Dropped Files | ZeroBOX

Name	2ec0f89df7362251_anyarchitect.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\IXP000.TMP\anyarchitect.exe
Size	96.5KB
Processes	1212 (oncestatistic.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`0120820ee16b906d2fc375f77ff304b1`
SHA1	`b31784bfc806097c5ec4609ac650b7e2674666a0`
SHA256	`2ec0f89df7362251389642dab6056211f1173c149f13c761dfeb4dab13436e01`
CRC32	`DA968F3D`
ssdeep	`1536:VSOFJr9EouB1hKFbf3FOgeAd5iGlwyJCY06Mnz5BB3PxzgMKePfznNLk+gSnyjwg:VSQ+oxfeAiQwRYc5BhLPfznNLDKB`
Yara	Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult Is_DotNET_EXE - (no description) PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	eef0da3544ecf0c0_anyarchiitect.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\IXP000.TMP\anyarchiitect.exe
Size	125.5KB
Processes	1212 (oncestatistic.exe)
Type	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
MD5	`4ba222c606346e18d543e463bbe36bf5`
SHA1	`27f5fc8448d4631fb2a8bca36f3563470820a63d`
SHA256	`eef0da3544ecf0c0d0755ef91aad537beb5e8bf47ce1b38d1fd32be279f98988`
CRC32	`DAA36858`
ssdeep	`1536:+GOFqC4oOpFh2VvVdiAT/3ZABTDm7TY06M7n+ITLoAIc5LF4i88SnyjwEhNUNKZ7:+GVo0AL30mTYM+IT4JKvZ9x`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis