popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 48621d132d5f2d89_tmp1BAA.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp1BAA.tmp
Size 1.6KB
Processes 1108 (Swift Copy pdf.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 fe74598c53899cc44162b8b1bfb41047
SHA1 746631c49ae3562ac2c185be317341733c0beb51
SHA256 48621d132d5f2d89d39d5bbd35825cbee83ae71c662d2fd4732a4c4e9a7cd019
CRC32 999E4D05
ssdeep 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKB+Ltn:cbhf7IlNQQ/rydbz9I3YODOLNdq3MJ
Yara None matched
VirusTotal Search for analysis
Name cf11d6b3c18d4c02_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 1120 (powershell.exe)
Type data
MD5 f2f5505600e2895c007b3ff3cfe3d4aa
SHA1 f0235a3c8056872d55eeef803d1bc33bac37a753
SHA256 cf11d6b3c18d4c02466b670bcb0394ac49382e6a87ad58d2561f2660922b586c
CRC32 9AF5ED3C
ssdeep 96:EtuCojGCPDXBqvsqvJCwoJtuCojGCPDXBqvsEHyqvJCworc7HwxGlUVul:Etu6XoJtu6bHnorXxY
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name d2e079df7cf63883_5m1pip4i.bzn
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\5m1pip4i.bzn
Size 926.0B
Processes 2760 (vbc.exe) 2944 (Swift Copy pdf.exe)
Type HTML document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5 919e671c3d5959a91ef2d4c377d2b2ff
SHA1 b1202b19512bbd390d3d5164792501c87bb42c41
SHA256 d2e079df7cf6388315368ba79bf099ad2ff5428af51bf5abf2d99a2d7c5eb651
CRC32 CDF6C821
ssdeep 24:QAl45i94TBYTCvq4A3Y7eOhv8UFaoQBIn4+pS:a5icwVTOhnFaoQ+n4+4
Yara None matched
VirusTotal Search for analysis
Name 1b1491f21e64681f_mgl1ggbp.com
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\mgl1ggbp.com
Size 523.0B
Processes 3068 (vbc.exe) 2944 (Swift Copy pdf.exe)
Type HTML document, ASCII text, with CRLF line terminators
MD5 69b2a2e17e78d24abee9f1de2f04811a
SHA1 d19c109704e83876ab3527457f9418a7d053aa33
SHA256 1b1491f21e64681f8fdc27b2265e2274fb7813eecb6ad8b446d2e431f6300edd
CRC32 55EA9ACD
ssdeep 12:BMQkS9xyR4VrR1LEIJ9yuNJmcfNXbYmvmAwYxZwgJwnbnyAwoE:WlS9v5N9ZmcfSYm0XwgynbnyF
Yara None matched
VirusTotal Search for analysis
Name f8098a6290118f29_settings.bin
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bin
Size 40.0B
Processes 2944 (Swift Copy pdf.exe)
Type data
MD5 4e5e92e2369688041cc82ef9650eded2
SHA1 15e44f2f3194ee232b44e9684163b6f66472c862
SHA256 f8098a6290118f2944b9e7c842bd014377d45844379f863b00d54515a8a64b48
CRC32 C6B6460B
ssdeep 3:9bzY6oRDT6P2bfVn1:RzWDT621
Yara None matched
VirusTotal Search for analysis
Name 0bd3aac12623520c_storage.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\storage.dat
Size 319.8KB
Processes 2944 (Swift Copy pdf.exe)
Type data
MD5 7e8f4a764b981d5b82d1cc49d341e9c6
SHA1 d9f0685a028fb219e1a6286aefb7d6fcfc778b85
SHA256 0bd3aac12623520c4e2031c8b96b4a154702f36f97f643158e91e987d317b480
CRC32 F31C2239
ssdeep 6144:oX44S90aTiB66x3Pl6nGV4bfD6wXPIZ9iBj0UeprGm2d7Tm:LkjYGsfGUc9iB4UeprKdnm
Yara None matched
VirusTotal Search for analysis
Name 5347661365e7ad2c_catalog.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\catalog.dat
Size 232.0B
Processes 2944 (Swift Copy pdf.exe)
Type data
MD5 32d0aae13696ff7f8af33b2d22451028
SHA1 ef80c4e0db2ae8ef288027c9d3518e6950b583a4
SHA256 5347661365e7ad2c1acc27ab0d150ffa097d9246bb3626fca06989e976e8dd29
CRC32 36FCB1A3
ssdeep 6:X4LDAnybgCFcpJSQwP4d7ZrqJgTFwoaw+9XU4:X4LEnybgCFCtvd7ZrCgpwoaw+Z9
Yara None matched
VirusTotal Search for analysis
Name 31442741f5051f46_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 2944 (Swift Copy pdf.exe)
Type Non-ISO extended-ASCII text, with no line terminators
MD5 43d57eb9f34e2a85e462e47b18f744e1
SHA1 7b21b18fe046dcdd453de375a1599c5b3969cd9d
SHA256 31442741f5051f4665b841297ff7dba9d91086ee3f643226408912528548e1aa
CRC32 E907770E
ssdeep 3:1F:n
Yara None matched
VirusTotal Search for analysis