Dropped Files | ZeroBOX
Name 3fb4db21a2552e90_mgrjgq.y
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\mgrjgq.y
Size 263.6KB
Processes 2408 (maps.exe)
Type data
MD5 b4734b4a916dbb5ee9ea365979e60bb1
SHA1 6acedcb1b07f5b5b0e3937397a7b20b3879bb66d
SHA256 3fb4db21a2552e901db63df79602c5618a1b1162911953342b0feefa3ed3e2cb
CRC32 CA3095A1
ssdeep 6144:ihyUY13awJ7QfASoHShzpf4ciJDWeqfRhiFEO1sDAmT:ihU3qASoHSD47pqf6gPT
Yara None matched
VirusTotal Search for analysis
Name e3b0c44298fc1c14_nsyFE02.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\nsyFE02.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis
Name 8d42068df5c959e7_hjesprqai.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nsoFE14.tmp\hjesprqai.dll
Size 41.0KB
Processes 2408 (maps.exe)
Type PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5 d66c6bd5f09b733a71277ab0836c887b
SHA1 eea61117bc1e2c7e1bf899cf87d8076d1ce3ebec
SHA256 8d42068df5c959e7ff7f25f3b9619c5c5bfb4c90de4a522eb32282db89481f32
CRC32 E1AB831F
ssdeep 768:zn09JsJNJ4PwonAUSFoxObYkjExbhNKoWRm2Ua6Wme:gJMNEwonlSQlWmkNme
Yara
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check
  • Malicious_Library_Zero - Malicious_Library
  • IsDLL - (no description)
  • IsPE32 - (no description)
  • PE_Header_Zero - PE File Signature
VirusTotal Search for analysis
Name 086e1886d668b53f_nqpuuyxrsj.s
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nqpuuyxrsj.s
Size 6.0KB
Processes 2408 (maps.exe)
Type data
MD5 497a0994f91bbdd3aebf9c9fd66b1029
SHA1 832106e0e5a8dc6e06cab7cb51db195356d13e51
SHA256 086e1886d668b53f72d12cede11e64a31ddfebf38c1d7ab13c2887f62b97980f
CRC32 5DC679A8
ssdeep 96:8UfTtXiAlVO0aMqiL+DfRos7WbAoPCHRRy2+MpX2sUaBaqfxZBB7Akv72HMESp4:tTtXiA3hKfai8PevzlTBaqfxeHMjp4
Yara None matched
VirusTotal Search for analysis