popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name b72c3360a4f54edf_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 3032 (Swift Copy pdf.exe)
Type Non-ISO extended-ASCII text, with no line terminators
MD5 f28e6b0f2d08a55ab693d9f186015cd4
SHA1 31b5389eec2588596df8fba027a6c8225587cf1f
SHA256 b72c3360a4f54edfb8c320290f97b5102cbaf6e6cfc5dd27ade6c5e1c9031c60
CRC32 FF160C82
ssdeep 3:Wb:Wb
Yara None matched
VirusTotal Search for analysis
Name cf11d6b3c18d4c02_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2408 (powershell.exe)
Type data
MD5 f2f5505600e2895c007b3ff3cfe3d4aa
SHA1 f0235a3c8056872d55eeef803d1bc33bac37a753
SHA256 cf11d6b3c18d4c02466b670bcb0394ac49382e6a87ad58d2561f2660922b586c
CRC32 9AF5ED3C
ssdeep 96:EtuCojGCPDXBqvsqvJCwoJtuCojGCPDXBqvsEHyqvJCworc7HwxGlUVul:Etu6XoJtu6bHnorXxY
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name dc3ae604991c9bb8_settings.bak
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bak
Size 24.0B
Type data
MD5 acd3fb4310417dc77fe06f15b0e353e6
SHA1 80e7002e655eb5765fdeb21114295cb96ad9d5eb
SHA256 dc3ae604991c9bb8ff8bc4502ae3d0db8a3317512c0f432490b103b89c1a4368
CRC32 0E770DA4
ssdeep 3:9bzY6oRDIvYk:RzWDI3
Yara None matched
VirusTotal Search for analysis
Name f8098a6290118f29_settings.bin
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bin
Size 40.0B
Processes 3032 (Swift Copy pdf.exe)
Type data
MD5 4e5e92e2369688041cc82ef9650eded2
SHA1 15e44f2f3194ee232b44e9684163b6f66472c862
SHA256 f8098a6290118f2944b9e7c842bd014377d45844379f863b00d54515a8a64b48
CRC32 C6B6460B
ssdeep 3:9bzY6oRDT6P2bfVn1:RzWDT621
Yara None matched
VirusTotal Search for analysis
Name 0bd3aac12623520c_storage.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\storage.dat
Size 319.8KB
Processes 3032 (Swift Copy pdf.exe)
Type data
MD5 7e8f4a764b981d5b82d1cc49d341e9c6
SHA1 d9f0685a028fb219e1a6286aefb7d6fcfc778b85
SHA256 0bd3aac12623520c4e2031c8b96b4a154702f36f97f643158e91e987d317b480
CRC32 F31C2239
ssdeep 6144:oX44S90aTiB66x3Pl6nGV4bfD6wXPIZ9iBj0UeprGm2d7Tm:LkjYGsfGUc9iB4UeprKdnm
Yara None matched
VirusTotal Search for analysis
Name 5347661365e7ad2c_catalog.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\catalog.dat
Size 232.0B
Processes 3032 (Swift Copy pdf.exe)
Type data
MD5 32d0aae13696ff7f8af33b2d22451028
SHA1 ef80c4e0db2ae8ef288027c9d3518e6950b583a4
SHA256 5347661365e7ad2c1acc27ab0d150ffa097d9246bb3626fca06989e976e8dd29
CRC32 36FCB1A3
ssdeep 6:X4LDAnybgCFcpJSQwP4d7ZrqJgTFwoaw+9XU4:X4LEnybgCFCtvd7ZrCgpwoaw+Z9
Yara None matched
VirusTotal Search for analysis
Name 48621d132d5f2d89_tmpE623.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpE623.tmp
Size 1.6KB
Processes 2388 (Swift Copy pdf.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 fe74598c53899cc44162b8b1bfb41047
SHA1 746631c49ae3562ac2c185be317341733c0beb51
SHA256 48621d132d5f2d89d39d5bbd35825cbee83ae71c662d2fd4732a4c4e9a7cd019
CRC32 999E4D05
ssdeep 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKB+Ltn:cbhf7IlNQQ/rydbz9I3YODOLNdq3MJ
Yara None matched
VirusTotal Search for analysis