popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name f4d28cf0f12006f9_590aee7bdd69b59b.customDestinations-ms~RF88efb9.TMP
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms~RF88efb9.TMP
Size 7.8KB
Processes 1048 (powershell.exe) 2208 (powershell.exe)
Type data
MD5 b770148dd160455bac8fe186a882733d
SHA1 f41e6e10cf42b4aa831f43abfb27c031bf0f3d4a
SHA256 f4d28cf0f12006f93de9b6181d36369c8d85b6021f830ea407d76585cbda8b1e
CRC32 94B533F7
ssdeep 96:EtuCojGCPDXBqvsqvJCwoJtuCojGCPDXBqvsEHyqvJCwor3tDHXyGlUVul:Etu6XoJtu6bHnordTyY
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name e40eff70c287c352_msedge_web.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\msedge_web.exe
Size 2.0MB
Processes 1468 (dd.exe)
Type PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
MD5 480b674916550fb258dbd1f351fd5365
SHA1 0b543407cf3d965cf55f7079a58b924706f42036
SHA256 e40eff70c287c352fcceb2c5e0331a6b4e5ae8f415c9019ecfefe97297c7b398
CRC32 88A0879E
ssdeep 49152:83Y6RENYNBx3g9IN2afbmHa78Uhq0CdmkjzWvlBMJ3u:8B/BxQbEq0EmU2o3u
Yara
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • Generic_Malware_Zero - Generic Malware
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
VirusTotal Search for analysis
Name cf11d6b3c18d4c02_d93f411851d7c929.customDestinations-ms~RF889ad3.TMP
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF889ad3.TMP
Size 7.8KB
Processes 2876 (powershell.exe) 3056 (powershell.exe)
Type data
MD5 f2f5505600e2895c007b3ff3cfe3d4aa
SHA1 f0235a3c8056872d55eeef803d1bc33bac37a753
SHA256 cf11d6b3c18d4c02466b670bcb0394ac49382e6a87ad58d2561f2660922b586c
CRC32 9AF5ED3C
ssdeep 96:EtuCojGCPDXBqvsqvJCwoJtuCojGCPDXBqvsEHyqvJCworc7HwxGlUVul:Etu6XoJtu6bHnorXxY
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name e54889aa61d6c0f6_svchost64.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\svchost64.exe
Size 2.0MB
Processes 492 (msedge.exe) 1856 (cmd.exe)
Type PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
MD5 1f10a8639f1ede778b4fa48cdae4bc56
SHA1 5ddeef3ed6301c632337f31f39f650112edfff34
SHA256 e54889aa61d6c0f6d2af384ee879495145edd4bb1a437b631171bc2f8d95b501
CRC32 B1927F7F
ssdeep 49152:0dXsrb26l8Ysr0yPgL/FVYgAqzDOWi+7Rh/R5tIRBkGsw6IW:+Xob26lRsZPgDFBzDOWiwRJjtIRBR6
Yara
  • Malicious_Packer_Zero - Malicious Packer
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • Generic_Malware_Zero - Generic Malware
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
VirusTotal Search for analysis
Name 2dec46239adaff11_svchost32.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\svchost32.exe
Size 1.9MB
Processes 3028 (msedge_web.exe) 736 (cmd.exe)
Type PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
MD5 8ff7c06915def63dc7fe22504698c899
SHA1 2626aeaa6b488b3f22ce8aaca8ea065fbd05a569
SHA256 2dec46239adaff11ab504e69cc7e0a3ec1709439d199b2092a497e39e478b056
CRC32 0EEBDADC
ssdeep 49152:PaXIBhAJcCG4jvTY9M8outnH0xBhaVnCLpo7Z1JF:PXBlCrjrQMGH0MVn8M/
Yara
  • Malicious_Packer_Zero - Malicious Packer
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • Generic_Malware_Zero - Generic Malware
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
VirusTotal Search for analysis
Name f0c3785f51d5a8b2_msedge.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\msedge.exe
Size 2.1MB
Processes 1468 (dd.exe)
Type PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
MD5 7769a6f7866ac74c19dc77eac4f691b8
SHA1 b61e61b0e618c48c396ea0ea150120db5a0f7210
SHA256 f0c3785f51d5a8b276531092419966ebf93cdcb8fcc211c994e62d3f81435b77
CRC32 F0EDB349
ssdeep 49152:2dAOCNj6XIVDs/8GofGPuLwTqS6DldbEhBu:aCNjcms/dBfb6XwhBu
Yara
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis