{"id":"16e209cc54bad3ec1096bff195c75991","title":"WinHTTP Downloader — WinHTTP Downloader · 木马/恶意软件 · PE64","md5":"16e209cc54bad3ec1096bff195c75991","sha256":"06516429ea8e31760bf22e48b5b116fd5e89a062d23daf4e880372984805ec9f","family":"WinHTTP Downloader","apt":null,"verdict":null,"sample_type":"木马/恶意软件","lang":"C++","file_format":"PE64","compiler":"MSVC","published_at":"2026-08-09T16:00:00.000Z","summary":"该样本为 19KB MSVC 编译的 64 位 WinHTTP 下载器。XOR 0xF7 解密 API 字符串：winhttp.dll, WinHttpOpen, WinHttpConnect, WinHttpOpenRequest, WinHttpSendRequest, WinHttpReceiveResponse, WinHttpReadData, WinHttpQueryHeaders, WinHttpSetOption, WinHttpCloseHandle。与样本 04171247 (XOR 0xDA) 共享相同下载器模式，不同 XOR 密钥。","url":"https://zseceye.com/report/16e209cc54bad3ec1096bff195c75991","json_url":"https://zseceye.com/report/16e209cc54bad3ec1096bff195c75991.json","html_url":"https://zseceye.com/report/16e209cc54bad3ec1096bff195c75991","hash_urls":{"md5":"https://zseceye.com/hash/16e209cc54bad3ec1096bff195c75991","sha256":"https://zseceye.com/hash/06516429ea8e31760bf22e48b5b116fd5e89a062d23daf4e880372984805ec9f"},"search_urls":{"md5":"https://zseceye.com/?q=16e209cc54bad3ec1096bff195c75991","sha256":"https://zseceye.com/?q=06516429ea8e31760bf22e48b5b116fd5e89a062d23daf4e880372984805ec9f"},"sample_download_url":"https://zseceye.com/report/16e209cc54bad3ec1096bff195c75991/sample","sample_filename":"06516429ea8e3176.zip","iocs":[],"ips":[]}