Benign Download

Trojan-PSW.Win32.Gamec.cx

Execute shell command (ShellExecuteA)Detour-style InstallHook helper name
SHA-25682d47e241bf01315754caedd83a37f51c2bc3bc251c4defe5356a5c2e8ac8fd4
MaleculeO(Er)H(Po)

Evidence

Detour-style InstallHook helper name 0xe004–0xe0c4
⋯3 more rows
0xe0345010010001000000446c6c2e646c6c00P.......Dll.dll.
0xe044496e7374616c6c486f6f6b00496e7374InstallHook.Inst
0xe054616c6c486f6f6b310000000000000000allHook1........
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.