Suspicious 54% Download

780c18b21278006e67d4298c1564f228.rar

Archive path traversal and batch script

RAR ADS traversal smuggles a script payloadRAR ADS name repeats parent traversal
SHA-2566c296f0c211f0c111fe210f80f14d157c32956118890f58516a396b4df5e4a30
URLhttps://mb-api.abuse.ch/api/v1/
MaleculeO(C₂)H(Db)Md₂(Pa)

Evidence

Gmail consumer email domain suffix lines 1–11
1personal info
2name: adam clarke
3age: 19
4email: [email protected]
5address: 212 School Ave, Crestview, FL 32536
6ethnicity: swedish
⋯5 lines

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.