Dropped Files | ZeroBOX
Name d78bc23b0ca3eddf_task.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size 57.0B
Processes 2408 (RegSvcs.exe)
Type ASCII text, with no line terminators
MD5 d685103573539b7e9fdbf5f1d7dd96ce
SHA1 4b2fe6b5c0b37954b314fcaee1f12237a9b02d07
SHA256 d78bc23b0ca3eddf52d56ab85cdc30a71b3756569cb32aa2f6c28dbc23c76e8e
CRC32 B30A2583
ssdeep 3:oMty8WbSX/MNn:oMLWus
Yara None matched
VirusTotal Search for analysis
Name bb9181b3935b8681_tmp168A.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp168A.tmp
Size 1.3KB
Processes 2408 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 be81f72fa4dbc827132836ee2af92c96
SHA1 fe5ded04ab4932dea6cf414e9e4428f43da70d03
SHA256 bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f
CRC32 7AA438E3
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j
Yara None matched
VirusTotal Search for analysis
Name f8098a6290118f29_settings.bin
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bin
Size 40.0B
Processes 2408 (RegSvcs.exe)
Type data
MD5 4e5e92e2369688041cc82ef9650eded2
SHA1 15e44f2f3194ee232b44e9684163b6f66472c862
SHA256 f8098a6290118f2944b9e7c842bd014377d45844379f863b00d54515a8a64b48
CRC32 C6B6460B
ssdeep 3:9bzY6oRDT6P2bfVn1:RzWDT621
Yara None matched
VirusTotal Search for analysis
Name 3a55dfe9db101800_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 2408 (RegSvcs.exe)
Type Non-ISO extended-ASCII text, with no line terminators
MD5 04b7e12be53d83fa54ce9f66d02bdbff
SHA1 5366d47fa085bbb7171225b24c84c366ecfeb76b
SHA256 3a55dfe9db10180002b28797086d82588cf4f4b1e8c1e8be4b4e6a094b13698e
CRC32 8CCFE89F
ssdeep 3:D6:O
Yara None matched
VirusTotal Search for analysis
Name ae5b269480c3a564_tmp13AB.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp13AB.tmp
Size 1.6KB
Processes 2072 (plugmanzx.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 d8569ceb57336900fb9e691f42e1ff55
SHA1 bdf633dcc66f0b6da7007d54d17f5228409a55a7
SHA256 ae5b269480c3a564c8c733da4f1d8869c24257d654f95e034157fe798692b2b7
CRC32 D8EDCC41
ssdeep 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBKtn:cbhf7IlNQQ/rydbz9I3YODOLNdq3y
Yara None matched
VirusTotal Search for analysis
Name 3d58f22d51d8ce1a_storage.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\storage.dat
Size 406.1KB
Processes 2408 (RegSvcs.exe)
Type data
MD5 7c8188ebe984b268f8d117e801a50e9b
SHA1 7eba6533a875bd16cefb5152c917eedb6ee422d3
SHA256 3d58f22d51d8ce1a005224f5e5baa28f103dedc33bc00ae5a2f222d84c7a582b
CRC32 7EA8DA4C
ssdeep 12288:OF30dVaG4159TdyDOjxR624CXV2JCxJS88n3:c32aL9TdyDSv4m4kS3
Yara None matched
VirusTotal Search for analysis
Name c51e12d18cc66442_tmp159F.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp159F.tmp
Size 1.3KB
Processes 2408 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 40b11ef601fb28f9b2e69d36857bf2ec
SHA1 b6454020ad2ceed193f4792b77001d0bd741b370
SHA256 c51e12d18cc664425f6711d8ae2507068884c7057092cfa11884100e1e9d49e1
CRC32 3D2F2EDC
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0mn4xtn:cbk4oL600QydbQxIYODOLedq3Z4j
Yara None matched
VirusTotal Search for analysis
Name a773767d5714808b_catalog.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\catalog.dat
Size 232.0B
Processes 2408 (RegSvcs.exe)
Type data
MD5 678166f4cb8e67fed18f334ab43a6b9f
SHA1 2aa698be0d8bdd534749b315856d962a3325f6c9
SHA256 a773767d5714808bd7d8e1b5f496659682e5c0f5d01d012f49affe5f280591a4
CRC32 C335D7EB
ssdeep 6:X4LDAnybgCFcps0OaNGElBf3xGwy0bQMLZqdrKvn1gfjuWQd:X4LEnybgCF0NG2fw6ExK1g6Ld
Yara None matched
VirusTotal Search for analysis