Benign windows Download

Foundry376.Mailspring

Zero-entropy exe section (carved/packed PE)String extraction truncated due to limits (count: 100000, total bytes: 50 MB)

SHA-256920a0b72cd8f988f53b8e0d4255430d6e3de346263838133133036c2bbd0a33d

URLhttps://github.com/Foundry376/Mailspring/releases/download/1.24.0/MailspringSetup.exe

MaleculeO₂(AsDy)H₇(CmDbF₆MgOs₇Po₅U)Md₂(Bi₄)

Evidence

Zero-entropy exe section (carved/packed PE) 0x3a0–0x4e0

⋯5 more rows
0x3f000000000000000000000000000000000................
0x400b9e4a84200e8d20b000085c07909c605...B........y...
0x4104cb8420001eb0ac705d4a84200280000L.B........B.(..
0x4200068b8e24100e8d298000059c3b9d4ac.h..A......Y....
0x4304200e8c89200006821e34100e8bc9800B......h!.A.....
⋯11 more rows

Transacted registry open API lookup 0x23918–0x239e8

⋯3 more rows
0x23948330032002e0064006c006c00000000003.2...d.l.l.....
0x239585265674f70656e4b65795472616e7361RegOpenKeyTransa
0x239686374656457000000684b420020756e7actedW...hKB. unz
0x23978697020302e313520436f707972696768ip 0.15 Copyrigh
⋯7 more rows

HKCU registry hive reference 0x25b28–0x25c18

⋯3 more rows
0x25b580a00000048004b004300520000000000....H.K.C.R.....
0x25b6848004b00430055000000000048004b00H.K.C.U.....H.K.
0x25b784c004d000000000048004b0055000000L.M.....H.K.U...
⋯10 more rows

Transacted registry create API lookup 0x25ce8–0x25de8

⋯3 more rows
0x25d18440065006c0065007400650000000000D.e.l.e.t.e.....
0x25d2846006f00720063006500520065006d00F.o.r.c.e.R.e.m.
0x25d386f007600650000004e006f0052006500o.v.e...N.o.R.e.
0x25d486d006f00760065000000000056006100m.o.v.e.....V.a.
0x25d586c0000005265674372656174654b6579l...RegCreateKey
0x25d685472616e736163746564570053000000TransactedW.S...
0x25d784d000000440000004200000041007000M...D...B...A.p.
⋯7 more rows

Transacted registry delete API lookup 0x25e50–0x25f20

⋯3 more rows
0x25e80187642002c7642003c76420050764200.vB.,vB.<vB.PvB.
0x25e9052656744656c6574654b65795472616eRegDeleteKeyTran
0x25ea0736163746564570052656744656c6574sactedW.RegDelet
0x25eb0654b657945785700b07c4200e1784000eKeyExW..|B..x@.
⋯7 more rows