popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 38c389720b75365f_47GLNO8G
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\47GLNO8G
Size 72.0KB
Type SQLite 3.x database, last written using SQLite version 3021000
MD5 c480140ee3c5758b968b69749145128d
SHA1 035a0656bc0d1d376dfc92f75fa664bdf71b3e4d
SHA256 38c389720b75365fcb080b40f7fdc5dc4587f4c264ec4e12a22030d15709e4a9
CRC32 954A724F
ssdeep 96:f0CWo3dOEctAYyY9MsH738Hsa/NTIdE8uKIaPdUDFBlrrVY/qBOnx4yWTJereWbY:fXtd69TYndTJMb3j0
Yara None matched
VirusTotal Search for analysis
Name 3b046d30dc2e6021_BAI5X4O8
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\BAI5X4O8
Size 36.0KB
Type SQLite 3.x database, last written using SQLite version 3021000
MD5 e185515780e9dcb21c3262899c206308
SHA1 230714474693919d93949ab5a291f7ec02fd286f
SHA256 3b046d30dc2e6021be55d1bd47c2a92970856526c021df5de6e4ea3c4144659b
CRC32 25EF2A64
ssdeep 24:TLNg/5UcJOyTGVZTPaFpEvg3obNmCFk6Uwcc85fBvlllYu:TC/ecVTgPOpEveoJZFrU1cQBvlllY
Yara None matched
VirusTotal Search for analysis
Name 12c9f4a61ab5f0c2_AppLaunch.exe
Submit file
Filepath C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Size 99.9KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 4112a8310969e45aa7ee671cce300918
SHA1 d0aa2ea9a19648a5d807322d8cc94918e9a4a937
SHA256 12c9f4a61ab5f0c234c4bd55947becaa6326cf2c779811b22222e049468c0012
CRC32 8E618CD0
ssdeep 1536:eD+wLlCetwIDa60w7zJMF2y+o4N++ZEwzCC0idYvDJZ:eDjlCe7DLSF2y+ZNHEwzv0JdZ
Yara
  • PE_Header_Zero - PE File Signature
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 16574f51785b0e2f_sqlite3.dll
Submit file
Filepath C:\ProgramData\sqlite3.dll
Size 630.5KB
Processes 2900 (AppLaunch.exe)
Type PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5 e477a96c8f2b18d6b5c27bde49c990bf
SHA1 e980c9bf41330d1e5bd04556db4646a0210f7409
SHA256 16574f51785b0e2fc29c2c61477eb47bb39f714829999511dc8952b43ab17660
CRC32 9F30A75E
ssdeep 12288:i0zrcH2F3OfwjtWvuFEmhx0Cj37670jwX+E7tFKm0qTYh:iJUOfwh8u9hx0D70NE7tFTYh
Yara
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • IsDLL - (no description)
VirusTotal Search for analysis
Name 6ec867dc1caa77ec_79H47YUK
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\79H47YUK
Size 18.0KB
Type SQLite 3.x database, last written using SQLite version 3021000
MD5 f3a100cba30b2a07a7af8886e439024e
SHA1 a454cca0db028b4d0fb29fa932c9056519efe2cf
SHA256 6ec867dc1caa77ecfd8e457d464b6bebc3be8694b4c88734fa83d197c0b214cc
CRC32 72CF6AF8
ssdeep 24:LLI10KL7G0TMJHUyyJtmCm0XKY6lOKQAE9V8MffD4fOzeCmly6Uwc6KaW:oz+JH3yJUheCVE9V8MX0PFlNU1faW
Yara None matched
VirusTotal Search for analysis
Name 6f878c485ee7d776_3O8Y5XLF
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\3O8Y5XLF
Size 120.0KB
Type SQLite 3.x database, last written using SQLite version 3021000
MD5 7cd1f915719aa3f01dcb5d1d04018ba0
SHA1 6e50a73815aae25bd6295d7240d517f0758b94be
SHA256 6f878c485ee7d776face2b6f0f72d6b2b383041ce5abd23ee5948d987afa9c64
CRC32 AA763EF2
ssdeep 48:T1HW6tdfxNPp+suktLReRK+NaUvdWSZ00LTL0drQHHp7C5fVcS2+VANUXq6uw5Nb:DJQpWSZ00LTL0QCbc0VANPjwQU+
Yara None matched
VirusTotal Search for analysis