Dropped Files | ZeroBOX

Name	d50f4251ddb69dfa_run.dat Submit file
Filepath	C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size	8.0B
Processes	1812 (MKS.exe)
Type	data
MD5	`46bdb476022a0405cc59d8ffc0ed35dc`
SHA1	`b8730d6c3da489debfd099ff4697ab89cca3d60e`
SHA256	`d50f4251ddb69dfa6836f8228523395c75e2eb8f03322bd8999cb76f9c27a1c4`
CRC32	`FFE340B3`
ssdeep	`3:R8l8tn:E8n`
Yara	None matched
VirusTotal	Search for analysis

Name	4a523e2620517acb_task.dat Submit file
Filepath	C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size	42.0B
Processes	1812 (MKS.exe)
Type	ASCII text, with no line terminators
MD5	`c57e5a8b8361c86d7a92212ef608d91e`
SHA1	`4149b51f6930e80e45839e6be390f9001a2a461f`
SHA256	`4a523e2620517acb776b09e2179322efab173115790d7ce94ab38d0a2d490f47`
CRC32	`58B5161C`
ssdeep	`3:oNmWxpcL4E2J5xAI2J:oNmQpcLJ23f2J`
Yara	None matched
VirusTotal	Search for analysis

Name	bb9181b3935b8681_tmpE5C6.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmpE5C6.tmp
Size	1.3KB
Processes	1812 (MKS.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`be81f72fa4dbc827132836ee2af92c96`
SHA1	`fe5ded04ab4932dea6cf414e9e4428f43da70d03`
SHA256	`bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f`
CRC32	`7AA438E3`
ssdeep	`24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j`
Yara	None matched
VirusTotal	Search for analysis

Name	8e569ff799ef3b0a_tmpE48C.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmpE48C.tmp
Size	1.3KB
Processes	1812 (MKS.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`54a2c18ea2eb85134f3ec57ed095bfcd`
SHA1	`00f27da3134c316d212608ff8d11eb299d075d67`
SHA256	`8e569ff799ef3b0add357f868c559234c1e45bf071a333d6759c81272563dc55`
CRC32	`F39F6A70`
ssdeep	`24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0ZIxtn:cbk4oL600QydbQxIYODOLedq3YIj`
Yara	None matched
VirusTotal	Search for analysis