Benign windows Download

talosctl

Amplification chr() payload suffixAssembly LOOP target mnemonic

Evidence

ChaCha quarter-round rotation schedule 0x357506–0x3575c6
⋯3 more rows
0x35753648899c24080100008d9a6e64203331cbH..$......nd 31.
0x357546c1c310418d4c1d00894c247c31d1c1c1...A.L...L$|1...
0x3575560c448d2c0a458dad6e6420334431ebc1.D.,.E..nd 3D1..
⋯7 more rows
WinForms Label control token 0x3005d83–0x3005e43
⋯3 more rows
0x3005db3000567726f7570010556616c75650105..group..Value..
0x3005dc34c6162656c00052a696e743800052a75Label..*int8..*u
0x3005dd3696e7400052a626f6f6c000572657470int..*bool..retp
⋯7 more rows
AES key option for Kerberos authentication 0x300aab2–0x300ab72
⋯3 more rows
0x300aae232400100000000066167654164640006[email protected]..
0x300aaf26165734b657900066b65794c656e0006aesKey..keyLen..
0x300ab02696e6353657100066469644852520006incSeq..didHRR..
⋯7 more rows
.NET resource GetObject token 0x301cca0–0x301cd60
⋯3 more rows
0x301ccd0746f72000964656661756c7465720109tor..defaulter..
0x301cce04765744f626a65637400096e616d6556GetObject..nameV
0x301ccf0616c756500096f6d6974656d70747901alue..omitempty.
⋯7 more rows
Clipboard keyword 0x301d139–0x301d1f9
⋯3 more rows
0x301d169696e7400096d61784c656e6774680009int..maxLength..
0x301d179636c6970626f6172640009756e646f53clipboard..undoS
0x301d1897461636b0109476574437572736f7201tack..GetCursor.
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.