Benign Download

Capture One Software License Agreement.rtf

RTF field target is a remote URLEncoded payload detected: hex
SHA-25659baee58f5aa6b0b437bd94016449a5aca89ed1deb012349a6ac4bd3053ae506
MaleculeMd₂(Pd)

Evidence

Encoded payload detected: hex lines 755–759
7550000014000000554000055550000100100000555400001555000000000001d400000100100000555400000000001c0541c000aa8000000a000000aaa00002aaa
7568000280280000aaa800000aaa800000000000a800000280280000aaa800000000002e8a8be000000000000000000000000000000000000000000000000000000
75700000000000000000000000000000000000000000000740170000000000000000000000000000000000000000000000000000000000000000000000000000000
758000000000000000000003fabe00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015dd
75940000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bfe8000451a0000410bc6008800

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.