Benign Download

Rootkit.Win32.Agent.amh

x86 indexes an imported SSDT table
SHA-256489120e1fbe7efc7584710fc56084162418110e406d820ac1b053a23c50ab920
MaleculeO(Er)

Evidence

x86 indexes an imported SSDT table 0x7ad–0x86d
⋯3 more rows
0x7dd5ec9c22c00558beca11c0301008b4001^..,.U........@.
0x7ed8b0d281101008b098b0481a3180f0100..(.............
0x7fda1180301008b40018b0d281101008b09......@...(.....
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.