Benign Download

0d41504c9d28130725c609ba0c9cc4bf4972b41d5fe33322bcb1c2c83a72cb31.exe

Native Ldr resource API nameNative PE resource API resolution
SHA-2560d41504c9d28130725c609ba0c9cc4bf4972b41d5fe33322bcb1c2c83a72cb31
MaleculeH₃(DbFMg)

Evidence

VirtualAlloc commit RWX buffer 0x186c–0x189c
0x186c526800004000ff15805940008b442414[email protected]@..D$.
0x187c6a4068001000005053ff15906240008b[email protected]@..
0x188c7424188be88b4c24148bfd8bd18d4424t$....L$......D$
0x189c12c1e902f3a58bca5083e1 ........P..
.dll extension reference 0x56b8–0x56e8
0x56b800000000000000006b65726e656c3332........kernel32
0x56c82e646c6c0000000057696e646f777320.dll....Windows
0x56d84d6564696120506c617965722048574eMedia Player HWN
0x56e844204564 D Ed
Native Ldr resource API name 0x5704–0x5764
0x57046f77456469746f720000000000000000owEditor........
0x57144c64724163636573735265736f757263LdrAccessResourc
0x572465000000000000004c647246696e6452e.......LdrFindR
0x573465736f757263655f5500000000000000esource_U.......
0x57446e74646c6c2e646c6c00000073526573ntdll.dll...sRes
0x57546f757263650000004163636573000000ource...Acces...
0x57644c647200757263655f Ldr.urce_
Windows setup state path 0x5770–0x57b0
0x5770645265736f0000004c647246696e0000dReso...LdrFin..
0x5780433a5c57696e646f77735c5365747570C:\Windows\Setup
0x57905c53746174655c53746174652e696e69\State\State.ini
0x57a000000000000000004164766170693332........Advapi32
0x57b02e646c6c00000000456e637279707446.dll....EncryptF
Native PE resource API resolution 0x6270–0x62b0
0x627000000000000000000000000058640000............Xd..
0x628010690000246900004664000030640000.i..$i..Fd..0d..
0x629020640000000000000000000000000000 d..............
0x62a000000000000000000000000000000000................
0x62b00000000000000000000000000000 ..............

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.