Dropped Files | ZeroBOX

Name	543991ca8d1c6511_zemana.sys Submit file
Filepath	C:\Zemana.sys
Size	198.9KB
Processes	1884 (HHH1.exe)
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`21e13f2cb269defeae5e1d09887d47bb`
SHA1	`16d7ecf09fc98798a6170e4cef2745e0bee3f5c7`
SHA256	`543991ca8d1c65113dff039b85ae3f9a87f503daec30f46929fd454bc57e5a91`
CRC32	`E9C7BB58`
ssdeep	`3072:uIYCsz96ZvVJ9b9sJCfShQ0/COLYYfUFtKXFZHOaIKyAYrPcQL9Rsm:uhCS8Bh3SaeCWYE1Oncovsm`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check IsPE64 - (no description) PE_Header_Zero - PE File Signature Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis