ScreenShot
| Created | 2021.08.25 10:11 | Machine | s1_win7_x6402 |
| Filename | 4.jpg | ||
| Type | ASCII text, with CRLF line terminators | ||
| AI Score | Not founds | Behavior Score |
|
| ZERO API | file : clean | ||
| VT API (file) | 11 detected (PowerShell, ai score=84) | ||
| md5 | a47b5b874c854d84c5b7da81a06ae211 | ||
| sha256 | 93b4153cab292649bf35e680419a948a71fc2ed90e8f8433ae580bb86bf9c31f | ||
| ssdeep | 48:1CtETbpY6bj8CRH6bzS6bACGWtpGD65R657PAEpV/Vkzpq8nWpq8IhNyhYNyebNU:cKIP3F2G5w5Lhmo8nN8Ib5jWjB | ||
| imphash | |||
| impfuzzy | |||
Network IP location
Signature (2cnts)
| Level | Description |
|---|---|
| watch | Communicates with host for which no DNS query was performed |
| watch | File has been identified by 11 AntiVirus engines on VirusTotal as malicious |
Rules (1cnts)
| Level | Name | Description | Collection |
|---|---|---|---|
| watch | Antivirus | Contains references to security software | binaries (upload) |
