Dropped Files | ZeroBOX
Name d78bc23b0ca3eddf_task.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size 57.0B
Processes 2316 (RegSvcs.exe)
Type ASCII text, with no line terminators
MD5 d685103573539b7e9fdbf5f1d7dd96ce
SHA1 4b2fe6b5c0b37954b314fcaee1f12237a9b02d07
SHA256 d78bc23b0ca3eddf52d56ab85cdc30a71b3756569cb32aa2f6c28dbc23c76e8e
CRC32 B30A2583
ssdeep 3:oMty8WbSX/MNn:oMLWus
Yara None matched
VirusTotal Search for analysis
Name f02c29816e5cc608_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 2316 (RegSvcs.exe)
Type ISO-8859 text, with no line terminators
MD5 36be4c153902e9acec092a1108139091
SHA1 c96f6852cf6771065ae0f5848937a97d00d1ddde
SHA256 f02c29816e5cc60869e24b01c595f2ad44d919b171b170a8f5ad2bdede3ac5b3
CRC32 B978A8E7
ssdeep 3:osn:osn
Yara None matched
VirusTotal Search for analysis
Name 4eeedd0dad41519b_tmp1438.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp1438.tmp
Size 1.6KB
Processes 1224 (catzx.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 176c8980a872565e6fc117ed16227a0b
SHA1 ae7744a07bef9545d5812461a7b7db1f9b86c5cb
SHA256 4eeedd0dad41519b0884049d2349a98c25b7d12bdb49937c6ea88f095d6e0940
CRC32 6BEF862E
ssdeep 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBa9etn:cbhf7IlNQQ/rydbz9I3YODOLNdq3kY
Yara None matched
VirusTotal Search for analysis
Name f8098a6290118f29_settings.bin
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bin
Size 40.0B
Processes 2316 (RegSvcs.exe)
Type data
MD5 4e5e92e2369688041cc82ef9650eded2
SHA1 15e44f2f3194ee232b44e9684163b6f66472c862
SHA256 f8098a6290118f2944b9e7c842bd014377d45844379f863b00d54515a8a64b48
CRC32 C6B6460B
ssdeep 3:9bzY6oRDT6P2bfVn1:RzWDT621
Yara None matched
VirusTotal Search for analysis
Name c51e12d18cc66442_tmp163B.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp163B.tmp
Size 1.3KB
Processes 2316 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 40b11ef601fb28f9b2e69d36857bf2ec
SHA1 b6454020ad2ceed193f4792b77001d0bd741b370
SHA256 c51e12d18cc664425f6711d8ae2507068884c7057092cfa11884100e1e9d49e1
CRC32 3D2F2EDC
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0mn4xtn:cbk4oL600QydbQxIYODOLedq3Z4j
Yara None matched
VirusTotal Search for analysis
Name 3d58f22d51d8ce1a_storage.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\storage.dat
Size 406.1KB
Processes 2316 (RegSvcs.exe)
Type data
MD5 7c8188ebe984b268f8d117e801a50e9b
SHA1 7eba6533a875bd16cefb5152c917eedb6ee422d3
SHA256 3d58f22d51d8ce1a005224f5e5baa28f103dedc33bc00ae5a2f222d84c7a582b
CRC32 7EA8DA4C
ssdeep 12288:OF30dVaG4159TdyDOjxR624CXV2JCxJS88n3:c32aL9TdyDSv4m4kS3
Yara None matched
VirusTotal Search for analysis
Name bb9181b3935b8681_tmp1794.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp1794.tmp
Size 1.3KB
Processes 2316 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 be81f72fa4dbc827132836ee2af92c96
SHA1 fe5ded04ab4932dea6cf414e9e4428f43da70d03
SHA256 bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f
CRC32 7AA438E3
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j
Yara None matched
VirusTotal Search for analysis
Name a773767d5714808b_catalog.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\catalog.dat
Size 232.0B
Processes 2316 (RegSvcs.exe)
Type data
MD5 678166f4cb8e67fed18f334ab43a6b9f
SHA1 2aa698be0d8bdd534749b315856d962a3325f6c9
SHA256 a773767d5714808bd7d8e1b5f496659682e5c0f5d01d012f49affe5f280591a4
CRC32 C335D7EB
ssdeep 6:X4LDAnybgCFcps0OaNGElBf3xGwy0bQMLZqdrKvn1gfjuWQd:X4LEnybgCF0NG2fw6ExK1g6Ld
Yara None matched
VirusTotal Search for analysis