popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name bfbb639b1fb747b0_add.jpeg
Submit file
Filepath C:\Users\test22\AppData\Roaming\Forligsmandens\Genlsende\Tilvejebringelserne\Skinkers\Unnutritious\add.jpeg
Size 1.3KB
Processes 2552 (HBZ.exe)
Type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 40x42, frames 3
MD5 017f36f4fbc613d41266413f264cc9b8
SHA1 d173bc11e69b61bc18bfb7baa95d7ba396993305
SHA256 bfbb639b1fb747b05e175ba544319c69c59ce31b38637f20837403909ea1223b
CRC32 CCBFB7D9
ssdeep 24:qhpK1Go0XxDuLHeOWXG4OZ7DAJuLHenX3uhqtZhgmP0vD9B+Iu0xAOQl3OuzyU6e:VuERAYhI16hBOtOuzyU6gjsu
Yara
  • JPEG_Format_Zero - JPEG Format
VirusTotal Search for analysis
Name 3291e29ef7633896_abbacy.tav
Submit file
Filepath C:\Users\test22\AppData\Roaming\Forligsmandens\Genlsende\Tilvejebringelserne\Abbacy.Tav
Size 22.4KB
Processes 2552 (HBZ.exe)
Type ASCII text, with very long lines, with no line terminators
MD5 09b8c45918d1564c84cab09c117948d8
SHA1 e34abe5818cdadb0603d75542b019cda23193c25
SHA256 3291e29ef7633896c9a4fbdd44b57f59e8016b5d0065c9abca12b2d6daace573
CRC32 93F7344A
ssdeep 384:LCkFHydj/RRPEMAY7wfhAVlLDqKYh1z9+jjafzWnULQz:LCvZF4AlLiBUjqaULQz
Yara None matched
VirusTotal Search for analysis
Name 9028ab635706a2e4_ymtedes.sot
Submit file
Filepath C:\Users\test22\AppData\Roaming\Forligsmandens\Genlsende\Tilvejebringelserne\ymtedes.Sot
Size 272.2KB
Processes 2552 (HBZ.exe)
Type data
MD5 884affbc9263c7e7ccf8138100ea8933
SHA1 947a0fbfb45f0d9a79f668073baf5ec22ecb4a4e
SHA256 9028ab635706a2e482fa55f746a53048b0bb3f7ac41f00f3f46b6ea85a019a0c
CRC32 79096DCA
ssdeep 3072:Touzox4J0q1ddjBcoh4DaI8warpyjOdK6ahoyr35W2/AKzlkF3dCKBh5rmocJgAR:To4oT0djJlPtozfplktdnh5r6uAcdi+Y
Yara None matched
VirusTotal Search for analysis
Name b7c225ef3cc3e875_d93f411851d7c929.customDestinations-ms~RFef0804.TMP
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RFef0804.TMP
Size 7.8KB
Processes 2668 (powershell.exe) 2768 (powershell.exe)
Type data
MD5 81ca4510272caf505e8091e9a28cb716
SHA1 71414aeec9f1e4a6f5a461b01700cc9cc992cd9e
SHA256 b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf
CRC32 FC31E90F
ssdeep 96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name e3b0c44298fc1c14_nszEF61.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\nszEF61.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis