Suspicious 86% windows Download

Mega.MEGASync

Legitimate MEGAsync installer

Unsigned Windows loader with anti-analysis surfacesSelf copy append and relaunch
SHA-25630be55080b039d5ffa957dd4c02b3282bfb62f7718c0b3d216c6e54129e665fa
URLhttps://mega.nz/MEGAsyncSetup64.exe
MaleculeK₃(Am₃Li₅Lu)O₆(SCErI₂AlAs)H₁₁(Cm₃₀Cr₁₆Db₈Ds₂F₂₂Hf₅Mg₅Os₂₉Po₂₆Ti₂U₆)Md₆(Bi₁₇Li₂PaPtSi₂)

Evidence

NSIS self-extracting installer 0x256f–0x263f
⋯3 more rows
0x259f2f00008b45dca9f0ffffff7572817de0/...E......ur.}.
0x25afefbeadde7569817dec496e7374756081....ui.}.Instu`.
0x25bf7de8736f66747557817de44e756c6c75}.softuW.}.Nullu
0x25cf4e0945088b45088b0df00e420083e002N.E..E.....B....
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.