

XBOX. Si usas la red de XBOX o XBOX.com, puedes ver o editar tus datos personales, incluida la informaci\" (Indicator: \"skype.com\"), \"inicia sesi\" (Indicator: \"skype.com\")","origin":"sample.bin","id":"string-61","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{},"chains":[]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample cd1d58561104… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample cd1d58561104…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/cd1d5856110418e8ff8fa52163d1f63be57c3b1ac851178ee2206533ff625409"}],["$","meta","4",{"property":"og:title","content":"Sample cd1d58561104… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample cd1d58561104…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/cd1d5856110418e8ff8fa52163d1f63be57c3b1ac851178ee2206533ff625409"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample cd1d58561104… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample cd1d58561104…. Threat score 0/100. 0/27 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L29","11",{}]]