Report - ZendEngine.png

ScreenShot
Created 2021.04.08 18:27 Machine s1_win7_x6401
Filename ZendEngine.png
Type ASCII text, with very long lines, with CRLF line terminators
AI Score Not founds Behavior Score
0.4
ZERO API file : malware
VT API (file) 5 detected (Save, PowerShell, Kryptik, TOPIS, hXO0hPoK4XF)
md5 3ecd104ed0eec4ec47a19a3436960fa9
sha256 ea1196449e07437c4e8068b41e403011bb22c64080c08277b513c24ea41ce848
ssdeep 1536:naIX9KI7OV7bF+Z+fH7V8R1jZkke6vjPRmmQM8dCHoXKRv3VwFni7YXf90ssDTLF:a7nF0
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
notice File has been identified by 5 AntiVirus engines on VirusTotal as malicious

Rules (0cnts)

Level Name Description Collection

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure