Report - bootstrap.min.css

ScreenShot AntiDebug AntiVM
ScreenShot
Created 2025.04.20 06:17 Machine s1_win7_x6403_us
Filename bootstrap.min.css
Type ASCII text, with very long lines
AI Score Not founds Behavior Score
0.4
ZERO API file : clean
VT API (file)
md5 9bdde376c4774119ea7b1f96ecb7af64
sha256 45cd78f6f46ece0fe9f15beb3cf8833ceb9cca5d211386dbee2e8f212e8e94a3
ssdeep 1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN262:VoPgPard2oENM6HN262
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
notice Yara rule detected in process memory

Rules (9cnts)

Level Name Description Collection
notice ScreenShot Take ScreenShot memory
info anti_dbg Checks if being debugged memory
info DebuggerCheck__GlobalFlags (no description) memory
info DebuggerCheck__QueryInfo (no description) memory
info DebuggerHiding__Active (no description) memory
info DebuggerHiding__Thread (no description) memory
info disable_dep Bypass DEP memory
info SEH__vectored (no description) memory
info ThreadControl__Context (no description) memory

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure