Hostile ^92% datasets Download

243885

Legitimate Microsoft Visual Studio DLL

autogenerated rule brought to you by yara-signatorAuthenticode chain CN: Microsoft Corporation

SHA-256bfb1655f0fe89d35dc9a55e8693a9bd62a2c22f31fbbc2785eac1a56b3008ecc

Evidence

Contains common English function words 0x0–0xb0

⋯3 more rows
0x30000000000000000000000000f8000000................
0x400e1fba0e00b409cd21b8014ccd215468........!..L.!Th
0x5069732070726f6772616d2063616e6e6fis program canno
⋯6 more rows

Contains common English function words 0x25cf–0x265f

0x25cf6e672c20796f75206d757374206f7665ng, you must ove
0x25df72726964652070726f636573735f696erride process_in
0x25ef7075745f6d6573736167657320696e20put_messages in 
0x25ff746865206d65737361676520626c6f63the message bloc
0x260f6b2e000000ec30011040f20110942701k.....0..@....'.
⋯5 more rows

autogenerated rule brought to you by yara-signator 0x3a23b–0x3a3bb

⋯7 more rows
0x3a2ab75138b4508508b4de8e8a7fdffffb001u..E.P.M........
0x3a2bbe9220100008d4df2894dd06859020000."....M..M.hY...
0x3a2cb687c5f00108b55d00fb602506a28e822h|_...U....Pj(."
⋯15 more rows

IsDebuggerPresent API name in PE strings 0x86c0a–0x86d0a

⋯3 more rows
0x86c3a63657074696f6e46696c746572005f05ceptionFilter._.
0x86c4a5465726d696e61746550726f63657373TerminateProcess
0x86c5a00006d03497350726f636573736f7246..m.IsProcessorF
0x86c6a65617475726550726573656e74006703eaturePresent.g.
0x86c7a4973446562756767657250726573656eIsDebuggerPresen
0x86c8a74002d045175657279506572666f726dt.-.QueryPerform
0x86c9a616e6365436f756e746572000a024765anceCounter...Ge
⋯7 more rows

PE company name identifies Microsoft 0x86de0–0x870d0

⋯7 more rows
0x86e5000000000000000000000000000000000................
0x86e60b00334000000560053005f0056004500..4...V.S._.V.E.
0x86e705200530049004f004e005f0049004e00R.S.I.O.N._.I.N.
⋯6 more rows
0x86ee0ec020000010030003400300039003000......0.4.0.9.0.
0x86ef034004200300000004c001600010043004.B.0...L.....C.
0x86f006f006d00700061006e0079004e006100o.m.p.a.n.y.N.a.
0x86f106d006500000000004d00690063007200m.e.....M.i.c.r.
0x86f206f0073006f0066007400200043006f00o.s.o.f.t. .C.o.
0x86f30720070006f0072006100740069006f00r.p.o.r.a.t.i.o.
0x86f406e000000760027000100460069006c00n...v.'...F.i.l.
0x86f5065004400650073006300720069007000e.D.e.s.c.r.i.p.
0x86f60740069006f006e00000000004d006900t.i.o.n.....M.i.
⋯4 more rows
0x86fb072006100720079000000000066002300r.a.r.y.....f.#.
0x86fc00100460069006c006500560065007200..F.i.l.e.V.e.r.
0x86fd0730069006f006e000000000031003400s.i.o.n.....1.4.
0x86fe02e00300030002e003200330039003100..0.0...2.3.9.1.
0x86ff038002e00300020006200750069006c008...0. .b.u.i.l.
0x8700074002000620079003a00200056004300t. .b.y.:. .V.C.
0x8701054004f004f004c005300520045004c00T.O.O.L.S.R.E.L.
0x87020000000003e000f00010049006e007400....>.....I.n.t.
0x87030650072006e0061006c004e0061006d00e.r.n.a.l.N.a.m.
0x870406500000063006f006e00630072007400e...c.o.n.c.r.t.
0x8705031003400300064002e0064006c006c001.4.0.d...d.l.l.
0x870600000000080002e0001004c0065006700..........L.e.g.
0x8707061006c0043006f007000790072006900a.l.C.o.p.y.r.i.
0x870806700680074000000a90020004d006900g.h.t..... .M.i.
0x87090630072006f0073006f00660074002000c.r.o.s.o.f.t. .
0x870a043006f00720070006f00720061007400C.o.r.p.o.r.a.t.
0x870b069006f006e002e00200041006c006c00i.o.n... .A.l.l.
0x870c020007200690067006800740073002000 .r.i.g.h.t.s. .
0x870d072006500730065007200760065006400r.e.s.e.r.v.e.d.