File name: | FedEx Express Consignment&Document.ace |
Full analysis: | https://app.any.run/tasks/d4bcda00-e001-431c-9b29-2a9b544a9319 |
Verdict: | Malicious activity |
Analysis date: | November 15, 2018, 02:20:58 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
MIME: | application/octet-stream |
File info: | ACE archive data version 20, from Win/32, version 20 to extract, contains AV-String (unregistered), solid |
MD5: | 3E224DB0DE67DA1F9DB32A19B304610A |
SHA1: | 54158BE3CCD9E7BD37847ABE34673596519DA45D |
SHA256: | A6A30DDD31C85AAD4D81FBDF54389DD2E44EA646A2224A977AC867BDBD50F8EE |
SSDEEP: | 6144:TjEHAH0kjbrksaQS+kqghsQrG/OTro5/6c5jV7+ZsawPKi0ti:TAHAH0oHkJ4XKrGk468V7+8Ciai |
.ace | | | ACE compressed archive (100) |
---|
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
3324 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\FedEx Express Consignment&Document.ace" | C:\Program Files\WinRAR\WinRAR.exe | — | explorer.exe |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Exit code: 0 Version: 5.60.0 | ||||
1360 | "C:\Users\admin\Desktop\FedEx Express Consignment&Document.scr" /S | C:\Users\admin\Desktop\FedEx Express Consignment&Document.scr | — | explorer.exe |
User: admin Integrity Level: MEDIUM |
PID | Process | Filename | Type | |
---|---|---|---|---|
3324 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3324.49808\FedEx Express Consignment&Document.scr | — | |
MD5:— | SHA256:— |