| _id | sha256 | analysis_info | events | generated_at | sample | schema_version | summary | gridfs_file_id | gridfs_filename | gridfs_size_bytes |
|---|---|---|---|---|---|---|---|---|---|---|
6a5c9d3fb3bed57e0e7378d0
|
c9b4047be7c4b7190533db32c67b85fe51c1692cca1d36944…
|
{
"id": 189,
"version": "2.5",
"category": "file",
"package": "exe",
"started": "2026-07-19 09:33:09",
"ended": "2026-07-19 09:43:16",
"duration": 607,
"machine": {
"id": 158,
"status": "stopping",
"name": "windows-10-sandbox-01",
"label": "windows-10-sandbox-01",
"platform": "windows",
"manager": "Proxmox",
"started_on": "2026-07-19 09:33:09",
"shutdown_on": "2026-07-19 09:38:30"
},
"route": "tor"
}
|
*** LARGE PROPERTY ***
~771 KB Preview:[{"event_type":"api_call" Click to fetch this property |
2026-07-19T09:47:43.547993+00:00
|
{
"sha256": "c9b4047be7c4b7190533db32c67b85fe51c1692cca1d36944ad2f4d554b9320a",
"md5": "1c7a02bb53ab156eb200122c93dde12f",
"name": "rp-019f79b8d2487453a.exe",
"cape_type": "",
"malscore": 9,
"malstatus": "Malicious"
}
|
1.0
|
{
"total_events": 1515,
"timed_events": 1370,
"untimed_events": 145,
"event_type_counts": {
"api_call": 1371,
"process_start": 1,
"process_tracked": 1,
"enhanced_load": 44,
"enhanced_read": 6,
"registry_read": 5,
"network_http": 42,
"network_tcp": 28,
"signature_triggered": 16,
"cape_payload_detected": 1
},
"total_processes": 1,
"total_signatures": 16,
"total_cape_payloads": 1,
"total_network_hosts": 1,
"total_suricata_alerts": 0
}
|
|||
6a5ca3f0b3bed57e0e7378e1
|
bd20fcc313adbb44d82a033fbae527bc2b522b93ed80ba88e…
|
{
"id": 185,
"version": "2.5",
"category": "file",
"package": "batch",
"started": "2026-07-19 08:32:04",
"ended": "2026-07-19 08:42:14",
"duration": 610,
"machine": {
"id": 154,
"status": "stopping",
"name": "windows-10-sandbox-01",
"label": "windows-10-sandbox-01",
"platform": "windows",
"manager": "Proxmox",
"started_on": "2026-07-19 08:32:04",
"shutdown_on": "2026-07-19 08:37:38"
},
"route": "tor"
}
|
2026-07-19T10:16:14.601856+00:00
|
{
"sha256": "bd20fcc313adbb44d82a033fbae527bc2b522b93ed80ba88ec0094644005df81",
"md5": "010d62381199e3131b778a19b75d36df",
"name": "fmb1-019f7980e1867d5.bat",
"cape_type": "",
"malscore": 10,
"malstatus": null
}
|
1.0
|
{
"total_events": 227413,
"timed_events": 197923,
"untimed_events": 29490,
"event_type_counts": {
"api_call": 197924,
"process_start": 2,
"process_tracked": 25,
"enhanced_load": 2922,
"enhanced_read": 20625,
"enhanced_execute": 48,
"enhanced_write": 375,
"enhanced_delete": 11,
"enhanced_start": 10,
"enhanced_create": 12,
"enhanced_move": 1,
"file_write": 92,
"file_delete": 15,
"registry_write": 98,
"registry_delete": 5,
"registry_read": 4670,
"network_http": 441,
"network_tcp": 41,
"signature_triggered": 49,
"cape_payload_detected": 3,
"command_executed": 30,
"mutex_created": 14
},
"total_processes": 25,
"total_signatures": 49,
"total_cape_payloads": 3,
"total_network_hosts": 1,
"total_suricata_alerts": 0
}
|
6a5ca3f045ff9f78a74102b3
|
event_timeline_bd20fcc313adbb44d82a033fbae527bc2b…
|
203701068
|
|
6a5ca4cab3bed57e0e7378e2
|
72e3fb64a103033837ee52ff73f5c00b2a8536b363431cd13…
|
{
"id": 190,
"version": "2.5",
"category": "file",
"package": "exe",
"started": "2026-07-19 10:09:49",
"ended": "2026-07-19 10:15:20",
"duration": 331,
"machine": {
"id": 159,
"status": "stopping",
"name": "windows-10-sandbox-01",
"label": "windows-10-sandbox-01",
"platform": "windows",
"manager": "Proxmox",
"started_on": "2026-07-19 10:09:49",
"shutdown_on": "2026-07-19 10:10:38"
},
"route": "tor"
}
|
2026-07-19T10:19:54.100600+00:00
|
{
"sha256": "72e3fb64a103033837ee52ff73f5c00b2a8536b363431cd1308e7ce00f26908a",
"md5": "ae6c4adaf1a49825d656e1523e0e45a4",
"name": "rdls-019f79da669c717.exe",
"cape_type": "",
"malscore": 8,
"malstatus": "Malicious"
}
|
1.0
|
{
"total_events": 2243,
"timed_events": 1894,
"untimed_events": 349,
"event_type_counts": {
"api_call": 1895,
"process_start": 1,
"process_tracked": 1,
"enhanced_load": 176,
"enhanced_read": 90,
"registry_read": 51,
"network_http": 1,
"network_tcp": 1,
"signature_triggered": 22,
"cape_payload_detected": 5
},
"total_processes": 1,
"total_signatures": 22,
"total_cape_payloads": 5,
"total_network_hosts": 1,
"total_suricata_alerts": 0
}
|
6a5ca4ca3aa47eef074048bf
|
event_timeline_72e3fb64a103033837ee52ff73f5c00b2a…
|
1932837
|
|
6a5ca603b3bed57e0e7378f1
|
1e969173c001e524b7ef3a22c0fcb1cc834104c18b64beea1…
|
{
"id": 188,
"version": "2.5",
"category": "file",
"package": "vbs",
"started": "2026-07-19 09:16:23",
"ended": "2026-07-19 09:26:34",
"duration": 611,
"machine": {
"id": 157,
"status": "stopping",
"name": "windows-10-sandbox-01",
"label": "windows-10-sandbox-01",
"platform": "windows",
"manager": "Proxmox",
"started_on": "2026-07-19 09:16:23",
"shutdown_on": "2026-07-19 09:21:49"
},
"route": "tor"
}
|
2026-07-19T10:25:06.299453+00:00
|
{
"sha256": "1e969173c001e524b7ef3a22c0fcb1cc834104c18b64beea1d0a8de14be52087",
"md5": "1ea6e01c9630479597cc0b581e3ba382",
"name": "rmc-019f79a977897ed3.vbs",
"cape_type": "",
"malscore": 10,
"malstatus": null
}
|
1.0
|
{
"total_events": 163236,
"timed_events": 141112,
"untimed_events": 22124,
"event_type_counts": {
"api_call": 141113,
"process_start": 2,
"process_tracked": 22,
"enhanced_read": 14450,
"enhanced_load": 1530,
"enhanced_write": 332,
"enhanced_create": 11,
"enhanced_execute": 40,
"enhanced_start": 11,
"enhanced_delete": 10,
"file_write": 44,
"file_delete": 4,
"registry_write": 105,
"registry_delete": 5,
"registry_read": 5087,
"network_http": 319,
"network_tcp": 61,
"signature_triggered": 49,
"cape_payload_detected": 3,
"command_executed": 20,
"mutex_created": 18
},
"total_processes": 22,
"total_signatures": 49,
"total_cape_payloads": 3,
"total_network_hosts": 2,
"total_suricata_alerts": 0
}
|
6a5ca603b1ccedf47b129ee0
|
event_timeline_1e969173c001e524b7ef3a22c0fcb1cc83…
|
146473346
|
|
6a5ca994b3bed57e0e7378f4
|
0ab215f9653788c3943cbf7f60470cc02f351e192b34ef673…
|
{
"id": 191,
"version": "2.5",
"category": "file",
"package": "exe",
"started": "2026-07-19 10:15:21",
"ended": "2026-07-19 10:25:59",
"duration": 638,
"machine": {
"id": 160,
"status": "stopping",
"name": "windows-10-sandbox-01",
"label": "windows-10-sandbox-01",
"platform": "windows",
"manager": "Proxmox",
"started_on": "2026-07-19 10:15:21",
"shutdown_on": "2026-07-19 10:21:16"
},
"route": "tor"
}
|
2026-07-19T10:40:15.061801+00:00
|
{
"sha256": "0ab215f9653788c3943cbf7f60470cc02f351e192b34ef673c1fccdc6e3eda0d",
"md5": "7dc7a5b9f906179d6a7d994b2f947a11",
"name": "am-019f79dabacf7a419.exe",
"cape_type": "Amadey Payload: 64-bit executable",
"malscore": 10,
"malstatus": "Malicious"
}
|
1.0
|
{
"total_events": 639406,
"timed_events": 534987,
"untimed_events": 104419,
"event_type_counts": {
"api_call": 534988,
"process_start": 4,
"process_tracked": 80,
"enhanced_load": 6464,
"enhanced_write": 6873,
"enhanced_read": 70568,
"enhanced_execute": 153,
"enhanced_start": 11,
"enhanced_create": 635,
"enhanced_delete": 676,
"enhanced_findwindow": 13,
"enhanced_move": 8,
"enhanced_copy": 130,
"file_write": 516,
"file_delete": 436,
"file_read": 65,
"registry_write": 271,
"registry_delete": 33,
"registry_read": 16751,
"network_dns": 1,
"network_http": 310,
"network_tcp": 65,
"signature_triggered": 92,
"cape_payload_detected": 19,
"command_executed": 119,
"mutex_created": 125
},
"total_processes": 80,
"total_signatures": 92,
"total_cape_payloads": 19,
"total_network_hosts": 3,
"total_suricata_alerts": 0
}
|
6a5ca993976471c12839bb41
|
event_timeline_0ab215f9653788c3943cbf7f60470cc02f…
|
534395633
|
|
6a5cafb0b3bed57e0e7378f9
|
e632a474347f7e231beff070ce83413f9062dfc361fcdab25…
|
{
"id": 192,
"version": "2.5",
"category": "file",
"package": "exe",
"started": "2026-07-19 10:56:50",
"ended": "2026-07-19 11:01:50",
"duration": 300,
"machine": {
"id": 161,
"status": "stopping",
"name": "windows-10-sandbox-01",
"label": "windows-10-sandbox-01",
"platform": "windows",
"manager": "Proxmox",
"started_on": "2026-07-19 10:56:50",
"shutdown_on": "2026-07-19 10:57:22"
},
"route": "tor"
}
|
2026-07-19T11:06:24.083203+00:00
|
{
"sha256": "e632a474347f7e231beff070ce83413f9062dfc361fcdab25e0a3fb67a0326fc",
"md5": "f925f96907127bdead9ec8c026f0bf02",
"name": "at-019f7a056e6c71f0a.exe",
"cape_type": "",
"malscore": 6,
"malstatus": "Suspicious"
}
|
1.0
|
{
"total_events": 2004,
"timed_events": 1665,
"untimed_events": 339,
"event_type_counts": {
"api_call": 1666,
"process_start": 1,
"process_tracked": 1,
"enhanced_load": 169,
"enhanced_read": 92,
"registry_read": 51,
"network_http": 1,
"network_tcp": 1,
"signature_triggered": 20,
"cape_payload_detected": 2
},
"total_processes": 1,
"total_signatures": 20,
"total_cape_payloads": 2,
"total_network_hosts": 1,
"total_suricata_alerts": 0
}
|
6a5cafb093a7187e2319cc5e
|
event_timeline_e632a474347f7e231beff070ce83413f90…
|
1722809
|
|
6a5d3042b3bed57e0e737910
|
03e40798b193db7de556657be34522abb0a4bb6f74b2e71bb…
|
{
"id": 193,
"version": "2.5",
"category": "file",
"package": "exe",
"started": "2026-07-19 19:40:53",
"ended": "2026-07-19 19:50:46",
"duration": 593,
"machine": {
"id": 162,
"status": "stopping",
"name": "windows-10-sandbox-01",
"label": "windows-10-sandbox-01",
"platform": "windows",
"manager": "Proxmox",
"started_on": "2026-07-19 19:40:53",
"shutdown_on": "2026-07-19 19:46:17"
},
"route": "tor"
}
|
2026-07-20T15:00:38.340777+00:00
|
{
"sha256": "03e40798b193db7de556657be34522abb0a4bb6f74b2e71bb4b4af44dab6aa40",
"md5": "e445923a1525fcdd748e47a893c6b441",
"name": "03e40798b193db7de556.exe",
"cape_type": "",
"malscore": 6,
"malstatus": "Suspicious"
}
|
1.0
|
{
"total_events": 10816,
"timed_events": 9469,
"untimed_events": 1347,
"event_type_counts": {
"api_call": 9470,
"process_start": 1,
"process_tracked": 2,
"enhanced_read": 292,
"enhanced_load": 114,
"enhanced_create": 4,
"enhanced_write": 489,
"enhanced_execute": 1,
"file_write": 27,
"registry_read": 9,
"network_http": 392,
"signature_triggered": 13,
"command_executed": 1,
"mutex_created": 1
},
"total_processes": 2,
"total_signatures": 13,
"total_cape_payloads": 0,
"total_network_hosts": 0,
"total_suricata_alerts": 0
}
|
6a5e3816c752b0ad9c0f00c2
|
event_timeline_03e40798b193db7de556657be34522abb0…
|
8122010
|
|
6a5d3183b3bed57e0e73791e
|
db8ce34cefcc83edd0e245844f35373828004706eb41f952a…
|
{
"id": 195,
"version": "2.5",
"category": "file",
"package": "exe",
"started": "2026-07-19 20:04:37",
"ended": "2026-07-19 20:14:41",
"duration": 604,
"machine": {
"id": 164,
"status": "stopping",
"name": "windows-10-sandbox-01",
"label": "windows-10-sandbox-01",
"platform": "windows",
"manager": "Proxmox",
"started_on": "2026-07-19 20:04:37",
"shutdown_on": "2026-07-19 20:10:13"
},
"route": "tor"
}
|
2026-07-19T20:20:18.774306+00:00
|
{
"sha256": "db8ce34cefcc83edd0e245844f35373828004706eb41f952ad0c2522e10e4b9c",
"md5": "fce1b61c249b56a953c50a942eebfa91",
"name": "db8ce34cefcc83edd0e2.exe",
"cape_type": "",
"malscore": 9,
"malstatus": "Malicious"
}
|
1.0
|
{
"total_events": 143801,
"timed_events": 110963,
"untimed_events": 32838,
"event_type_counts": {
"api_call": 110964,
"process_start": 5,
"process_tracked": 20,
"enhanced_read": 20626,
"enhanced_load": 2297,
"enhanced_delete": 19,
"enhanced_create": 242,
"enhanced_write": 938,
"enhanced_findwindow": 10,
"enhanced_execute": 27,
"enhanced_move": 2,
"file_write": 50,
"file_delete": 16,
"registry_write": 23,
"registry_delete": 2,
"registry_read": 8037,
"network_dns": 10,
"network_http": 389,
"network_tcp": 23,
"signature_triggered": 61,
"cape_payload_detected": 1,
"command_executed": 19,
"mutex_created": 20
},
"total_processes": 20,
"total_signatures": 61,
"total_cape_payloads": 1,
"total_network_hosts": 4,
"total_suricata_alerts": 0
}
|
6a5d318354bc56df1307ba0d
|
event_timeline_db8ce34cefcc83edd0e245844f35373828…
|
115385064
|
|
6a5e03cbb3bed57e0e737924
|
7132a14099e6824598c5899dea19a4b8f4d89683bb01774b4…
|
{
"id": 196,
"version": "2.5",
"category": "file",
"package": "dll",
"started": "2026-07-20 11:01:52",
"ended": "2026-07-20 11:11:40",
"duration": 588,
"machine": {
"id": 165,
"status": "stopping",
"name": "windows-10-sandbox-01",
"label": "windows-10-sandbox-01",
"platform": "windows",
"manager": "Proxmox",
"started_on": "2026-07-20 11:01:52",
"shutdown_on": "2026-07-20 11:07:12"
},
"route": "tor"
}
|
2026-07-20T11:17:31.124683+00:00
|
{
"sha256": "7132a14099e6824598c5899dea19a4b8f4d89683bb01774b402674da1d4fee2f",
"md5": "584e516edb5fc2b79960940b18cd65b5",
"name": "7132a14099e6824598c5.exe",
"cape_type": "",
"malscore": 0,
"malstatus": "Failed"
}
|
1.0
|
{
"total_events": 2,
"timed_events": 0,
"untimed_events": 2,
"event_type_counts": {
"network_dns": 1,
"signature_triggered": 1
},
"total_processes": 0,
"total_signatures": 1,
"total_cape_payloads": 0,
"total_network_hosts": 0,
"total_suricata_alerts": 0
}
|
6a5e03cb9eb873472e2b7244
|
event_timeline_7132a14099e6824598c5899dea19a4b8f4…
|
2028
|
|
6a5f5e9239c3725e311ebbff
|
ca029c447aa12fd5e8e91a5debffcdde4cf78151ee15ee13d…
|
{
"id": 197,
"version": "2.5",
"category": "file",
"package": "exe",
"started": "2026-07-21 11:34:26",
"ended": "2026-07-21 11:44:43",
"duration": 617,
"machine": {
"id": 166,
"status": "stopping",
"name": "windows-10-sandbox-01",
"label": "windows-10-sandbox-01",
"platform": "windows",
"manager": "Proxmox",
"started_on": "2026-07-21 11:34:26",
"shutdown_on": "2026-07-21 11:40:21"
},
"route": "tor"
}
|
2026-07-21T11:56:59.926752+00:00
|
{
"sha256": "ca029c447aa12fd5e8e91a5debffcdde4cf78151ee15ee13da69200a3cc1663f",
"md5": "861e3af88bf1bcac9caf72bf16fa02b5",
"name": "ca029c447aa12fd5e8e9.exe",
"cape_type": "",
"malscore": 9,
"malstatus": "Malicious"
}
|
1.0
|
{
"total_events": 441124,
"timed_events": 359057,
"untimed_events": 82067,
"event_type_counts": {
"api_call": 359058,
"process_start": 2,
"process_tracked": 35,
"enhanced_load": 4210,
"enhanced_read": 47928,
"enhanced_write": 1831,
"enhanced_create": 177,
"enhanced_execute": 118,
"enhanced_copy": 2,
"enhanced_start": 18,
"enhanced_delete": 6515,
"enhanced_move": 5,
"file_write": 132,
"file_delete": 428,
"file_read": 1,
"registry_write": 390,
"registry_delete": 5784,
"registry_read": 14143,
"network_dns": 1,
"network_http": 102,
"network_tcp": 26,
"signature_triggered": 78,
"cape_payload_detected": 13,
"command_executed": 94,
"mutex_created": 33
},
"total_processes": 35,
"total_signatures": 78,
"total_cape_payloads": 13,
"total_network_hosts": 2,
"total_suricata_alerts": 0
}
|
6a5f5e8ea00ff13601a4e36b
|
event_timeline_ca029c447aa12fd5e8e91a5debffcdde4c…
|
369319215
|
| Documents | 10 |
| Total doc size | 665.7 KB |
| Average doc size | 66.57 KB |
| Pre-allocated size | 204 KB |
| Indexes | 1 |
| Total index size | 36 KB |
| Padding factor | |
| Extents |
| Name | Columns | Size | Attributes | Actions |
|---|---|---|---|---|
| _id_ |
_id ASC
|
36 KB | DEL |