Static

static

10

Resubmissions

14/08/2026, 18:11

260814-wsq7eayzcv

14/08/2026, 18:11

260814-wsqkwayzcs

06/08/2026, 04:02

260806-el3s7aff58

06/08/2026, 03:16

260806-dsrh3asdja

28/07/2026, 14:04

260728-rdfpxayajh10

28/07/2026, 13:53

260728-q66alayxav10

28/07/2026, 12:55

260728-p5zkzsxyay10

23/07/2026, 15:06

260723-sg2l8a1frg

26/06/2026, 14:20

260626-rnlznscy7l10

25/06/2026, 14:59

260625-scvywacx3v

Sharing

Copy URL Twitter E-mail

General

  • Target
    1d1decac693bfc7c19e26f01929716924d7607e300f8385a7a8a02d176800db5
  • Size 113.7MB
  • Sample260723-sg2l8a1frg
  • SHA256 1d1decac693bfc7c19e26f01929716924d7607e300f8385a7a8a02d176800db5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
revoked_codesignratloadermustang_pandaearth_pretaaspackv2b5minerinstaller$2a$10$qxscf5cdia/z/fajtwcmlei3gljcolzkvzc78fqd3ac2xdlebudjw50124e591a315c54e8800dae714320555fa5themidavmprotectguest16upxpyinstallerrootkitaa1649660679isfbcosturapacker0backdoorapt$2a$10$yamp3nict2cddmxcwgfmso8kdqueiafw/m3lwazfqerf9xglgmaui4525kapitantrojanbankerstealerqakbotatmploutussystembcpredatorstealermimikatzransomwareblackmattermetasploittoneshellcobaltstrikegh0stratmeduzastealcegregorkpotsodinokibibotnetgafgytbpfdoorbruterateldarkcometpurplefoxpubloadbitratrunningratlatrodectusspywareponynetwalkergozinetwirexmrigzebrocyvirtualgate

Malware Config

Extracted

Family

  • netwire

C2

  • londonkc.zapto.org:20114

Attributes
  • activex_autorun

    true

  • activex_key

    {K0457A6I-AG86-4U3N-827E-FV3R34144863}

  • copy_executable

    false

  • delete_original

    false

  • host_id

    123456

  • keylogger_dir

    %AppData%\Logs\

  • lock_executable

    false

  • mutex

    FKEDHidl

  • offline_keylogger

    true

  • password

    Password

  • registry_autorun

    true

  • startup_name

    NetWire

  • use_mutex

    true

Extracted

Family

  • cobaltstrike

C2

  • http://192.168.239.128:80/OqCZ

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAGWJS)

Extracted

Family

  • systembc

C2

  • 107.172.197.105:4016

Attributes
  • dns

    5.132.191.104

    92.163.33.248

    206.189.120.27

Extracted

Family

  • gafgyt

C2

  • 51.15.0.28:666

Extracted

Family

  • stealc

Botnet

  • b5

C2

  • http://45.200.148.115

Attributes
  • url_path

    /0a616124ff2f2b69.php

Extracted

Family

  • predatorstealer

C2

  • http://florapansiyonotel.com/images/jaf3/

Extracted

Family

  • latrodectus

C2

  • https://aytobusesre.com/live/

  • https://scifimond.com/live/

Attributes
  • group

    Littlehw

  • user_agent

    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Tob 1.1)

Extracted

Family

  • zebrocy

C2

  • /managment/cb-secure/technology.php

Extracted

Family

  • pony

C2

  • http://arabnotification-001-site1.btempurl.com/dd.php

Attributes
  • payload_url

    http://arabnotification-001-site1.btempurl.com/shit.exe

Extracted

Family

  • sodinokibi

Botnet

  • $2a$10$QxsCf5cdia/Z/FajTwcMlei3GljcoLzkvZC78fqd3ac2xdlebUdjW

Campaign

  • 5012

Decoy

  • classycurtainsltd.co.uk

  • hairstylesnow.site

  • happyeasterimages.org

  • catholicmusicfest.com

  • aunexis.ch

  • zweerscreatives.nl

  • carlosja.com

  • mooglee.com

  • lange.host

  • siliconbeach-realestate.com

  • galserwis.pl

  • xtptrack.com

  • bildungsunderlebnis.haus

  • linnankellari.fi

  • real-estate-experts.com

  • eglectonk.online

  • panelsandwichmadrid.es

  • comparatif-lave-linge.fr

  • tuuliautio.fi

  • winrace.no

Attributes
  • net

    false

  • pid

    $2a$10$QxsCf5cdia/Z/FajTwcMlei3GljcoLzkvZC78fqd3ac2xdlebUdjW

  • prc

    dbsnmp

    mspub

    msaccess

    infopath

    thunderbird

    onenote

    oracle

    sql

    xfssvccon

    wordpad

    dbeng50

    encsvc

    agntsvc

    thebat

    steam

    sqbcoreservice

    ocssd

    mydesktopqos

    excel

    isqlplussvc

    visio

    firefox

    synctime

    ocautoupds

    outlook

    winword

    mydesktopservice

    tbirdconfig

    ocomm

    powerpnt

  • ransom_oneliner

    All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions

  • ransom_template

    ---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.cc/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!

  • sub

    5012

  • svc

    svc$

    sql

    memtas

    backup

    sophos

    mepocs

    veeam

    vss

Extracted

Family

  • blackmatter

Version

  • 3.0

Botnet

  • 4e591a315c54e8800dae714320555fa5

Credentials
Credentials
Credentials
C2

  • https://fluentzip.org

  • http://fluentzip.org

Attributes
  • attempt_auth

    true

  • create_mutex

    true

  • encrypt_network_shares

    true

  • exfiltrate

    true

  • mount_volumes

    true

rsa_pubkey.base64
aes.base64

Extracted

Family

  • darkcomet

Botnet

  • Guest16

C2

  • 127.0.0.1:1604

Mutex

  • DC_MUTEX-AC8ZNXK

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    MEcP6YegefHK

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

rc4.plain

Extracted

Family

  • metasploit

Version

  • windows/download_exec

C2

  • http://158.247.204.245:80/OuIO

Attributes
  • headers User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.135 Safari/537.36

Extracted

Family

  • qakbot

Version

  • 403.573

Botnet

  • AA

Campaign

  • 1649660679

C2

  • 41.228.22.180:443

  • 47.23.89.62:995

  • 176.67.56.94:443

  • 103.107.113.120:443

  • 148.64.96.100:443

  • 47.180.172.159:443

  • 181.118.183.98:443

  • 140.82.49.12:443

  • 103.87.95.133:2222

  • 96.21.251.127:2222

  • 197.167.62.14:993

  • 46.107.48.202:443

  • 24.43.99.75:443

  • 172.115.177.204:2222

  • 80.11.74.81:2222

  • 66.98.42.102:443

  • 75.99.168.194:61201

  • 173.174.216.62:443

  • 45.9.20.200:443

  • 39.41.158.185:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Extracted

Family

  • gozi

Attributes
  • build

    217030

Extracted

Family

  • cobaltstrike

Botnet

  • 0

C2

  • http://ns7.softline.top:443/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books

  • http://ns8.softline.top:443/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books

  • http://ns9.softline.top:443/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books

Attributes
  • access_type

    512

  • beacon_type

    256

  • create_remote_thread

    768

  • crypto_scheme

    256

  • host

    ns7.softline.top,/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books,ns8.softline.top,/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books,ns9.softline.top,/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books

  • http_header1

    AAAACgAAAAtBY2NlcHQ6ICovKgAAAAoAAAAUSG9zdDogd3d3LmFtYXpvbi5jb20AAAAHAAAAAAAAAAMAAAACAAAADnNlc3Npb24tdG9rZW49AAAAAgAAAAxza2luPW5vc2tpbjsAAAABAAAALGNzbS1oaXQ9cy0yNEtVMTFCQjgyUlpTWUdKM0JES3wxNDE5ODk5MDEyOTk2AAAABgAAAAZDb29raWUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • http_header2

    AAAACgAAAAtBY2NlcHQ6ICovKgAAAAoAAAAWQ29udGVudC1UeXBlOiB0ZXh0L3htbAAAAAoAAAAgWC1SZXF1ZXN0ZWQtV2l0aDogWE1MSHR0cFJlcXVlc3QAAAAKAAAAFEhvc3Q6IHd3dy5hbWF6b24uY29tAAAACQAAAApzej0xNjB4NjAwAAAACQAAABFvZT1vZT1JU08tODg1OS0xOwAAAAcAAAAAAAAABQAAAAJzbgAAAAkAAAAGcz0zNzE3AAAACQAAACJkY19yZWY9aHR0cCUzQSUyRiUyRnd3dy5hbWF6b24uY29tAAAABwAAAAEAAAADAAAABAAAAAAAAA==

  • http_method1

    GET

  • http_method2

    POST

  • maxdns

    255

  • pipe_name

    \\%s\pipe\msagent_%x

  • polling_time

    5000

  • port_number

    443

  • sc_process32

    %windir%\syswow64\rundll32.exe

  • sc_process64

    %windir%\sysnative\rundll32.exe

  • state_machine

    MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDI579oVVII0cYncGonU6vTWyFhqmq8w5QwvI8qsoWeV68Ngy+MjNPX2crcSVVWKQ3j09FII28KTmoE1XFVjEXF3WytRSlDe1OKfOAHX3XYkS9LcUAy0eRl2h4a73hrg1ir/rpisNT6hHtYaK3tmH8DgW/n1XfTfbWk1MZ7cXQHWQIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • unknown1

    4096

  • unknown2

    AAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • uri

    /N4215/adj/amzn.us.sr.aps

  • user_agent

    Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko

  • watermark

    0

Extracted

Family

  • sodinokibi

Botnet

  • $2a$10$yAMP3nIcT2cdDmxcWGfMSO8kdqUEiAFW/M3lwAzFqERF9XglgmAUi

Campaign

  • 4525

Decoy

  • qualitus.com

  • centuryrs.com

  • gw2guilds.org

  • pointos.com

  • zzyjtsgls.com

  • coding-marking.com

  • daniel-akermann-architektur-und-planung.ch

  • qualitaetstag.de

  • tstaffing.nl

  • abogadosadomicilio.es

  • arteservicefabbro.com

  • mirjamholleman.nl

  • farhaani.com

  • mrsplans.net

  • buymedical.biz

  • imperfectstore.com

  • classycurtainsltd.co.uk

  • ihr-news.jp

  • ceid.info.tr

  • kamienny-dywan24.pl

Attributes
  • net

    true

  • pid

    $2a$10$yAMP3nIcT2cdDmxcWGfMSO8kdqUEiAFW/M3lwAzFqERF9XglgmAUi

  • ransom_oneliner

    ---=== Sodinokibi Ransomware ===--- All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions

  • ransom_template

    ---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. I suggest you read about us on the Internet, we are known as "Sodinokibi Ransomware". For example, this article: https://www.coveware.com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread Pay attention to that: "How Much Data Is Decrypted with a Ransomware Decryptor? In Q2 2019, victims who paid for a decryptor recovered 92% of their encrypted data. This statistic varied dramatically depending on the ransomware type. For example, Ryuk ransomware has a relatively low data recovery rate, at ~ 87%, while Sodinokibi was close to 100%. " Now you have a guarantee that your files will be returned 100 %. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.cc/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. If you have problem with connect, use strictly TOR version 8.5.5 link for download TOR version 8.5.5 here: https://filehippo.com/download_tor_browser_for_windows/ When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!

  • sub

    4525

  • svc

    sql

    mepocs

    vss

    veeam

    svc$

    memtas

    sophos

    backup

Extracted

Family

  • meduza

Botnet

  • kapitan

C2

  • 176.124.204.206

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    kapitan

  • extensions

    .txt

  • grabber_maximum_size

    1048576

  • port

    15666

  • self_destruct

    false

Signatures

  • Family: BPFDoor

    BPFDoor is an evasive Linux backdoor attributed to a Chinese threat actor called Red Menshen.

    backdoorbpfdoor
  • Family: BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat
  • Family: BlackMatter Ransomware

    BlackMatter ransomware group claims to be Darkside and REvil succesor.

    ransomwareblackmatter
  • Family: Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel
  • Family: Cobaltstrike

    Detected malicious payload which is part of Cobaltstrike.

    trojanbackdoorcobaltstrike
  • Family: Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet
  • Family: Egregor Ransomware

    Variant of the Sekhmet ransomware first seen in September 2020.

    ransomwareegregor
  • Family: Gafgyt/Bashlite

    IoT botnet with numerous variants first seen in 2014.

    botnetgafgyt
  • Family: Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  • Family: Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi
  • Family: KPOT

    KPOT is an information stealer that steals user data and account credentials.

    trojanstealerkpot
  • Family: Latrodectus loader

    Latrodectus is a loader written in C++.

    loaderlatrodectus
  • Family: Meduza

    Meduza is a crypto wallet and info stealer written in C++.

    stealermeduza
  • Family: MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit
  • Family: Mimikatz

    mimikatz is an open source tool to dump credentials on Windows.

    mimikatz
  • Family: Netwalker Ransomware

    Ransomware family with multiple versions. Also known as MailTo.

    ransomwarenetwalker
  • Family: Netwire

    Netwire is a RAT with main functionalities focused password stealing and keylogging, but also includes remote control capabilities as well.

    botnetstealernetwire
  • Family: PUBLOAD, ClaimLoader, NoFive

    PUBLOAD is a shellcode loader used by Mustang Panda APT.

    loaderpubload
  • Family: Ploutus

    Ploutus is an ATM malware written in C#.

    backdooratmploutus
  • Family: Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony
  • Family: PredatorStealer

    Predator is a modular stealer written in C#.

    stealerpredatorstealer
  • Family: PurpleFox

    PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.

    rootkittrojanpurplefox
  • Family: Qakbot/Qbot

    Qbot or Qakbot is a sophisticated worm with banking capabilities.

    trojanbankerstealerqakbot
  • Family: RunningRat

    RunningRat is a remote access trojan first seen in 2018.

    ratrunningrat
  • Family: Sodin,Sodinokibi,REvil

    Ransomware with advanced anti-analysis and privilege escalation functionality.

    ransomwaresodinokibi
  • Family: Stealc

    Stealc is an infostealer written in C++.

    stealerstealc
  • Family: SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc
  • Family: TONESHELL

    TONESHELL is a Windows backdoor used by Earth Preta aka MUSTANG PANDA APT group.

    backdoortoneshell
  • Family: VirtualGate

    VirtualGate is a Windows-based backdoor deployed within guest virtual machines hosted on compromised VMware ESXi servers.

    backdoorvirtualgate
  • Family: Zebrocy

    Zebrocy is a backdoor created by Sofacy threat group and has multiple variants developed in different languages.

    trojanbackdoorzebrocy
  • Family: xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig
  • BPFDoor payload 1 IoCs
  • BitRAT payload 1 IoCs
  • Detect BruteRatel badger 1 IoCs
  • Detect PurpleFox Rootkit 1 IoCs

    Detect PurpleFox Rootkit.

    rootkit
  • Detect larodectus Loader variant 2 1 IoCs
    loader
  • Detected Egregor ransomware 1 IoCs
  • Detected Gafgyt variant 1 IoCs
  • Detected Netwalker Ransomware 1 IoCs

    Detected unpacked Netwalker executable.

  • Detected Ploutus loader 1 IoCs
  • Detects ClaimLoader loader 3 IoCs
    loadermustang_pandaearth_preta
  • Detects TONESHELL backdoor 1 IoCs
    backdooraptmustang_pandaearth_preta
  • Detects VirtualGate payload 1 IoCs
  • Gh0st RAT payload 3 IoCs
  • KPOT Core Executable 2 IoCs
  • Meduza Stealer payload 1 IoCs
  • NetWire RAT payload 1 IoCs
    rat
  • RunningRat payload 1 IoCs
  • XMRig Miner payload 2 IoCs
    miner
  • Zebrocy Go Variant 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 4 IoCs
  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Revoked Certificate in Chain 5 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign
  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Java web shell 1 IoCs

    Rule to detect webshells in Java - inspired by Twoface APT.

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Codesign digest Mismatch 5 IoCs

    File was altered after it was signed.

  • DLL Hijacking vulnerability 7 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • SmartAssembly .NET packer 1 IoCs

    Detects SmartAssembly .NET packer.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Costura .NET executable packer 1 IoCs

    Costura packer aka Costura Fody, is an add-in for the .NET framework that embeds all external dependency .dll files as resources inside main executable.

    costurapacker
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Insecure Codesign Algorithm 2 IoCs

    File was codesigned using an insecure algorithm.

  • Unsigned PE 360 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 10 IoCs

    Codesigned file was signed by an untrusted entity.

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

    installer
  • NSIS installer 18 IoCs
    installer

File Explorer

  • 1d1decac693bfc7c19e26f01929716924d7607e300f8385a7a8a02d176800db5
    .zip 113.7MB
  • capa-testfiles-master/.gitattributes
    129B
  • capa-testfiles-master/.github/check_runtimes.py
    2KB
  • capa-testfiles-master/.github/check_sample_filenames.py
    3KB
  • capa-testfiles-master/.github/workflows/sync.yml
    971B
  • capa-testfiles-master/.github/workflows/tests.yml
    1KB
  • capa-testfiles-master/.gitignore
    99B
  • capa-testfiles-master/.gitmodules
    123B
  • capa-testfiles-master/009c2377b67997b0da1579f4bbc822c1.exe_
    .exe 92KB
  • capa-testfiles-master/02179f3ba93663074740b5c0d283bae2.exe_
    .exe 261KB
  • capa-testfiles-master/021f49678cd633dc8cf99c61b3af3dda.exe_
    .exe 87KB
  • capa-testfiles-master/034b7231a49387604e81a5a5d2fe7e08f6982c418a28b719d2faace3c312ebb5.exe_
    .exe 71KB
  • capa-testfiles-master/039a6336d0802a2255669e6867a5679c7eb83313dbc61fb1c7232147379bd304.exe_
    .exe 32KB
  • capa-testfiles-master/03b236b23b1ec37c663527c1f53af3fe.dll_
    .dll 566KB
  • capa-testfiles-master/03bb32d43885e83bc56c0b2bcad6f0c5ea40402763b7057056c654990022471b.dll_
    .dll_ .xll 13KB
  • capa-testfiles-master/055da8e6ccfe5a9380231ea04b850e18.elf_
    .elf 16KB
  • capa-testfiles-master/0596c4ea5aa8def47f22c85d75aaca95.exe_
    .exe 184KB
  • capa-testfiles-master/068a76d4823419b376d418cf03215d5c.exe_
    .exe 243KB
  • capa-testfiles-master/071f2d1c4c2201ee95ffe2aa965000f5f615a11a12d345e33b9fb060e5597740.dll_
    .dll 642KB
  • capa-testfiles-master/0731679c5f99e8ee65d8b29a3cabfc6b.exe_
    .exe 451KB
  • capa-testfiles-master/0761142efbda6c4b1e801223de723578.dll_
    .dll 8.7MB
  • capa-testfiles-master/0796f1c1ea0a142fc1eb7109a44c86cb.exe_
    .exe 44KB
  • capa-testfiles-master/07f7846bbcda782e5639292ad93907eb.exe_
    .exe 24KB
  • capa-testfiles-master/0831bb382211a67c57a392955138808526aa15e55531091841706aae2cb89613.exe_
    .exe 114KB
  • capa-testfiles-master/08ac667c65d36d6542917655571e61c8.exe_
    .exe .hta .js 83KB
  • capa-testfiles-master/0953cc3b77ed2974b09e3a00708f88de931d681e2d0cb64afbaf714610beabe6.exe_
    .exe 122KB
  • capa-testfiles-master/09bf850be5da44a1c3629a1f62813a83.dll_
    .dll 119KB
  • capa-testfiles-master/0a0882b8da225406cc838991b5f67d11.exe_
    .exe 169KB
  • capa-testfiles-master/0a30182ff3a6b67beb0f2cda9d0de678.exe_
    .exe 86KB
  • capa-testfiles-master/0a942aca9589d10f7b8f127870ca35cdd90d25c0b3449abe0434ffeb9f93f277.exe_
    .exe 121KB
  • capa-testfiles-master/0cd2b334aede270b14868db28211cde3.exe_
    .exe 309KB
  • capa-testfiles-master/0ce3bfa972ced61884ae7c1d77c7d4c45e17c7d767e669610cf2ef72b636b464.exe_
    .exe 104KB
  • capa-testfiles-master/0da87fccbf7687a6c7ab38087dea8b8f32c2b1fb6546101485b7167d18d9c406.exe_
    .exe 5.0MB
  • capa-testfiles-master/0db010298586f17ee7e46f390d5724be.exe_
    .exe 37KB
  • capa-testfiles-master/0f33c2fec223823f84a732ceb1ad94ed2645e896095144850cf1443aeda67da6.dll_
    .dll 52KB
  • capa-testfiles-master/0fd8330e00aa48676d6d0c4f36e9a80b.exe_
    .exe 79KB
  • capa-testfiles-master/1038a23daad86042c66bfe6c9d052d27048de9653bde5750dc0f240c792d9ac8.elf_
    .elf 41KB
  • capa-testfiles-master/10cd7afd580ee9c222b0a87ff241d306.dll_
    .dll 71KB
  • capa-testfiles-master/10ebcf8c20403457a08762200015b151.exe_
    .exe 52KB
  • capa-testfiles-master/112f9f0e8d349858a80dd8c14190e620.exe_
    .exe 9.2MB
  • capa-testfiles-master/1195d0d18be9362fb8dd9e1738404c9d.exe_
    .exe 54KB
  • capa-testfiles-master/138c71e94961fe9e31cec5dfba62a639.exe_
    .exe 93KB
  • capa-testfiles-master/152d4c9f63efb332ccb134c6953c0104.exe_
    .exe 400KB
  • capa-testfiles-master/15835b6dd703e69d22d4ab941ccd5f6e78c3abc22ae123366da5e950eaa62e2b.dll_
    .dll 59KB
  • capa-testfiles-master/17264e3126a97c319a6a0c61e6da951e.dll_
    .dll 522KB
  • capa-testfiles-master/1d8fd13c890060464019c0f07b928b1a.exe_
    .exe 16KB
  • capa-testfiles-master/1e2791877da02d49998dea79515a89ca.dll_
    .dll 48KB
  • capa-testfiles-master/1e609dffd12a59ea5d5c9b3055939b1f.exe_
    .exe 238KB
  • capa-testfiles-master/1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128.exe_
    .exe 352KB
  • capa-testfiles-master/203bd48bcc18434314ad60f4c8bc21e3d3422eb0624b22b827410f9bc63b4082.exe_
    .exe 35KB
  • capa-testfiles-master/2055994ff75b4309eee3a49c5749d306.exe_
    .exe 80KB
  • capa-testfiles-master/22d0a2e4c9c2163b2bf5f0e41a2e1762.exe_
    .dll 57KB
  • capa-testfiles-master/232b0a8546035d9017fadf68398826edb0a1e055566bc1d356d6c9fdf1d7e485.dll_
    .dll 685KB
  • capa-testfiles-master/23e19068ecba68d4396bc097e0278b8eca7e7dcaa4978e34d683231ad2219ae3.exe_
    .exe 103KB
  • capa-testfiles-master/253309d8b3675d3cc61d4bf23aa15d4b.dll_
    .dll 831KB
  • capa-testfiles-master/268d61837aa248c1d49a973612a129ce.dll_
    .dll 190KB
  • capa-testfiles-master/26beba7352a32b803aa19e0782011a383a1df19549910e7b2f2f244e49678524.dll_
    .dll 312KB
  • capa-testfiles-master/276f691a3df25481f59d79781799e35f.exe_
    .exe 433KB
  • capa-testfiles-master/2826b762b9c268601a44974ef469a671b441e798a6c3cbb40070450c6c030ba2.exe_
    .exe 1.5MB
  • capa-testfiles-master/282c32269a9893c5741ca682268369421c43ac21d73b1f6c23386d61c93bf3e9.exe_
    .exe 46KB
  • capa-testfiles-master/2855ba06b90e7c64d9bce888e47baf6d.exe_
    .exe 37KB
  • capa-testfiles-master/294b8db1f2702b60fb2e42fdc50c2cee6a5046112da9a5703a548a4fa50477bc.elf_
    .elf 87KB
  • capa-testfiles-master/2a584dfc657348d164274a12bff9bbd8.exe_
    .exe 298KB
  • capa-testfiles-master/2a7429d60040465f9bd27bbae2beef88.exe_
    .exe 227KB
  • capa-testfiles-master/2b8bec5bcb1777eaa155d832f7afc797.exe_
    .exe 30KB
  • capa-testfiles-master/2bf18d0403677378adad9001b1243211.elf_
    .elf 101KB
  • capa-testfiles-master/2c83f152e09d0abaa3a3784669e75276784e50e1e202d16ab27e5741eef9ab4f.exe_
    .exe 2.4MB
  • capa-testfiles-master/2d3edc218a90f03089cc01715a9f047f.exe_
    .exe 41KB
  • capa-testfiles-master/2dae11cc5f86f5399b560b8837c26274b7e09431deed669b0844fef44e917915.exe_
    .exe 725KB
  • capa-testfiles-master/2ebadd04f0ada89c36c1409b6e96423a68dd77b513db8db3da203c36d3753e5f.exe_
    .exe 26KB
  • capa-testfiles-master/2f43138aa75fb12ac482b486cbc98569.dll_
    .dll 16KB
  • capa-testfiles-master/2f7f5fb5de175e770d7eae87666f9831.elf_
    .elf 3.9MB
  • capa-testfiles-master/2f9ff544d5cc945b453356f9b20c07d8.exe_
    .exe 220KB
  • capa-testfiles-master/2fd45662e3d0ec0077ea2fa66b6378f0.exe_
    .exe 83KB
  • capa-testfiles-master/30ee31a532545d2fb456b6204dc443d5.exe_
    .exe 128KB
  • capa-testfiles-master/31600ad0d1a7ea615690df111ae36c73.exe_
    .exe 420KB
  • capa-testfiles-master/31bd8dd48ac0de3d4da340bf29f4d280.exe_
    .exe 96KB
  • capa-testfiles-master/31cee4f66cf3b537e3d2d37a71f339f4.exe_
    .exe 72KB
  • capa-testfiles-master/321338196a46b600ea330fc5d98d0699.exe_
    .exe 474KB
  • capa-testfiles-master/3265b2b0afc6d2ad0bdd55af8edb9b37.exe_
    .exe 483KB
  • capa-testfiles-master/32b3678f8c29437e9ea10eab10194f66.exe_
    .exe 146KB
  • capa-testfiles-master/32bb43f8847ecf158c1e96891ed9a28c.dll_
    .dll 75KB
  • capa-testfiles-master/34404a3fb9804977c6ab86cb991fb130.exe_
    .exe 171KB
  • capa-testfiles-master/3446b3889a52d81119d8c482a2a282b9.exe_
    .exe 64KB
  • capa-testfiles-master/34dbc85ed0386e024c724c7969e8d0ff0ff0b1882508ea259c458d59657a1971.elf_
    .elf 26KB
  • capa-testfiles-master/354a5de061795f8d961aae8e668ba9968083b1af09eeb9caed0111e7503974b5.exe_
    .exe 615KB
  • capa-testfiles-master/3583f7f97ab207be7ab2ec0a507e2481.dll_
    .dll 33KB
  • capa-testfiles-master/35f9cfe5110471a82e330d904c97466a.dll_
    .dll 120KB
  • capa-testfiles-master/368239d36d221d8877a07ab6799e643a.elf_
    .elf 18KB
  • capa-testfiles-master/36cc72c55f572fe02836f25516d18fed1de768e7f29af7bdf469b52a3fe2531f.exe_
    .exe 220KB
  • capa-testfiles-master/36f506a34b99bf4c199b3c9ec8aa02bd631feafdca20e69e33e714c269ddb8c5.dll_
    .dll 133KB
  • capa-testfiles-master/378ecc1b2e60129c9f06bb6bb8042f2b95feca5f526a4c26a5c39707807fa259.exe_
    .exe 544KB
  • capa-testfiles-master/3808f21e56dede99bc914d90aeabe47a.exe_
    .exe 66KB
  • capa-testfiles-master/388021747b85453adff2680c8a0e13e230f4eeada1a1055e3fb8e09800d4fb79.dll_
    .dll 67KB
  • capa-testfiles-master/395eb0ddd99d2c9e37b6d0b73485ee9c.exe_
    .exe 48KB
  • capa-testfiles-master/39c05b15e9834ac93f206bc114d0a00c357c888db567ba8f5345da0529cbed41.dll_
    .dll 164KB
  • capa-testfiles-master/39ce034911a6ebd482af5893f9bdbd95.exe_
    .exe 231KB
  • capa-testfiles-master/3aa7ee4d67f562933bc998f352b1f319.dll_
    .dll 24KB
  • capa-testfiles-master/3b13b6f1d7cd14dc4a097a12e2e505c0a4cff495262261e2bfc991df238b9b04.dll_
    .dll 781KB
  • capa-testfiles-master/3b2eba4789bd4a799fe18476a4d1ce9f37ecc4c202eb406e06425c7e792904ff.exe_
    .exe 301KB
  • capa-testfiles-master/3bbdf04c25fcd9876733eaa9163b3ed64d81396e7414619758d9376edf4c103e.dll_
    .dll 388KB
  • capa-testfiles-master/3ca359f5085bb96a7950d4735b089ffe.exe_
    .exe 47KB
  • capa-testfiles-master/3d0d79c4715e5b6dd2f8704e4878d57646d5a92e1116aec2ef81a5679ba45cd8.exe_
    .exe 2.2MB
  • capa-testfiles-master/3d5a99114b24e4373b77077072e4ed52ffce9e2607ec6fe4ed2f08d3b1c59026.dll_
    .dll 81KB
  • capa-testfiles-master/3d760b6fc84571c928bed835863fc302.exe_
    .exe 56KB
  • capa-testfiles-master/3da7c2c70a2d93ac4643f20339d5c7d61388bddd77a4a5fd732311efad78e535.elf_
    .elf 832KB
  • capa-testfiles-master/3e528207ca374123f63789195a4aedde.sys_
    .sys 36KB
  • capa-testfiles-master/3f1f67e21469d9084696cc8ce75723405019ac085726ab9d51c97b797110ed1d.dll_
    .dll 7KB
  • capa-testfiles-master/3f3bbcf8fd90bdcdcdc5494314ed4225.exe_
    .exe 482KB
  • capa-testfiles-master/3fdfb2d522e7deecaaaf2f87420f7e75.exe_
    .exe 22KB
  • capa-testfiles-master/4122acca2f9ea98fc3f3ad040688e4ce.exe_
    .exe 2.9MB
  • capa-testfiles-master/42e81cc1145ba3c1936a6cf9b8da0ccd.dll_
    .dll 102KB
  • capa-testfiles-master/44461306a604d2cd9883c2bb623af276.dll_
    .dll 129KB
  • capa-testfiles-master/44bad2e2a9e387b86870f009d01833ea4618d2a7cda5f64fa84a19f3bdf4efaf.exe_
    .exe 40KB
  • capa-testfiles-master/44d40faf3f1fe4ed969befab7afcd2f0.exe_
    .dll 443KB
  • capa-testfiles-master/464ef2ca59782ce697bc329713698ccc.exe_
    .exe 948KB
  • capa-testfiles-master/477743976643213d96b66ed5041a3b12.exe_
    .exe 690KB
  • capa-testfiles-master/48c7ad2d9d482cb11898f2719638ceed.exe_
    .exe .vbs 193KB
  • capa-testfiles-master/493167e85e45363d09495d0841c30648.sys_
    .sys 32KB
  • capa-testfiles-master/499c2a85f6e8142c3f48d4251c9c7cd6.raw32
    10KB
  • capa-testfiles-master/49a34cfbeed733c24392c9217ef46bb6.exe_
    .exe 4.7MB
  • capa-testfiles-master/4a2992b4c7a1573bf7c74065e3bf5b0d.dll_
    .dll 142KB
  • capa-testfiles-master/4b796a64abe7675254cd6f8a6c9b83949673158840a4a04c36e7c9068ec14cc8.dll_
    .dll 201KB
  • capa-testfiles-master/4b9efd882c49ef7525370ffb5197ad86.raw64
    40KB
  • capa-testfiles-master/4bdd67ff852c221112337fecd0681eac.exe_
    .exe 91KB
  • capa-testfiles-master/4e9c546a54e40d0da89bb4616dd7f8c4.exe_
    .exe 566KB
  • capa-testfiles-master/4f08636da3941f6f1e70ac2bf449b69e2ddbdc23dac58fd7eab9c5fdce6a4960.dll_
    .dll 89KB
  • capa-testfiles-master/4f11bdb380dafa2518053c6d20147a05.exe_
    .exe 763KB
  • $LOCALAPPDATA/17513.exe
    .exe 33KB
  • $LOCALAPPDATA/44758.exe
    .exe 124KB
  • $PLUGINSDIR/SimpleFC.dll
    .dll 175KB
  • $LOCALAPPDATA/52254.exe
    .exe 53KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $LOCALAPPDATA/82600.exe
    .exe 48KB
  • $LOCALAPPDATA/98975.exe
    .exe 172KB
  • $PLUGINSDIR/ShellLink.dll
    .dll 4KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $_0_/1govenment.exe
    .exe 132KB
  • $PLUGINSDIR/ExecCmd.dll
    .dll 4KB
  • $_20_/2govenment.exe
    .exe 132KB
  • $PLUGINSDIR/ExecCmd.dll
    .dll 4KB
  • $PLUGINSDIR/AccessControl.dll
    .dll 13KB
  • $PROGRAMFILES/Chatterley/Microsoft.Win32.TaskScheduler.dll
    .dll 287KB
  • $PROGRAMFILES/Chatterley/muse.exe
    .exe 11KB
  • $PROGRAMFILES/Chatterley/settings.dll
    .dll 6KB
  • $PROGRAMFILES/Politburo/muse.exe
    .exe 601KB
  • $PROGRAMFILES/klutzy/daiquiris.exe
    .exe 49KB
  • $PLUGINSDIR/ExecCmd.dll
    .dll 4KB
  • $WINDIR/muse.exe
    .exe 601KB
  • capa-testfiles-master/4f509bdfe5a2fe4320cdc070eedc0a72e12cc08f43d60a7701305b3d1408102b.exe_
    .exe 17KB
  • capa-testfiles-master/50d5ee1ce2ca5e30c6b1019ee64eeec2.exe_
    .exe 306KB
  • capa-testfiles-master/512a5575ff395389fc952d7925e72be1ca4ba86a5d4f2da50f1cbbde0b208c92.elf_
    .elf 81KB
  • capa-testfiles-master/51828683dc26bfabd3994494099ae97d.elf_
    .elf 16KB
  • capa-testfiles-master/52d8e95c9883cd16d7b44e3a7adc22d6.exe_
    .exe 13KB
  • capa-testfiles-master/54390bda109aab7fc006b8b4ead5b6c2.dll_
    .dll 778KB
  • capa-testfiles-master/54ac78733552a62d1d05ea4ba3fc604bb49fe000d7fc948da45335b726e64d75.dll_
    .dll 63KB
  • capa-testfiles-master/5589857ba6ad8cd0893f4fbba774382222a573d20a2dd71b26b3b4d64f671301.exe_
    .exe 80KB
  • capa-testfiles-master/559efe9f3d4864910d5c5edbaadd3972c6dfc3ba887c48aa6728b0093898563f.dll_
    .dll 586KB
  • capa-testfiles-master/55d77ab16377a8a314982f723fcc6fae.exe_
    .exe 1.5MB
  • capa-testfiles-master/563653399b82cd443f120eceff836ea3678d4cf11d9b351bb737573c2d856299.exe_
    .exe 143KB
  • capa-testfiles-master/573174640974b288d9d161cf4d29387cd7dbf7d80a80f5547df887f9836df8fb.exe_
    .exe 32KB
  • capa-testfiles-master/5789181cba467fa940cdce809b88b9bf7e0e9d4e079e32a68d2b911a8cc47da9.exe_
    .exe 356KB
  • capa-testfiles-master/580c37831fe98a254eb6c61c692c70d8.exe_
    .exe 101KB
  • capa-testfiles-master/58adc2e97fbee01b71073ccd7ff1b9a4.exe_
    .exe 33KB
  • capa-testfiles-master/592cfd22bba96ef3aab566fe7bf82aff5e1b4130856d1f7f847d03d4689af7e7.exe_
    .exe 11KB
  • capa-testfiles-master/59a6c5036241a2f604e755bf523eb084.exe_
    .exe 18KB
  • capa-testfiles-master/5a2f620f29ca2f44fc22df67b674198f.exe_
    .exe 90KB
  • capa-testfiles-master/5b3968b47eb16a1cb88525e3b565eab1.exe_
    .exe 49KB
  • capa-testfiles-master/5b99fa01c72cebc53a76cc72e9581189.dll_
    .dll 72KB
  • capa-testfiles-master/5d7c34b6854d48d3da4f96b71550a221.exe_
    .exe 28KB
  • capa-testfiles-master/5dd0b130d5c3d40c69e3972f39fd7d62.exe_
    .exe 427KB
  • capa-testfiles-master/5e6764534b3a1e4d3abacc4810b6985d.exe_
    .exe 740KB
  • capa-testfiles-master/5f66b82558ca92e54e77f216ef4c066c.exe_
    .exe 789KB
  • capa-testfiles-master/5fbbfeed28b258c42e0cfeb16718b31c.exe_
    .exe 858KB
  • capa-testfiles-master/638dcc3d37b3a574044233c9637d7288.exe_
    .exe 6KB
  • capa-testfiles-master/648fc498110b11b4313a47a776e6ba40.exe_
    .exe 2.7MB
  • capa-testfiles-master/64ce9ab801d9bef5284b408c3373dd30ba2dc6952c0950c8049be067b5f24530.dll_
    .dll 230KB
  • capa-testfiles-master/64d9f7d96b99467f36e22fada623c3bb.dll_
    .dll 34KB
  • capa-testfiles-master/64e9f62840db2f65fc717cfaf99081f9.dll_
    .dll 293KB
  • capa-testfiles-master/658b0502b53f718bd0611a638dfd5969.exe_
    .exe 51KB
  • capa-testfiles-master/659a539cfff56e5450af76f8696b7122d6a22b1d7dbe5121c7b6308eb6ec1c3a.exe_
    .exe 1.2MB
  • capa-testfiles-master/65b1ea6e5254d458c602504ceeda5e05.exe_
    .exe 138KB
  • capa-testfiles-master/66602b5fab602cb4e6f754748d249542.exe_
    .exe 649KB
  • capa-testfiles-master/67f8302a2fd28d15f62d6d20d748bfe350334e5353cbdef112bd1f8231b5599d.exe_
    .exe 79KB
  • capa-testfiles-master/684cc28e6a7fbd12f23dbc563f06306555ebb870bd727ad60839d4ff26e7f3b2.exe_
    .exe 1.4MB
  • capa-testfiles-master/6a352c3e55e8ae5ed39dc1be7fb964b1.dll_
    .dll 171KB
  • capa-testfiles-master/6b25f1e754ef486bbb28a66d46bababe.exe_
    .exe 608KB
  • capa-testfiles-master/6be0ae5cb7c3155f70d608fc7670d2d9.exe_
    .exe 320KB
  • capa-testfiles-master/6c440a5ce8509984dcc4e703d0e4dd9bffc4efd769dc8543f8d2e0cd86452822.dll_
    .dll 264KB
  • capa-testfiles-master/6cc148363200798a12091b97a17181a1.exe_
    .exe 3.0MB
  • capa-testfiles-master/6cd1315f6f2fa4f8ee2b98bb3ca0a994.exe_
    .exe 152KB
  • capa-testfiles-master/6ee9bb8b897c2d69f797646d5f94de0f.elf_
    .elf 114KB
  • capa-testfiles-master/6f6acca4d3696e08af9ed80f237f3542c362ebc2bcc9759bb64aa3f5c007320e.dll_
    .dll 19KB
  • capa-testfiles-master/6f99a2c8944cb02ff28c6f9ced59b161.exe_
    .exe 492KB
  • capa-testfiles-master/6f9cb3f56d227fd57f0b75220472d744a6de894e7f74302ae39bbb164a92cdd6.exe_
    .exe 187KB
  • capa-testfiles-master/6fcc13563aad936c7d0f3165351cb453.exe_
    .exe 93KB
  • capa-testfiles-master/70fd3347786ed7a4a43910e6778ef296.exe_
    .exe 623KB
  • capa-testfiles-master/71419e4d6f538b8a04ca6786e4d68f0d40204df465fe80bc6b4a0b259103e50f.dll_
    .dll 138KB
  • capa-testfiles-master/71a4f9b800d81ff6632b9892a6a502c412c141341e46d697a8c004e2f460913b.exe_
    .exe 286KB
  • capa-testfiles-master/7204e3efc2434012e13ca939db0d0b02.exe_
    .exe 142KB
  • capa-testfiles-master/72c8e3c8049927fa1dd53b61d9b67b9d74ab5b6c030bc38dfbe9a338a32438c9.dll_
    .dll 263KB
  • capa-testfiles-master/7351f8a40c5450557b24622417fc478d.elf_
    .elf .desktop 52KB
  • capa-testfiles-master/73ce04892e5f39ec82b00c02fc04c70f.exe_
    .exe 116KB
  • capa-testfiles-master/749cf36adc5513c92c7acc836d20935e3c433f3c2d5641293e7a9c57c5ce22c2.elf_
    .elf 92KB
  • capa-testfiles-master/749e7becf00fccc6dff324a83976dc0d.exe_
    .exe 21KB
  • capa-testfiles-master/74e0758e469ab87f38cda7925d696ea41a122364891860e1ae30fc9ff2f68e7d.exe_
    .exe 43KB
  • capa-testfiles-master/74fa32d2b277f583010b692a3f91b627.exe_
    .dll 344KB
  • capa-testfiles-master/757139e76fae876ae50dd2c3ac11d5d8.exe_
    .exe 95KB
  • capa-testfiles-master/773290480d5445f11d3dc1b800728966.exe_
    .exe 128KB
  • capa-testfiles-master/77d87e9937546aebc1595039d730352b15fab32c72a76913f04262c6802d098f.exe_
    .exe 63KB
  • capa-testfiles-master/787cbc8a6d1bc58ea169e51e1ad029a637f22560660cc129ab8a099a745bd50e.exe_
    .exe 170KB
  • capa-testfiles-master/79252f58d486aee8c08a8a7ebd36ae11ab5798b289e7f88e71eacf8637c340cc.dll_
    .dll 189KB
  • capa-testfiles-master/79abd17391adc6251ecdc58d13d76baf.dll_
    .dll 11KB
  • capa-testfiles-master/79cde1aa711e321b4939805d27e160be.exe_
    .exe 75KB
  • capa-testfiles-master/79f5cabff898d60cd614e7254d409d9c2e05184416e5c54201e2dc216998d28b.raw64
    29KB
  • capa-testfiles-master/7c843e75d4f02087b932fe280df9c90c.exe_
    .exe 332KB
  • capa-testfiles-master/7ca4ce02c9d331c2cfdad7329352664c224f02ccfef826a76321831bee1e2191.dll_
    .dll 106KB
  • capa-testfiles-master/7cd03db8ed91a66920cc03026baa2df2a8370293b072218b9fbf6d9a21cad66b.dll_
    .dll 1.6MB
  • capa-testfiles-master/7d16efd0078f22c17a4bd78b0f0cc468.exe_
    .exe 44KB
  • capa-testfiles-master/7d333c9b11b06ef0982b61bfc062631bb6cf9d12d0d4f2cf1b807a25ddf62fbc.exe_
    .exe 19KB
  • capa-testfiles-master/7e17f0f35d50f49407841372f24fbd38.exe_
    .exe 179KB
  • capa-testfiles-master/7f15b1a47bbe031334e23653879e9661f4b8cde80c307548328fdd3aed87ca46.exe_
    .exe 150KB
  • capa-testfiles-master/7f403f7d643d90c7cbadf3ccfc68bd1badf06f89a35af5fc7811920e820bbcc9.dll_
    .dll_ .xll 84KB
  • capa-testfiles-master/7fbc17a09cf5320c515fc1c5ba42c8b3.exe_
    .exe 200KB
  • capa-testfiles-master/7fd2e2e3c88675d877190abaa3002b55.dll_
    .dll 104KB
  • capa-testfiles-master/80372de850597bd9e7e021a94f13f0a1.exe_
    .exe 69KB
  • capa-testfiles-master/805f79e57e4ce24b95a04541e4ea55dd2ce9ba314ab2c43491328204bc25d017.exe_
    .exe 56KB
  • capa-testfiles-master/80f166e9c0427f055c88c9ee62016a6ba6a938023ff8778f5a0b5f8d7fe7570d.dll_
    .dll 99KB
  • capa-testfiles-master/82bf6347acf15e5d883715dc289d8a2b.exe_
    .exe 958KB
  • capa-testfiles-master/8333822ed41d9f2b302cf8e21b126efc.exe_
    .exe 55KB
  • capa-testfiles-master/84a1212f4a91066babcf594d87a85894.exe_
    .exe 265KB
  • capa-testfiles-master/84f1b049fa8962b215a77f51af6714b3.dll_
    .dll 82KB
  • capa-testfiles-master/86a8f267cf0f51c032f7b1777eb1e51f7cd1badf3f3894e2557a3f571fca9f3d.exe_
    .exe 1.4MB
  • capa-testfiles-master/873275ce8bf88ef66e9fa0c74b5c2a1e.exe_
    .exe 1.2MB
  • capa-testfiles-master/8775ed26068788279726e08ff9665aab.exe_
    .exe 1012KB
  • capa-testfiles-master/883bf161937f8dc6e766b07000110254.exe_
    .exe 128KB
  • capa-testfiles-master/8a132663bee5c2f0f5cbfebee1b55ac72934632bf32bc32d6e2dae797c9e6e35.dll_
    .dll 2.5MB
  • capa-testfiles-master/8b1682c85612db9f62eb3600a90b54e83117bb756a7456c9f82ccdcb0bf4b7e4.exe_
    .exe 396KB
  • capa-testfiles-master/8ba66e4b618ffdc8255f1df01f875dde6fd0561305d9f8307be7bb11d02ae363.exe_
    .exe 548KB
  • capa-testfiles-master/91a12a4cf437589ba70b1687f5acad19.exe_
    .exe 3.1MB
  • capa-testfiles-master/91b08896fbda9edb8b6f93a6bc811ec6.dll_
    .dll 152KB
  • capa-testfiles-master/92d8ea10ea30e8b534334a1c9857a455.exe_
    .exe 1.1MB
  • capa-testfiles-master/9324d1a8ae37a36ae560c37448c9705a.exe_
    .exe 52KB
  • capa-testfiles-master/932dab8756ad4ae9a62bde0772d952e4.exe_
    .exe 260KB
  • capa-testfiles-master/946a99f36a46d335dec080d9a4371940.dll_
    .dll 168KB
  • capa-testfiles-master/94d3c854aadbcfde46b2f82801015c31.exe_
    .dll 1.7MB
  • capa-testfiles-master/96abcbcb4aec439ac1619b02a44b6f482241dbb7486a15138e3aada5fa01d382.dll_
    .dll 133KB
  • capa-testfiles-master/971e599e6e707349eccea2fd4c8e5f67.exe_
    .exe 148KB
  • capa-testfiles-master/9879d201dc5aca863f357184cd1f170e.dll_
    .dll 17KB
  • capa-testfiles-master/98c37c3c23bbfb362dac7754c6ba48e75cf24d73bc963a4cdfca557b9e016909.exe_
    .exe 14KB
  • capa-testfiles-master/9a00ebe67d833edb70ed6dd0f4652592.dll_
    .dll 138KB
  • capa-testfiles-master/9b7ccaa2ae6a5b96e3110ebcbc4311f6.dll_
    .dll 151KB
  • capa-testfiles-master/9bca6b99e7981208af4c7925b96fb9cf.exe_
    .exe 8KB
  • capa-testfiles-master/9d98f8519d9fee8219caca5b31eef0bd.exe_
    .exe 45KB
  • capa-testfiles-master/9dc209f66da77858e362e624d0be86b3.exe_
    .exe 558KB
  • capa-testfiles-master/9e4d06759f278255073f9ac7b31a115a.dll_
    .dll 44KB
  • capa-testfiles-master/9ed5660c6a442dbba9e2ba795ccc913c1f1517ce89854fe4287c1c8b36b21d52.exe_
    .dll 138KB
  • capa-testfiles-master/9efa86b43b4367bcdc1591aee59bda25.dll_
    .dll 167KB
  • capa-testfiles-master/9f012d7e3ae8f62370278e372691eb73b878fe2280b6083e1be637b278021855.exe_
    .exe 172KB
  • capa-testfiles-master/9ff8e68343cc29c1036650fc153e69f7.exe_
    .exe 659KB
  • capa-testfiles-master/LICENSE.txt
    11KB
  • capa-testfiles-master/Practical Malware Analysis Lab 01-01.dll_
    .dll 160KB
  • capa-testfiles-master/Practical Malware Analysis Lab 01-01.exe_
    .exe 16KB
  • capa-testfiles-master/Practical Malware Analysis Lab 01-02.exe_
    .exe 3KB
  • out.upx
    .exe 16KB
  • capa-testfiles-master/Practical Malware Analysis Lab 01-04.exe_
    .exe 36KB
  • capa-testfiles-master/Practical Malware Analysis Lab 03-02.dll_
    .dll 23KB
  • capa-testfiles-master/Practical Malware Analysis Lab 03-03.exe_
    .exe 52KB
  • capa-testfiles-master/Practical Malware Analysis Lab 03-04.exe_
    .exe 60KB
  • capa-testfiles-master/Practical Malware Analysis Lab 05-01.dll_
    .dll 130KB
  • capa-testfiles-master/Practical Malware Analysis Lab 06-03.exe_
    .exe 40KB
  • capa-testfiles-master/Practical Malware Analysis Lab 10-03.exe_
    .exe 24KB
  • capa-testfiles-master/Practical Malware Analysis Lab 10-03.sys_
    .sys 3KB
  • capa-testfiles-master/Practical Malware Analysis Lab 11-01.exe_
    .exe 52KB
  • capa-testfiles-master/Practical Malware Analysis Lab 11-02.dll_
    .dll 20KB
  • capa-testfiles-master/Practical Malware Analysis Lab 11-03.dll_
    .dll 48KB
  • capa-testfiles-master/Practical Malware Analysis Lab 11-03.exe_
    .exe 48KB
  • capa-testfiles-master/Practical Malware Analysis Lab 12-01.dll_
    .dll 48KB
  • capa-testfiles-master/Practical Malware Analysis Lab 12-01.exe_
    .exe 36KB
  • capa-testfiles-master/Practical Malware Analysis Lab 12-02.exe_
    .exe 52KB
  • capa-testfiles-master/Practical Malware Analysis Lab 12-03.exe_
    .exe 24KB
  • capa-testfiles-master/Practical Malware Analysis Lab 12-04.exe_
    .exe 36KB
  • capa-testfiles-master/Practical Malware Analysis Lab 14-01.exe_
    .exe 28KB
  • capa-testfiles-master/Practical Malware Analysis Lab 14-02.exe_
    .exe 6KB
  • capa-testfiles-master/Practical Malware Analysis Lab 16-01.exe_
    .exe 60KB
  • capa-testfiles-master/Practical Malware Analysis Lab 16-01.exe_.bndb
    2.4MB
  • capa-testfiles-master/Practical Malware Analysis Lab 16-02.exe_
    .exe 44KB
  • capa-testfiles-master/Practical Malware Analysis Lab 16-03.exe_
    .exe 36KB
  • capa-testfiles-master/Practical Malware Analysis Lab 17-02.dll_
    .dll 131KB
  • capa-testfiles-master/Practical Malware Analysis Lab 17-03.exe_
    .exe 44KB
  • capa-testfiles-master/Practical Malware Analysis Lab 18-01.exe_
    .exe 13KB
  • capa-testfiles-master/Practical Malware Analysis Lab 18-03.exe_
    .exe 12KB
  • capa-testfiles-master/Practical Malware Analysis Lab 19-02.exe_
    .exe 40KB
  • capa-testfiles-master/Practical Malware Analysis Lab 20-02.exe_
    .exe 32KB
  • capa-testfiles-master/Practical Malware Analysis Lab 21-01.exe_
    .exe 37KB
  • capa-testfiles-master/README.md
    884B
  • capa-testfiles-master/a0fb20bc9aa944c3a0a6c4545c195818.exe_
    .exe 5.3MB
  • capa-testfiles-master/a1451e3108e85769302ad25c74757180.exe_
    .exe 972KB
  • capa-testfiles-master/a198216798ca38f280dc413f8c57f2c2.exe_
    .exe 286KB
  • capa-testfiles-master/a210a5daaf487fe6c8bbaf906abce749042f15890d60b09c6cb333e54958663b.dll_
    .dll 985KB
  • capa-testfiles-master/a30101595f6f28ab2f4b0b2cd177c3c4d2ab34a355ab7761a3795d0887c24ada.exe_
    .exe 468KB
  • capa-testfiles-master/a301eadd2b665b696803e143dd4d657d71c56bbded2a3a1b96c5bcb83cc6796a.dll_
    .dll 10KB
  • capa-testfiles-master/a3c0a2425ea84103adde03a92176424c.exe_
    .exe 114KB
  • capa-testfiles-master/a45e377dbb98a6b44fd4034bc3fff9b0.exe_
    .exe 50KB
  • capa-testfiles-master/a4f1f09a2b9bc87de90891da6c0fca28e2f88fd67034648060cef9862af9a3bf.dll_
    .dll 277KB
  • capa-testfiles-master/a563c50c5fa0fd541248acaf72cc4e7d.exe_
    .exe 635KB
  • capa-testfiles-master/a5c70086b3bc4fe64f4e7a0aa452e620.exe_
    .exe 134KB
  • capa-testfiles-master/a5d66324daaee5672b913aa461d4bd3a.exe_
    .exe 176KB
  • capa-testfiles-master/a6594d9550d56ddeaac8b3140821e698eefb7163ba29f0119c2ef19beb6040b0.exe_
    .exe 484KB
  • capa-testfiles-master/a6e9d94e286984b9e44c58df5eeb20cf5c08b9acff4af341ddecdfbe3ea9249d.elf_
    .elf 87KB
  • capa-testfiles-master/a70052c45e907820187c7e6bcdc7ecca.exe_
    .exe 464KB
  • capa-testfiles-master/a74ee8200aace7d19dee79871bbf2ed3.exe_
    .exe 221KB
  • capa-testfiles-master/a90e5b3454aa71d9700b2ea54615f44b.exe_
    .exe 840KB
  • capa-testfiles-master/a933a1a402775cfa94b6bee0963f4b46.dll_
    .dll 211KB
  • capa-testfiles-master/aarch64/687e79cde5b0ced75ac229465835054931f9ec438816f2827a8be5f3bd474929.elf_
    .elf 67KB
  • capa-testfiles-master/aarch64/c7f38027552a3eca84e2bfc846ac1307fbf98657545426bb93a2d63555cbb486.elf_
    .elf 1KB
  • capa-testfiles-master/aarch64/d1e6506964edbfffb08c0dd32e1486b11fbced7a4bd870ffe79f110298f0efb8.elf_
    .elf 319KB
  • capa-testfiles-master/ac742739cae0d411dfcb78ae99a7baee.exe_
    .exe 213KB
  • capa-testfiles-master/acd2d663799e8919b09e188adbb55ac655e5409bcd073e6a4b6576163e6e65d5.exe_
    .exe 9KB
  • capa-testfiles-master/ad4229879180e267f431ac6666b6a0a2.exe_
    .exe 916KB
  • capa-testfiles-master/aefae71bca4bbaa2c013ddf040d797628c8d3da7346108c12735239a86fdfa71.dll_
    .dll 45KB
  • capa-testfiles-master/af13e7583ed1b27c4ae219e344a37e2b.exe_
    .exe 17KB
  • capa-testfiles-master/af2f4142463f42548b8650a3adf5ceb2.dll_
    .dll 3.3MB
  • capa-testfiles-master/af60700383b75727f5256a0000c1476f.sys_
    .sys 18KB
  • capa-testfiles-master/al-khaser_x64.exe_
    .exe 508KB
  • capa-testfiles-master/al-khaser_x86.exe_
    .exe 438KB
  • capa-testfiles-master/b1133d7e5599beefe992a127f6e9704176a13b7e86b4db45c3b61cf25a60d414.exe_
    .exe 118KB
  • capa-testfiles-master/b283415c9df06f0e53b7d452d3e5c840c5bd7a6ce734a30bae4a869a57974a0e.dll_
    .dll 89KB
  • capa-testfiles-master/b2ad4409323147b63e370745e5209996.exe_
    .exe 25KB
  • capa-testfiles-master/b43fca5283bfc7022553eff663683834.raw32
    38KB
  • capa-testfiles-master/b5f0524e69b3a3cf636c7ac366ca57bf5e3a8fdc8a9f01caf196c611a7918a87.elf_
    .elf 678KB
  • capa-testfiles-master/b5f85c26d7aa5a1fb4af5821b6b5ab9b.sys_
    .sys 55KB
  • capa-testfiles-master/b761e060c7114448d6a5fe276d4ca882c4bd702c12c4d73f6ad79b8dfac33448.exe_
    .exe 18KB
  • capa-testfiles-master/b766cc43d649d30e9f27aff8f7ee7de0.exe_
    .exe 40KB
  • capa-testfiles-master/b7841b9d5dc1f511a93cc7576672ec0c.dll_
    .dll 164KB
  • capa-testfiles-master/b7b5e1253710d8927cbe07d52d2d2e10.exe_
    .exe 101KB
  • capa-testfiles-master/b83480162ede09d4aa6d4850f9faa0a4c3834152752fd04cfdb22d647aa1f825.exe_
    .exe 115KB
  • capa-testfiles-master/b87b8637121d5e213ca02b45cbaca496bdf1fcc4bfddce48eea6e41637ffedd4.exe_
    .exe 23KB
  • capa-testfiles-master/b87e9dd18a5533a09d3e48a7a1efbcf6.exe_
    .exe 170KB
  • capa-testfiles-master/b9f5bd514485fb06da39beff051b9fdc.exe_
    .exe 38KB
  • capa-testfiles-master/ba947eb07d8c823949316a97364d060f.exe_
    .exe 37KB
  • capa-testfiles-master/bb38149ff4b5c95722b83f24ca27a42b.elf_
    .elf 5KB
  • capa-testfiles-master/bb7922d368a9a9c8d981837b5ad988f1.exe_
    .exe 217KB
  • capa-testfiles-master/bc452cc1128ccf7fa9f76d83cda79132740414973600fed14509749fe946816e.exe_
    .exe 787KB
  • capa-testfiles-master/bc577119d1a5b7da489e7b5817d3cc38.dll_
    .dll 53KB
  • capa-testfiles-master/be619015f1d5fb13d3bcd48d1b0843759a5e040d8af3da50f2d8f55b5a680e02.dll_
    .dll 10KB
  • capa-testfiles-master/bf7a9c8bdfa6d47e01ad2b056264acc3fd90cf43fe0ed8deec93ab46b47d76cb.elf_
    .elf 121KB
  • capa-testfiles-master/bf88e1bd4a3bde10b419a622278f1ff7.exe_
    .exe 112KB
  • capa-testfiles-master/bf9a888e226d8396e84e042732daf32b8c1df8fd675eb128e8da3f0d7768bea5.exe_
    .exe 20KB
  • capa-testfiles-master/bfb9b5391a13d0afd787e87ab90f14f5.dll_
    .dll 42KB
  • capa-testfiles-master/binexport2/687e79cde5b0ced75ac229465835054931f9ec438816f2827a8be5f3bd474929.elf_.ghidra.BinExport
    110KB
  • capa-testfiles-master/binexport2/687e79cde5b0ced75ac229465835054931f9ec438816f2827a8be5f3bd474929.elf_.ida.BinExport
    113KB
  • capa-testfiles-master/binexport2/c7f38027552a3eca84e2bfc846ac1307fbf98657545426bb93a2d63555cbb486.elf_.ghidra.BinExport
    1KB
  • capa-testfiles-master/binexport2/d1e6506964edbfffb08c0dd32e1486b11fbced7a4bd870ffe79f110298f0efb8.elf_.ghidra.BinExport
    1.4MB
  • capa-testfiles-master/binexport2/mimikatz.exe_.ghidra.BinExport
    5.5MB
  • capa-testfiles-master/binexport2/mimikatz.exe_.ida.BinExport
    3.9MB
  • capa-testfiles-master/c1969efd1e2be79909b880f4dbb8725e52efca82236f8a2165c5a8245393fcd6.exe_
    .exe 229KB
  • capa-testfiles-master/c29513e5a51dd24ca840f7628b872cba921976cba89dcbffd5028ba15481108c.dll_
    .dll_ .xll 9KB
  • capa-testfiles-master/c2ba065654f13612ae63bca7f972ea91c6fe97291caeaaa3a28a180fb1912b3a.dll_
    .dll 543KB
  • capa-testfiles-master/c2bb17c12975ea61ff43a71afd9c3ff111d018af161859abae0bdb0b3dae98f9.exe_
    .exe 11KB
  • capa-testfiles-master/c2c3b3eea177b9411bc92a8800b40529fcd2d5c3696e71cbb2f4025429b314ee.elf_
    .elf 21KB
  • capa-testfiles-master/c2d46d256b8f9490c9599eea11ecef19fde7d4fdd2dea93604cee3cea8e172ac.exe_
    .exe 405KB
  • capa-testfiles-master/c3341b7dfbb9d43bca8c812e07b4299f.exe_
    .exe 632KB
  • capa-testfiles-master/c335a9d41185a32ad918c5389ee54235.exe_
    .exe 21KB
  • capa-testfiles-master/c3699d0c7bd1276184249a487c1f0d7f.exe_
    .exe 130KB
  • capa-testfiles-master/c3ef997d330e65be1e22ba4d2622ece23391c6cfc78b2ee515f3d0c7a3083a79.exe_
    .exe 16KB
  • capa-testfiles-master/c40db0438a906eb0bec55093f1a0f2cc4cdc38104af0b4b4b3f18200a635c443.exe_
    .exe 6.9MB
  • capa-testfiles-master/c56af5561e3f20bed435fb4355cffc29.exe_
    .exe 99KB
  • capa-testfiles-master/c66172b12971a329f8d5ff01665f204b.exe_
    .exe 97KB
  • capa-testfiles-master/c91887d861d9bd4a5872249b641bc9f9.exe_
    .exe 445KB
  • capa-testfiles-master/cb0ce85efef94a4f7eacb4571ebf71b12ebbf9fb9faba96e853552822668aa22.exe_
    .exe 147KB
  • capa-testfiles-master/cb948b13a5046a692ec3ed8cc16a9566.exe_
    .exe 130KB
  • capa-testfiles-master/cc870a35c6840987dcb8c2dd46bc230a.exe_
    .exe 10KB
  • capa-testfiles-master/ccbf7cba35bab56563c0fbe4237fdc41.exe_
    .exe 93KB
  • capa-testfiles-master/cd2cba9e6313e8df2c1273593e649682.exe_
    .exe 55KB
  • capa-testfiles-master/ce8d7590182db2e51372a4a04d6a0927a65b2640739f9ec01cfd6c143b1110da.exe_
    .exe 102KB
  • capa-testfiles-master/d063b1804e8d2bb26bd2e097141c1bbc.exe_
    .exe 914KB
  • capa-testfiles-master/d68ce802ef22a1bafc00c2e6675959f177ce8aed91003a053ac0c888bec42c54.dll_
    .dll 88KB
  • capa-testfiles-master/d7ff81ff775d4ab50d31ac1e962c8c4dea7ff9f280aa2b42ddd06760a5665002.exe_
    .exe 44KB
  • capa-testfiles-master/d87ba0bfce1cdb17fd243b8b1d247e88.exe_
    .exe 198KB
  • capa-testfiles-master/d890c1c67d83f1131c065b5eb5f263cbf54559dbcdb4562c3bde3dc30d1a3205.raw64
    101KB
  • capa-testfiles-master/d8d2ed4a5f13e4bda8edf89d0dd1ef57cec8b18c01fcccdb89fb745a1a2be05f.exe_
    .exe 703KB
  • capa-testfiles-master/d9531e53036c5d04fbe7d1aeae2988c3bf0fdec63774690c5df70cc121af8de4.dll_
    .dll 903KB
  • capa-testfiles-master/d9630c174b8ff5c0aa26168df523e63e.exe_
    .exe 2.7MB
  • capa-testfiles-master/daa13ae302fe8b618ddbf590537443ef.exe_
    .exe 196KB
  • capa-testfiles-master/db9fe790b4e18abf55df31aa0b81e558.exe_
    .exe 419KB
  • capa-testfiles-master/dc4dc746d8a14060fb5fc7edd4ef5282.exe_
    .exe 16KB
  • capa-testfiles-master/dc7cb53c5dc2e756822328a7144c29318cb871890727eff9c8da64a01e8e782d.dll_
    .dll 22KB
  • capa-testfiles-master/dc9eb40429d6fa2f15cd34479cb320c8.exe_
    .exe 88KB
  • capa-testfiles-master/de07bd6e3ade9e4d8a36032a23de11a372bd93d39a6ef95d849e3f6f7ebac6e5.exe_
    .exe 116KB
  • capa-testfiles-master/df814d4b55912e4ba404c62080b3a7eda70a3c6283ea740f8a14a9116d803259.dll_
    .dll 20KB
  • capa-testfiles-master/dotnet/1c444ebeba24dcba8628b7dfe5fec7c6.exe_
    .exe 35KB
  • capa-testfiles-master/dotnet/1ee70f829fa4f21b97fea53412383b4c83be1aaf8bab2f4b692549f8ceb4388f.dll_
    .dll 8KB
  • capa-testfiles-master/dotnet/2c7d60f77812607dec5085973ff76cea.dll_
    .dll 105KB
  • capa-testfiles-master/dotnet/387f15043f0198fd3a637b0758c2b6dde9ead795c3ed70803426fc355731b173.dll_
    .dll 1.6MB
  • capa-testfiles-master/dotnet/692f7fd6d198e804d6af98eb9e390d61.exe_
    .exe 9KB
  • capa-testfiles-master/dotnet/7f4ba9fc95b30baf8922a6933a4ff1c6a7fef41fae487bb31014c4963357770f.dll_
    .dll 1.1MB
  • capa-testfiles-master/dotnet/dd9098ff91717f4906afe9dafdfa2f52.exe_
    .exe 4KB
  • capa-testfiles-master/dynamic/cape/v2.2/0000a65749f5902c4d82ffa701198038f0b4870b00a27cfca109f8f933476d82.json.gz
    .gz 969KB
  • capa-testfiles-master/dynamic/cape/v2.2/55dcd38773f4104b95589acc87d93bf8b4a264b4a6d823b73fb6a7ab8144c08b.json.gz
    .gz 26KB
  • capa-testfiles-master/dynamic/cape/v2.2/77c961050aa252d6d595ec5120981abf02068c968f4a5be5958d10e87aa6f0e8.json.gz
    .gz 10KB
  • capa-testfiles-master/dynamic/cape/v2.2/d46900384c78863420fb3e297d0a2f743cd2b6b3f7f82bf64059a168e07aceb7.json.gz
    .gz 72KB
  • capa-testfiles-master/dynamic/cape/v2.4/.gitignore
    1B
  • capa-testfiles-master/dynamic/cape/v2.4/36d218f384010cce9f58b8193b7d8cc855d1dff23f80d16e13a883e152d07921.json.gz
    .gz 1.4MB
  • capa-testfiles-master/dynamic/cape/v2.4/41ce492f04accef7931b84b8548a6ca717ffabb9bedc4f624de2d37a5345036c.json.gz
    .gz 1.1MB
  • capa-testfiles-master/dynamic/cape/v2.4/515a6269965ccdf1005008e017ec87fafb97fd2464af1c393ad93b438f6f33fe.json.gz
    .gz 1.1MB
  • capa-testfiles-master/dynamic/cape/v2.4/5d61700feabba201e1ba98df3c8210a3090c8c9f9adbf16cb3d1da3aaa2a9d96.json.gz
    .gz 1.9MB
  • capa-testfiles-master/dynamic/cape/v2.4/5effaf6795932d8b36755f89f99ce7436421ea2bd1ed5bc55476530c1a22009f.json.gz
    .gz 1.8MB
  • capa-testfiles-master/dynamic/cape/v2.4/873275144af88e9b95ea2c59ece39b8ce5a9d7fe09774b683050098ac965054d.json.gz
    .gz 1.4MB
  • capa-testfiles-master/dynamic/cape/v2.4/8b9aaf4fad227cde7a7dabce7ba187b0b923301718d9d40de04bdd15c9b22905.json.gz
    .gz 1.1MB
  • capa-testfiles-master/dynamic/cape/v2.4/b1c4aa078880c579961dc5ec899b2c2e08ae5db80b4263e4ca9607a68e2faef9.json.gz
    .gz 1.1MB
  • capa-testfiles-master/dynamic/cape/v2.4/capesandbox_com/0a0882b8da225406cc838991b5f67d11.json.gz
    .gz 727KB
  • capa-testfiles-master/dynamic/cape/v2.4/capesandbox_com/2ebadd04f0ada89c36c1409b6e96423a68dd77b513db8db3da203c36d3753e5f.json.gz
    .gz 11KB
  • capa-testfiles-master/dynamic/cape/v2.4/capesandbox_com/README.md
    142B
  • capa-testfiles-master/dynamic/cape/v2.4/capesandbox_com/f5c93ac768c8206e87544ddd76b3277c.json.gz
    .gz 2.6MB
  • capa-testfiles-master/dynamic/cape/v2.4/fb7ade52dc5a1d6128b9c217114a46d0089147610f99f5122face29e429a1e74.json.gz
    .gz 1.3MB
  • capa-testfiles-master/dynamic/drakvuf/93b2d1840566f45fab674ebc79a9d19c88993bcb645e0357f3cb584d16e7c795.log.gz
    .gz 66KB
  • capa-testfiles-master/dynamic/vmray/2f8a79b12a7a989ac7e5f6ec65050036588a92e65aeb6841e08dc228ff0e21b4_min_archive.zip
    .zip 9.3MB
  • capa-testfiles-master/dynamic/vmray/86d8257ae56e5d8220a4e3f8396d944b5e9e41732b58ad7472276d78aea232fa_min_archive.zip
    .zip 504KB
  • capa-testfiles-master/dynamic/vmray/93b2d1840566f45fab674ebc79a9d19c88993bcb645e0357f3cb584d16e7c795_min_archive.zip
    .zip 19.7MB
  • capa-testfiles-master/dynamic/vmray/eb12873c0ce3e9ea109c2a447956cbd10ca2c3e86936e526b2c6e28764999f21_min_archive.zip
    .zip 1.4MB
  • capa-testfiles-master/e353d3fbfb5c3738a77a622adff9a416.exe_
    .exe 103KB
  • capa-testfiles-master/e365e3e3febb8a71267b5cd64457744a00e2d61edafb7c98b205b729315e97de.dll_
    .dll 61KB
  • capa-testfiles-master/e3a6fbbc9b315141da37e5abbae05bf20aa9f48d5f569c6353360f59a0315245.exe_
    .exe 16KB
  • capa-testfiles-master/e4c33ac3638eef68311f8ac0d72483c7.exe_
    .exe 308KB
  • capa-testfiles-master/e5369ac309f1be6d77afeeb3edab0ed8.exe_
    .exe 18KB
  • capa-testfiles-master/e544a4d616b60147d9774b48c2b65ef2.exe_
    .exe 140KB
  • capa-testfiles-master/e59ffeaf7acb0c326e452fa30bb71a36.exe_
    .exe 71KB
  • capa-testfiles-master/e5e8c139772efe47f738f4788ae9b3dc97960b1c006bc6a406715cab69f27cfc.elf_
    .elf 25KB
  • capa-testfiles-master/e69a8eb94f65480980deaf1ff5a431a6.exe_
    .exe 506KB
  • capa-testfiles-master/e87076a1182ba40758e1d7258442c1ee23bf71ac77fad9f3babc707dce11c144.exe_
    .exe 533KB
  • capa-testfiles-master/e999b36d5f9783178f0a4efa35a25d158f8d94325c3d6794f4153235c0aee60b.exe_
    .exe 758KB
  • capa-testfiles-master/ea2876e9175410b6f6719f80ee44b9553960758c7d0f7bed73c0fe9a78d8e669.dll_
    .dll 253KB
  • capa-testfiles-master/ea7bb99e03606702c1cbe543bb32b27e.dll_
    .dll 458KB
  • capa-testfiles-master/eaad7dfc78304b977d3844cc63577152.exe_
    .exe 938KB
  • capa-testfiles-master/eb355bd63bddce02955792b4cd6539fb.dll_
    .dll 86KB
  • capa-testfiles-master/ed888dc2f04f5eac83d6d14088d002de.exe_
    .exe 4.5MB
  • capa-testfiles-master/edb92795c06a2bde47e652639327253a1148ee675ba2f0d1d9ac8690ef1820b1.exe_
    .exe 61KB
  • capa-testfiles-master/ee3b869b668abec332d07c66d1a39f6dbf3a598cc1325b57a0504f8d24ac2e28.dll_
    .dll 258KB
  • capa-testfiles-master/efd1a86330cecba5d8d038fba65ac8e76955ed724986aa87cd6ca9f72f6941c7.dll_
    .dll 500KB
  • capa-testfiles-master/f03bdb9fa52f7b61ef03141fefff1498ad2612740b1fdbf6941f1c5af5eee70a.exe_
    .exe 14KB
  • capa-testfiles-master/f0a6a1bd6d760497623611e8297a81df.exe_
    .exe 64KB
  • capa-testfiles-master/f4584aed97469c461826ea17ca9b3c1d.exe_
    .exe 116KB
  • capa-testfiles-master/f53dfa294d6979145fbb34303cf73bb6.exe_
    .exe 123KB
  • capa-testfiles-master/f59035192098e44b86c4648a0de4078edbe80352260276f4755d15d354f5fc58.exe_
    .exe 1.2MB
  • capa-testfiles-master/f5c93ac768c8206e87544ddd76b3277c.dll_
    .dll 89KB
  • capa-testfiles-master/f9ac6b16273556b3a57bf2c6d7e7db97.exe_
    .exe 64KB
  • capa-testfiles-master/fb690a23b66d4f90dac83f1b4d6dec0074aff68d6ef62c2613120bd4d17cfbdd.exe_
    .exe 1.3MB
  • capa-testfiles-master/fbbaaf569b63f6398503e4f1979cabef.exe_
    .exe 179KB
  • capa-testfiles-master/ffa48ed4b7b48897f6756c4222b2606399de0bca627cedfddf61e69986580430.elf_
    .elf 15KB
  • capa-testfiles-master/ffcf88ead82bdfc159376026f5a9a7da49e593497674bdb6fa7f7d03dd9398d9.exe_
    .exe 645KB
  • capa-testfiles-master/ffeae4a391a1d5203bd04b4161557227.exe_
    .exe 340KB
  • capa-testfiles-master/kernel32-64.dll_
    .dll 703KB
  • capa-testfiles-master/kernel32.dll_
    .dll 818KB
  • capa-testfiles-master/microsocks.elf_
    .elf 30KB
  • capa-testfiles-master/mimikatz.exe_
    .exe 789KB
  • capa-testfiles-master/ping_täst.exe_
    .exe 15KB
  • capa-testfiles-master/rd/0000a65749f5902c4d82ffa701198038f0b4870b00a27cfca109f8f933476d82.json
    2.8MB
  • capa-testfiles-master/rd/0000a65749f5902c4d82ffa701198038f0b4870b00a27cfca109f8f933476d82.json.gz
    .gz 1012KB
  • capa-testfiles-master/rd/0761142efbda6c4b1e801223de723578.dll_.json
    2.3MB
  • capa-testfiles-master/rd/1c444ebeba24dcba8628b7dfe5fec7c6.exe_.json
    .ps1 210KB
  • capa-testfiles-master/rd/3f3bbcf8fd90bdcdcdc5494314ed4225.exe_.json
    467KB
  • capa-testfiles-master/rd/Practical Malware Analysis Lab 01-01.dll_.json
    58KB
  • capa-testfiles-master/rd/al-khaser_x64.exe_.json
    805KB
  • capa-testfiles-master/rd/al-khaser_x86.exe_.json
    960KB
  • capa-testfiles-master/sigs/test_aulldiv.pat
    910B
  • capa-testfiles-master/sigs/test_aullrem.pat.gz
    .gz 583B
  • capa-testfiles-master/source/aspx/03bb5cab46b406bb8613ca6e32991ab3e10b5cd759d5c7813191e9e62868ea73.aspx_
    .asp .js 10KB
  • capa-testfiles-master/source/aspx/10162feb5f063ea09c6a3d275f31abf0fe8a9e4e36fded0053b1f8e054da8161.aspx_
    .asp .js 29KB
  • capa-testfiles-master/source/aspx/15eed42e4904205b2ef2ff285ff1ce6c8138296c12cf075a2562c69a5fafd1cb.aspx_
    .asp .js 68KB
  • capa-testfiles-master/source/aspx/1f8f4054932ed1d5d055e9a92aa1e2abba49af3370506674cb1b2c70146ae81a.aspx_
    .asp 471B
  • capa-testfiles-master/source/aspx/2b71dd245520d9eb5f1e4c633fee61c7d83687591d9f64f9390c26dc95057c3c.aspx_
    .asp 1KB
  • capa-testfiles-master/source/aspx/2e8c7eacd739ca3f3dc4112b41a024157035096b8d0c26ba79d8b893136391bc.aspx_
    .asp .js 2KB
  • capa-testfiles-master/source/aspx/4f6fa6a45017397c7e1c9cd5a17235ccb1ff0f5087dfa6b7384552bf507e7fe1.aspx_
    .asp .js 5KB
  • capa-testfiles-master/source/aspx/54433dd57414773098a6d3292d262f91a6812855dfcbf8d421695608d1fad638.aspx_
    .asp .ps1 10KB
  • capa-testfiles-master/source/aspx/5f959f480a66a33d37d9a0ef6c8f7d0059625ca2a8ae9236b49b194733622655.aspx_
    .asp 1KB
  • capa-testfiles-master/source/aspx/606dbfebdc7751ecb6cb9a845853ae1905afd4b8a2cb54e1e4a98c932e268712.aspx_
    .asp .js 6KB
  • capa-testfiles-master/source/aspx/6f3261eaaabf369bd928d179641b73ffd768184dfd4e00124da462a3075d4239.aspx_
    .asp .js 3KB
  • capa-testfiles-master/source/aspx/a35878e74425cd97ad98e3ec4b2583867bb536f4275d821cd8b82bc19380ba1a.aspx_
    .asp .js 2KB
  • capa-testfiles-master/source/aspx/a5c8934836f5b36bba3a722eab691a9f1f926c138fefe5bae07e9074e7c49ae3.aspx_
    .asp 472B
  • capa-testfiles-master/source/aspx/b4bb14aeb692f7afc107ee89f86d096f1cd8f9761b6c50788f626a9dccc8b077.aspx_
    .asp 1KB
  • capa-testfiles-master/source/aspx/b75f163ca9b9240bf4b37ad92bc7556b40a17e27c2b8ed5c8991385fe07d17d0.aspx_
    .asp 596B
  • capa-testfiles-master/source/aspx/d460cae7d34c51059ef57c5aadb3de099469efbac5fffcf76d0528a511192a28.aspx_
    .asp .ps1 4KB
  • capa-testfiles-master/source/aspx/ea2a01cae57c00df01bff6bb8a72585fdc0abb7a26a869dc1a0131bdff50b400.aspx_
    .asp .ps1 5KB
  • capa-testfiles-master/source/aspx/f2bf20e7bb482d27da8f19aa0f8bd4927746a65300929b99166867074a38a4b4.aspx_
    .asp .js 54KB
  • capa-testfiles-master/source/aspx/f397cb676353873cdc8fcfbf0e3a317334353cc63946099e5ea22db6d1eebfb8.aspx_
    .asp 4KB
  • capa-testfiles-master/source/aspx/f39dc0dfd43477d65c1380a7cff89296ad72bfa7fc3afcfd8e294f195632030e.aspx_
    .asp .ps1 1KB
  • capa-testfiles-master/source/cs/138cdc4b10f3f5ece9c47bb0ec17fde5b70c1f9a90b267794c5e5dfa337fc798.cs_
    1KB

1d1decac693bfc7c19e26f01929716924d7607e300f8385a7a8a02d176800db5

  • SHA256 1d1decac693bfc7c19e26f01929716924d7607e300f8385a7a8a02d176800db5
  • MD5 SHA1 SHA512 SSDEEP TLSH