Benign Download

Trojan-PSW.Win32.Delf.ah

Image list icon size importExecute shell command (ShellExecuteA)
SHA-2566382426b82c1c4bb03e1870f14ee468403771b0da6e2ad63b55eb39a6ce881c4
MaleculeH₂(PoU)

Evidence

Execute shell command (ShellExecuteA) 0x6b49c–0x6b78c
0x6b49c00000000000000000000000000000000................
0x6b4ac00000000000000000000000000000000................
0x6b4bc00000000000000000000000000000000................
0x6b4cc00000000000000000000000000000000................
0x6b4dc00000000000000000000000000000000................
⋯36 more rows
0x6b72c00000000000000000000000000000000................
0x6b73c00000000000000000000000000000000................
0x6b74c00000000000000000000000000000000................
0x6b75c00000000000000000000000000000000................
⋯3 more rows
Query/set system parameters (string) 0x852d2–0x85372
0x852d273736167650000005472616e736c6174ssage...Translat
0x852e2654d4449537973416363656c00000054eMDISysAccel...T
0x852f27261636b506f7075704d656e75000000rackPopupMenu...
0x8530253797374656d506172616d6574657273SystemParameters
0x85312496e666f4100000053686f7757696e64InfoA...ShowWind
0x853226f7700000053686f775363726f6c6c42ow...ShowScrollB
⋯5 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.