popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name d78bc23b0ca3eddf_task.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size 57.0B
Processes 1632 (RegSvcs.exe)
Type ASCII text, with no line terminators
MD5 d685103573539b7e9fdbf5f1d7dd96ce
SHA1 4b2fe6b5c0b37954b314fcaee1f12237a9b02d07
SHA256 d78bc23b0ca3eddf52d56ab85cdc30a71b3756569cb32aa2f6c28dbc23c76e8e
CRC32 B30A2583
ssdeep 3:oMty8WbSX/MNn:oMLWus
Yara None matched
VirusTotal Search for analysis
Name 49c4a85bce2fb8cb_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2324 (powershell.exe)
Type data
MD5 4eba3b6a4f05a26106a2d772c79da044
SHA1 45ae375ea2f305e4409aabc22803cd1471f0983e
SHA256 49c4a85bce2fb8cb6db4279591d0966cbd2fb84bc43f252ee5ad14d3d615b2b5
CRC32 2DF7F691
ssdeep 96:YtuCaGCPDXBqvsqvJCwo9tuCaGCPDXBqvsEHyqvJCworM7HwxWlUVul:YtzXo9tzbHnornxo
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name c51e12d18cc66442_tmp1040.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp1040.tmp
Size 1.3KB
Processes 1632 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 40b11ef601fb28f9b2e69d36857bf2ec
SHA1 b6454020ad2ceed193f4792b77001d0bd741b370
SHA256 c51e12d18cc664425f6711d8ae2507068884c7057092cfa11884100e1e9d49e1
CRC32 3D2F2EDC
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0mn4xtn:cbk4oL600QydbQxIYODOLedq3Z4j
Yara None matched
VirusTotal Search for analysis
Name 8d8a24e369c8d8cb_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 1632 (RegSvcs.exe)
Type Non-ISO extended-ASCII text, with no line terminators
MD5 d1d9fe2ba0d6fccc24da9fd8e1d7a431
SHA1 6bf41e7558385a793daf57ac9139095bab9b9ff4
SHA256 8d8a24e369c8d8cbcade8228744ec3bd659fe9cf6a22f32fd840e79178997a84
CRC32 27055D17
ssdeep 3:kK18n:p8
Yara None matched
VirusTotal Search for analysis
Name bb9181b3935b8681_tmp11F6.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp11F6.tmp
Size 1.3KB
Processes 1632 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 be81f72fa4dbc827132836ee2af92c96
SHA1 fe5ded04ab4932dea6cf414e9e4428f43da70d03
SHA256 bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f
CRC32 7AA438E3
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j
Yara None matched
VirusTotal Search for analysis
Name 313ac3c62987ef48_tmpDA0.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpDA0.tmp
Size 1.6KB
Processes 2504 (DOCS-20211510-VP-KMC022021.scr)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 2e3ed45420e8c7f583f5604c047e9894
SHA1 d4595deb6ae906080a78cbaaad95a4b29f26179a
SHA256 313ac3c62987ef48842e8fdbd198d3474b9de2b6dcbd2d5c6a96407266b7ab13
CRC32 D736668F
ssdeep 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKB8tn:cbhf7IlNQQ/rydbz9I3YODOLNdq34
Yara None matched
VirusTotal Search for analysis