Dropped Files | ZeroBOX

Name	241bc426fcb091e0_fwyomcm.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\FWyOmcm.exe
Size	569.5KB
Processes	3324 (Ltd5JPCpQVoh3Te.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`6a910d1eda7f2c23bbdb95643b51f169`
SHA1	`04367ccc671bfa2e3b157810c5f1b11435668735`
SHA256	`241bc426fcb091e0e8fb290397d1dbdc9d4c2a88a0f7c08ab4c77fc545176e79`
CRC32	`87A3BA96`
ssdeep	`12288:Q4TkTNvOIiFh7MuC+nfWNl1jsBd2lWvQRF:QTNvOIKC+nfWJYdu`
Yara	PE_Header_Zero - PE File Signature Is_DotNET_EXE - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description)
VirusTotal	Search for analysis

Name	ccdd48c58bf213cd_tmp7D23.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp7D23.tmp
Size	1.6KB
Processes	3324 (Ltd5JPCpQVoh3Te.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`215337683f1be6982e602502db349b51`
SHA1	`33b45b8e6a55f6b327412b70ccee65e9d6354749`
SHA256	`ccdd48c58bf213cdcb094106a4cc239f4634bf83b4bc82e18493e621b7f0b159`
CRC32	`624B2621`
ssdeep	`24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBKbPtn:cbhf7IlNQQ/rydbz9I3YODOLNdq34bF`
Yara	None matched
VirusTotal	Search for analysis