CLEAN — WebView2Loader.dll

CLEAN — WebView2Loader.dll is a pe sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (25/100). 1 of 55 detection engines flagged it.

Identification

• SHA-256: 44ab92c2246ebfb5f98aa5726626fb44beb61543f2ef1803338af9fd295e63f0
• SHA-1: 9af3bdf0f62f6e4b3a936afc9b77fa9ac5a088d9
• MD5: 7b0eeac10cafb4acda98ccaf2f4b8eb1
• imphash: c1214c3b09798333b3bc44c19d95ec00
• ssdeep: 3072:F6JOAfv0Zj/zjziMy/4rnF4+jqb22EA2TNTEtJAfiPjezIgUW1:F6JNf89Q/In+qPEtJ/QNh
• TLSH: T1D13C7C8F41266340E7B6CA10BC488D4E1053B49AA5FFE84C1A93D63F36B3CA7887556D
• Submitted as: WebView2Loader.dll
• File type: pe · Size: 120904 bytes
• Verdict: clean (25/100)

Detections (1 of 55 engines)

• YARA: Yara-Rules community: YR_AntiDebug_Checks

Why this verdict

The clean score of 25/100 is the fusion of 1 weighted signal:

• YARA: Yara-Rules community flagged YR_AntiDebug_Checks (rule YR_AntiDebug_Checks) - engine signal, weight 0.35, confidence 0.70

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• https://www.microsoft.com
• http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0

Embedded domains

• www.microsoft.com
• crl.microsoft.com

File paths

• N:\:c:i:

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report