Dropped Files | ZeroBOX
Name d78bc23b0ca3eddf_task.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size 57.0B
Processes 2564 (RegSvcs.exe)
Type ASCII text, with no line terminators
MD5 d685103573539b7e9fdbf5f1d7dd96ce
SHA1 4b2fe6b5c0b37954b314fcaee1f12237a9b02d07
SHA256 d78bc23b0ca3eddf52d56ab85cdc30a71b3756569cb32aa2f6c28dbc23c76e8e
CRC32 B30A2583
ssdeep 3:oMty8WbSX/MNn:oMLWus
Yara None matched
VirusTotal Search for analysis
Name cfe5c44d022427ae_tmp2EC4.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp2EC4.tmp
Size 1.6KB
Processes 1896 (catx.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 2afe39392f8ec334db0f32494cc25a9b
SHA1 343c1ae0eded445848393c2a2873ddca7e1b765d
SHA256 cfe5c44d022427ae35b16622d175ec0de08f3b647c1dbaf43e6aec301c3b196a
CRC32 3255CD53
ssdeep 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKB5htn:cbhf7IlNQQ/rydbz9I3YODOLNdq3D
Yara None matched
VirusTotal Search for analysis
Name f8098a6290118f29_settings.bin
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bin
Size 40.0B
Processes 2564 (RegSvcs.exe)
Type data
MD5 4e5e92e2369688041cc82ef9650eded2
SHA1 15e44f2f3194ee232b44e9684163b6f66472c862
SHA256 f8098a6290118f2944b9e7c842bd014377d45844379f863b00d54515a8a64b48
CRC32 C6B6460B
ssdeep 3:9bzY6oRDT6P2bfVn1:RzWDT621
Yara None matched
VirusTotal Search for analysis
Name bb9181b3935b8681_tmp329E.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp329E.tmp
Size 1.3KB
Processes 2564 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 be81f72fa4dbc827132836ee2af92c96
SHA1 fe5ded04ab4932dea6cf414e9e4428f43da70d03
SHA256 bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f
CRC32 7AA438E3
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j
Yara None matched
VirusTotal Search for analysis
Name 83b9cae66800c768_storage.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\storage.dat
Size 416.8KB
Processes 2564 (RegSvcs.exe)
Type data
MD5 653dddcb6c89f6ec51f3ddc0053c5914
SHA1 4cf7e7d42495ce01c261e4c5c4b8bf6cd76ccee5
SHA256 83b9cae66800c768887fb270728f6806cbebdead9946fa730f01723847f17ff9
CRC32 D300AB58
ssdeep 6144:zKfHbamD8WN+JQYrjM7Ei2CsFJjyh9zvgPonV5HqZcPVT4Eb+Z6no3QSzjeMsdF/:zKf137EiDsTjevgArYcPVLoTQS+0iv
Yara None matched
VirusTotal Search for analysis
Name c51e12d18cc66442_tmp31D2.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp31D2.tmp
Size 1.3KB
Processes 2564 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 40b11ef601fb28f9b2e69d36857bf2ec
SHA1 b6454020ad2ceed193f4792b77001d0bd741b370
SHA256 c51e12d18cc664425f6711d8ae2507068884c7057092cfa11884100e1e9d49e1
CRC32 3D2F2EDC
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0mn4xtn:cbk4oL600QydbQxIYODOLedq3Z4j
Yara None matched
VirusTotal Search for analysis
Name 9c82b8bdee747875_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 2564 (RegSvcs.exe)
Type data
MD5 3bb7632dc207f10ec63277081d0dc53d
SHA1 e4d8be4346e3d5d3e5acf32f6f8b63cc72723067
SHA256 9c82b8bdee7478758ecd31405c68854ebd00f7fea82e45d47b43f86cb08f842c
CRC32 D3915285
ssdeep 3:G9Z8:G9u
Yara None matched
VirusTotal Search for analysis
Name aafc7b40c5fe680a_catalog.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\catalog.dat
Size 232.0B
Processes 2564 (RegSvcs.exe)
Type data
MD5 9e7d0351e4df94a9b0badceb6a9db963
SHA1 76c6a69b1c31cea2014d1fd1e222a3dd1e433005
SHA256 aafc7b40c5fe680a2bb549c3b90aabaac63163f74fffc0b00277c6bbff88b757
CRC32 695E297D
ssdeep 3:XrURGizD7cnRNGbgCFKRNX/pBK0jCV83ne+VdWPiKgmR7kkmefoeLBizbCuVkqYM:X4LDAnybgCFcps0OafmCYDlizZr/i/Oh
Yara None matched
VirusTotal Search for analysis