Benign windows Download

dotenvx.dotenvx 2.28.2-windows-x86_64

Android /sdcard pathAndroid Download folder
SHA-2565ff2c5c26a991a64d26b912a47d1e38a761ea1676d84c6c6e179c0041d208a4f
URLhttps://github.com/dotenvx/dotenvx/releases/download/v2.28.2/dotenvx-2.28.2-windows-x86_64.zip
MaleculeK₂(Li₅Te)O₇(As₁₁C₁₂CaDy₄Er₄IP₃)H₁₁(Cm₃₁Cr₁₅Db₇DsF₁₅HfMg₃Os₁₉Po₂₃TiU)Md₈(Bi₁₆BkIn₅Pa₃PtSi)Th

Evidence

Large PE with elevated code entropy 0x3c0–0x670
⋯3 more rows
0x3f000000000000000000000000000000000................
0x4004989d831c00fa231c081fb43656e7475I..1...1...Centu
0x4101281fa61757248754481f961756c7375...aurHuD..aulsu
0x4203ceb1881fb20205368753281fa616e67<.... Shu2..ang
0x43068752a81f9616920207522b8000000c0hu*..ai u".....
0x4400fa289c231c081fa010000c0720fb801....1.......r...
0x4500000c00fa289d083e0ef83c8104c89c3.............L..
0x460f3c39090909090909090909090909090................
0x4708b91f0000000ffc2c1e2028b010fc889................
0x48001488d490483ea0175f1f3c390909090.H.I....u.......
0x4904889ca9c488d0545377602e810000000H...H..E7v......
0x4a0488d642408f3c3909090909090909090H.d$............
0x4b04c8b442408490fbae01e7307483b1074L.D$.I....s.H;.t
0x4c0029c9d488910f3c39090909090909090...H............
0x4d09c9df3c3909090909090909090909090................
0x4e048897c240848897424104889e04889cfH.|$.H.t$.H..H..
0x4f04889d64c89c24989d8b901000000488dH..L..I.......H.
0x5005a20488d5210f30fa7c84c89c3488b7cZ H.R.....L..H.|
0x5102408488b742410f3c390909090909090$.H.t$..........
0x52048897c240848897424104889e04889cfH.|$.H.t$.H..H..
0x5304889d689f20fa7c0488b7c2408488b74H.......H.|$.H.t
0x5402410f3c3909090909090909090909090$...............
0x55048897c240848897424104889e04889cfH.|$.H.t$.H..H..
0x5604889d64c89c24889d14889fa0f100748H..L..H..H.....H
0x57081ec880000008b47100f2904244889e7.......G..).$H..
0x580894424104831c0f30fa6c80f2804248b.D$.H1......(.$.
0x5904424104881c4880000000f1102894210D$.H..........B.
0x5a0488b7c2408488b742410f3c390909090H.|$.H.t$.......
0x5b048897c240848897424104889e04889cfH.|$.H.t$.H..H..
0x5c04889d64c89c24889d14889fa0f100748H..L..H..H.....H
0x5d081ec880000008b47100f2904244889e7.......G..).$H..
0x5e08944241048c7c0fffffffff30fa6c80f.D$.H...........
0x5f02804248b4424104881c4880000000f11(.$.D$.H........
0x60002894210488b7c2408488b742410f3c3..B.H.|$.H.t$...
0x61048897c240848897424104889e04889cfH.|$.H.t$.H..H..
0x6204889d64c89c24889d14889fa0f100748H..L..H..H.....H
0x63081ec880000000f104f100f2904244889........O..).$H.
0x640e70f294c24104831c0f30fa6d00f2804..)L$.H1......(.
0x650240f284c24104881c4880000000f1102$.(L$.H.........
0x6600f114a10488b7c2408488b742410f3c3..J.H.|$.H.t$...
0x67048897c240848897424104889e04889cfH.|$.H.t$.H..H..
Large null run in executable (64+ bytes) 0x21ec0–0x220a0
0x21ec0488b7c2408488b742410f3c390909090H.|$.H.t$.......
0x21ed090909090909090909090909090909090................
0x21ee090909090909090909090909090909090................
0x21ef090909090909090909090909090909090................
0x21f0000000000000000000000000000000000................
0x21f1000000000000000000000000000000000................
0x21f2000000000000000000000000000000000................
0x21f3000000000000000000000000000000000................
0x21f4001000000000000008280000000000000................
0x21f508a800000000000800080008000000080................
0x21f608b800000000000000100008000000000................
0x21f7081800080000000800980000000000080................
0x21f808a000000000000008800000000000000................
0x21f9009800080000000000a00008000000000................
0x21fa08b800080000000008b00000000000080................
0x21fb089800000000000800380000000000080................
0x21fc002800000000000808000000000000080................
0x21fd00a800000000000000a00008000000080................
0x21fe081800080000000808080000000000080................
0x21ff001000080000000000880008000000080................
0x220004b656363616b2d31363030206162736fKeccak-1600 abso
0x22010726220616e642073717565657a652066rb and squeeze f
0x220206f72207838365f36342c204352595054or x86_64, CRYPT
0x220304f47414d53206279203c617070726f40OGAMS by <appro@
0x220406f70656e73736c2e6f72673e00ccccccopenssl.org>....
0x22050cccccccccccccccccccccccccccccccc................
0x22060cccccccccccccccccccccccccccccccc................
0x22070cccccccccccccccccccccccccccccccc................
0x2208048897c240848897424104889e04889cfH.|$.H.t$.H..H..
0x220904889d64c89c24c89c9f30f1efa4809f6H..L..L......H..
0x220a0750c488b7c2408488b742410 u.H.|$.H.t$.
X25519 or Curve25519 algorithm reference 0x2ae00–0x2aed0
0x2ae004883d0004c8d1c0048c1f83f49d1eb48H...L...H..?I..H
0x2ae10f7d04883e0134929c04983d9004983da..H...I).I...I..
0x2ae20004983db004c89074c894f084c895710.I...L..L.O.L.W.
0x2ae304c895f18488b7c2408488b742410f3c3L._.H.|$.H.t$...
0x2ae40583235353139207072696d6974697665X25519 primitive
0x2ae507320666f72207838365f36342c204352s for x86_64, CR
0x2ae605950544f47414d53206279203c617070YPTOGAMS by <app
0x2ae70726f406f70656e73736c2e6f72673e00[email protected]>.
0x2ae805657535541544155415641579c4883ecVWSUATAUAVAW.H..
0x2ae9040498b4078498b98f8000000498b7108@[email protected].
0x2aea04d8b5938458b134e8d14164c39d30f82M.Y8E..N...L9...
0x2aeb09a000000498b8098000000e98e000000....I...........
0x2aec05657535541544155415641579c4883ecVWSUATAUAVAW.H..
0x2aed040498b4078498b98f8000000498b71 @[email protected]
ChaCha20/Salsa20 cipher constant 0x54e40–0x54f10
0x54e4010000000100000001000000010000000................
0x54e5010000000100000001000000010000000................
0x54e6010000000100000001000000010000000................
0x54e7010000000100000001000000010000000................
0x54e80657870616e642033322d62797465206bexpand 32-byte k
0x54e9000436861436861323020666f72207838.ChaCha20 for x8
0x54ea0365f36342c2043525950544f47414d536_64, CRYPTOGAMS
0x54eb0206279203c617070726f406f70656e73 by <appro@opens
0x54ec0736c2e6f72673e009090909090909090sl.org>.........
0x54ed090909090909090909090909090909090................
0x54ee090909090909090909090909090909090................
0x54ef090909090909090909090909090909090................
0x54f0048897c240848897424104889e04889cfH.|$.H.t$.H..H..
0x54f104889d64c89c24c89c9 H..L..L..
Large binary with repetitive padding 0x68c70–0x68d40
0x68c7090909090909090909090909090909090................
0x68c80030f0b0706020e0a0905010d0c080400................
0x68c900f0805020e0b04010d0a07000c090603................
0x68ca00300010206070405090a0b080c0d0e0f................
0x68cb055555555555555555555555555555555UUUUUUUUUUUUUUUU
0x68cc0333333333333333333333333333333333333333333333333
0x68cd00f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f................
0x68ce001020300060704050b08090a0c0d0e0f................
0x68cf00f0a05000e0904030d0807020c0b0601................
0x68d000b07030f06020e0a010d09050c080400................
0x68d10000102030405060708090a0b0f0e0d0c................
0x68d200b07030c06020d0a010e09050f080400................
0x68d3000000000000000000000000001000000................
0x68d4000000000000000000000000002000000................

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.