Dropped Files | ZeroBOX

Name	c6761fb97acdba3a_wincfg.exe Submit file
Filepath	C:\Users\test22\wincfg.exe
Size	4.3MB
Processes	2232 (753.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`4ab2935ce1e3b2e7032cc505f0850809`
SHA1	`e17756d2ff33b1dbb1229f388c05cbe943b5bf46`
SHA256	`c6761fb97acdba3aa3406dad60e2a138207e99252de1338b5ccafed6fc26676d`
CRC32	`53ACCD62`
ssdeep	`98304:I8pxRieFWNcDltC2Z5PS2OTTrFt+CJsWjjHtksuxz+9XTXmko+efA0Hbu8:I8p+eFaeW2VOTVt+CJsWdjud+9Tm7jfJ`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Malicious_Library_Zero - Malicious_Library
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_85B3.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\85B3.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	a8b27eea11a781b3_85b5.bat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\85B3.tmp\85B4.tmp\85B5.bat
Size	470.0B
Processes	2084 (wincfg.exe)
Type	ASCII text, with CRLF line terminators
MD5	`a3037b91a03100fd27284f2068aa913e`
SHA1	`822fed93d464e1f06e4bf9a27ba4294ac72b74c7`
SHA256	`a8b27eea11a781b39fdb9ff6c52790f909b1d7d879a69296e66ca742478d7d3b`
CRC32	`5AFA7CDF`
ssdeep	`6:NS0HhlHYuvQrQiVuFRkCbgjE/IvbB4fg8sNsq42VuFUCh6b4+5KbPOkI4wv:NSI4u4Mi8FRBxQvbWuNl428Fgq2p4wv`
Yara	None matched
VirusTotal	Search for analysis

Name	2736e4a8db08f28d_defender.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\85B3.tmp\Defender.exe
Size	4.2MB
Processes	2084 (wincfg.exe)
Type	PE32+ executable (console) x86-64, for MS Windows
MD5	`4cf56aff6e29c9802b6430222099218a`
SHA1	`aa9249c87fa245fb7bf0af29dc2cda9669bca304`
SHA256	`2736e4a8db08f28d126d069febbc41af4f6b46c4da80ac6ab407e474aad48c8a`
CRC32	`64503D83`
ssdeep	`98304:NV2wnkFL84QN0kTUrKT79nXlp1IT6MdCg8RvFD1VpZT/f2aLE2:WwnkF4mo3lmdCbRv5jTnxp`
Yara	UPX_Zero - UPX packed file IsPE64 - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis