26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 39:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4cb,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample db6c67a4692e… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample db6c67a4692e…. Malware family: Mint.Zard.Generic. Threat score 100/100. 15/28 AV engines flagged this file. 6 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/db6c67a4692e111e94a5d275d8c5b7f8a763f41696c8aeacabacb5254c9857cc","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","db6c67a4692e111e94a5d275d8c5b7f8a763f41696c8aeacabacb5254c9857cc"],"about":{"@type":"SoftwareApplication","name":"db6c67a4692e111e94a5d275d8c5b7f8a763f41696c8aeacabacb5254c9857cc.bin","applicationCategory":["peexe","executable"],"identifier":"db6c67a4692e111e94a5d275d8c5b7f8a763f41696c8aeacabacb5254c9857cc","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":15,"total":28},"behavioralIndicators":{"malicious":6,"suspicious":15},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Tb08," HTTP/1.1 200 OK Date: Wed 03 Jun 2026 21:50:02 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET set-cookie: __cf_bm=1R8DKgQgtd_oJ.va9EiYixy6plEAKlEkePEY.z261NU-1780523402.5649421-1.0.1.1-Uo3Y3A8rpm89HEYws37DzfYNd3WBPVsBJBlu98zHqlHhinSnm4l0OWmOe7IuNur1WiBirqZWBXdeMV6.FTyvf9X7Y3wfxYAB5dUQg53Wwv_IYHrG.nw2tXZTT8jxYw..; HttpOnly; Path=/; Domain=icanhazip.com; Expires=Wed 03 Jun 2026 22:20:02 GMT Server: cloudflare CF-RAY: a061e9420b46e8d8-SJC alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /2/n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 178.16.55.240" Response ==> HTTP/1.1 200 OK Server: nginx/1.31.1 Date: Thu 04 Jun 2026 06:50:34 GMT Content-Type: text/plain Content-Length: 5 Last-Modified: Thu 04 Jun 2026 06:46:25 GMT Connection: keep-alive ETag: "6a211f41-5" Accept-Ranges: bytes with response body ==>3335353336....... "GET /2/17034.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 178.16.55.240" Response ==> HTTP/1.1 200 OK Server: nginx/1.31.1 Date: Thu 04 Jun 2026 06:50:35 GMT Content-Type: text/plain Content-Length: 276480 Last-Modified: Thu 04 Jun 2026 06:38:38 GMT Connection: keep-alive ETag: "6a211d6e-43800" Accept-Ranges: bytes with response body ==>61686F6F2E636F6D3A4A61636B736F6E333839350A7A62637332303030407961686F6F2E636F6D3A5A626870686F746F31310A7A6261636B37407961686F6F2E....... "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2 Host: trc.taboola.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 Sec-Fetch-Mode: no-cors Sec-Fetch-Storage-Access: none Referer: https://ntp.msn.com/ Sec-Fetch-Site: cross-site Accept-Language: en-US,en;q=0.9 Priority: i Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8 Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145" Sec-Ch-Ua-Mobile: ?0 Sec-Ch-Ua-Platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Sec-Fetch-Dest: image" Response ==> HTTP/2 200 OK Date: Wed 03 Jun 2026 21:52:18 GMT Server: nginx X-Service-Version: v1 X-Served-By: cache-lax-kwhp1940063-LAX P3p: policyref="http://trc.taboola.com/p3p.xml" CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Pragma: no-cache X-Cache-Hits: 0 Via: 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-To-Nlb-Rtt: 67172 X-Timer: S1780523538.195814 VS0 VE70 X-Cache: MISS X-Vcl-Time-Ms: 70 Cache-Control: no-cache no-store Accept-Ranges: bytes with no response body "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2 Host: px.ads.linkedin.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 Sec-Fetch-Mode: no-cors Sec-Fetch-Storage-Access: active Referer: https://ntp.msn.com/ Sec-Fetch-Site: cross-site Accept-Language: en-US,en;q=0.9 Priority: i Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8 Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145" Sec-Ch-Ua-Mobile: ?0 Sec-Ch-Ua-Platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Sec-Fetch-Dest: image" Response ==> HTTP/2 200 OK Content-Type: image/png Date: Wed 03 Jun 2026 21:52:17 GMT Set-Cookie: lidc="b=VGST08:s=V:r=V:a=V:p=V:g=3448:u=1:x=1:i=1780523538:t=1780609938:v=2:sig=AQHRhfxG_BmnvWDGy4m2Dazv4Xy4h9Rl"; Expires=Thu 04 Jun 2026 21:52:18 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure X-Li-Uuid: AAZTYHEGH5a0L9Kt2Tt5Ag== X-Li-Fabric: prod-lva1 X-Msedge-Ref: Ref A: AF18F23CCABE4782AB7EECC697E9EB48 Ref B: BY1AA1072318025 Ref C: 2026-06-03T21:52:18Z Vary: Accept-Encoding X-Li-Proto: http/2 Content-Encoding: gzip X-Li-Pop: afd-prod-lva1-x X-Cache: CONFIG_NOCACHE Alt-Svc: h3=":443"; ma=86400 Linkedin-Action: 1 with response body ==>BINARY_CONTENT....... "GET /mapuid?member=280&user=32DFF8A43A9F6A9B15B5EE573B1A6B37;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D32DFF8A43A9F6A9B15B5EE573B1A6B37%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2 Host: m.adnxs.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 Sec-Fetch-Mode: no-cors Sec-Fetch-Storage-Access: active Referer: https://ntp.msn.com/ Sec-Fetch-Site: cross-site Accept-Language: en-US,en;q=0.9 Priority: i Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8 Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145" Sec-Ch-Ua-Mobile: ?0 Sec-Ch-Ua-Platform: "Windows" X-Edge-Shopping-Flag: 1 Accept-Encoding: gzip, deflate, br, zstd Sec-Fetch-Dest: image" Response ==> HTTP/2 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Date: Wed 03 Jun 2026 21:52:19 GMT Server: nginx/1.25.5 Set-Cookie: uuid2=8401203219401377198; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue 01-Sep-2026 21:52:19 GMT; Domain=.adnxs.com; Secure; HttpOnly Expires: Sat 15 Nov 2008 16:00:00 GMT X-Xss-Protection: 0 An-X-Request-Uuid: fa0cc449-ac3a-4270-bc8d-4ded9219d183 X-Proxy-Origin: 64.124.12.162; 64.124.12.162; 906.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; *.adnxs.com Location: https://m.adnxs.com/bounce?%2Fmapuid%3Fmember%3D280%26user%3D32DFF8A43A9F6A9B15B5EE573B1A6B37%3B%26gdpr%3D0%26gdpr_consent%3D%26redir%3Dhttps%253A%252F%252Fm.adnxs.com%252Fseg%253Fadd%253D5159620%2526redir%253Dhttps%25253A%25252F%25252Fib.adnxs.com%25252Fsetuid%25253Fentity%25253D483%252526code%25253D32DFF8A43A9F6A9B15B5EE573B1A6B37%252526gdpr%25253D0%252526gdpr_consent%25253D Cache-Control: no-store no-cache private P3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml" CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Pragma: no-cache Accept-Ch: Sec-CH-UA-Full-Version-List Sec-CH-UA-Arch Sec-CH-UA-Model Sec-CH-UA-Platform-Version Sec-CH-UA-Bitness with no response body2d:T980," Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"6a20a16cec6e71e5c000732e"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"