Cuckoo Sandbox

Name	604dc2651140b591_adobe_updater.exe Download Submit file
Filepath	C:\Program Files (x86)\Common Files\Adobe\Updater6\Adobe_Updater.exe
Size	2.9MB
Processes	2116 (c99b9146add9d90f6be456c28c48ef.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`ed3d701c87f57e3c09a6a095005c58df`
SHA1	`3aef5ddeb3f52559e10eb939b3bf904bb18165c8`
SHA256	`604dc2651140b59135259143a40dfd31c49528577325898df190535b80c47f5a`
CRC32	`634FBC5A`
ssdeep	`None`
Yara	anti_dbg - Checks if being debugged network_http - Communications over HTTP network_tcp_socket - Communications over RAW socket escalate_priv - Escalade priviledges screenshot - Take screenshot keylogger - Run a keylogger win_mutex - Create or check mutex win_registry - Affect system registries win_token - Affect system token win_files_operation - Affect private profile
VirusTotal	Search for analysis

Name	bce8dabff7f6e783_perfhost.exe Download Submit file
Filepath	C:\Windows\SysWOW64\perfhost.exe
Size	1.4MB
Processes	2116 (c99b9146add9d90f6be456c28c48ef.exe)
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`2139ccb3d710ef0da041a987a7bcc531`
SHA1	`347a1f83955d14771ba1a5f7a81ca0048b392437`
SHA256	`bce8dabff7f6e7838dafbb069cd0b67f08e5161cc40beec746ac4f87a49edae2`
CRC32	`3702B115`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Dropped Files