Dropped Files | ZeroBOX

Name	f32426d0fc71a3a0_meshagent32-group.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\MSIX\meshagent32-group.exe
Size	3.7MB
Processes	1648 (Installeraus.exe)
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`e8bd5c14b8301039e7538298d26cf09b`
SHA1	`4702252fef2156b59ad61f1f397b205323b339c4`
SHA256	`f32426d0fc71a3a054f0fe263133aabeb25c9d7d129238cfcfc0c1a40854c67e`
CRC32	`5BC6A7A6`
ssdeep	`49152:G8o8bZjyJVD0s9Mr3XIfRviWkgEOaxfCbCMcXGtSgvZPOQ5QpE:G8o8VOUs9joRbMc2tSW6q`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) Generic_Malware_Zero - Generic Malware UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsaC30C.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsaC30C.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis