popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name a9220271c0eb79e5_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2216 (powershell.exe)
Type data
MD5 b0c9ff441742f3847ea27da9dee7f2cd
SHA1 c42a1eb32ba953a0ce5d8635caabf71b5b281495
SHA256 a9220271c0eb79e5750e0d0e62058ecac560e09cdf9e82ef61aeeabada5d48a4
CRC32 0BBCAB1A
ssdeep 96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:UtvXoxtvbHnorrxQ
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 166736a2b267d3df_task.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size 93.0B
Processes 2504 (DOC INVOICE EXPORTO52052 IMG0023987066 SCANNED DOC_PDF.exe)
Type ASCII text, with no line terminators
MD5 3fba47ea8161b41c3b3ace3b10b11c45
SHA1 9558511fb597b9bff102e1b0cb0a4e28f80f6647
SHA256 166736a2b267d3dfec876a70a190ffae3038475ff0399d668523fd6826a763f3
CRC32 EEE810C5
ssdeep 3:oNmWxpcL4E2J5xAILFsrz2g2ghZXUErMqAdA:oNmQpcLJ23fLFo2g2gPvMq4A
Yara None matched
VirusTotal Search for analysis
Name bb9181b3935b8681_tmp8F6B.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp8F6B.tmp
Size 1.3KB
Processes 2504 (DOC INVOICE EXPORTO52052 IMG0023987066 SCANNED DOC_PDF.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 be81f72fa4dbc827132836ee2af92c96
SHA1 fe5ded04ab4932dea6cf414e9e4428f43da70d03
SHA256 bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f
CRC32 7AA438E3
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j
Yara None matched
VirusTotal Search for analysis
Name ac7d5f30cbdd8549_tmp8C2D.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp8C2D.tmp
Size 1.6KB
Processes 2512 (DOC INVOICE EXPORTO52052 IMG0023987066 SCANNED DOC_PDF.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 521b56cfbc17e843e5c53af615b57846
SHA1 406e0e3786f815e555d4babae14d6c95ee437c83
SHA256 ac7d5f30cbdd8549b04c773b0c282cb0320a3f21fd257693f5742250b20ddd9b
CRC32 49740799
ssdeep 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBLPtn:cbhf7IlNQQ/rydbz9I3YODOLNdq3T
Yara None matched
VirusTotal Search for analysis
Name 591ab5770dd32726_tmp8E70.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp8E70.tmp
Size 1.3KB
Processes 2504 (DOC INVOICE EXPORTO52052 IMG0023987066 SCANNED DOC_PDF.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 981b96e2d0a1581a219cb76e9d69521f
SHA1 34f8413a7e7df91dd01c84e44a9a72cb9daca544
SHA256 591ab5770dd32726c6b688afd84030f8b4074bfb6ea8af017208122ad2f15e66
CRC32 F6C186D8
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Z+Htxtn:cbk4oL600QydbQxIYODOLedq3Y+Nj
Yara None matched
VirusTotal Search for analysis
Name 92def7fae5772a81_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 2504 (DOC INVOICE EXPORTO52052 IMG0023987066 SCANNED DOC_PDF.exe)
Type data
MD5 0e7d0e3b24e36601ebc1e3eeeb2e5fd5
SHA1 2c71893591a251cc1ded937d52f9bd15356f6454
SHA256 92def7fae5772a81f50f22c50202e3e0ce9bb1223eac0fb87ec661ccee9fa5c0
CRC32 B0477D6B
ssdeep 3:D8tn:D8tn
Yara None matched
VirusTotal Search for analysis