Dropped Files | ZeroBOX
Name d78bc23b0ca3eddf_task.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size 57.0B
Processes 2324 (RegSvcs.exe)
Type ASCII text, with no line terminators
MD5 d685103573539b7e9fdbf5f1d7dd96ce
SHA1 4b2fe6b5c0b37954b314fcaee1f12237a9b02d07
SHA256 d78bc23b0ca3eddf52d56ab85cdc30a71b3756569cb32aa2f6c28dbc23c76e8e
CRC32 B30A2583
ssdeep 3:oMty8WbSX/MNn:oMLWus
Yara None matched
VirusTotal Search for analysis
Name 6262514f2af2a205_tmp2CA2.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp2CA2.tmp
Size 1.6KB
Processes 1760 (plugmanzx.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 3b68305b1a0497dd317cf76ff85a8395
SHA1 31bc14cf4e7af9d5ed8ab5b6865e28190483cd77
SHA256 6262514f2af2a2054d2c0e48cbfc53298a0dc69917687040c7f8126f2073f170
CRC32 159193AA
ssdeep 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKB9Itn:cbhf7IlNQQ/rydbz9I3YODOLNdq3O
Yara None matched
VirusTotal Search for analysis
Name f8098a6290118f29_settings.bin
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bin
Size 40.0B
Processes 2324 (RegSvcs.exe)
Type data
MD5 4e5e92e2369688041cc82ef9650eded2
SHA1 15e44f2f3194ee232b44e9684163b6f66472c862
SHA256 f8098a6290118f2944b9e7c842bd014377d45844379f863b00d54515a8a64b48
CRC32 C6B6460B
ssdeep 3:9bzY6oRDT6P2bfVn1:RzWDT621
Yara None matched
VirusTotal Search for analysis
Name 83b9cae66800c768_storage.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\storage.dat
Size 416.8KB
Processes 2324 (RegSvcs.exe)
Type data
MD5 653dddcb6c89f6ec51f3ddc0053c5914
SHA1 4cf7e7d42495ce01c261e4c5c4b8bf6cd76ccee5
SHA256 83b9cae66800c768887fb270728f6806cbebdead9946fa730f01723847f17ff9
CRC32 D300AB58
ssdeep 6144:zKfHbamD8WN+JQYrjM7Ei2CsFJjyh9zvgPonV5HqZcPVT4Eb+Z6no3QSzjeMsdF/:zKf137EiDsTjevgArYcPVLoTQS+0iv
Yara None matched
VirusTotal Search for analysis
Name 1a024d239e76183c_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 2324 (RegSvcs.exe)
Type Non-ISO extended-ASCII text, with no line terminators
MD5 8fc1a53dfdeec6a2238b6825327a59c7
SHA1 23d95f8554150103b2ade71e21cf80fbbeae6fa6
SHA256 1a024d239e76183c97fa1708669879bad864be4dde2e82083205a22d62ef5fa5
CRC32 F8F4E68D
ssdeep 3:lJ:f
Yara None matched
VirusTotal Search for analysis
Name bb9181b3935b8681_tmp305C.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp305C.tmp
Size 1.3KB
Processes 2324 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 be81f72fa4dbc827132836ee2af92c96
SHA1 fe5ded04ab4932dea6cf414e9e4428f43da70d03
SHA256 bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f
CRC32 7AA438E3
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j
Yara None matched
VirusTotal Search for analysis
Name c51e12d18cc66442_tmp2F9F.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp2F9F.tmp
Size 1.3KB
Processes 2324 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 40b11ef601fb28f9b2e69d36857bf2ec
SHA1 b6454020ad2ceed193f4792b77001d0bd741b370
SHA256 c51e12d18cc664425f6711d8ae2507068884c7057092cfa11884100e1e9d49e1
CRC32 3D2F2EDC
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0mn4xtn:cbk4oL600QydbQxIYODOLedq3Z4j
Yara None matched
VirusTotal Search for analysis
Name aafc7b40c5fe680a_catalog.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\catalog.dat
Size 232.0B
Processes 2324 (RegSvcs.exe)
Type data
MD5 9e7d0351e4df94a9b0badceb6a9db963
SHA1 76c6a69b1c31cea2014d1fd1e222a3dd1e433005
SHA256 aafc7b40c5fe680a2bb549c3b90aabaac63163f74fffc0b00277c6bbff88b757
CRC32 695E297D
ssdeep 3:XrURGizD7cnRNGbgCFKRNX/pBK0jCV83ne+VdWPiKgmR7kkmefoeLBizbCuVkqYM:X4LDAnybgCFcps0OafmCYDlizZr/i/Oh
Yara None matched
VirusTotal Search for analysis