Benign Download

usbtv.ko.zst

Infostealer 'grabber' slang termSuspicious repository name keywords
SHA-2561bcb2f662c143e86d585f4b27eeb9931c631f53f380247e16167727b677cd6e5
MaleculeO₂(AsC)

Evidence

Repeated NOP-run pattern in executable section 0x190–0x1e0
0x19000000000000000000000000000000000................
0x1a090909090909090909090909090909090................
0x1b0e800000000554889e553488b9fc80000.....UH..SH.....
0x1c00048c787c8000000000000004885db74.H..........H..t
0x1d02a4889dfe8000000004889dfe8000000*H.......H......
0x1e000488b7b08e80000000048c7430800 .H.{......H.C..
Infostealer 'grabber' slang term 0x31c6–0x31f6
0x31c630303720417564696f2d566964656f20007 Audio-Video
0x31d6477261626265720a00002f6275696c64Grabber.../build
0x31e62f6c696e75782d6971566e6b6a2f6c69/linux-iqVnkj/li
0x31f66e75782d372e30 nux-7.0
GPL license reference 0x362d–0x365d
0x362d0000006c6963656e73653d4475616c20...license=Dual
0x363d4253442f47504c006465736372697074BSD/GPL.descript
0x364d696f6e3d467573686963616920555342ion=Fushicai USB
0x365d54563030372041 TV007 A

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.