26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 30:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4ab,{"@context":"https://schema.org","@type":"TechArticle","headline":"Suspicious PDF/Phishing Sample dd6dda057c42… — Score 70/100 — Hybrid Analysis","description":"Suspicious verdict for sample dd6dda057c42…. Malware family: PDF/Phishing. Threat score 70/100. 1/26 AV engines flagged this file. 0 malicious and 1 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921","keywords":["Suspicious","PDF/Phishing","malware analysis","sandbox report","threat intelligence","dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921"],"about":{"@type":"SoftwareApplication","name":"hack-generator-vbucks20-8-free-v-bucks-generator-v-bucks-generator-178.pdf","applicationCategory":["pdf"],"identifier":"dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921","additionalType":"Suspicious sample"},"threatScore":70,"malwareFamily":"PDF/Phishing","antivirusDetections":{"malicious":1,"total":26},"behavioralIndicators":{"malicious":0,"suspicious":1},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Tcf8,Object ID 6 contains compressed stream data: No filters Object ID 103 contains compressed stream data: No filters Object ID 115 contains compressed stream data: No filters Object ID 119 contains compressed stream data: No filters Object ID 124 contains compressed stream data: /CIDInit /ProcSet findresource begin 11 dict begin begincmap /CIDSystemInfo << /Registry (Adobe) /Ordering (UCS) /Supplement 0 >> def /CMapName /Adobe-Identity-UCS def /CMapType 2 def 1 begincodespacerange <0000> <FFFF> endcodespace ... Object ID 137 contains compressed stream data: /CIDInit /ProcSet findresource begin 10 dict begin begincmap /CIDSystemInfo << /Registry (Adobe) /Ordering (UCS) /Supplement 0 >> def /CMapName /Adobe-Identity-UCS def /CMapType 2 def 1 begincodespacerange <0000> <FFFF> endcodespace ... Object ID 140 contains compressed stream data: /CIDInit /ProcSet findresource begin 10 dict begin begincmap /CIDSystemInfo << /Registry (Adobe) /Ordering (UCS) /Supplement 0 >> def /CMapName /Adobe-Identity-UCS def /CMapType 2 def 1 begincodespacerange <0000> <FFFF> endcodespace ... Object ID 142 contains compressed stream data: \x00\x01\x00\x00\x00?\x00\x80\x00\x03\x00POS/2\x82\xad\x8b?\x00\x00\x01H\x00\x00\x00Vcmapr\x82\xc6\x84\x00\x00\x04\xd0\x00\x00\x01\xd2cvt ?u?\xb8\x00\x00\x06\xbc\x00\x00\x00\x1cglyf0\xa6\x1b7\x00\x00\x06\xd8\x00\x00 Rhead\xdcg\xb1e\x00\x00\x00\xcc\x00\x00\ ... Object ID 145 contains compressed stream data: \x00\x01\x00\x00\x00\x0e\x01\x00\x00\x04\x00@OS/2\x13 \x80r\x00\x00\x01h\x00\x00\x00`cmap\x92i\x82\x8d\x00\x00\x1e\xc4\x00\x00\x01\xb2cvt \xaa\x0ee\x14\x00\x001|\x00\x00\x07\x8cfpgm7\x9dA\xd9\x00\x00 x\x00\x00\x06?glyfp4\xd1\xd6\x00\x009\x08\x00\x00\xa4he ... Object ID 147 contains compressed stream data: \x00\x01\x00\x00\x00\x10\x01\x00\x00\x04\x00`EBDT\x04\xf2+B\x00\x013\xe4\x00\x00\x07QEBLC\x8d\x92\xb2\xd4\x00\x010\x1c\x00\x00\x03\xc8OS/2\x9b\xef_\xf1\x00\x00\x01\x88\x00\x00\x00`cmap\xb3\xda\xf4\xb9\x00\x00XL\x00\x00\x03\xc0cvt ?\xbaX\xec\x00\x00|\x04\x0 ... Object ID 149 contains compressed stream data: \x00\x01\x00\x00\x00\x10\x01\x00\x00\x04\x00`EBDT\xa2\x18\x05X\x00\x02 \x18\x00\x00\x1bSEBLC\x01\xbd\x1bN\x00\x02\x16\xf8\x00\x00 OS/2\x99\xc22\xed\x00\x00\x01\x88\x00\x00\x00`cmapV\xe8Me\x00\x00XL\x00\x00\x06*cvt \xb9p\xd85\x00\x00\x90\x94\x00\x00\x05\xb ... Object ID 151 contains compressed stream data: \x00\x01\x00\x00\x00\x10\x01\x00\x00\x04\x00`EBDT\x82\xabs\xb8\x00\x00\xf7$\x00\x00\x04\xc4EBLC\x13\xdcx\xb0\x00\x00\xf4\x04\x00\x00\x03 OS/2y{\xddr\x00\x00\x01\x88\x00\x00\x00`cmapeY\x90\xf5\x00\x00@\x1c\x00\x00\x03\x80cvt \xba~\xce\xc7\x00\x00a\xfc\x00\x ... Object ID 164 contains compressed stream data: \x00\x01\x00\x00\x00\x0f\x01\x00\x00\x04\x00`COLR\x1b;\x99a\x00\x00\xff\xd8\x00\x00\xc3\x04CPAL(\xba< \x00\x00\xfaP\x00\x00\x05\x88OS/2I\xdb\xa1W\x00\x00\x01x\x00\x00\x00`cmapK\xee&\x12\x00\x00y\xb4\x00\x00\x00\xb4cvt 7u2\xf4\x00\x00\x88\xec\x00\x00 ... Object ID 166 contains compressed stream data: \x00\x01\x00\x00\x00\x11\x01\x00\x00\x04\x00pBASE.2\x8b\xdd\x00\x01\xeb\xe8\x00\x00\x01\xbcEBDT\xcd\xb2\x03\xe6\x00\x01\xe6d\x00\x00\x05\x82EBLC \xf1i\xc5\x00\x01\xde\x08\x00\x00\x08\OS/2S\xe9\x04\x0f\x00\x00\x01\x98\x00\x00\x00`cmapT\x1ey\xd2\x00\x01+< ...28:T702,"https://www.youtube.com/results?search_query=%23NEW" (Based on: "dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921.bin") "https://www.youtube.com/results?search_query=%23freevbucks" (Based on: "dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921.bin") "https://www.youtube.com/results?search_query=%23freevbuckscodes" (Based on: "dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921.bin") "https://www.youtube.com/results?search_query=%23freevbucksgiveaway" (Based on: "dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921.bin") "https://www.youtube.com/results?search_query=%23freevbucksgiveawayps4" (Based on: "dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921.bin") "https://www.youtube.com/results?search_query=%23vbucksglitch" (Based on: "dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921.bin") "https://www.youtube.com/results?search_query=%23freevbuckscodeslivexbox" (Based on: "dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921.bin") "https://www.youtube.com/results?search_query=%23freevbuckscodeslive" (Based on: "dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921.bin") "https://www.youtube.com/results?search_query=%23howtogetfreevbucks" (Based on: "dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921.bin") "https://www.youtube.com/results?search_query=%23howtogetfreevbucksfortnite" (Based on: "dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921.bin") "https://www.games-code.xyz/fortnitev-bucksgen" (Based on: "dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921.bin") "https://www.youtube.com/results?search_query=%23freevbuckslive" (Based on: "dd6dda057c4286c01beeea39feb0cc2ec26abb5ff3bafc72c59508c2230fb921.bin")29:T44a,"GlobSettings" has type "ASCII text" "SharedDataEvents-journal" has type "SQLite Rollback Journal" "data_1" has type "data" "Visited Links" has type "data" "0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" has type "data" "A9Rgp9qye_1h359zw_1l0.tmp" has type "data" "SharedDataEvents" has type "SQLite 3.x database" "CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" has type "data" "A9Ropptpo_1h359zu_1l0.tmp" has type "data" "IconCacheRdr65536.dat" has type "data" "urlref_httpswww.youtube.comresultssearch_query_%23NEW" has type "HTML document ASCII text with very long lines" "urlref_httpswww.youtube.comresultssearch_query_%23freevbucks" has type "HTML document ASCII text with very long lines" "urlref_httpswww.youtube.comresultssearch_query_%23freevbuckscodes" has type "HTML document ASCII text with very long lines" "urlref_httpswww.youtube.comresultssearch_query_%23freevbucksgiveaway" has type "HTML document UTF-8 Unicode text with very long lines" "urlref_httpswww.youtube.comresultssearch_query_%23freevbucksgiveawayps4" has type "HTML document ASCII text with very long lines"2a:T12f8,Pattern match: "https://www.youtube.com/results?search_query=%23NEW" Pattern match: "https://www.youtube.com/results?search_query=%23freevbucks" Pattern match: "https://www.youtube.com/results?search_query=%23freevbuckscodes" Pattern match: "https://www.youtube.com/results?search_query=%23freevbucksgiveaway" Pattern match: "https://www.youtube.com/results?search_query=%23freevbucksgiveawayps4" Pattern match: "https://www.youtube.com/results?search_query=%23vbucksglitch" Pattern match: "https://www.youtube.com/results?search_query=%23freevbuckscodeslivexbox" Pattern match: "https://www.youtube.com/results?search_query=%23freevbuckscodeslive" Pattern match: "https://www.youtube.com/results?search_query=%23howtogetfreevbucks" Pattern match: "https://www.youtube.com/results?search_query=%23howtogetfreevbucksfortnite" Pattern match: "https://www.games-code.xyz/fortnitev-bucksgen" Pattern match: "https://www.youtube.com/results?search_query=%23freevbuckslive" Pattern match: "http://www.w3.org/1999/02/22-rdf-syntax-ns#" Pattern match: "http://purl.org/dc/elements/1.1/" Pattern match: "http://ns.adobe.com/xap/1.0/mm/" Pattern match: "www.youtube.com\//g" Pattern match: "https://www.youtube.com/error_204?t=jserror&level=ERROR" Pattern match: "https://www.youtube.com/s/desktop/a90036ea/img/favicon.ico" Pattern match: "https://i.ytimg.com/generate_204" Pattern match: "https://www.youtube.com/img/branding/desktop/global_test/yt_logo_v1,desktop_search_prominent_thumbs_style:DEFAULT,live_chat_unicode_emoji_json_url:https://www.gstatic.com/youtube/img/emojis/emojis-svg-4.json,yoodle_start_time:,web_client_vers" Pattern match: "https://www.youtube.com/s/desktop/a90036ea/jsbin/scheduler.vflset/scheduler.js" Pattern match: "https://www.youtube.com/s/desktop/a90036ea/jsbin/network.vflset/network.js" Pattern match: "https://www.youtube.com/s/desktop/a90036ea/cssbin/www-main-desktop-watch-page-skeleton.css" Pattern match: "https://www.youtube.com/img/branding/desktop/global_test/yt_logo_v1,yoodle_alt_text_locale:,yoodle_alt_text:,desktop_search_prominent_thumbs_style:DEFAULT,desktop_web_client_version_override:,web_client_version_override:,yoodle_end_ti" Pattern match: "https://www.youtube.com/img/branding/desktop/global_test/yt_logo_v1,yoodle_end_time:,web_client_version_override:,desktop_web_client_version_override:,yoodle_date_override_debug:,yoodle_alt_text_locale:,live_chat_unicode_emoji_json_ur" Pattern match: "https://www.gstatic.com/youtube/img/emojis/emojis-svg-4.json,desktop_web_client_version_override:,yoodle_alt_text_locale:,polymer_task_manager_status:production,debug_forced_internalcountrycode:,yoodle_base_url:https://www.youtube.com/i" Pattern match: "https://www.youtube.com,urlOverride" Pattern match: "https://www.youtube.com/s/desktop/a90036ea/jsbin/www-tampering.vflset/www-tampering.js" Pattern match: "https://www.youtube.com/s/desktop/a90036ea/jsbin/spf.vflset/spf.js" Pattern match: "https://www.youtube.com/s/desktop/a90036ea/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js" Pattern match: "https://www.youtube.com/s/desktop/a90036ea/jsbin/webcomponents-lite-noPatch.vflset/webcomponents-lite-noPatch.js" Pattern match: "fonts.gstatic.com/s/roboto/v18/KFOkCnqEu92Fr1Mu51xIIzI.woff2" Pattern match: "fonts.googleapis.com/css?family=YT%20Sans%3A300%2C500%2C700" Pattern match: "https://www.youtube.com/opensearch?locale=en_US" Pattern match: "https://www.youtube.com/about/" Pattern match: "https://www.youtube.com/about/press/" Pattern match: "https://www.youtube.com/about/copyright/" Pattern match: "https://www.youtube.com/creators/" Pattern match: "https://www.youtube.com/ads/" Pattern match: "https://developers.google.com/youtube" Pattern match: "https://www.google.com/intl/en/policies/privacy/" Pattern match: "https://www.youtube.com/about/policies/" Pattern match: "https://www.youtube.com/howyoutubeworks?utm_campaign=ytgen&utm_source=ythp&utm_medium=LeftNav&utm_content=txt&u=https%3A%2F%2Fwww.youtube.com%2Fhowyoutubeworks%3Futm_source%3Dythp%26utm_medium%3DLeftNav%26utm_campaign%3Dytgen" Pattern match: "https://www.youtube.com/s/desktop/a90036ea/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js" Pattern match: "https://www.youtube.com/s/desktop/a90036ea/jsbin/desktop_polymer_inlined_html_polymer_flags_legacy_browsers.vflset/desktop_polymer_inlined_html_polymer_flags_legacy_browsers.js;document.body.appendChild(script);script.onload" Pattern match: "https://m.youtube.com/results?search_query=%23freevbucksgiveaway" Pattern match: "https://accounts.google.com/ServiceLogin?continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26feature%3Dpassive%26hl%3Den%26next%3D%252Fsignin_passive&hl=en&passive=true&service=youtube&uilel=3"2b:T1e84,"https://www.youtube.com/results?search_query=%23NEW" (Indicator: "youtube") "https://www.youtube.com/results?search_query=%23freevbucks" (Indicator: "youtube") "https://www.youtube.com/results?search_query=%23freevbuckscodes" (Indicator: "youtube") "https://www.youtube.com/results?search_query=%23freevbucksgiveaway" (Indicator: "youtube") "https://www.youtube.com/results?search_query=%23freevbucksgiveawayps4" (Indicator: "youtube") "https://www.youtube.com/results?search_query=%23vbucksglitch" (Indicator: "youtube") "https://www.youtube.com/results?search_query=%23freevbuckscodeslivexbox" (Indicator: "youtube") "https://www.youtube.com/results?search_query=%23freevbuckscodeslive" (Indicator: "youtube") "https://www.youtube.com/results?search_query=%23howtogetfreevbucks" (Indicator: "youtube") "https://www.youtube.com/results?search_query=%23howtogetfreevbucksfortnite" (Indicator: "youtube") "https://www.youtube.com/results?search_query=%23freevbuckslive" (Indicator: "youtube") "ve) >>/StructParent 6>> endobj 41 0 obj <>/F 4/A<>/StructParent 7>> endobj 42 0 obj <>/F 4/A<>/StructParent 8>> endobj 43 0 obj <>/F 4/A<>/StructParent 9>> endobj 44 0 obj <>/F 4/A<>/StructParent 10>> endobj 45 0 obj <>/F 4/A<>/StructParent 11>> e" (Indicator: "youtube") "ndobj 46 0 obj <>/F 4/A<>/StructParent 12>> endobj 47 0 obj <>/F 4/A<>/StructParent 13>> endobj 48 0 obj <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/MediaBox[ 0 0 612 792] /Contents 49 0 R/Group<>/Tabs/S/StructParents 14>> endobj 49 0 obj <> stream x" (Indicator: "youtube") "var combinedLineAndColumn=err.lineNumber;if(!isNaN(err["columnNumber"]))combinedLineAndColumn+=":"+err["columnNumber"];var stack=err.stack||"";var values={"msg":message,"type":err.name,"client.params":"unhandled window error","file":err.fileName,"line":combinedLineAndColumn,"stack":stack.substr(0,500)};var thirdPartyScript=!err.fileName||err.fileName==="";var replaced=stack.replace(/https:\/\/www.youtube.com\//g,"");if(replaced.match(/https?:\/\/[^/]+\//))thirdPartyScript=true;if(thirdPartyScript)values["level"]=" (Indicator: "youtube") ""WARNING";var parts=[window["ytcfg"].get("EMERGENCY_BASE_URL","https://www.youtube.com/error_204?t=jserror&level=ERROR")];for(var key in values){var value=values[key];if(value)parts.push(key+"="+encodeURIComponent(value))}img.src=parts.join("&")};" (Indicator: "youtube") "