90b2ceb05b34ed6012d20b547cec83a2dacbe56659eb4479150f30015172c3c2

HOSTILE

90b2ceb05b34ed6012d20b547cec83a2dacbe56659eb4479150f30015172c3c2 · 92%

AI Obfuscated malware with steganographic payload

Mal-ecule

O(As₂)H₂(Db₄Po)Md₄(Bi₅BkPa)Th

Size 1.1 MB download

First seen 15 days ago

Analyzed 15 days ago

Ecosystem windows

Source abuse.ch

Also detected by 2 sources

.NET bitmap pixel payload reaches reflected instantiation: T. HALK BANKASI.com:0x0

SuppressIldasm name in managed PE strings: T. HALK BANKASI.com:0x10453f

T. HALK BANKASI.com pe

0x0	4d5a90000300000004000000ffff0000	MZ...............NET bitmap pixel payload reaches reflected instantiation
0x10	b8000000000000004000000000000000	........@.......
0x20	00000000000000000000000000000000	................
0x30	00000000000000000000000080000000	................
0x40	0e1fba0e00b409cd21b8014ccd215468	........!..L.!Th
0x50	69732070726f6772616d2063616e6e6f	is program canno
0x60	742062652072756e20696e20444f5320	t be run in DOS
0x70	6d6f64652e0d0d0a2400000000000000	mode....$.......
0x80	504500004c01030078d0736a00000000	PE..L...x.sj....
0x90	00000000e00002010b01300000801100	..........0.....
0xa0	0008000000000000de9e110000200000	............. ..
0xb0	00a01100000040000020000000020000	......@.. ......
0xc0	04000000000000000600000000000000	................
0xd0	00e01100000200000000000002006085	..............`.
0xe0	00001000001000000000100000100000	................
0xf0	00000000100000000000000000000000	................
0x100	889e11005300000000a0110098050000	....S...........
0x110	00000000000000000000000000000000	................
0x120	00c011000c00000000000000	............

0x173af	3d342e302e302e302c2043756c747572	=4.0.0.0, Cultur
0x173bf	653d6e65757472616c2c205075626c69	e=neutral, Publi
0x173cf	634b6579546f6b656e3d623033663566	cKeyToken=b03f5f
0x173df	37663131643530613361050100000015	7f11d50a3a......
0x173ef	53797374656d2e44726177696e672e42	System.Drawing.B.NET bitmap pixel payload reaches reflected instantiation
0x173ff	69746d61700100000004446174610702	itmap.....Data..
0x1740f	0200000009030000000f03000000161f	................
0x1741f	010002424d161f010000000000360000	...BM........6..
0x1742f	00280000008800000087000000010020	.(.............
0x1743f	000000000000000000c40e0000c40e00	................
0x1744f	000000000000000000000000ff10cc2b	...............+
0x1745f	ff060000ff000001ff040000ff280400	.............(..
0x1746f	ff201c25ff7b2004ff200400ff2d1626	. .%.{ .. ...-.&
0x1747f	ff201725ff	. .%.

0xff968	00000000000003c000000000000003c0	................
0xff978	00000000000003c000000000000003ff	................
0xff988	ffffffffffffffffffffffffffffffff	................
0xff998	ffffffffffffffffffffffffffffffff	................
0xff9a8	ffffffffffffffffffffffffffffffff	................
0xff9b8	ffffffffffffffffffffffffffffffff	................
0xff9c8	ffffffffffffffffffffffffffffffff	................
0xff9d8	ffffffffffffffffffffffffffffff0b	................
0xff9e8	42534a42010001000000000010000000	BSJB.............NET bitmap pixel payload reaches reflected instantiation
0xff9f8	76342e302e3330333139000000000000	v4.0.30319......
0xffa08	00000900b4000000904a0000237e0000	.........J..#~..
0xffa18	444b0000ec26010023537472696e6773	DK...&..#Strings
0xffa28	00000000307201000400000023555300	....0r......#US.
0xffa38	34720100100000002347554944000000	4r......#GUID...
0xffa48	447201004014000023426c6f62000000	Dr..@...#Blob...
0xffa58	84860100100000002347554944000000	........#GUID...
0xffa68	948601000400000023537472696e6773	........#Strings
0xffa78	00000000988601000400000023426c6f	............#Blo
0xffa88	620000009c8601000400000023536368	b...........#Sch
0xffa98	656d6100000000000200410157dfa2fd	ema.......A.W...
0xffaa8	090f000000fa25330016000002000000	......%3........
0xffab8	b40000001d000000a000000067020000	............g...
0xffac8	6e000000010000008501000001000000	n...............
0xffad8	55000000010000000100000031000000	U...........1...
0xffae8	05000000	....

0x1102b5	e280abe280aae281afe2808ce281aae2	................
0x1102c5	80abe281ade281abe2808de2808ce280	................
0x1102d5	8ee281ade281abe2808be280aae280ad	................
0x1102e5	e281abe280ae00436f6d706f6e656e74	.......Component
0x1102f5	5265736f757263654d616e6167657200	ResourceManager..NET bitmap pixel payload reaches reflected instantiation
0x110305	e280abe2808ce281aee2808fe2808de2	................
0x110315	81afe2808fe280aee280aee280ade280	................
0x110325	aae281abe280aee281afe280ade2808d	................
0x110335	e2808ee281aee280ade2808fe281aee2	................
0x110345	808ee280aae281ace281ade281aae280	................
0x110355	8fe2808de281aae2808ee281aee2808b	................
0x110365	e2808ce280aee281ade281ade280aae2	................
0x110375	81ace281ade280aee280ae00e281aa	...............

0x1110ff	e280ade2808fe281ade280abe280aee2	................
0x11110f	81aae280ace281ade280ade281abe280	................
0x11111f	8ee280aae280abe280aee281ade2808e	................
0x11112f	e280ade2808fe281ade2808de280ae00	................
0x11113f	5265736f757263654d616e6167657200	ResourceManager..NET bitmap pixel payload reaches reflected instantiation
0x11114f	53797374656d2e5265736f7572636573	System.Resources
0x11115f	00e281aae280abe280aee281ace280ac	................
0x11116f	e280abe2808fe281aae2808ce2808ce2	................
0x11117f	81ace2808ee280ace2808ce280ace281	................
0x11118f	ace281ace281afe2808ce2808be2808d	................
0x11119f	e281ade280aee280abe280aae280aee2	................
0x1111af	80ace281abe281ace280aae2808fe280	................
0x1111bf	ace281aae281ace280aee280ace280	...............

Objectives

0x0	4d5a90000300000004000000ffff0000	MZ..............
0x10	b8000000000000004000000000000000	........@.......
0x20	00000000000000000000000000000000	................
0x30	00000000000000000000000080000000	................
0x40	0e1fba0e00b409cd21b8014ccd215468	........!..L.!Th
0x50	69732070726f6772616d2063616e6e6f	is program canno
0x60	742062652072756e20696e20444f5320	t be run in DOS
0x70	6d6f64652e0d0d0a2400000000000000	mode....$.......
0x80	504500004c01030078d0736a00000000	PE..L...x.sj....
0x90	00000000e00002010b01300000801100	..........0.....
0xa0	0008000000000000de9e110000200000	............. ..
0xb0	00a01100000040000020000000020000	......@.. ......
0xc0	04000000000000000600000000000000	................
0xd0	00e01100000200000000000002006085	..............`.
0xe0	00001000001000000000100000100000	................
0xf0	00000000100000000000000000000000	................
0x100	889e11005300000000a0110098050000	....S...........
0x110	00000000000000000000000000000000	................
0x120	00c011000c00000000000000	............

0x173af	3d342e302e302e302c2043756c747572	=4.0.0.0, Cultur
0x173bf	653d6e65757472616c2c205075626c69	e=neutral, Publi
0x173cf	634b6579546f6b656e3d623033663566	cKeyToken=b03f5f
0x173df	37663131643530613361050100000015	7f11d50a3a......
0x173ef	53797374656d2e44726177696e672e42	System.Drawing.B
0x173ff	69746d61700100000004446174610702	itmap.....Data..
0x1740f	0200000009030000000f03000000161f	................
0x1741f	010002424d161f010000000000360000	...BM........6..
0x1742f	00280000008800000087000000010020	.(.............
0x1743f	000000000000000000c40e0000c40e00	................
0x1744f	000000000000000000000000ff10cc2b	...............+
0x1745f	ff060000ff000001ff040000ff280400	.............(..
0x1746f	ff201c25ff7b2004ff200400ff2d1626	. .%.{ .. ...-.&
0x1747f	ff201725ff	. .%.

0xff968	00000000000003c000000000000003c0	................
0xff978	00000000000003c000000000000003ff	................
0xff988	ffffffffffffffffffffffffffffffff	................
0xff998	ffffffffffffffffffffffffffffffff	................
0xff9a8	ffffffffffffffffffffffffffffffff	................
0xff9b8	ffffffffffffffffffffffffffffffff	................
0xff9c8	ffffffffffffffffffffffffffffffff	................
0xff9d8	ffffffffffffffffffffffffffffff0b	................
0xff9e8	42534a42010001000000000010000000	BSJB............
0xff9f8	76342e302e3330333139000000000000	v4.0.30319......
0xffa08	00000900b4000000904a0000237e0000	.........J..#~..
0xffa18	444b0000ec26010023537472696e6773	DK...&..#Strings
0xffa28	00000000307201000400000023555300	....0r......#US.
0xffa38	34720100100000002347554944000000	4r......#GUID...
0xffa48	447201004014000023426c6f62000000	Dr..@...#Blob...
0xffa58	84860100100000002347554944000000	........#GUID...
0xffa68	948601000400000023537472696e6773	........#Strings
0xffa78	00000000988601000400000023426c6f	............#Blo
0xffa88	620000009c8601000400000023536368	b...........#Sch
0xffa98	656d6100000000000200410157dfa2fd	ema.......A.W...
0xffaa8	090f000000fa25330016000002000000	......%3........
0xffab8	b40000001d000000a000000067020000	............g...
0xffac8	6e000000010000008501000001000000	n...............
0xffad8	55000000010000000100000031000000	U...........1...
0xffae8	05000000	....

0x1102b5	e280abe280aae281afe2808ce281aae2	................
0x1102c5	80abe281ade281abe2808de2808ce280	................
0x1102d5	8ee281ade281abe2808be280aae280ad	................
0x1102e5	e281abe280ae00436f6d706f6e656e74	.......Component
0x1102f5	5265736f757263654d616e6167657200	ResourceManager.
0x110305	e280abe2808ce281aee2808fe2808de2	................
0x110315	81afe2808fe280aee280aee280ade280	................
0x110325	aae281abe280aee281afe280ade2808d	................
0x110335	e2808ee281aee280ade2808fe281aee2	................
0x110345	808ee280aae281ace281ade281aae280	................
0x110355	8fe2808de281aae2808ee281aee2808b	................
0x110365	e2808ce280aee281ade281ade280aae2	................
0x110375	81ace281ade280aee280ae00e281aa	...............

0x1110ff	e280ade2808fe281ade280abe280aee2	................
0x11110f	81aae280ace281ade280ade281abe280	................
0x11111f	8ee280aae280abe280aee281ade2808e	................
0x11112f	e280ade2808fe281ade2808de280ae00	................
0x11113f	5265736f757263654d616e6167657200	ResourceManager.
0x11114f	53797374656d2e5265736f7572636573	System.Resources
0x11115f	00e281aae280abe280aee281ace280ac	................
0x11116f	e280abe2808fe281aae2808ce2808ce2	................
0x11117f	81ace2808ee280ace2808ce280ace281	................
0x11118f	ace281ace281afe2808ce2808be2808d	................
0x11119f	e281ade280aee280abe280aae280aee2	................
0x1111af	80ace281abe281ace280aae2808fe280	................
0x1111bf	ace281aae281ace280aee280ace280	...............

0x115ae0	ae005265736f757263657300436c6f75	..Resources.Clou
0x115af0	644a61722e50726f7065727469657300	dJar.Properties.
0x115b00	7265736f757263654d616e007265736f	resourceMan.reso
0x115b10	7572636543756c74757265006765745f	urceCulture.get_
0x115b20	5265736f757263654d616e6167657200	ResourceManager.
0x115b30	6765745f43756c74757265007365745f	get_Culture.set_
0x115b40	43756c74757265006765745f66726271	Culture.get_frbq
0x115b50	006765745f55445000e2808ce281ade2	.get_UDP........
0x115b60	808be280ace280aee2808de281abe280	................
0x115b70	aee280abe281ace280abe2808be281ac	................
0x115b80	e281abe280aee281aae2808ee280ade2	................
0x115b90	80ade280aee2808be2808de2808de281	................
0x115ba0	abe280aae2808ce281ace2808fe280	...............

0x1044df	07000000000000210079070000000000	.......!.y......
0x1044ef	002300790700002200ba0d1c00ba0d1e	.#.y..."........
0x1044ff	00ba0d2000ba0d1a00ba0d15011e0f17	... ............
0x10450f	011e0f1701300f93013e1097017b1093	.....0...>...{..
0x10451f	01b9109d01300f9f01300f0000007665	.....0...0....ve
0x10452f	58522e657865006d73636f726c696200	XR.exe.mscorlib.
0x10453f	5375707072657373496c6461736d4174	SuppressIldasmAt
0x10454f	747269627574650053797374656d2e52	tribute.System.R
0x10455f	756e74696d652e436f6d70696c657253	untime.CompilerS
0x10456f	65727669636573002e63746f72003c4d	ervices..ctor.<M
0x10457f	6f64756c653e00e2808ce280ade280ad	odule>..........
0x10458f	e2808fe281aae281aee281ade2808fe2	................
0x10459f	81afe2808be281ade281ade281abe281	................
0x1045af	abe281ace280ade2808de2808ce281ad	................
0x1045bf	e281afe281ade280ace280abe2808ce2	................
0x1045cf	80abe2808de281aee2808ee281ade281	................
0x1045df	ace2808be2808de2808de281abe280ae	................
0x1045ef	e2808ce281abe281ace281aee280aee2	................
0x1045ff	80ae00e281ade280ace2808ee2808be2	................
0x10460f	808be2808be281	.......

0x1164cf	61626c6556697375616c5374796c6573	ableVisualStyles
0x1164df	00536574436f6d70617469626c655465	.SetCompatibleTe
0x1164ef	787452656e646572696e674465666175	xtRenderingDefau
0x1164ff	6c740052756e00446f75626c6500496e	lt.Run.Double.In
0x11650f	7433320046726f6d4172676200537973	t32.FromArgb.Sys
0x11651f	74656d2e436f726500456e756d657261	tem.Core.Enumera
0x11652f	626c650053797374656d2e4c696e7100	ble.System.Linq.
0x11653f	5265766572736500546f417272617900	Reverse.ToArray.
0x11654f	416374697661746f72006765745f4375	Activator.get_Cu
0x11655f	7272656e74446f6d61696e006765745f	rrentDomain.get_
0x11656f	426173654469726563746f7279005061	BaseDirectory.Pa
0x11657f	746800436f6d62696e650046696c6500	th.Combine.File.
0x11658f	457869737473006765745f436f6c756d	Exists.get_Colum
0x11659f	6e73005772697465586d6c006765745f	ns.WriteXml.get_
0x1165af	436f6e74726f6c7300436c6561720073	Controls.Clear.s
0x1165bf	65745f546f704c6576656c007365745f	et_TopLevel.set_
0x1165cf	466f726d426f726465725374796c6500	FormBorderStyle.
0x1165df	7365745f446f636b0053686f77007365	set_Dock.Show.se
0x1165ef	745f4261636b436f6c6f72007365745f	t_BackColor.set_
0x1165ff	466f7265436f6c6f72007365745f5465	ForeColor.set_Te
0x11660f	7874007365745f466c61745374796c65	xt.set_FlatStyle
0x11661f	006765745f466c617441707065617261	.get_FlatAppeara
0x11662f	6e6365007365745f426f726465725369	nce.set_BorderSi
0x11663f	7a65007365745f466f6e740043757273	ze.set_Font.Curs
0x11664f	6f7273006765745f48616e6400736574	ors.get_Hand.set
0x11665f	5f437572736f72006164645f4d6f7573	_Cursor.add_Mous
0x11666f	65456e746572006164645f4d6f757365	eEnter.add_Mouse
0x11667f	4c656176650053757370656e644c6179	Leave.SuspendLay
0x11668f	6f757400496e766f6b654d656d626572	out.InvokeMember
0x11669f	004765744578706f7274656454797065	.GetExportedType
0x1166af	730053706c6974007365745f4c6f6361	s.Split.set_Loca
0x1166bf	74696f6e007365745f4e616d65007365	tion.set_Name.se
0x1166cf	745f53697a65007365745f546162496e	t_Size.set_TabIn
0x1166df	646578007365745f54657874416c6967	dex.set_TextAlig
0x1166ef	6e007365745f55736556697375616c53	n.set_UseVisualS
0x1166ff	74796c654261636b436f6c6f72006164	tyleBackColor.ad
0x11670f	645f436c69636b007365745f4175746f	d_Click.set_Auto
0x11671f	5363616c6544696d656e73696f6e7300	ScaleDimensions.
0x11672f	7365745f4175746f5363616c654d6f64	set_AutoScaleMod
0x11673f	65007365745f436c69656e7453697a65	e.set_ClientSize
0x11674f	007365745f4d6178696d697a65426f78	.set_MaximizeBox
0x11675f	007365745f5374617274506f73697469	.set_StartPositi
0x11676f	6f6e006164645f4c6f61640052657375	on.add_Load.Resu
0x11677f	6d654c61796f75740053656c6563744d	meLayout.SelectM
0x11678f	616e790053656c6563740054616b6500	any.Select.Take.
0x11679f	546f4c697374006765745f5769647468	ToList.get_Width
0x1167af	006765745f486569676874004c6f636b	.get_Height.Lock
0x1167bf	42697473006765745f53747269646500	Bits.get_Stride.

Micro-behaviors

0x1164cf	61626c6556697375616c5374796c6573	ableVisualStyles
0x1164df	00536574436f6d70617469626c655465	.SetCompatibleTe
0x1164ef	787452656e646572696e674465666175	xtRenderingDefau
0x1164ff	6c740052756e00446f75626c6500496e	lt.Run.Double.In
0x11650f	7433320046726f6d4172676200537973	t32.FromArgb.Sys
0x11651f	74656d2e436f726500456e756d657261	tem.Core.Enumera
0x11652f	626c650053797374656d2e4c696e7100	ble.System.Linq.
0x11653f	5265766572736500546f417272617900	Reverse.ToArray.
0x11654f	416374697661746f72006765745f4375	Activator.get_Cu
0x11655f	7272656e74446f6d61696e006765745f	rrentDomain.get_
0x11656f	426173654469726563746f7279005061	BaseDirectory.Pa
0x11657f	746800436f6d62696e650046696c6500	th.Combine.File.
0x11658f	457869737473006765745f436f6c756d	Exists.get_Colum
0x11659f	6e73005772697465586d6c006765745f	ns.WriteXml.get_
0x1165af	436f6e74726f6c7300436c6561720073	Controls.Clear.s
0x1165bf	65745f546f704c6576656c007365745f	et_TopLevel.set_
0x1165cf	466f726d426f726465725374796c6500	FormBorderStyle.
0x1165df	7365745f446f636b0053686f77007365	set_Dock.Show.se
0x1165ef	745f4261636b436f6c6f72007365745f	t_BackColor.set_
0x1165ff	466f7265436f6c6f72007365745f5465	ForeColor.set_Te
0x11660f	7874007365745f466c61745374796c65	xt.set_FlatStyle
0x11661f	006765745f466c617441707065617261	.get_FlatAppeara
0x11662f	6e6365007365745f426f726465725369	nce.set_BorderSi
0x11663f	7a65007365745f466f6e740043757273	ze.set_Font.Curs
0x11664f	6f7273006765745f48616e6400736574	ors.get_Hand.set
0x11665f	5f437572736f72006164645f4d6f7573	_Cursor.add_Mous
0x11666f	65456e746572006164645f4d6f757365	eEnter.add_Mouse
0x11667f	4c656176650053757370656e644c6179	Leave.SuspendLay
0x11668f	6f757400496e766f6b654d656d626572	out.InvokeMember
0x11669f	004765744578706f7274656454797065	.GetExportedType
0x1166af	730053706c6974007365745f4c6f6361	s.Split.set_Loca
0x1166bf	74696f6e007365745f4e616d65007365	tion.set_Name.se
0x1166cf	745f53697a65007365745f546162496e	t_Size.set_TabIn
0x1166df	646578007365745f54657874416c6967	dex.set_TextAlig
0x1166ef	6e007365745f55736556697375616c53	n.set_UseVisualS
0x1166ff	74796c654261636b436f6c6f72006164	tyleBackColor.ad
0x11670f	645f436c69636b007365745f4175746f	d_Click.set_Auto
0x11671f	5363616c6544696d656e73696f6e7300	ScaleDimensions.
0x11672f	7365745f4175746f5363616c654d6f64	set_AutoScaleMod
0x11673f	65007365745f436c69656e7453697a65	e.set_ClientSize
0x11674f	007365745f4d6178696d697a65426f78	.set_MaximizeBox
0x11675f	007365745f5374617274506f73697469	.set_StartPositi
0x11676f	6f6e006164645f4c6f61640052657375	on.add_Load.Resu
0x11677f	6d654c61796f75740053656c6563744d	meLayout.SelectM
0x11678f	616e790053656c6563740054616b6500	any.Select.Take.
0x11679f	546f4c697374006765745f5769647468	ToList.get_Width
0x1167af	006765745f486569676874004c6f636b	.get_Height.Lock
0x1167bf	42697473006765745f53747269646500	Bits.get_Stride.

0x173af	3d342e302e302e302c2043756c747572	=4.0.0.0, Cultur
0x173bf	653d6e65757472616c2c205075626c69	e=neutral, Publi
0x173cf	634b6579546f6b656e3d623033663566	cKeyToken=b03f5f
0x173df	37663131643530613361050100000015	7f11d50a3a......
0x173ef	53797374656d2e44726177696e672e42	System.Drawing.B
0x173ff	69746d61700100000004446174610702	itmap.....Data..
0x1740f	0200000009030000000f03000000161f	................
0x1741f	010002424d161f010000000000360000	...BM........6..
0x1742f	00280000008800000087000000010020	.(.............
0x1743f	000000000000000000c40e0000c40e00	................
0x1744f	000000000000000000000000ff10cc2b	...............+
0x1745f	ff060000ff000001ff040000ff280400	.............(..
0x1746f	ff201c25ff7b2004ff200400ff2d1626	. .%.{ .. ...-.&
0x1747f	ff201725ff	. .%.

0x1102b5	e280abe280aae281afe2808ce281aae2	................
0x1102c5	80abe281ade281abe2808de2808ce280	................
0x1102d5	8ee281ade281abe2808be280aae280ad	................
0x1102e5	e281abe280ae00436f6d706f6e656e74	.......Component
0x1102f5	5265736f757263654d616e6167657200	ResourceManager.
0x110305	e280abe2808ce281aee2808fe2808de2	................
0x110315	81afe2808fe280aee280aee280ade280	................
0x110325	aae281abe280aee281afe280ade2808d	................
0x110335	e2808ee281aee280ade2808fe281aee2	................
0x110345	808ee280aae281ace281ade281aae280	................
0x110355	8fe2808de281aae2808ee281aee2808b	................
0x110365	e2808ce280aee281ade281ade280aae2	................
0x110375	81ace281ade280aee280ae00e281aa	...............

0x1110ff	e280ade2808fe281ade280abe280aee2	................
0x11110f	81aae280ace281ade280ade281abe280	................
0x11111f	8ee280aae280abe280aee281ade2808e	................
0x11112f	e280ade2808fe281ade2808de280ae00	................
0x11113f	5265736f757263654d616e6167657200	ResourceManager.
0x11114f	53797374656d2e5265736f7572636573	System.Resources
0x11115f	00e281aae280abe280aee281ace280ac	................
0x11116f	e280abe2808fe281aae2808ce2808ce2	................
0x11117f	81ace2808ee280ace2808ce280ace281	................
0x11118f	ace281ace281afe2808ce2808be2808d	................
0x11119f	e281ade280aee280abe280aae280aee2	................
0x1111af	80ace281abe281ace280aae2808fe280	................
0x1111bf	ace281aae281ace280aee280ace280	...............

0x115ae0	ae005265736f757263657300436c6f75	..Resources.Clou
0x115af0	644a61722e50726f7065727469657300	dJar.Properties.
0x115b00	7265736f757263654d616e007265736f	resourceMan.reso
0x115b10	7572636543756c74757265006765745f	urceCulture.get_
0x115b20	5265736f757263654d616e6167657200	ResourceManager.
0x115b30	6765745f43756c74757265007365745f	get_Culture.set_
0x115b40	43756c74757265006765745f66726271	Culture.get_frbq
0x115b50	006765745f55445000e2808ce281ade2	.get_UDP........
0x115b60	808be280ace280aee2808de281abe280	................
0x115b70	aee280abe281ace280abe2808be281ac	................
0x115b80	e281abe280aee281aae2808ee280ade2	................
0x115b90	80ade280aee2808be2808de2808de281	................
0x115ba0	abe280aae2808ce281ace2808fe280	...............

0x116993	64645f5363726f6c6c007365745f4d69	dd_Scroll.set_Mi
0x1169a3	6e696d756d007365745f426f72646572	nimum.set_Border
0x1169b3	5374796c65006164645f4d6f75736544	Style.add_MouseD
0x1169c3	6f776e006164645f4d6f757365557000	own.add_MouseUp.
0x1169d3	4765744f626a656374007365745f4963	GetObject.set_Ic
0x1169e3	6f6e00506572666f726d4c61796f7574	on.PerformLayout
0x1169f3	006765745f47726179006765745f4c69	.get_Gray.get_Li
0x116a03	676874536b79426c756500506f770053	ghtSkyBlue.Pow.S
0x116a13	74617274466967757265004765744c61	tartFigure.GetLa
0x116a23	7374506f696e74004164644c696e6500	stPoint.AddLine.
0x116a33	44726177506174680050656e73006765	DrawPath.Pens.ge
0x116a43	745f4461726b47726179006765745f57	t_DarkGray.get_W
0x116a53	68697465006765745f	hite.get_

0x17209	30040008000000010000110203738401	0............s..
0x17219	000a2a13300500090000000100001102	..*.0...........
0x17229	03046f8501000a2a00000000000000ae	..o....*........
0x17239	fe0d00cecaefbe01000000910000006c	...............l
0x17249	53797374656d2e5265736f7572636573	System.Resources
0x17259	2e5265736f757263655265616465722c	.ResourceReader,
0x17269	206d73636f726c69622c205665727369	mscorlib, Versi
0x17279	6f6e3d342e302e302e302c2043756c74	on=4.0.0.0, Cult
0x17289	7572653d6e65757472616c2c20507562	ure=neutral, Pub
0x17299	6c69634b6579546f6b656e3d62373761	licKeyToken=b77a
0x172a9	35633536313933346530383923537973	5c561934e089#Sys
0x172b9	74656d2e5265736f75726365732e5275	tem.Resources.Ru
0x172c9	6e74696d655265736f75726365536574	ntimeResourceSet
0x172d9	02000000020000000100000068537973	............hSys
0x172e9	74656d2e44726177696e672e4269746d	tem.Drawing.Bitm
0x172f9	61702c2053797374656d2e4472617769	ap, System.Drawi
0x17309	6e672c2056657273696f6e3d342e302e	ng, Version=4.0.
0x17319	302e302c2043756c747572653d6e65	0.0, Culture=ne

0x115fa7	7465676f727941747472696275746500	tegoryAttribute.
0x115fb7	546f6f6c626f784974656d4174747269	ToolboxItemAttri
0x115fc7	6275746500586d6c536368656d615072	bute.XmlSchemaPr
0x115fd7	6f766964657241747472696275746500	oviderAttribute.
0x115fe7	53797374656d2e586d6c2e5365726961	System.Xml.Seria
0x115ff7	6c697a6174696f6e00586d6c526f6f74	lization.XmlRoot
0x116007	4174747269627574650048656c704b65	Attribute.HelpKe
0x116017	79776f72644174747269627574650053	ywordAttribute.S
0x116027	797374656d2e436f6d706f6e656e744d	ystem.ComponentM
0x116037	6f64656c2e44657369676e0044656275	odel.Design.Debu
0x116047	676765724e6f6e55736572436f646541	ggerNonUserCodeA
0x116057	74747269627574650047656e65726174	ttribute.Generat
0x116067	6564436f646541747472696275746500	edCodeAttribute.
0x116077	53797374656d2e436f6465446f6d2e43	System.CodeDom.C
0x116087	6f6d70696c65720042726f777361626c	ompiler.Browsabl
0x116097	65417474726962757465004465736967	eAttribute.Desig
0x1160a7	6e657253657269616c697a6174696f6e	nerSerialization
0x1160b7	5669736962696c697479417474726962	VisibilityAttrib
0x1160c7	7574650044657369676e657253657269	ute.DesignerSeri
0x1160d7	616c697a6174696f6e5669736962696c	alizationVisibil
0x1160e7	69747900535441	ity.STA

0x1164cf	61626c6556697375616c5374796c6573	ableVisualStyles
0x1164df	00536574436f6d70617469626c655465	.SetCompatibleTe
0x1164ef	787452656e646572696e674465666175	xtRenderingDefau
0x1164ff	6c740052756e00446f75626c6500496e	lt.Run.Double.In
0x11650f	7433320046726f6d4172676200537973	t32.FromArgb.Sys
0x11651f	74656d2e436f726500456e756d657261	tem.Core.Enumera
0x11652f	626c650053797374656d2e4c696e7100	ble.System.Linq.
0x11653f	5265766572736500546f417272617900	Reverse.ToArray.
0x11654f	416374697661746f72006765745f4375	Activator.get_Cu
0x11655f	7272656e74446f6d61696e006765745f	rrentDomain.get_
0x11656f	426173654469726563746f7279005061	BaseDirectory.Pa
0x11657f	746800436f6d62696e650046696c6500	th.Combine.File.
0x11658f	457869737473006765745f436f6c756d	Exists.get_Colum
0x11659f	6e73005772697465586d6c006765745f	ns.WriteXml.get_
0x1165af	436f6e74726f6c7300436c6561720073	Controls.Clear.s
0x1165bf	65745f546f704c6576656c007365745f	et_TopLevel.set_
0x1165cf	466f726d426f726465725374796c6500	FormBorderStyle.
0x1165df	7365745f446f636b0053686f77007365	set_Dock.Show.se
0x1165ef	745f4261636b436f6c6f72007365745f	t_BackColor.set_
0x1165ff	466f7265436f6c6f72007365745f5465	ForeColor.set_Te
0x11660f	7874007365745f466c61745374796c65	xt.set_FlatStyle
0x11661f	006765745f466c617441707065617261	.get_FlatAppeara
0x11662f	6e6365007365745f426f726465725369	nce.set_BorderSi
0x11663f	7a65007365745f466f6e740043757273	ze.set_Font.Curs
0x11664f	6f7273006765745f48616e6400736574	ors.get_Hand.set
0x11665f	5f437572736f72006164645f4d6f7573	_Cursor.add_Mous
0x11666f	65456e746572006164645f4d6f757365	eEnter.add_Mouse
0x11667f	4c656176650053757370656e644c6179	Leave.SuspendLay
0x11668f	6f757400496e766f6b654d656d626572	out.InvokeMember
0x11669f	004765744578706f7274656454797065	.GetExportedType
0x1166af	730053706c6974007365745f4c6f6361	s.Split.set_Loca
0x1166bf	74696f6e007365745f4e616d65007365	tion.set_Name.se
0x1166cf	745f53697a65007365745f546162496e	t_Size.set_TabIn
0x1166df	646578007365745f54657874416c6967	dex.set_TextAlig
0x1166ef	6e007365745f55736556697375616c53	n.set_UseVisualS
0x1166ff	74796c654261636b436f6c6f72006164	tyleBackColor.ad
0x11670f	645f436c69636b007365745f4175746f	d_Click.set_Auto
0x11671f	5363616c6544696d656e73696f6e7300	ScaleDimensions.
0x11672f	7365745f4175746f5363616c654d6f64	set_AutoScaleMod
0x11673f	65007365745f436c69656e7453697a65	e.set_ClientSize
0x11674f	007365745f4d6178696d697a65426f78	.set_MaximizeBox
0x11675f	007365745f5374617274506f73697469	.set_StartPositi
0x11676f	6f6e006164645f4c6f61640052657375	on.add_Load.Resu
0x11677f	6d654c61796f75740053656c6563744d	meLayout.SelectM
0x11678f	616e790053656c6563740054616b6500	any.Select.Take.
0x11679f	546f4c697374006765745f5769647468	ToList.get_Width
0x1167af	006765745f486569676874004c6f636b	.get_Height.Lock
0x1167bf	42697473006765745f53747269646500	Bits.get_Stride.

0x10c357	80abe280aee281afe280aae281aae280	................
0x10c367	8ce281abe280abe2808fe2808de281aa	................
0x10c377	e2808ee281ade2808de280aee280ae00	................
0x10c387	4269746d617044617461005379737465	BitmapData.Syste
0x10c397	6d2e44726177696e672e496d6167696e	m.Drawing.Imagin
0x10c3a7	670052656374616e676c6500496d6167	g.Rectangle.Imag
0x10c3b7	654c6f636b4d6f646500506978656c46	eLockMode.PixelF
0x10c3c7	6f726d617400e280aae281abe280abe2	ormat...........
0x10c3d7	81afe2808fe281ade2808ee280ace281	................
0x10c3e7	abe280abe280ade2808fe281afe2808d	................
0x10c3f7	e281abe281ace280aee2808ce281aae2	................
0x10c407	81afe2808ee281ade280aee2808ce280	................
0x10c417	ace281ade281afe280ade280aae280ad	................
0x10c427	e280aae280	.....

0x1164cf	61626c6556697375616c5374796c6573	ableVisualStyles
0x1164df	00536574436f6d70617469626c655465	.SetCompatibleTe
0x1164ef	787452656e646572696e674465666175	xtRenderingDefau
0x1164ff	6c740052756e00446f75626c6500496e	lt.Run.Double.In
0x11650f	7433320046726f6d4172676200537973	t32.FromArgb.Sys
0x11651f	74656d2e436f726500456e756d657261	tem.Core.Enumera
0x11652f	626c650053797374656d2e4c696e7100	ble.System.Linq.
0x11653f	5265766572736500546f417272617900	Reverse.ToArray.
0x11654f	416374697661746f72006765745f4375	Activator.get_Cu
0x11655f	7272656e74446f6d61696e006765745f	rrentDomain.get_
0x11656f	426173654469726563746f7279005061	BaseDirectory.Pa
0x11657f	746800436f6d62696e650046696c6500	th.Combine.File.
0x11658f	457869737473006765745f436f6c756d	Exists.get_Colum
0x11659f	6e73005772697465586d6c006765745f	ns.WriteXml.get_
0x1165af	436f6e74726f6c7300436c6561720073	Controls.Clear.s
0x1165bf	65745f546f704c6576656c007365745f	et_TopLevel.set_
0x1165cf	466f726d426f726465725374796c6500	FormBorderStyle.
0x1165df	7365745f446f636b0053686f77007365	set_Dock.Show.se
0x1165ef	745f4261636b436f6c6f72007365745f	t_BackColor.set_
0x1165ff	466f7265436f6c6f72007365745f5465	ForeColor.set_Te
0x11660f	7874007365745f466c61745374796c65	xt.set_FlatStyle
0x11661f	006765745f466c617441707065617261	.get_FlatAppeara
0x11662f	6e6365007365745f426f726465725369	nce.set_BorderSi
0x11663f	7a65007365745f466f6e740043757273	ze.set_Font.Curs
0x11664f	6f7273006765745f48616e6400736574	ors.get_Hand.set
0x11665f	5f437572736f72006164645f4d6f7573	_Cursor.add_Mous
0x11666f	65456e746572006164645f4d6f757365	eEnter.add_Mouse
0x11667f	4c656176650053757370656e644c6179	Leave.SuspendLay
0x11668f	6f757400496e766f6b654d656d626572	out.InvokeMember
0x11669f	004765744578706f7274656454797065	.GetExportedType
0x1166af	730053706c6974007365745f4c6f6361	s.Split.set_Loca
0x1166bf	74696f6e007365745f4e616d65007365	tion.set_Name.se
0x1166cf	745f53697a65007365745f546162496e	t_Size.set_TabIn
0x1166df	646578007365745f54657874416c6967	dex.set_TextAlig
0x1166ef	6e007365745f55736556697375616c53	n.set_UseVisualS
0x1166ff	74796c654261636b436f6c6f72006164	tyleBackColor.ad
0x11670f	645f436c69636b007365745f4175746f	d_Click.set_Auto
0x11671f	5363616c6544696d656e73696f6e7300	ScaleDimensions.
0x11672f	7365745f4175746f5363616c654d6f64	set_AutoScaleMod
0x11673f	65007365745f436c69656e7453697a65	e.set_ClientSize
0x11674f	007365745f4d6178696d697a65426f78	.set_MaximizeBox
0x11675f	007365745f5374617274506f73697469	.set_StartPositi
0x11676f	6f6e006164645f4c6f61640052657375	on.add_Load.Resu
0x11677f	6d654c61796f75740053656c6563744d	meLayout.SelectM
0x11678f	616e790053656c6563740054616b6500	any.Select.Take.
0x11679f	546f4c697374006765745f5769647468	ToList.get_Width
0x1167af	006765745f486569676874004c6f636b	.get_Height.Lock
0x1167bf	42697473006765745f53747269646500	Bits.get_Stride.

0x10c933	abe281aee280aee280ae0055726e6146	...........UrnaF
0x10c943	6f726d0074656d70757354696d657200	orm.tempusTimer.
0x10c953	54696d6572007469636b436f756e7400	Timer.tickCount.
0x10c963	73707261795061727469636c65730050	sprayParticles.P
0x10c973	6f696e744600636c6f75645769737073	ointF.cloudWisps
0x10c983	0072616e640052616e646f6d00737072	.rand.Random.spr
0x10c993	6179416e69	ayAni

0x10a13a	696e657200706e6c5369646562617200	iner.pnlSidebar.
0x10a14a	50616e656c006c626c48656164657200	Panel.lblHeader.
0x10a15a	4c6162656c0062746e55726e61004275	Label.btnUrna.Bu
0x10a16a	74746f6e0062746e526567756c696572	tton.btnRegulier
0x10a17a	756e670062746e536369656e74696100	ung.btnScientia.
0x10a18a	62746e4578706572696d656e74756d00	btnExperimentum.
0x10a19a	706e6c436f6e74656e7400496e697469	pnlContent.Initi
0x10a1aa	616c697a	aliz

Metadata

0xff968	00000000000003c000000000000003c0	................
0xff978	00000000000003c000000000000003ff	................
0xff988	ffffffffffffffffffffffffffffffff	................
0xff998	ffffffffffffffffffffffffffffffff	................
0xff9a8	ffffffffffffffffffffffffffffffff	................
0xff9b8	ffffffffffffffffffffffffffffffff	................
0xff9c8	ffffffffffffffffffffffffffffffff	................
0xff9d8	ffffffffffffffffffffffffffffff0b	................
0xff9e8	42534a42010001000000000010000000	BSJB............
0xff9f8	76342e302e3330333139000000000000	v4.0.30319......
0xffa08	00000900b4000000904a0000237e0000	.........J..#~..
0xffa18	444b0000ec26010023537472696e6773	DK...&..#Strings
0xffa28	00000000307201000400000023555300	....0r......#US.
0xffa38	34720100100000002347554944000000	4r......#GUID...
0xffa48	447201004014000023426c6f62000000	Dr..@...#Blob...
0xffa58	84860100100000002347554944000000	........#GUID...
0xffa68	948601000400000023537472696e6773	........#Strings
0xffa78	00000000988601000400000023426c6f	............#Blo
0xffa88	620000009c8601000400000023536368	b...........#Sch
0xffa98	656d6100000000000200410157dfa2fd	ema.......A.W...
0xffaa8	090f000000fa25330016000002000000	......%3........
0xffab8	b40000001d000000a000000067020000	............g...
0xffac8	6e000000010000008501000001000000	n...............
0xffad8	55000000010000000100000031000000	U...........1...
0xffae8	05000000	....

binary/anomaly PE mismatch beyond architecture suffix

build Manifest is MyApplication template name

0x11835e	66006f00000048020000010030003000	f.o...H.....0.0.
0x11836e	30003000300034006200300000001a00	0.0.0.4.b.0.....
0x11837e	0100010043006f006d006d0065006e00	....C.o.m.m.e.n.
0x11838e	74007300000000000000220001000100	t.s.......".....
0x11839e	43006f006d00700061006e0079004e00	C.o.m.p.a.n.y.N.
0x1183ae	61006d00650000000000000000003c00	a.m.e.........<.
0x1183be	0a000100460069006c00650044006500	....F.i.l.e.D.e.
0x1183ce	73006300720069007000740069006f00	s.c.r.i.p.t.i.o.
0x1183de	6e000000000043006c006f0075006400	n.....C.l.o.u.d.
0x1183ee	20004a00610072000000300008000100	.J.a.r...0.....
0x1183fe	460069006c0065005600650072007300	F.i.l.e.V.e.r.s.
0x11840e	69006f006e000000000031002e003000	i.o.n.....1...0.
0x11841e	2e0030002e0030000000320009000100	..0...0...2.....
0x11842e	49006e007400650072006e0061006c00	I.n.t.e.r.n.a.l.
0x11843e	4e0061006d0065000000760065005800	N.a.m.e...v.e.X.
0x11844e	52002e00650078006500000000004600	R...e.x.e.....F.
0x11845e	110001004c006500670061006c004300	....L.e.g.a.l.C.
0x11846e	6f007000790072006900670068007400	o.p.y.r.i.g.h.t.
0x11847e	000043006f0070007900720069006700	..C.o.p.y.r.i.g.
0x11848e	680074002000a9002000320030003200	h.t. ... .2.0.2.
0x11849e	3600000000002a00010001004c006500	6.....*.....L.e.
0x1184ae	670061006c0054007200610064006500	g.a.l.T.r.a.d.e.
0x1184be	6d00610072006b007300000000000000	m.a.r.k.s.......
0x1184ce	00003a00090001004f00720069006700	..:.....O.r.i.g.
0x1184de	69006e0061006c00460069006c006500	i.n.a.l.F.i.l.e.
0x1184ee	6e0061006d0065000000760065005800	n.a.m.e...v.e.X.
0x1184fe	52002e00650078006500000000003400	R...e.x.e.....4.
0x11850e	0a000100500072006f00640075006300	....P.r.o.d.u.c.
0x11851e	74004e0061006d006500000000004300	t.N.a.m.e.....C.
0x11852e	6c006f007500640020004a0061007200	l.o.u.d. .J.a.r.
0x11853e	0000340008000100500072006f006400	..4.....P.r.o.d.
0x11854e	75006300740056006500720073006900	u.c.t.V.e.r.s.i.
0x11855e	6f006e00000031002e0030002e003000	o.n...1...0...0.
0x11856e	2e003000000038000800010041007300	..0...8.....A.s.
0x11857e	730065006d0062006c00790020005600	s.e.m.b.l.y. .V.
0x11858e	65007200730069006f006e0000003100	e.r.s.i.o.n...1.
0x11859e	2e0030002e0030002e0030000000efbb	..0...0...0.....
0x1185ae	bf3c3f786d6c2076657273696f6e3d22	.<?xml version="
0x1185be	312e302220656e636f64696e673d2255	1.0" encoding="U
0x1185ce	54462d382220	TF-8"

0x118276	01000000000090000000a0a011000c03	................
0x118286	00000000000000000000aca31100ea01	................
0x118296	000000000000000000000c0334000000	............4...
0x1182a6	560053005f0056004500520053004900	V.S._.V.E.R.S.I.
0x1182b6	4f004e005f0049004e0046004f000000	O.N._.I.N.F.O...
0x1182c6	0000bd04effe00000100000001000000	................
0x1182d6	000000000100000000003f0000000000	..........?.....
0x1182e6	00000400000001000000000000000000	................
0x1182f6	00000000000044000000010056006100	......D.....V.a.
0x118306	7200460069006c00650049006e0066	r.F.i.l.e.I.n.f

Third-party

0x17209	30040008000000010000110203738401	0............s..
0x17219	000a2a13300500090000000100001102	..*.0...........
0x17229	03046f8501000a2a00000000000000ae	..o....*........
0x17239	fe0d00cecaefbe01000000910000006c	...............l
0x17249	53797374656d2e5265736f7572636573	System.Resources
0x17259	2e5265736f757263655265616465722c	.ResourceReader,
0x17269	206d73636f726c69622c205665727369	mscorlib, Versi
0x17279	6f6e3d342e302e302e302c2043756c74	on=4.0.0.0, Cult
0x17289	7572653d6e65757472616c2c20507562	ure=neutral, Pub
0x17299	6c69634b6579546f6b656e3d62373761	licKeyToken=b77a
0x172a9	35633536313933346530383923537973	5c561934e089#Sys
0x172b9	74656d2e5265736f75726365732e5275	tem.Resources.Ru
0x172c9	6e74696d655265736f75726365536574	ntimeResourceSet
0x172d9	02000000020000000100000068537973	............hSys
0x172e9	74656d2e44726177696e672e4269746d	tem.Drawing.Bitm
0x172f9	61702c2053797374656d2e4472617769	ap, System.Drawi
0x17309	6e672c2056657273696f6e3d342e302e	ng, Version=4.0.
0x17319	302e302c2043756c747572653d6e65	0.0, Culture=ne

0xff968	00000000000003c000000000000003c0	................
0xff978	00000000000003c000000000000003ff	................
0xff988	ffffffffffffffffffffffffffffffff	................
0xff998	ffffffffffffffffffffffffffffffff	................
0xff9a8	ffffffffffffffffffffffffffffffff	................
0xff9b8	ffffffffffffffffffffffffffffffff	................
0xff9c8	ffffffffffffffffffffffffffffffff	................
0xff9d8	ffffffffffffffffffffffffffffff0b	................
0xff9e8	42534a42010001000000000010000000	BSJB............
0xff9f8	76342e302e3330333139000000000000	v4.0.30319......
0xffa08	00000900b4000000904a0000237e0000	.........J..#~..
0xffa18	444b0000ec26010023537472696e6773	DK...&..#Strings
0xffa28	00000000307201000400000023555300	....0r......#US.
0xffa38	34720100100000002347554944000000	4r......#GUID...
0xffa48	447201004014000023426c6f62000000	Dr..@...#Blob...
0xffa58	84860100100000002347554944000000	........#GUID...
0xffa68	948601000400000023537472696e6773	........#Strings
0xffa78	00000000988601000400000023426c6f	............#Blo
0xffa88	620000009c8601000400000023536368	b...........#Sch
0xffa98	656d6100000000000200410157dfa2fd	ema.......A.W...
0xffaa8	090f000000fa25330016000002000000	......%3........
0xffab8	b40000001d000000a000000067020000	............g...
0xffac8	6e000000010000008501000001000000	n...............
0xffad8	55000000010000000100000031000000	U...........1...
0xffae8	05000000	....

0x1044df	07000000000000210079070000000000	.......!.y......
0x1044ef	002300790700002200ba0d1c00ba0d1e	.#.y..."........
0x1044ff	00ba0d2000ba0d1a00ba0d15011e0f17	... ............
0x10450f	011e0f1701300f93013e1097017b1093	.....0...>...{..
0x10451f	01b9109d01300f9f01300f0000007665	.....0...0....ve
0x10452f	58522e657865006d73636f726c696200	XR.exe.mscorlib.
0x10453f	5375707072657373496c6461736d4174	SuppressIldasmAt
0x10454f	747269627574650053797374656d2e52	tribute.System.R
0x10455f	756e74696d652e436f6d70696c657253	untime.CompilerS
0x10456f	65727669636573002e63746f72003c4d	ervices..ctor.<M
0x10457f	6f64756c653e00e2808ce280ade280ad	odule>..........
0x10458f	e2808fe281aae281aee281ade2808fe2	................
0x10459f	81afe2808be281ade281ade281abe281	................
0x1045af	abe281ace280ade2808de2808ce281ad	................
0x1045bf	e281afe281ade280ace280abe2808ce2	................
0x1045cf	80abe2808de281aee2808ee281ade281	................
0x1045df	ace2808be2808de2808de281abe280ae	................
0x1045ef	e2808ce281abe281ace281aee280aee2	................
0x1045ff	80ae00e281ade280ace2808ee2808be2	................
0x10460f	808be2808be281	.......

0x118082	000000000000b09e1100000000000000	................
0x118092	0000ce9e110000200000000000000000	....... ........
0x1180a2	0000000000000000000000000000c09e	................
0x1180b2	11000000000000000000000000000000	................
0x1180c2	5f436f724578654d61696e006d73636f	_CorExeMain.msco
0x1180d2	7265652e646c6c0000000000ff250020	ree.dll......%.
0x1180e2	40000000000000000000000000000000	@...............
0x1180f2	00000000000000000000000000000000	................
0x118102	00000000000000000000000000000000	................
0x118112	00000000000000000000000000000000	................
0x118122	00000000000000000000000000000000	................
0x118132	00000000000000000000000000000000	................
0x118142	00000000000000000000000000000000	................
0x118152	00000000000000	.......

Identity

SHA-256	90b2ceb05b34ed6012d20b547cec83a2dacbe56659eb4479150f30015172c3c2
Filename	T. HALK BANKASI.com
Package	90b2ceb05b34ed6012d20b547cec83a2dacbe56659eb4479150f30015172c3c2

Origin

Source	harvest
Feed	malwarebazaar
Ecosystem	windows
Domain	abuse.ch

Timeline

First seen	10 Aug 2026 06:18 UTC
First analyzed	10 Aug 2026 08:08 UTC
Last analyzed	10 Aug 2026 09:41 UTC
Last updated	10 Aug 2026 09:41 UTC

Labeling

Label	bad
Label source	harvest
Traits version	73866

Not seeing what you expected? Let us know