Congratulations! Your analysis is done and available at: https://www.hybrid-analysis.com/sample/b967d067e90d238f5f59981e8f2d3287ae5cc987173376076fcafbf0717282c3?environmentId=160 --- Falcon Sandbox Analysis Overview --- https://www.hybrid-analysis.com/sample/b967d067e90d238f5f59981e8f2d3287ae5cc987173376076fcafbf0717282c3 --- Falcon Sandbox Analysis Summary --- Analysis State: SUCCESS Threat Verdict: suspicious Threat Score: 68/100 AV Detection Ratio: n/a AV Family Name: n/a Time of analysis: 2025-05-28 02:26:11 Contacted Domains: 936c4e62d9be6ed3f6816899d712a7a4.safeframe.googlesyndication.com, a.nel.cloudflare.com, a.sportradarserving.com, ad-delivery.net, ad-server.linkvertise.com, ad.doubleclick.net, ad.turn.com, ads.pubmatic.com, ads.servedxk.com, ads.servenobid.com, ads.stickyadstv.com, ads.yieldmo.com, ag.dns-finder.com, ap.lijit.com, api-ssp.spot.im, api.btloader.com, audienceexposure.com, b1sync.outbrain.com, b1sync.zemanta.com, bh.contextweb.com, bidder.criteo.com, btloader.com, bttrack.com, c1.adform.net, cdn4.buysellads.net, cdnjs.cloudflare.com, ce.lijit.com, challenges.cloudflare.com, cm.adform.net, cm.g.doubleclick.net, cms.quantserve.com, contextual.media.net, creativecdn.com, cs-server-s2s.yellowblue.io, cs.emxdgt.com, cs.iqzone.com, cs.openwebmp.com, cs.yellowblue.io, csync.copper6.com, csync.loopme.me, de.tynt.com, dis.criteo.com, dsp.360yield.com, dsum-sec.casalemedia.com, eb2.3lift.com, ep1.adtrafficquality.google, ep2.adtrafficquality.google, eus.rubiconproject.com, events-ssc.33across.com, exchange.cootlogix.com, fonts.googleapis.com, fonts.gstatic.com, fundingchoicesmessages.google.com, g2.gumgum.com, gtrace.mediago.io, gtracenep.admaster.cc, gum.aidemsrv.com, hb-api.omnitagjs.com, hde.tynt.com, ib.adnxs.com, id.rlcdn.com, id5-sync.com, idsync.rlcdn.com, image8.pubmatic.com, imagesnep.admaster.cc, integrate.linkvertise.com, inv-nets.admixer.net, ittpx.eskimi.com, jadserve.postrelease.com, match.adsrvr.org, match.deepintent.com, match.sharethrough.com, ms-cookie-sync.presage.io, mweb-hb.presage.io, onetag-sys.com, p.rfihub.com, pagead2.googlesyndication.com, pastelink.net, pippio.com, pixel-eu.rubiconproject.com, pixel-sync.sitescout.com, pixel.33across.com, pixel.rubiconproject.com, player.aniview.com, pr-bh.ybp.yahoo.com, prebid-match.dotomi.com, prebid.a-mo.net, prebid.media.net, prg.smartadserver.com, public.servenobid.com, px.mountain.com, pxl.iqm.com, rtb-csync.smartadserver.com, rtb.bid.com, rtb.gumgum.com, rtb.mfadsrvr.com, rtb.openx.net, rtb.voltaxam.com, s-img.mgid.com, s.ad.smaato.net, s.amazon-adsystem.com, s.company-target.com, secure.adnxs.com, securepubads.g.doubleclick.net, srv.buysellads.com, ssbsync-global.smartadserver.com, ssbsync.smartadserver.com, ssc-cms.33across.com, ssp-sync.criteo.com, ssp.disqus.com, ssum-sec.casalemedia.com, static.admaster.cc, static.criteo.net, sync.1rx.io, sync.adkernel.com, sync.adotmob.com, sync.adtelligent.com, sync.aniview.com, sync.clearnview.com, sync.colossusssp.com, sync.contextualadv.com, sync.cootlogix.com, sync.go.sonobi.com, sync.inmobi.com, sync.ipredictive.com, sync.mathtag.com, sync.outbrain.com, sync.richaudience.com, sync.srv.stackadapt.com, sync.taboola.com, t.adx.opera.com, t.fullres.net, tagan.adlightning.com, tg.socdm.com, token.rubiconproject.com, tpc.googlesyndication.com, tracenep.admaster.cc, u.openx.net, us-u.openx.net, usersync.gumgum.com, usync.smxconv.com, visitor-risecode.omnitagjs.com, visitor.omnitagjs.com, visitor.us-east4.gcp.omnitagjs.com, www.google.com, www.temu.com, x.bidswitch.net Contacted Hosts: 88.208.215.108, 142.250.65.202, 142.251.40.131, 104.17.24.14, 104.18.1.75, 104.18.95.41, 104.18.95.41, 157.230.69.73, 142.250.80.36, 104.22.74.216, 142.250.80.66, 104.22.5.65, 142.251.40.198, 34.36.200.111, 104.17.197.65, 142.250.80.66, 130.211.23.194, 142.251.40.162, 142.251.40.206, 142.251.40.206, 104.254.151.60, 51.222.39.186, 45.55.124.119, 23.105.12.145, 35.212.18.61, 34.120.63.153, 3.208.132.83, 159.89.242.139, 54.70.156.240, 74.119.117.5, 142.251.40.162, 142.250.80.33, 142.250.65.162, 74.119.117.47, 142.251.41.1, 142.251.41.1, 142.250.80.36, 3.171.139.122, 51.222.39.186, 34.120.63.153, 142.250.65.162, 52.223.40.198, 159.89.52.154, 82.145.213.8, 185.167.164.38, 142.250.72.98, 98.82.49.249, 18.164.116.8, 75.101.167.10, 35.212.38.52, 69.194.242.12, 104.18.26.193, 216.22.16.40, 104.18.26.193, 142.250.72.98, 23.56.163.141, 142.250.80.33, 69.173.156.148, 35.190.80.1, 38.134.110.231, 159.127.42.140, 74.214.194.131, 35.207.24.140, 69.194.240.13, 8.28.7.82, 216.22.16.69, 69.173.154.8, 67.202.105.21, 216.22.16.37, 23.51.57.13, 34.203.112.169, 204.62.12.186, 50.112.190.218, 72.34.249.225, 35.190.80.1, 198.8.71.131, 125.253.89.179, 54.148.231.71, 45.55.125.114, 54.224.103.108, 35.207.24.140, 64.31.56.2, 185.184.8.90, 64.202.112.127, 34.224.66.164, 35.244.154.8, 35.211.202.130, 131.153.52.72, 3.168.102.115, 44.212.89.30, 35.244.154.8, 23.61.251.208, 188.40.16.220, 35.211.202.130, 34.1.251.54, 52.223.22.214, 172.240.35.20, 34.54.226.84, 142.251.35.161, 35.209.233.198, 34.111.60.239, 20.33.69.37, 98.82.156.107, 124.146.153.166, 34.54.226.84, 34.203.52.136, 44.240.146.205, 169.197.150.8, 35.209.233.198, 35.244.159.8, 34.224.13.26, 142.251.35.161, 54.211.158.99, 3.213.224.199, 216.219.92.22, 54.201.31.21, 23.227.146.18, 67.202.105.33, 3.229.202.201, 18.238.49.58, 35.244.159.8, 34.111.60.239, 35.227.252.103, 37.157.5.49, 192.184.68.166, 141.95.33.120, 35.212.59.62, 216.200.232.253, 45.137.176.88, 23.56.162.32, 74.119.117.39, 34.96.71.22, 74.119.117.16, 35.227.252.103, 8.2.111.13, 13.249.91.85, 64.74.236.31, 107.178.254.65, 80.77.84.96, 23.56.162.32, 64.38.119.44, 35.211.155.243, 172.240.45.96, 52.89.195.137, 80.77.84.209, 34.36.216.150, 35.208.249.213, 67.202.105.34, 35.211.155.243, 34.36.216.150, 34.117.239.71, 52.89.99.220, 34.117.239.71, 35.208.249.213, 141.226.224.48 Environment: Windows 10 64 bit (ID: 160)