popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name d78bc23b0ca3eddf_task.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size 57.0B
Processes 2768 (RegSvcs.exe)
Type ASCII text, with no line terminators
MD5 d685103573539b7e9fdbf5f1d7dd96ce
SHA1 4b2fe6b5c0b37954b314fcaee1f12237a9b02d07
SHA256 d78bc23b0ca3eddf52d56ab85cdc30a71b3756569cb32aa2f6c28dbc23c76e8e
CRC32 B30A2583
ssdeep 3:oMty8WbSX/MNn:oMLWus
Yara None matched
VirusTotal Search for analysis
Name c51e12d18cc66442_tmp7DB6.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp7DB6.tmp
Size 1.3KB
Processes 2768 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 40b11ef601fb28f9b2e69d36857bf2ec
SHA1 b6454020ad2ceed193f4792b77001d0bd741b370
SHA256 c51e12d18cc664425f6711d8ae2507068884c7057092cfa11884100e1e9d49e1
CRC32 3D2F2EDC
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0mn4xtn:cbk4oL600QydbQxIYODOLedq3Z4j
Yara None matched
VirusTotal Search for analysis
Name 043b6ec54651c475_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2576 (powershell.exe)
Type data
MD5 a0fc8d4a2cf5a30130abeb6712fc7885
SHA1 b403b5b84863e5a3177175138c83ffb567b40e79
SHA256 043b6ec54651c475994d2865254b1b30862a2f3bd32593661c043fd2f48f9c7e
CRC32 449D5C65
ssdeep 96:ktuC+GCPDXBqvsqvJCwo5tuC+GCPDXBqvsEHyqvJCwor07HwxWlUVul:ktvXo5tvbHnorvxo
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name bb9181b3935b8681_tmp7EE0.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp7EE0.tmp
Size 1.3KB
Processes 2768 (RegSvcs.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 be81f72fa4dbc827132836ee2af92c96
SHA1 fe5ded04ab4932dea6cf414e9e4428f43da70d03
SHA256 bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f
CRC32 7AA438E3
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j
Yara None matched
VirusTotal Search for analysis
Name d64f7e540e4f864b_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 2768 (RegSvcs.exe)
Type data
MD5 c01624ba1bd092cc56d702b5bf972549
SHA1 9dd19352648e8c294b9e0be759600ac6132db7e9
SHA256 d64f7e540e4f864b28bad8027e5dc3aa6af0a870fb5265f4692137645350c1db
CRC32 61BA1A4F
ssdeep 3:qN/U:qtU
Yara None matched
VirusTotal Search for analysis
Name 02700fdca7aabbcf_tmp7A2C.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp7A2C.tmp
Size 1.5KB
Processes 2136 (CONTRACT_INVOICE20220117.pdf.exe)
Type XML 1.0 document, ASCII text
MD5 ac4324afb010e9466ac2ac44cc6f0f0a
SHA1 1b108285761d1016373ac71ca9983da9768487d0
SHA256 02700fdca7aabbcf780780948cab0f9b1eb45de4dd171c3b5905b6776b0c60ae
CRC32 460BFA6F
ssdeep 24:2di4+S2qhH/1ny1mEUnrKMhEMOFGpwOzNgU3ODOiIQRvh7hwrgXuNtIaxvn:cgefAYrFdOFzOzN33ODOiDdKrsuTIuv
Yara None matched
VirusTotal Search for analysis