Cuckoo Sandbox

Name	528aabda36719c58_528aabda36719c58_microsofthelp.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\528aabda36719c58_microsofthelp.exe
Size	127.3KB
Type	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
MD5	`544a04e46551741ae9be161554913a54`
SHA1	`7557b7690c536369ead10382394b564773d9407d`
SHA256	`528aabda36719c58e2731ac27357d495eb2fe00efd6f770d8ecca7d406d06dcc`
CRC32	`29B76141`
ssdeep	`None`
Yara	UPX - (no description) suspicious_packer_section - The packer/protector section names/keywords win_mutex - Create or check mutex win_registry - Affect system registries win_files_operation - Affect private profile
VirusTotal	Search for analysis

Name	b7061f77c5a7e84a_microsofthelp.exe Download Submit file
Filepath	C:\Windows\microsofthelp.exe
Size	127.5KB
Processes	1496 (528aabda36719c58_microsofthelp.exe)
Type	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
MD5	`d944fa1a887e182ca524ed8b69cfabf8`
SHA1	`2cca0feda1f1908db1e888416fc57fee75132554`
SHA256	`b7061f77c5a7e84a5bfedbad2b30e10c44f8ec50d6b3c9048577434c9f09b7db`
CRC32	`370DF9E7`
ssdeep	`None`
Yara	UPX - (no description) suspicious_packer_section - The packer/protector section names/keywords win_mutex - Create or check mutex win_registry - Affect system registries win_files_operation - Affect private profile
VirusTotal	Search for analysis

Dropped Files