Benign Download

Trojan-Downloader.VBS.Small.eh

HTTP URL ending in executable suffixShellExecute with hidden show-command
SHA-256b17e39351a409988a1297dc09972b06404f53ad2d9696f117a5b2fdf64cf6af9
MaleculeH₂(Cm₂Po)

Evidence

References HTTP responseBody property lines 1–48
1<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
2<!-- saved from url=(0037)http://www.misofthelp.com/update.html -->
3<HTML><HEAD><TITLE>help</TITLE>
4<META http-equiv=Content-Type content="text/html; charset=US-ASCII">
5<META content="MSHTML 6.00.6000.16414" name=GENERATOR></HEAD>
⋯43 lines

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.