Dropped Files | ZeroBOX
Name d78bc23b0ca3eddf_task.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size 57.0B
Processes 2720 (RegSvcs.exe)
Type ASCII text, with no line terminators
MD5 d685103573539b7e9fdbf5f1d7dd96ce
SHA1 4b2fe6b5c0b37954b314fcaee1f12237a9b02d07
SHA256 d78bc23b0ca3eddf52d56ab85cdc30a71b3756569cb32aa2f6c28dbc23c76e8e
CRC32 B30A2583
ssdeep 3:oMty8WbSX/MNn:oMLWus
Yara None matched
VirusTotal Search for analysis
Name c51e12d18cc66442_tmpF20A.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpF20A.tmp
Size 1.3KB
Processes 2720 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 40b11ef601fb28f9b2e69d36857bf2ec
SHA1 b6454020ad2ceed193f4792b77001d0bd741b370
SHA256 c51e12d18cc664425f6711d8ae2507068884c7057092cfa11884100e1e9d49e1
CRC32 3D2F2EDC
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0mn4xtn:cbk4oL600QydbQxIYODOLedq3Z4j
Yara None matched
VirusTotal Search for analysis
Name fc926e46430f7c4c_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 2720 (RegSvcs.exe)
Type data
MD5 f97c2bff37818f517dcdd9a34dd89893
SHA1 9cab84bdce5d3db94c4deedd544d3e1b6083a978
SHA256 fc926e46430f7c4c685927b59a6466e89bc2b91334dc3e9dcbf859e44c43c6f4
CRC32 219D9496
ssdeep 3:jchw8:O
Yara None matched
VirusTotal Search for analysis
Name f8098a6290118f29_settings.bin
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bin
Size 40.0B
Processes 2720 (RegSvcs.exe)
Type data
MD5 4e5e92e2369688041cc82ef9650eded2
SHA1 15e44f2f3194ee232b44e9684163b6f66472c862
SHA256 f8098a6290118f2944b9e7c842bd014377d45844379f863b00d54515a8a64b48
CRC32 C6B6460B
ssdeep 3:9bzY6oRDT6P2bfVn1:RzWDT621
Yara None matched
VirusTotal Search for analysis
Name bb9181b3935b8681_tmpF391.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpF391.tmp
Size 1.3KB
Processes 2720 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 be81f72fa4dbc827132836ee2af92c96
SHA1 fe5ded04ab4932dea6cf414e9e4428f43da70d03
SHA256 bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f
CRC32 7AA438E3
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j
Yara None matched
VirusTotal Search for analysis
Name bcdc023c21b29621_tmpEFE7.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpEFE7.tmp
Size 1.6KB
Processes 1896 (catzx.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 16f69e4e2f9709b448e1b449fe289577
SHA1 5f2315ab709cf690bec83e32eb0618aded84ceea
SHA256 bcdc023c21b2962102e55de1f2447bc318cd41d09c65ff9d2ada38248519b31c
CRC32 C4F43069
ssdeep 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBytn:cbhf7IlNQQ/rydbz9I3YODOLNdq3e
Yara None matched
VirusTotal Search for analysis
Name 83b9cae66800c768_storage.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\storage.dat
Size 416.8KB
Processes 2720 (RegSvcs.exe)
Type data
MD5 653dddcb6c89f6ec51f3ddc0053c5914
SHA1 4cf7e7d42495ce01c261e4c5c4b8bf6cd76ccee5
SHA256 83b9cae66800c768887fb270728f6806cbebdead9946fa730f01723847f17ff9
CRC32 D300AB58
ssdeep 6144:zKfHbamD8WN+JQYrjM7Ei2CsFJjyh9zvgPonV5HqZcPVT4Eb+Z6no3QSzjeMsdF/:zKf137EiDsTjevgArYcPVLoTQS+0iv
Yara None matched
VirusTotal Search for analysis
Name aafc7b40c5fe680a_catalog.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\catalog.dat
Size 232.0B
Processes 2720 (RegSvcs.exe)
Type data
MD5 9e7d0351e4df94a9b0badceb6a9db963
SHA1 76c6a69b1c31cea2014d1fd1e222a3dd1e433005
SHA256 aafc7b40c5fe680a2bb549c3b90aabaac63163f74fffc0b00277c6bbff88b757
CRC32 695E297D
ssdeep 3:XrURGizD7cnRNGbgCFKRNX/pBK0jCV83ne+VdWPiKgmR7kkmefoeLBizbCuVkqYM:X4LDAnybgCFcps0OafmCYDlizZr/i/Oh
Yara None matched
VirusTotal Search for analysis