Benign pe-machine-learning-dataset Download

514057

ANSI GUI active-window probe clusterRecognized marker for Windows debugger import detection
SHA-256545a4d97f1344b8616c4feab1bd5daf970c65399f976f49df6230b8c803f6f5d
MaleculeO(Al₂)H₂(DsU)Md(Bi)

Evidence

Dynamic library loading via LoadLibraryW 0x25fb8–0x26118
0x25fb8e04340004ce14200f844400077454000[email protected]@.wE@.
0x25fc8556e6b6e6f776e20657863657074696fUnknown exceptio
0x25fd86e00000018474300684743006d007300n....GC.hGC.m.s.
0x25fe863006f007200650065002e0064006c00c.o.r.e.e...d.l.
0x25ff86c000000436f724578697450726f6365l...CorExitProce
0x260087373000065787000706f77006c6f6700ss..exp.pow.log.
0x260186c6f67313000000073696e6800000000log10...sinh....
0x26028636f73680000000074616e6800000000cosh....tanh....
0x260386173696e0000000061636f7300000000asin....acos....
0x260486174616e000000006174616e32000000atan....atan2...
0x26058737172740000000073696e00636f7300sqrt....sin.cos.
0x2606874616e006365696c00000000666c6f6ftan.ceil....floo
0x260787200000066616273000000006d6f6466r...fabs....modf
0x26088000000006c646578700000005f636162....ldexp..._cab
0x26098730000005f6879706f740000666d6f64s..._hypot..fmod
0x260a80000000066726578700000005f793000....frexp..._y0.
⋯7 more rows
ANSI GUI active-window probe cluster 0x29ad8–0x29b58
0x29ad8000000004d657373616765426f785700....MessageBoxW.
0x29ae847657441637469766557696e646f7700GetActiveWindow.
0x29af84765744c617374416374697665506f70GetLastActivePop
0x29b0875700000476574557365724f626a6563up..GetUserObjec
0x29b1874496e666f726d6174696f6e57000000tInformationW...
0x29b2847657450726f6365737357696e646f77GetProcessWindow
0x29b3853746174696f6e000000000000000000Station.........
0x29b4800000000000000000000000000000000................
0x29b5800000000000000 .......
Embedded absolute PDB path 0x2cf50–0x2cf90
0x2cf50bb754b48ab0ca2b971ca1d7701000000.uKH....q..w....
0x2cf60633a5c73747265616d5c646576656c6fc:\stream\develo
0x2cf70705c526567696f6e68756e742e706462p\Regionhunt.pdb
0x2cf8000000000000000009800000098000000................
0x2cf9000000000000000009845430000000000.........EC.....
Debugger detection via Windows API 0x2ddca–0x2de0a
0x2ddca0000180452746c556e77696e64000003....RtlUnwind...
0x2ddda4973446562756767657250726573656eIsDebuggerPresen
0x2ddea74000403497350726f636573736f7246t...IsProcessorF
0x2ddfa65617475726550726573656e74000202eaturePresent...
0x2de0a47 G
OutputDebugString API reference 0x2e0c6–0x2e106
0x2e0c64c434d6170537472696e675700008a03LCMapStringW....
0x2e0d64f75747075744465627567537472696eOutputDebugStrin
0x2e0e6675700006902476574537472696e6754gW..i.GetStringT
0x2e0f67970655700005701466c75736846696cypeW..W.FlushFil
0x2e1066542 eB

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.