popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name e6d66d2705d68f2d_marinaras.txt
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\abcens\marinaras.txt
Size 15.6KB
Processes 2552 (loki.exe)
Type data
MD5 8e202c9c2cd8980d97bc8bf8f4e18429
SHA1 3e4b8132a66c65a769d6648d3d15f99aab918279
SHA256 e6d66d2705d68f2dba62a2ed425e9f7ff0aee0d1dfdd18b321279ec0e753c80a
CRC32 AB9D3F15
ssdeep 384:9GFeRFmxvMYA9vz7nU3IYkxsGcFU5jRroe3QjbLORX//6:9GFeq1MYmnMZMwFU/roe3iOxH6
Yara None matched
VirusTotal Search for analysis
Name 2e226715419a5882_system.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nsn684.tmp\System.dll
Size 11.5KB
Processes 2552 (loki.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 a4dd044bcd94e9b3370ccf095b31f896
SHA1 17c78201323ab2095bc53184aa8267c9187d5173
SHA256 2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc
CRC32 EC59B7B0
ssdeep 192:em24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlESl:m8QIl975eXqlWBrz7YLOlE
Yara
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 3b1b7fd13a5aa5c9_tristich.lnk
Submit file
Filepath C:\Users\test22\AppData\Local\Tristich.lnk
Size 1002.0B
Processes 2552 (loki.exe)
Type MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 15:32:08 1600, mtime=Sun Dec 31 15:32:08 1600, atime=Sun Dec 31 15:32:08 1600, length=0, window=hide
MD5 3aebf92c6b4d7896fb124a6bfa78d733
SHA1 5e9820106d7727795a2d70e575499915a8c01b47
SHA256 3b1b7fd13a5aa5c91bf20c0264c85d80d2ac2ccf0fa96f245b0a2c8f9580c8d2
CRC32 32F7FC4F
ssdeep 12:8wl0KY3HV7GyuR+/fG9raGalG98m/MJsW+jC4Ge/omNJkKA54t2YLEPKzlX8:8NZqRQFblpvyjC4ZoCHADPy
Yara
  • Lnk_Format_Zero - LNK Format
VirusTotal Search for analysis
Name 85774a8283674936_jasperite.txt
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\abcens\jasperite.txt
Size 53.9KB
Processes 2552 (loki.exe)
Type data
MD5 3eb6f7b8291e89fc600baceeb5c5dd78
SHA1 bf381991b53a4594b0b2d137086021e26ec03a1b
SHA256 85774a82836749364fba61d7140370384d05a3eff9f1c4b9cfcaf33bd42b75b2
CRC32 FD8D6CB3
ssdeep 1536:CjqK0LYh08TJXFilgsmuB9xaADxkGe1qhbDH2MtYApXIoy3Ua:XLE0+JXqgstrxaADCT1qhbyMtx439
Yara None matched
VirusTotal Search for analysis
Name 637ef50d7fca6de5_aruac230.udt247
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\abcens\Aruac230.Udt247
Size 119.5KB
Processes 2552 (loki.exe)
Type data
MD5 a22102b5e43621ad998033a93030a688
SHA1 99694700a1903b1881d573d26a9e932403137ab3
SHA256 637ef50d7fca6de54bd3df0058084f0f81a26ae91424da2f2c35525287decf6f
CRC32 29BF9CF1
ssdeep 3072:em9tFxwUFOf7SbIBkf/oRmERRSD1uiLpR/kI:em9fHoRBRsD1dmI
Yara None matched
VirusTotal Search for analysis
Name e3b0c44298fc1c14_nsoEF90.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\nsoEF90.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis