Dropped Files | ZeroBOX

Name	f8098a6290118f29_settings.bin Submit file
Filepath	C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bin
Size	40.0B
Processes	3020 (RegSvcs.exe)
Type	data
MD5	`4e5e92e2369688041cc82ef9650eded2`
SHA1	`15e44f2f3194ee232b44e9684163b6f66472c862`
SHA256	`f8098a6290118f2944b9e7c842bd014377d45844379f863b00d54515a8a64b48`
CRC32	`C6B6460B`
ssdeep	`3:9bzY6oRDT6P2bfVn1:RzWDT621`
Yara	None matched
VirusTotal	Search for analysis

Name	5a3e0ecae9a6549a_run.dat Submit file
Filepath	C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size	8.0B
Processes	3020 (RegSvcs.exe)
Type	data
MD5	`4795eb822ab53d092f0632207af60e4f`
SHA1	`c5d2fea61d8598ea5c1e313572c61a901c48ceb9`
SHA256	`5a3e0ecae9a6549a788b1046c70d805b44693de5ac8ae485951b96c58ab7f22b`
CRC32	`5F837894`
ssdeep	`3:e98tn:08n`
Yara	None matched
VirusTotal	Search for analysis

Name	4ea89bca3702896a_tmp42.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp42.tmp
Size	1.6KB
Processes	872 (reason.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`8b4c8d2d36fd8da0d991c310e08c82cf`
SHA1	`f030696443f8240cdd55ae9b91d8ec4bf7e465db`
SHA256	`4ea89bca3702896a53c309849c86422f4dd174f5f4211f9d710ec56277bc4987`
CRC32	`C33ECA88`
ssdeep	`24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBatn:cbhf7IlNQQ/rydbz9I3YODOLNdq3G`
Yara	None matched
VirusTotal	Search for analysis

Name	4cfa0e50d93a65c8_catalog.dat Submit file
Filepath	C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\catalog.dat
Size	216.0B
Processes	3020 (RegSvcs.exe)
Type	data
MD5	`0fa1be38a5a8d2a56f48982c3e9142a6`
SHA1	`28e5b087e687e57d4ab6db352a493aa5657c8484`
SHA256	`4cfa0e50d93a65c81b5cf800f4970e7ad0f7324e0220d1ee91b27d0c0f289493`
CRC32	`09178904`
ssdeep	`6:X4LDAnybgCFgwOp7Lr8gVyTwvMV84Miuk:X4LEnybgCF7wHJyCe8Oh`
Yara	None matched
VirusTotal	Search for analysis