Dropped Files | ZeroBOX

Name	360afe92beb8fcf8_iconcache.dat Submit file
Filepath	C:\ProgramData\Iconcache.dat
Size	382.0B
Processes	1324 (cmd.exe)
Type	ASCII text, with very long lines, with CRLF line terminators
MD5	`61a881e40ef45e8be6b5df6a1211bfd9`
SHA1	`0b40159b0956b7dc47139795f461508a4549eb29`
SHA256	`360afe92beb8fcf801dd6a34915a869e12b23525905b6895179b62977c075a1e`
CRC32	`80ED8E10`
ssdeep	`6:y9xs6lyqfKucr0kUX3lEugf+t/HUIE4CxdF/LHKYyQ4GgwtVWmkBM3Irm+Kvn:y9q6wqfklqVkfSHi48XLHtD4GgcTIM3X`
Yara	Suspicious_Obfuscation_Script_2 - Suspicious obfuscation script (e.g. executable files)
VirusTotal	Search for analysis

Name	aad2e36e84948ab6_iconcache.vbs Submit file
Filepath	C:\ProgramData\Iconcache.vbs
Size	283.0B
Processes	1220 (certutil.exe)
Type	ASCII text, with no line terminators
MD5	`6f2439778522236a419c6e420ed3d09c`
SHA1	`8438773009f539d86d475b90a94a865d5a671bf5`
SHA256	`aad2e36e84948ab6f0d6603c12ae8f45bf40fd7fb22c1841dc40ce929e71712e`
CRC32	`1AA4E06B`
ssdeep	`6:9cNAWdgUaQ9K1tF+HjHZ2BB+2TAUFJFEP1y/6ATRwTzn:9vWdHK1HqjHZ2B82LJF+ITTRwTzn`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_cer771F.tmp Empty file or file not found
Filepath	C:\Windows\cer771F.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis