Benign Download

Backdoor.Win32.Tonerok.f

Detour-style InstallHook helper name
SHA-25659b60911a3d398569b29435be4d533a41aa1d28b8fffa046163eaeba8bb5b04f
MaleculeO(Er)

Evidence

Detour-style InstallHook helper name 0x73b–0x7fb
⋯3 more rows
0x76b00020003006d74647333322e646c6c00.....mtds32.dll.
0x77b496e7374616c6c486f6f6b004b657962InstallHook.Keyb
0x78b6f61726450726f63004d6f7573655072oardProc.MousePr
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.