bf1c15a36085a0c506d5dc0928bbdeed5114bbd60c14e83c84f2a03acc1aa5ab

Login
Reports

Overview

overview

Static

static

dayflow-hr...nTR.js

windows10-2004-x64

dayflow-hr...nTR.js

windows11-ltsc_2024-x64

dayflow-hr...on.svg

windows10-2004-x64

dayflow-hr...on.svg

windows11-ltsc_2024-x64

dayflow-hr...x.html

windows10-2004-x64

dayflow-hr...x.html

windows11-ltsc_2024-x64

dayflow-hr...x.html

windows10-2004-x64

dayflow-hr...x.html

windows11-ltsc_2024-x64

dayflow-hr...apping

ubuntu-18.04-amd64

dayflow-hr...apping

debian-9-armhf

dayflow-hr...apping

debian-9-mips

dayflow-hr...apping

debian-9-mipsel

dayflow-hr...ng.cmd

windows10-2004-x64

dayflow-hr...ng.cmd

windows11-ltsc_2024-x64

dayflow-hr...ng.ps1

ubuntu-18.04-amd64

dayflow-hr...ng.ps1

debian-9-armhf

dayflow-hr...ng.ps1

debian-9-mips

dayflow-hr...ng.ps1

debian-9-mipsel

dayflow-hr...rslist

ubuntu-18.04-amd64

dayflow-hr...rslist

debian-9-armhf

dayflow-hr...rslist

debian-9-mips

dayflow-hr...rslist

debian-9-mipsel

dayflow-hr...st.cmd

windows10-2004-x64

dayflow-hr...st.cmd

windows11-ltsc_2024-x64

dayflow-hr...st.ps1

ubuntu-18.04-amd64

dayflow-hr...st.ps1

debian-9-armhf

dayflow-hr...st.ps1

debian-9-mips

dayflow-hr...st.ps1

debian-9-mipsel

dayflow-hr...sbuild

ubuntu-18.04-amd64

dayflow-hr...sbuild

debian-9-armhf

dayflow-hr...sbuild

debian-9-mips

dayflow-hr...sbuild

debian-9-mipsel

Analysis

max time kernel
148s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 01:50

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

dayflow-hrms/client/dist/assets/index-C5FyOnTR.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral2

Sample

dayflow-hrms/client/dist/assets/index-C5FyOnTR.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral3

Sample

dayflow-hrms/client/dist/favicon.svg

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral4

Sample

dayflow-hrms/client/dist/favicon.svg

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral5

Sample

dayflow-hrms/client/dist/index.html

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

discovery

Behavioral task

behavioral6

Sample

dayflow-hrms/client/dist/index.html

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

discovery

Behavioral task

behavioral7

Sample

dayflow-hrms/client/index.html

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

discovery

Behavioral task

behavioral8

Sample

dayflow-hrms/client/index.html

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

discovery

Behavioral task

behavioral9

Sample

dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral10

Sample

dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

discovery

Behavioral task

behavioral11

Sample

dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral12

Sample

dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral13

Sample

dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral14

Sample

dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral15

Sample

dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

dayflow-hrms/client/node_modules/.bin/browserslist

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral20

Sample

dayflow-hrms/client/node_modules/.bin/browserslist

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

discovery

Behavioral task

behavioral21

Sample

dayflow-hrms/client/node_modules/.bin/browserslist

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral22

Sample

dayflow-hrms/client/node_modules/.bin/browserslist

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral23

Sample

dayflow-hrms/client/node_modules/.bin/browserslist.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

dayflow-hrms/client/node_modules/.bin/browserslist.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

dayflow-hrms/client/node_modules/.bin/browserslist.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

dayflow-hrms/client/node_modules/.bin/browserslist.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

dayflow-hrms/client/node_modules/.bin/browserslist.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

dayflow-hrms/client/node_modules/.bin/browserslist.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

dayflow-hrms/client/node_modules/.bin/esbuild

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral30

Sample

dayflow-hrms/client/node_modules/.bin/esbuild

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

discovery

Behavioral task

behavioral31

Sample

dayflow-hrms/client/node_modules/.bin/esbuild

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

dayflow-hrms/client/node_modules/.bin/esbuild

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Report Analysis Logs

General

Target
dayflow-hrms/client/node_modules/.bin/browserslist.cmd
Size 323B
Sample261102-b9pdxset6w
SHA256 bf1c15a36085a0c506d5dc0928bbdeed5114bbd60c14e83c84f2a03acc1aa5ab
MD5 977d39f6c72318bf7ebc6dd7e6af29c3
SHA1 2b9eec0fc012cb3e56a7e907399de52ae26d969e
SHA512 7ed1202e3066c0c71601c4d8bf4267e83bd41fd5dadbbace8876a00e33126a35211aacc23252390b7342636adedbc6de5c7be653314b7a8fa0ba4bef7d0e0ecf
TLSH
T111E07D7AF004344A35379BB19413274276E3B755914301B5B83844FBAB417455BCF5ED
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4712	cmd.exe

Processes

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\dayflow-hrms\client\node_modules\.bin\browserslist.cmd"
1⤵
- Executes a command shell one-liner
PID:4712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads