26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 3c:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T502,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Win/malicious_confidence_100% Sample d74bf3b1212b… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample d74bf3b1212b…. Malware family: Win/malicious_confidence_100%. Threat score 100/100. 13/27 AV engines flagged this file. 6 malicious and 9 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a","keywords":["Malicious","Win/malicious_confidence_100%","malware analysis","sandbox report","threat intelligence","d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a"],"about":{"@type":"SoftwareApplication","name":"d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin","applicationCategory":["peexe","autoit","executable"],"identifier":"d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Win/malicious_confidence_100%","antivirusDetections":{"malicious":13,"total":27},"behavioralIndicators":{"malicious":6,"suspicious":9},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T405,Found reference to API "CreateThread" (Indicator: "CreateThread"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "VirtualFreeEx" (Indicator: "VirtualFree"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "VirtualAllocEx" (Indicator: "VirtualAlloc"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "VirtualAllocEx" (Indicator: "VirtualAllocEx"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "WriteProcessMemory" (Indicator: "WriteProcessMemory"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "VirtualFree" (Indicator: "VirtualFree"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "VirtualAlloc" (Indicator: "VirtualAlloc"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin")28:T4f4,Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObject"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObjectEx"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "IcmpSendEcho" (Indicator: "IcmpSendEcho"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin") Found reference to API "SetTimer" (Indicator: "SetTimer"; File: "d74bf3b1212b9e8c9fa46f6cd6ee1a62c5bda415aa48b7ec70e3a9783ef7f14a.bin")29:Tc00,Found XOR loop in file "sample.bin" at offset 21997; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 78691; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 111259; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 112690; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 691290; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 990520; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1099833; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1107365; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1108535; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1123049; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 130662; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 139931; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 140060; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 385536; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 463547; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 463622; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 596817; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 702010; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 709349; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 709797; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 710373; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 710821; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 923295; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1100029; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1103261; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1117023; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1117457; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1117585; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1120089; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 7741; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 8370; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 232072; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 358205; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 367958; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 432527; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 575033; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 674804; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 687162; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1023965; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1084102; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1104122; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1123010; code bytes = 80302a:T775," HTTP/1.1 200 OK\nDate: Mon\n 23 Feb 2026 07:25:19 GMT\nContent-Type: text/plain; charset=utf-8\nContent-Length: 6\nAccess-Control-Allow-Origin: *\nX-Ttl: 60\nX-Rl: 44 with response body ==>66616C73650A.......","origin":"Network Traffic","mitre_attack_id":"T1071.001","relevance":10,"id":"network-61","sources":[{"report_type":"sandbox","report_id":"699c00b352386ce2550d5121"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 208.95.112.1 on port 80 is sent without HTTP header","origin":"Network Traffic","mitre_attack_id":"T1071.001","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"699c00b352386ce2550d5121"}]},{"level":"suspicious","category":"Spyware/Information Retrieval","name":"Calls an API possibly used to take screenshots","description":"\"