popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 3b046d30dc2e6021_4168125.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\4168125.dat
Size 36.0KB
Type SQLite 3.x database, last written using SQLite version 3021000
MD5 e185515780e9dcb21c3262899c206308
SHA1 230714474693919d93949ab5a291f7ec02fd286f
SHA256 3b046d30dc2e6021be55d1bd47c2a92970856526c021df5de6e4ea3c4144659b
CRC32 25EF2A64
ssdeep 24:TLNg/5UcJOyTGVZTPaFpEvg3obNmCFk6Uwcc85fBvlllYu:TC/ecVTgPOpEveoJZFrU1cQBvlllY
Yara None matched
VirusTotal Search for analysis
Name 160a426ff2894252_jquery-3.3.1.min.js
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Default\Extensions\hemlmgggokggmncimchkllhcjcaimcle\9.86.66_0\js\jquery-3.3.1.min.js
Size 84.9KB
Processes 1868 (askinstall25.exe)
Type ASCII text, with very long lines
MD5 a09e13ee94d51c524b7e2a728c7d4039
SHA1 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
SHA256 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
CRC32 609A5B84
ssdeep 1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
Yara None matched
VirusTotal Search for analysis
Name 6ec867dc1caa77ec_4168125.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\4168125.dat
Size 18.0KB
Type SQLite 3.x database, last written using SQLite version 3021000
MD5 f3a100cba30b2a07a7af8886e439024e
SHA1 a454cca0db028b4d0fb29fa932c9056519efe2cf
SHA256 6ec867dc1caa77ecfd8e457d464b6bebc3be8694b4c88734fa83d197c0b214cc
CRC32 72CF6AF8
ssdeep 24:LLI10KL7G0TMJHUyyJtmCm0XKY6lOKQAE9V8MffD4fOzeCmly6Uwc6KaW:oz+JH3yJUheCVE9V8MX0PFlNU1faW
Yara None matched
VirusTotal Search for analysis
Name 9434dd7008059a60_icon.png
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Default\Extensions\hemlmgggokggmncimchkllhcjcaimcle\9.86.66_0\icon.png
Size 6.9KB
Processes 1868 (askinstall25.exe)
Type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
MD5 c8d8c174df68910527edabe6b5278f06
SHA1 8ac53b3605fea693b59027b9b471202d150f266f
SHA256 9434dd7008059a60d6d5ced8c8a63ab5cae407e7152da98ca4dda408510f08f5
CRC32 34316141
ssdeep 192:arFa6ynwcj6POoDbxN9EUQYZRia+ce/lkygkkl0:apa6mhjshD9QYZR3qkr/S
Yara
  • PNG_Format_Zero - PNG Format
VirusTotal Search for analysis
Name 024872f1e0eb6f98_manifest.json
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Default\Extensions\hemlmgggokggmncimchkllhcjcaimcle\9.86.66_0\manifest.json
Size 1.6KB
Processes 1868 (askinstall25.exe)
Type ASCII text, with very long lines, with CRLF line terminators
MD5 9d21061c0fde598f664c196ab9285ce0
SHA1 b8963499bfb13ab67759048ed357b66042850cd4
SHA256 024872f1e0eb6f98dcbd6a9d47820525c03aa0480373f9e247a90a3ef8776514
CRC32 9FD85AB6
ssdeep 24:1HgUpRWTcopiSZ+VuilATbggRDBT4uZWHjKRs531VXuMx3/080DlmxKw/xKFF83n:RWTfisul30TZWPj+z80pm5In838z6lT
Yara None matched
VirusTotal Search for analysis
Name fc7e184beeda61bf_aes.js
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Default\Extensions\hemlmgggokggmncimchkllhcjcaimcle\9.86.66_0\js\aes.js
Size 13.0KB
Processes 1868 (askinstall25.exe)
Type ASCII text, with very long lines
MD5 4ff108e4584780dce15d610c142c3e62
SHA1 77e4519962e2f6a9fc93342137dbb31c33b76b04
SHA256 fc7e184beeda61bf6427938a84560f52348976bb55e807b224eb53930e97ef6a
CRC32 7FCBF36E
ssdeep 192:9pQGDuD690MPdz8Ui015ll1I57I2Tru6h0hNmHV+m9eIfyAqYfinNVYEUUFJZmUY:9OiT0wz8Uiw/1S7DegkcHpeIuScZbAX
Yara None matched
VirusTotal Search for analysis
Name 282308ebc3702c44_pad-nopadding.js
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Default\Extensions\hemlmgggokggmncimchkllhcjcaimcle\9.86.66_0\js\pad-nopadding.js
Size 268.0B
Processes 1868 (askinstall25.exe)
Type ASCII text
MD5 0f26002ee3b4b4440e5949a969ea7503
SHA1 31fc518828fe4894e8077ec5686dce7b1ed281d7
SHA256 282308ebc3702c44129438f8299839ca4d392a0a09fdf0737f08ef1e4aff937d
CRC32 17D655FD
ssdeep 6:UonrLqmcxXDFXBkamjSPuNhsrIe2tKGXfGZwn:UoqmcZD5mamSw9tKGXfGqn
Yara None matched
VirusTotal Search for analysis
Name a86fd6b9995cea97_secure preferences
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 36.6KB
Processes 1868 (askinstall25.exe)
Type UTF-8 Unicode text, with very long lines, with CRLF line terminators
MD5 ff9763720317c704b8d41f521c27bce6
SHA1 3a039af11ec2ae542535cc6dc7d957cfce98b8cd
SHA256 a86fd6b9995cea973bddb72151eb570cd83fc298592a7dbadf862dc7406ced94
CRC32 26EE14D6
ssdeep 768:maYR70QAfcdTrL75V1kXqKf/pUZNCgVLH2HfCrZRR2nuVdJ/oplt:GRoGTrL9Qnwd65
Yara
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 0e3dc4ccd259716b_settings.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40.0B
Processes 1420 (chrome.exe)
Type data
MD5 62325aa04f35880232330f344df8018c
SHA1 58fe9532ee8d96e8d12448408cf3ccf9d0542543
SHA256 0e3dc4ccd259716b24376fddb4ee07a6c227f8bcb2532a7dd75bb36a4290e7cc
CRC32 6F0BEA7C
ssdeep 3:FkXJRYcTUM:+wcTb
Yara None matched
VirusTotal Search for analysis
Name a1064146f622fe68_background.html
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Default\Extensions\hemlmgggokggmncimchkllhcjcaimcle\9.86.66_0\background.html
Size 786.0B
Processes 1868 (askinstall25.exe)
Type HTML document, ASCII text
MD5 9ffe618d587a0685d80e9f8bb7d89d39
SHA1 8e9cae42c911027aafae56f9b1a16eb8dd7a739c
SHA256 a1064146f622fe68b94cd65a0e8f273b583449fbacfd6fd75fec1eaaf2ec8d6e
CRC32 DCC24689
ssdeep 24:OCXspY0w5LYKJ8oRpOFQxaVxtNVxHVxiaPNVxi1gV4T:tcpo9YoRpOE4tZTNhgT
Yara None matched
VirusTotal Search for analysis
Name 50e806d90f9ad1d1_debug.log
Submit file
Filepath C:\Program Files (x86)\Google\Chrome\Application\debug.log
Size 198.0B
Processes 2656 (chrome.exe)
Type ASCII text
MD5 36994bf206546538b4c14e4054c8b84d
SHA1 68170009b8f3a0c60b300c83645afb220c938bc0
SHA256 50e806d90f9ad1d1dd263932b3cca4c2337f366b1f32281a5d4bc9587210707d
CRC32 BA678709
ssdeep 6:lsgV9hRU4LGGmm3V4vyYsgV9hRU4LGGmm3V4vF:/RU4LGBm3V6pRU4LGBm3V6F
Yara None matched
VirusTotal Search for analysis
Name 241ee3cf0f212f8b_content.js
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Default\Extensions\hemlmgggokggmncimchkllhcjcaimcle\9.86.66_0\js\content.js
Size 14.6KB
Processes 1868 (askinstall25.exe)
Type ASCII text, with very long lines, with no line terminators
MD5 e49ff8e394c1860bc81f432e7a54320a
SHA1 091864b1ce681b19fbd8cffd7191b29774faeb32
SHA256 241ee3cf0f212f8b46ca79b96cfa529e93348bf78533d11b50db89e416bbabf3
CRC32 00D4B411
ssdeep 192:rlw3qM55VG/MavcrfnblazejlNEm40Y7bbcWns1pkDCOjPrITv7IaPY8eHTQS2Qf:rlBc5VG/MavcrTkze3EQYyBIf
Yara None matched
VirusTotal Search for analysis
Name 03164b1ac43853fe_mode-ecb.js
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Default\Extensions\hemlmgggokggmncimchkllhcjcaimcle\9.86.66_0\js\mode-ecb.js
Size 604.0B
Processes 1868 (askinstall25.exe)
Type ASCII text
MD5 23231681d1c6f85fa32e725d6d63b19b
SHA1 f69315530b49ac743b0e012652a3a5efaed94f17
SHA256 03164b1ac43853fecdbf988ce900016fb174cf65b03e41c0a9a7bf3a95e8c26a
CRC32 6744B21E
ssdeep 6:UonrLqmcxXDFXBkamjSPuND5Z9sE/A6M8IvHosCkV/hqN3+8R+WkV/hqNhAYa83V:UoqmcZD5mamSS5ZpXM8RjNhRfNDlv3V
Yara None matched
VirusTotal Search for analysis
Name f274019bca223f25_metadata
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Crashpad\metadata
Size 114.0B
Processes 2656 (chrome.exe)
Type data
MD5 141ab85c1b42cd3b98d0c3eef61ffffb
SHA1 ea292310b317da758fd2c671bdb3512719e0cfa3
SHA256 f274019bca223f25a296eba352a2f601dd02fec38ddc208e31115cbccfbe7df6
CRC32 609BE2F3
ssdeep 3:mTll+XlzHvO5s5pl+/l4tVlrHppgAo/:mTlErvrq4tLppg/
Yara None matched
VirusTotal Search for analysis
Name a89ac1d7f5de7474_background.js
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Default\Extensions\hemlmgggokggmncimchkllhcjcaimcle\9.86.66_0\js\background.js
Size 15.9KB
Processes 1868 (askinstall25.exe)
Type ASCII text, with very long lines, with CRLF line terminators
MD5 735e04fa1f9ae8672cc0daca839daa8a
SHA1 d5acb25d1be3291c0bab59d9bf3110d34b94083a
SHA256 a89ac1d7f5de7474ede61a0c98fec70f036582be32a2fa1c3a7122429e181d24
CRC32 521F2AF0
ssdeep 384:cSqK+K3pmygrlA8UElrtSCSDJL7LTLERjBdW49LfIfnwjkQV9GjMyEBsrUfjxk:cumygrlA8UElrtSCaJXfABfIVUrxk
Yara None matched
VirusTotal Search for analysis
Name c8c13b7c6cf97cce_8aa267b1-5bd2-419c-805c-3376c118e3c3.dmp
Submit file
Filepath C:\Users\test22\AppData\Local\Google\Chrome\User Data\Crashpad\reports\8aa267b1-5bd2-419c-805c-3376c118e3c3.dmp
Size 814.6KB
Processes 2656 (chrome.exe)
Type Mini DuMP crash report, 10 streams, Mon Nov 1 02:58:41 2021, 0x0 type
MD5 c4ee6fe27831925721065916015a998d
SHA1 1cd949a3829901193476fafdcef47766f452fde4
SHA256 c8c13b7c6cf97cceb4a67dab7e5eec6dfd347127e2b82277d5d7c46de7172fb9
CRC32 2270C8B9
ssdeep 3072:5kSYk4ijgDmxafNgcFFYPEaBYMjWYyovIDvsQPxZMvKNx6KFu1pwtQlXg3ukidXv:OsjgDmxafSOaIkXkgTSwN
Yara
  • Malicious_Packer_Zero - Malicious Packer
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis