popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 3daf147308a4dc09_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 2520 (RegSvcs.exe)
Type Non-ISO extended-ASCII text, with no line terminators
MD5 0021a070d63e882c7c8995809019d8ed
SHA1 88ffaf7089157a95bff0d91ff3978a1245d6f520
SHA256 3daf147308a4dc09bded0e98b16ff82ef11132819b0d198a45a0600d98bb9f7d
CRC32 42EBBD68
ssdeep 3:CM8t:CM8t
Yara None matched
VirusTotal Search for analysis
Name 043b6ec54651c475_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 1632 (powershell.exe)
Type data
MD5 a0fc8d4a2cf5a30130abeb6712fc7885
SHA1 b403b5b84863e5a3177175138c83ffb567b40e79
SHA256 043b6ec54651c475994d2865254b1b30862a2f3bd32593661c043fd2f48f9c7e
CRC32 449D5C65
ssdeep 96:ktuC+GCPDXBqvsqvJCwo5tuC+GCPDXBqvsEHyqvJCwor07HwxWlUVul:ktvXo5tvbHnorvxo
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name be6305580c18da5a_tmp90D1.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp90D1.tmp
Size 1.6KB
Processes 1972 (~PY56789845678-87655678.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 d84a4aa958aee68d865715cbfe5ad253
SHA1 ba781040c0a44d9a06c2c4e712efbb7a79091e1a
SHA256 be6305580c18da5a0e10a8429b15460673d8b7f78d2f7cf53e8ff0cc228acbcf
CRC32 15BC0CCA
ssdeep 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKB9tn:cbhf7IlNQQ/rydbz9I3YODOLNdq3Z
Yara None matched
VirusTotal Search for analysis
Name d46e34924067eb07_task.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size 57.0B
Processes 2520 (RegSvcs.exe)
Type ASCII text, with no line terminators
MD5 08e799e8e9b4fda648f2500a40a11933
SHA1 ac76b5e20ded247803448a2f586731ed7d84b9f3
SHA256 d46e34924067eb071d1f031c0bc015f4b711edce64d8ae00f24f29e73ecb71db
CRC32 EEF8DB45
ssdeep 3:oMty8WddSWA1KMNn:oMLW6WA1j
Yara None matched
VirusTotal Search for analysis
Name bb9181b3935b8681_tmp95B4.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp95B4.tmp
Size 1.3KB
Processes 2520 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 be81f72fa4dbc827132836ee2af92c96
SHA1 fe5ded04ab4932dea6cf414e9e4428f43da70d03
SHA256 bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f
CRC32 7AA438E3
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j
Yara None matched
VirusTotal Search for analysis
Name 3086d914f6b23268_tmp94D8.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp94D8.tmp
Size 1.3KB
Processes 2520 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 8cad1b41587ced0f1e74396794f31d58
SHA1 11054bf74fcf5e8e412768035e4dae43aa7b710f
SHA256 3086d914f6b23268f8a12cb1a05516cd5465c2577e1d1e449f1b45c8e5e8f83c
CRC32 49853FE8
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0mXxtn:cbk4oL600QydbQxIYODOLedq3ZXj
Yara None matched
VirusTotal Search for analysis