Dropped Files | ZeroBOX

Name	7c33036371ed8f5b_run.dat Submit file
Filepath	C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size	8.0B
Processes	872 (dwn.exe)
Type	data
MD5	`875ac3b52c7270d2d73740841555b002`
SHA1	`b36295d2e4bffb1d95d3cf4a4357bc6f52b3fc0c`
SHA256	`7c33036371ed8f5b80a6d638f1013fb3db6140ecba30c528ce7fb2c5eaaccd70`
CRC32	`45B4BF7E`
ssdeep	`3:R:R`
Yara	None matched
VirusTotal	Search for analysis

Name	bae659fa6bd066a8_tmp6470.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp6470.tmp
Size	1.3KB
Processes	872 (dwn.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`12b64386f816d8b78f8d5ab9290ed909`
SHA1	`9759604eb312edb242e06f7765c21d16c8589cf2`
SHA256	`bae659fa6bd066a8cd956a23a00910913ade0b7cde9c49c4663c73779c3f9058`
CRC32	`4AE5D41D`
ssdeep	`24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Zwxtn:cbk4oL600QydbQxIYODOLedq3Ywj`
Yara	None matched
VirusTotal	Search for analysis

Name	bb9181b3935b8681_tmp65B9.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp65B9.tmp
Size	1.3KB
Processes	872 (dwn.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`be81f72fa4dbc827132836ee2af92c96`
SHA1	`fe5ded04ab4932dea6cf414e9e4428f43da70d03`
SHA256	`bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f`
CRC32	`7AA438E3`
ssdeep	`24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j`
Yara	None matched
VirusTotal	Search for analysis

Name	a7b5576db6db4abe_task.dat Submit file
Filepath	C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size	42.0B
Processes	872 (dwn.exe)
Type	ASCII text, with no line terminators
MD5	`afda9f3f708b9ddef67ef7a6fd49a1b8`
SHA1	`c64728f213ce718eda13dd7828450cf5d75809ab`
SHA256	`a7b5576db6db4abe212e3975dc69a04c7e7dcff6a52b9b5cde824c0a1eca314d`
CRC32	`2899D1B2`
ssdeep	`3:oNmWxpcL4E2J5xAIzA:oNmQpcLJ23fzA`
Yara	None matched
VirusTotal	Search for analysis