File name: | Automaton Service.exe.zip |
Full analysis: | https://app.any.run/tasks/0f84e3a3-442e-43c3-82a4-9c60c0a311ba |
Verdict: | Malicious activity |
Analysis date: | June 19, 2019, 07:50:13 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/zip |
File info: | Zip archive data, at least v2.0 to extract |
MD5: | A0567DEEDE32D508247CA2F8E3BB0DC5 |
SHA1: | D18B57F64F8BDC5DC9ED316B70B6193BECC5A366 |
SHA256: | DE7556EABB91FE521D162EAD0483816754C5F1DF6F222878482F3A4B75405715 |
SSDEEP: | 384:kna2aklh57MhwPBiqtv9pIfwTVCAeADe6utZqjSO:/RkXCwPAgpaMMAFZuqjSO |
.zip | | | ZIP compressed archive (100) |
---|
ZipFileName: | Automaton Service.exe |
---|---|
ZipUncompressedSize: | 35328 |
ZipCompressedSize: | 15778 |
ZipCRC: | 0xf8f31911 |
ZipModifyDate: | 2019:06:19 07:41:19 |
ZipCompression: | Deflated |
ZipBitFlag: | 0x0009 |
ZipRequiredVersion: | 20 |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
2928 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\Automaton Service.exe.zip" | C:\Program Files\WinRAR\WinRAR.exe | — | explorer.exe |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Exit code: 0 Version: 5.60.0 | ||||
3448 | "C:\Users\admin\Desktop\Automaton Service.exe" | C:\Users\admin\Desktop\Automaton Service.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Description: Automaton Service Exit code: 0 Version: 1.0.0.0 | ||||
3116 | "C:\Users\admin\Desktop\Automaton Service.exe" | C:\Users\admin\Desktop\Automaton Service.exe | explorer.exe | |
User: admin Integrity Level: HIGH Description: Automaton Service Exit code: 0 Version: 1.0.0.0 |
PID | Process | Filename | Type | |
---|---|---|---|---|
2928 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRb2928.14061\Automaton Service.exe | — | |
MD5:— | SHA256:— |