popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 1cf69961df94fe9b_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 2236 (microsoftze.exe)
Type ISO-8859 text, with no line terminators
MD5 61705f9421a1754a757848cd0ccf6dea
SHA1 b7081e3593569f93f25e045225beaaf39c16bfe4
SHA256 1cf69961df94fe9b8905f558d7a20ebea3ba7b1f0059af55c12ea55e5a609779
CRC32 A0D14394
ssdeep 3:l/6E8t:gH
Yara None matched
VirusTotal Search for analysis
Name f8098a6290118f29_settings.bin
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bin
Size 40.0B
Processes 2236 (microsoftze.exe)
Type data
MD5 4e5e92e2369688041cc82ef9650eded2
SHA1 15e44f2f3194ee232b44e9684163b6f66472c862
SHA256 f8098a6290118f2944b9e7c842bd014377d45844379f863b00d54515a8a64b48
CRC32 C6B6460B
ssdeep 3:9bzY6oRDT6P2bfVn1:RzWDT621
Yara None matched
VirusTotal Search for analysis
Name 0bd3aac12623520c_storage.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\storage.dat
Size 319.8KB
Processes 2236 (microsoftze.exe)
Type data
MD5 7e8f4a764b981d5b82d1cc49d341e9c6
SHA1 d9f0685a028fb219e1a6286aefb7d6fcfc778b85
SHA256 0bd3aac12623520c4e2031c8b96b4a154702f36f97f643158e91e987d317b480
CRC32 F31C2239
ssdeep 6144:oX44S90aTiB66x3Pl6nGV4bfD6wXPIZ9iBj0UeprGm2d7Tm:LkjYGsfGUc9iB4UeprKdnm
Yara None matched
VirusTotal Search for analysis
Name ac5961bc2e0d073c_microsoftzf.txt
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\microsoftzf.txt
Size 70.0B
Processes 1948 (microsoftze.exe) 2452 (microsoftzf.exe) 2588 (microsoftzf.exe)
Type ASCII text, with CRLF line terminators
MD5 3f89c50815a69254a14eedf0e6a2236b
SHA1 df4217a984bdda6d6a3a07899d6365063f4de9fc
SHA256 ac5961bc2e0d073cbc0cabd5606e7eb08ad32b5ce01a65719f5ea5ae3ea3bf76
CRC32 2B0A9112
ssdeep 3:FOoNmWxpcL4E2J5I9Y5yXNY5lWdyn:JmQpcLJ23IeT2yn
Yara None matched
VirusTotal Search for analysis
Name 2d0dc6216f613ac7_microsoftzf.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\microsoftzf.exe
Size 76.5KB
Processes 1948 (microsoftze.exe)
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 0e362e7005823d0bec3719b902ed6d62
SHA1 590d860b909804349e0cdc2f1662b37bd62f7463
SHA256 2d0dc6216f613ac7551a7e70a798c22aee8eb9819428b1357e2b8c73bef905ad
CRC32 F321DAF6
ssdeep 768:jlU4+MS3Fu0thSOV4GM0SuHk9Oh/1TRIWUk7NlfaNV9KQLxXXSv:l6o03IGMLuHk+Ck5lfaNP7xSv
Yara
  • Admin_Tool_IN_Zero - Admin Tool Sysinternals
  • PE_Header_Zero - PE File Signature
  • Generic_Malware_Zero - Generic Malware
  • IsPE32 - (no description)
  • Is_DotNET_EXE - (no description)
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
VirusTotal Search for analysis
Name 5347661365e7ad2c_catalog.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\catalog.dat
Size 232.0B
Processes 2236 (microsoftze.exe)
Type data
MD5 32d0aae13696ff7f8af33b2d22451028
SHA1 ef80c4e0db2ae8ef288027c9d3518e6950b583a4
SHA256 5347661365e7ad2c1acc27ab0d150ffa097d9246bb3626fca06989e976e8dd29
CRC32 36FCB1A3
ssdeep 6:X4LDAnybgCFcpJSQwP4d7ZrqJgTFwoaw+9XU4:X4LEnybgCFCtvd7ZrCgpwoaw+Z9
Yara None matched
VirusTotal Search for analysis