popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name dd6599f4cac1d8ae_face-monkey.png
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\Antiapostle108\triptanes\Urnism\Kordnings\face-monkey.png
Size 790.0B
Processes 184 (hkcmd.exe)
Type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
MD5 322931fde6510a51866e87a72bb8897c
SHA1 d9274e3b905f8f14fbd6fcde47a5eb369fded846
SHA256 dd6599f4cac1d8ae35e9137bdc732539cde8c36df754496c25630473aa9afca7
CRC32 4425E924
ssdeep 12:6v/7eMvIyMk7D5/SNep0F9apst2D6M6PABEAiA2XcVOrk/z/xlWDy4Dw3c:uIyLwsg2WoBElHctQDSc
Yara
  • PNG_Format_Zero - PNG Format
VirusTotal Search for analysis
Name e3b0c44298fc1c14_nsmC02E.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\nsmC02E.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis
Name 708e4065322dfd39_totype.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\Antiapostle108\triptanes\Hypsodonty\totype.dll
Size 102.4KB
Processes 184 (hkcmd.exe)
Type PE32+ executable (DLL) (console) x86-64, for MS Windows
MD5 f02d37a2409e3e71cdbd6e73b082a014
SHA1 1621b45a5cd80bcaee4ef08bf04f02c773e9f1de
SHA256 708e4065322dfd39bf606573560c6013fefc6bcad799413f36083848627f22c9
CRC32 56A9700D
ssdeep 768:b9FXiKr9xbvjJPJCZHxSoEkgkrJhcn/LP6fVnw6ChNZ5uPK+07BaDTgp37CtQuH1:bHz7FJCZRSQg6JhAT69n3oNbAMuV
Yara
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
VirusTotal Search for analysis
Name 384f44d29d4f682c_zoom-original.png
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\Antiapostle108\triptanes\Hypsodonty\zoom-original.png
Size 507.0B
Processes 184 (hkcmd.exe)
Type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
MD5 1f55cff7dcfbcfb2af23593f90a2b328
SHA1 048d3b3760c31060215001f4156c2fda36986a85
SHA256 384f44d29d4f682c8524fce18937e68f51fc2510cb632f8dc7222e27b5ada342
CRC32 4B2097CB
ssdeep 12:6v/7Tjht932bg/NJD+8MPKD+4guaRqDct06r/6N:g79qg/Nx+8MmaYDct06L8
Yara
  • PNG_Format_Zero - PNG Format
VirusTotal Search for analysis
Name cdac12a28d1c71d7_sikkerhedssystem188.def244
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\Antiapostle108\triptanes\Urnism\Kordnings\Sikkerhedssystem188.Def244
Size 242.4KB
Processes 184 (hkcmd.exe)
Type data
MD5 69e019c30f475733dfbf512d39941494
SHA1 c77ee84a34dd247fd142338d29998a940e05eba8
SHA256 cdac12a28d1c71d79b723358467eab985af4d1180138c4405b3e524824a1aaa5
CRC32 4C8BDFED
ssdeep 3072:Z7fAf5QV69iDhpsFnIhgtSjjHrc/X5YcocNjr0Y0sFW9AWPVTT8we5tlpt+MJ4M3:tGQsiDs+JjjHrc/pecNb/tLt+C4/s1P
Yara None matched
VirusTotal Search for analysis
Name fa4ab1d6f79fd677_system.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nshC0AC.tmp\System.dll
Size 11.0KB
Processes 184 (hkcmd.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 3f176d1ee13b0d7d6bd92e1c7a0b9bae
SHA1 fe582246792774c2c9dd15639ffa0aca90d6fd0b
SHA256 fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e
CRC32 2DB384E1
ssdeep 192:OPtkumJX7zB22kGwfy0mtVgkCPOsX1un:/702k5qpdsXQn
Yara
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis