33:"SampleDetailWrapper" 34:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$33"] 38:I[27201,["$1","$2","$3","$4","$5"],"IconMark"] 35:T9a4,Pattern match: "https://assets.msn.com/bundles/v1/homepage/latest/midlevel/vendors.21703589e156661d.js", Pattern match: "http://a/c%20d?a=1&c=3!==t.href||3!==e.get(c)||a=1!==string", Pattern match: "http://x,void", Heuristic match: "nt(),[3,5];case 3:var c;if(i=a.sent(),r===e)throw i&&i.message&&(i.message=.concat(i.message, after ).concat(r, attempts)),i;return[4,(c=n,new promise(function(t){return settimeout(t,c)}))];case 4:return a.sent(),[3,5];case 5:if(!o&&++r<=e)return[3,1", Pattern match: "https://.concat(t).concat(j)", Pattern match: "http://localhost:8080/,innerheight:768,devicepixelratio:1,canusecssgrid:!1,requestid:0,cookie:,useragent:,ref", Heuristic match: "l(s,__await)?promise.resolve(s.__await).then(function(t){e(next,t,i,a)},function(t){e(throw,t,i,a)}):promise.resolve(s).then(function(t){u.value=t,i(u)},a)}}(n,r,e,i)})}return e=e?e.then(i,i):i()}}function o(t){var e={tryloc:t[0]};1 in t&&(e.catchloc", Pattern match: "https://+b+/onecollector/1.0+", Pattern match: "https://assets.msn.com/bundles/v1/homepage/latest/midlevel/common.a018f84b82888f67.js", Pattern match: "www.bing.com", Pattern match: "https://{hostname}/{localecode}/video},{id:weather,localizationkey:weathertext,href:https://{hostname}/{localecode}/weather},{id:money,localizationkey:moneytext,href:https://{hostname}/{localecode}/money},{id:games,localizationkey:gamestext", Pattern match: "http://a/c%20d===e.href&&e.searchparams}catch(t){return!1}}()&&", Pattern match: "https://+loggingendpoint+/c.gif+formatparams(e),n=new", Pattern match: "https://assets.msn.com"", Pattern match: "https://assets.msn.com/config/v1/"", Pattern match: "http://a#", Pattern match: "www.msn.com"", Pattern match: "http://localhost:8080/,innerheight:0,devicepixelratio:0,canusecssgrid:!1,requestid:0,cookie:,useragent:,referer:,oneserviceheaders:,vpcetotoken", Pattern match: "https://adsdk.microsoft.com/ast/ast.js;function", Heuristic match: "tion(t,e,n){var r=n(91496),o=n(24893),i=n(50260),a=math.abs,c=math.exp,u=math.e;r({target:math,stat:!0,forced:o(function(){return -2e-17!=math.sinh(-2e-17)})},{sinh:function(t){return 1>a(t*=1)?(i(t)-i(-t))/2:(c(t-1)-c(-t-1))*(u/2)}})},95140:function(t,e", Heuristic match: "xporttypedarraymethod)(includes,function(t){return o(i(this),t,arguments.length>1?arguments[1]:void 0)})},48249:function(t,e,n){var r=n(52570),o=n(66407).indexof,i=r.atypedarray;(0,r.exporttypedarraymethod)(indexof,function(t){return o(i(this),t,argume"36:T112e,Found reference to API ".document.createElement&&!window.isRenderServiceEnv)}function X(t){var e,n=!1,r=function(){return n||(n=!0,e=t()),e};return r.cache={clear:function(){n=!1,e=void 0}},r}var Q=["superappdhp","sappandhp","sappioshp","superapp-homepage-native"],Z="_ocidIsomorphicKey",tt=function(){return Y.get(Z)||Y.set(Z,tp("ocid").toLowerCase()),Y.get(Z)},te="_platformFlagKey",tn="_hostAppNameKey",tr="_clientTypeKey",to=function(){return Y.get(te)||Y.set(te,tp("chpltfm")),Y.get(te)},ti=function(){if(!Y.get(tn)){var t=to();Y.set(tn,t.toLowerCase().split("-")[0])}return Y.get(tn)},ta=function(){if(!Y.get(tr)){var t=to();Y.set(tr,t.toLowerCase().split("-")[1])}return Y.get(tr)};function tc(){if(!K()||tl())return!1;var t=window.sapphireWebViewBridge,e=window.webkit,n=t&&t.send,r=e&&e.messageHandlers&&e.messageHandlers.send&&e.messageHandlers.send.postMessage;return!!(n||r)}function tu(){return!(!K()||tl())&&(tc()||"onostartapp"===tt()||Q.includes(tt()))}function ts(){var t=tp("edge");return("emmx"===ti()||"1"===t)&&tu()||"mmx"===tt" (Indicator: "postmessage"; Source: "sample.bin"), Found reference to API "reateWebWorkerInstance(n);r?this.initCore(r):console.warn("Error while initializing the web worker.")},t.prototype.initCore=function(t){var e=this,n=window.webWorkerMessages=[];t.onmessage=function(t){n.push(t.data)};var r=window.webWorkerErrors=[];t.onerror=function(t){r.push(t)},ee()&&Y.get(eu).promise.then(function(n){return t.postMessage({id:"AuthHeaders",type:e.command,payload:n||{}})})},t.prototype.createWebWorkerInstance=function(t){return new Worker(t,{name:"web-worker"})},t.prototype.shouldFetchAppAnonCookie=function(){return!0},t.prototype.getAudienceMode=function(t){var e=tw(this.authCookieName),n=tw(this.childCookieName),r=(e&&JSON.parse(e)||{}).child;return e&&(1===r||n)?"kids":t.audienceMode||"adult"},t.prototype.buildWebWorkerUrl=function(t,e){return void 0===t&&(t=null),(this.bundle||"")+"#"+this.qsFromDocument()+this.qsFromCookies()+this.qsFromDataAttribute(t||this.clientSettings)+this.qsMisc(e)+this.qsAuth(t||this.clientSettings)+this.qsFromUrl()+this.qsFromServiceWorker()+this.qsSelectedPiv" (Indicator: "postmessage"; Source: "sample.bin"), Found reference to API "";t.exports=function(t){return r(function(){return!!o[t]()||i[t]()!=i||o[t].name!==t})}},23028:function(t,e,n){var r=n(18236),o="["+n(78418)+"]",i=RegExp("^"+o+o+"*"),a=RegExp(o+o+"*$"),c=function(t){return function(e){var n=String(r(e));return 1&t&&(n=n.replace(i,"")),2&t&&(n=n.replace(a,"")),n}};t.exports={start:c(1),end:c(2),trim:c(3)}},65699:function(t,e,n){var r,o,i,a=n(61905),c=n(24893),u=n(9118),s=n(93423),f=n(56309),l=n(70021),h=n(77810),p=a.location,d=a.setImmediate,v=a.clearImmediate,g=a.process,y=a.MessageChannel,m=a.Dispatch,w=0,b={},x="onreadystatechange",S=function(t){if(b.hasOwnProperty(t)){var e=b[t];delete b[t],e()}},E=function(t){return function(){S(t)}},A=function(t){S(t.data)},O=function(t){a.postMessage(t+"",p.protocol+"//"+p.host)};d&&v||(d=function(t){for(var e=[],n=1;arguments.length>n;)e.push(arguments[n++]);return b[++w]=function(){("function"==typeof t?t:Function(t)).apply(void 0,e)},r(w),w},v=function(t){delete b[t]},h?r=function(t){g.nextTick(E(t))}:m&&m.now?r=function(t){m.now(E(" (Indicator: "postmessage"; Source: "sample.bin"), Found reference to API "t))}:y&&!l?(i=(o=new y).port2,o.port1.onmessage=A,r=u(i.postMessage,i,1)):a.addEventListener&&"function"==typeof postMessage&&!a.importScripts&&p&&"file:"!==p.protocol&&!c(O)?(r=O,a.addEventListener("message",A,!1)):r=x in f("script")?function(t){s.appendChild(f("script"))[x]=function(){s.removeChild(this),S(t)}}:function(t){setTimeout(E(t),0)}),t.exports={set:d,clear:v}},64234:function(t,e,n){var r=n(35562);t.exports=function(t){if("number"!=typeof t&&"Number"!=r(t))throw TypeError("Incorrect invocation");return+t}},7556:function(t,e,n){var r=n(91720),o=Math.max,i=Math.min;t.exports=function(t,e){var n=r(t);return n<0?o(n+e,0):i(n,e)}},14146:function(t,e,n){var r=n(91720),o=n(8040);t.exports=function(t){if(void 0===t)return 0;var e=r(t),n=o(e);if(e!==n)throw RangeError("Wrong length or index");return n}},62355:function(t,e,n){var r=n(55485),o=n(18236);t.exports=function(t){return r(o(t))}},91720:function(t){var e=Math.ceil,n=Math.floor;t.exports=function(t){return isNaN(t*=1)?0:(t>0?n:e)(t)}},8040:function(t" (Indicator: "postmessage"; Source: "sample.bin")37:T426,Found string - ).length>3})}},13661:function(t,e,n){var r=n(91720),o=n(18236),i=function(t){return function(e,n){var i,a,c=String(o(e)),u=r(n),s=c.length;return u<0||u>=s?t?"":void 0:(i=c.charCodeAt(u))<55296||i>56319||u+1===s||(a=c.charCodeAt(u+1))<56320||a>57343?t?c.charAt(u):i:t?c.slice(u,u+2):(i-55296<<10)+(a-56320)+65536}};t.exports={codeAt:i(!1),charAt:i(!0)}},26329:function(t,e,n){var r=n(97546);t.exports=/Version\/10(?:\.\d+){1,2}(?: [\w./]+)?(?: Mobile\/\w+)? Safari\//.test(r)},85407:function(t,e,n){var r=n(8040),o=n(15119),i=n(18236),a=Math.ceil,c=function(t){return function(e,n,c){var u,s,f=String(i(e)),l=f.length,h=void 0===c?" ":String(c),p=r(n);return p<=l||""==h?f:(u=p-l,(s=o.call(h,a(u/h.length))).length>u&&(s=s.slice(0,u)),t?f+s:s+f)}};t.exports={start:c(!1),end:c(!0)}},82287:function(t){var e=/[^\0-\u007E]/,n=/[.\u3002\uFF0E\uFF61]/g,r="Overflow: input needs wider integers to process",o=Math.floor,i=String.fromCharCode,a=function(t){for(var e=[],n=0,r=t.length;n=55296&&o<=; Source: "sample.bin")30:["$","$Lc",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample f2908a7e4518… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample f2908a7e4518…. Threat score 0/100. 0/26 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/f2908a7e45189ba63b22f6babc7fede02c67c24c19b9c2d6ae9660868c20b7e6\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"f2908a7e45189ba63b22f6babc7fede02c67c24c19b9c2d6ae9660868c20b7e6\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"H4U0MKT5.htm\",\"applicationCategory\":[\"html\"],\"identifier\":\"f2908a7e45189ba63b22f6babc7fede02c67c24c19b9c2d6ae9660868c20b7e6\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":26},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":0},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L34",null,{"initialData":{"schema_version":"1.0.17","sha256":"f2908a7e45189ba63b22f6babc7fede02c67c24c19b9c2d6ae9660868c20b7e6","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1794478096890,"unified_at":"2026-11-12T10:08:16.890Z","metadata":{"hashes":{"sha256":"f2908a7e45189ba63b22f6babc7fede02c67c24c19b9c2d6ae9660868c20b7e6","sha1":"9a437621c991af0ff31d9aaca88cd957f23b3aa7","md5":"abdfd96545c011b6ed593cd17d949d47"},"file_info":{"file_name":"H4U0MKT5.htm","file_type":["html"],"file_type_id":"html","file_size":202062,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1794478090000,"last_seen":1794478090000,"last_multi_scan":1794478090000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":26},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":10},"sandbox_signatures":{"informative_count":10,"suspicious_count":0,"malicious_count":0,"total":10},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Stealth","technique":"Deobfuscate/Decode Files or Information","attack_id":"T1140","attack_id_wiki":"https://attack.mitre.org/techniques/T1140","identifiers":[{"type":"informative","value":"Able to decrypt/decode data"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Data from Local System","attack_id":"T1005","attack_id_wiki":"https://attack.mitre.org/techniques/T1005","identifiers":[{"type":"informative","value":"Able to access browser directory location"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"File and Directory Discovery","attack_id":"T1083","attack_id_wiki":"https://attack.mitre.org/techniques/T1083","identifiers":[{"type":"informative","value":"Able to access file/directory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"ListPlanting","attack_id":"T1055.015","attack_id_wiki":"https://attack.mitre.org/techniques/T1055/015","identifiers":[{"type":"informative","value":"Able to visualize and control listed components (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attack_id":"T1555","attack_id_wiki":"https://attack.mitre.org/techniques/T1555","identifiers":[{"type":"informative","value":"Contains string like password/secret"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Hide Artifacts","attack_id":"T1564","attack_id_wiki":"https://attack.mitre.org/techniques/T1564","identifiers":[{"type":"informative","value":"Found virtual disk drive like strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"JavaScript","attack_id":"T1059.007","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/007","identifiers":[{"type":"informative","value":"References JavaScript(s)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"informative","value":"Able to download payload"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"References JavaScript(s)","description":"file/memory contains long string with (Indicator: \"text/javascript\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1059.007","id":"string-626","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$35","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"Found HTTPS url \"https://assets.msn.com\", Found HTTPS url \"https://a\", Found HTTPS url \"https://ent\", Found HTTPS url \"https://adsdk.microsoft.com\"","origin":"sample.bin","mitre_attack_id":"T1573","id":"string-98","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Able to download payload","description":"file/memory contains long string with (Indicator: \"curl\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1105","id":"string-10039","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to access file/directory","description":"file/memory contains long string with (Indicator: \".delete(\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1083","id":"string-779","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to visualize and control listed components (API string)","description":"$36","origin":"sample.bin","mitre_attack_id":"T1055.015","id":"string-721","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains string like password/secret","description":"file/memory contains long string with (Indicator: \"password\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1555","id":"string-475","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Able to access browser directory location","description":"file/memory contains long string with (Indicator: \"chromium/\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1005","id":"string-10089","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Able to decrypt/decode data","description":"file/memory contains long string with (Indicator: \"fromcharcode\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1140","id":"string-356","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Anti-Detection/Stealthiness","name":"Found virtual disk drive like strings","description":"$37","origin":"sample.bin","mitre_attack_id":"T1564","id":"string-145","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{},"chains":[]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 2c:[["$","title","0",{"children":"Sample f2908a7e4518… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample f2908a7e4518…. Threat score 0/100. 0/26 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/f2908a7e45189ba63b22f6babc7fede02c67c24c19b9c2d6ae9660868c20b7e6"}],["$","meta","4",{"property":"og:title","content":"Sample f2908a7e4518… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample f2908a7e4518…. Threat score 0/100. 0/26 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/f2908a7e45189ba63b22f6babc7fede02c67c24c19b9c2d6ae9660868c20b7e6"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample f2908a7e4518… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample f2908a7e4518…. Threat score 0/100. 0/26 AV engines flagged this file. 0 malicious and 0 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L38","11",{}]] 32:null