Benign Download

Rootkit.Win32.Agent.dcp

x86 indexes an imported SSDT table
SHA-2568dee33b44b1e5519e0e1865c516f35fc6a373475c68ddd089d2d50d7b0f3011d
MaleculeO(Er)

Evidence

x86 indexes an imported SSDT table 0xfa6–0x1066
⋯3 more rows
0xfd6a1654680fc53565785c00f8474010000.eF..SVW....t...
0xfe68b0db84580fc8b098b04818d4dfc518d...E........M.Q.
0xff64dfc6a00516a0ba3c87d80fcffd08b45M.j.Qj...}.....E
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.