Dropped Files | ZeroBOX
Name 543991ca8d1c6511_zemana.sys
Submit file
Filepath C:\Zemana.sys
Size 198.9KB
Processes 1540 (HHH1.exe)
Type PE32+ executable (native) x86-64, for MS Windows
MD5 21e13f2cb269defeae5e1d09887d47bb
SHA1 16d7ecf09fc98798a6170e4cef2745e0bee3f5c7
SHA256 543991ca8d1c65113dff039b85ae3f9a87f503daec30f46929fd454bc57e5a91
CRC32 E9C7BB58
ssdeep 3072:uIYCsz96ZvVJ9b9sJCfShQ0/COLYYfUFtKXFZHOaIKyAYrPcQL9Rsm:uhCS8Bh3SaeCWYE1Oncovsm
Yara
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis