popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 1513abd30195b874_6d6f4d.hdb
Submit file
Filepath C:\Users\test22\AppData\Roaming\41D896\6D6F4D.hdb
Size 4.0B
Processes 7032 (regasm.exe)
Type data
MD5 faeb96cb25b5ff43b7d32cd56d71714c
SHA1 729df48d8e006f5948fa6afdfb46a48df65290d2
SHA256 1513abd30195b87453159f9abdea22c6ff0f424ddaa49ebda53de93ee86a1a5b
CRC32 6A770532
ssdeep 3:2t:K
Yara None matched
VirusTotal Search for analysis
Name 6b86b273ff34fce1_6D6F4D.lck
Submit file
Filepath C:\Users\test22\AppData\Roaming\41D896\6D6F4D.lck
Size 1.0B
Processes 7032 (regasm.exe)
Type very short file (no magic)
MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
CRC32 83DCEFB7
ssdeep 3:U:U
Yara None matched
VirusTotal Search for analysis
Name 0bf7bc0d86c5f539_c5yk7c4bt6idbti23
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\c5yk7c4bt6idbti23
Size 104.0KB
Processes 1836 (regasm.exe)
Type data
MD5 f147156070c6e7433aa69aafc560a379
SHA1 f4c67db3006a35677b0c02a9a9c78198031c3bc2
SHA256 0bf7bc0d86c5f539d70d0a7371eaa25c4fcf4685bc3753d423e1f57e851095a0
CRC32 D169B601
ssdeep 3072:J2if1HhPwPFxGChhQFbsJK5XmU9hytzRByi2gJd7oKJHl:wgeFZQ1520oYTgJdoKF
Yara None matched
VirusTotal Search for analysis
Name e3b0c44298fc1c14_nsl81.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\nsl81.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis
Name 150c807a7cef7a76_osja59nxskx1.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nsqA2.tmp\osja59nxskx1.dll
Size 4.5KB
Processes 1836 (regasm.exe)
Type PE32 executable (DLL) (native) Intel 80386, for MS Windows
MD5 f00e33531658def3d2f28b99de31f5f2
SHA1 a61f29d141a49fcb1179f2a6def3e9b9e02980fd
SHA256 150c807a7cef7a769827af7dd7217fec1634114a4d5be70db911175f5840e5f5
CRC32 AA7C75F2
ssdeep 48:SOMBEX9zR7UyWo8qPWpz5tjLFUrCI9v83T:smX9tUluWpz7jLFyCI9E
Yara
  • PE_Header_Zero - PE File Signature Zero
  • IsPE32 - (no description)
  • IsDLL - (no description)
  • HasRichSignature - Rich Signature Check
  • network_dropper - File downloader/dropper
VirusTotal Search for analysis
Name 5ccfc2154a3684df_g1vvfl0ft32d
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\g1vvfl0ft32d
Size 6.5KB
Processes 1836 (regasm.exe)
Type data
MD5 3d0bf6a0da244ee10d7a1eb9de8989b3
SHA1 0abd333e50676687cf1d6d04060cf8bdab78e280
SHA256 5ccfc2154a3684df80c44717a89756fbc654b96bbfb49c2e918b90a4184f190e
CRC32 96ED1007
ssdeep 96:v6wSpugquS/zuHaSy+dDEsrfeaDXsHGRLq+yADDrfUtyQ5pcMMTDmFhGqH6:vFkD2yap+dreaXsgPMtyQ9MTDmFhhH6
Yara None matched
VirusTotal Search for analysis