Dropped Files | ZeroBOX

Name	92bbaf30871bd32d_gpt.ini Submit file
Filepath	C:\Windows\System32\GroupPolicy\gpt.ini
Size	272.0B
Processes	1676 (gate_011.exe)
Type	ASCII text, with CRLF line terminators
MD5	`7d7b2946708e5254b8996d3ae964e0a7`
SHA1	`01e350de5cf78dd1ba5e8686fee884ff0f240e95`
SHA256	`92bbaf30871bd32d6fe34a6df757ad8acd375552918a80c45c935091c9df729e`
CRC32	`71B0380C`
ssdeep	`6:1WsMzYHxbnvEcvg+5Rnn3jGoanMzYHxbnPonn3k:1q0Hxbnt4UaM0HxbnX`
Yara	None matched
VirusTotal	Search for analysis

Name	826172f90aa17ba8_registry.pol Submit file
Filepath	C:\Windows\System32\GroupPolicy\Machine\Registry.pol
Size	6.2KB
Processes	1676 (gate_011.exe)
Type	data
MD5	`05c4079110b8f65ec083182e2d870e04`
SHA1	`0b2d16dd8575c6f87c6bd66267cdf8eaba363a11`
SHA256	`826172f90aa17ba887682da7277b444c06513177653d727acbb146a2308af3a7`
CRC32	`8B58FA6A`
ssdeep	`192:FlRRCDN74hvoD5KL0+fLfYT7CcAzXEP0IhYY4WwDiZ:nRRCDN74hvoDEL0+fLf27CcAzXEP02Y0`
Yara	Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	4eeab7820ae09e61_njnlnuubh5tdn5mprfmou2ak.exe Submit file
Filepath	C:\Users\test22\Pictures\Minor Policy\NJnlNuuBh5TdN5MPRfMOU2Ak.exe
Size	219.3KB
Processes	1676 (gate_011.exe)
Type	HTML document, Non-ISO extended-ASCII text, with very long lines, with LF, NEL line terminators
MD5	`aeeee6de4ae0d82b621fa188b1fc71f1`
SHA1	`92953508dbdafc1a296fd66e1bbe5ee23016d562`
SHA256	`4eeab7820ae09e61c6a2c29b8d386b176563a4e92ce6e042829bc2839bb14f9f`
CRC32	`A0CC06E7`
ssdeep	`1536:QZP1o4PNxG8+3MGeCS28vozuvJ8tvy2RM/HC8HqUh60yFtV8xzozTRTsmkz3Fywy:QLN4IFyw6dTS1pr7BjKw94HP`
Yara	None matched
VirusTotal	Search for analysis