popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 9bd765cdd4c71309_a-lmrnrp.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\a-lmrnrp.dll
Size 3.5KB
Processes 2704 (csc.exe) 2576 (powershell.exe)
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 b9a0d96f9ff58f51d53387be146360aa
SHA1 3c487dac1db80546a3c624904d16103ce01323af
SHA256 9bd765cdd4c71309a8d740117beea38e3208f246973cdf12eb3d2e96f3def850
CRC32 A99FF4DC
ssdeep 24:etGSFmc+8De6A5M7qo8/qd3BQALmbdbdPtkZf2QVzzyw2BmdGaYsmI+ycuZhNRa/:6FLKsc/CqAiuJ16Bmdmf1ulRa3Nqa
Yara
  • Is_DotNET_DLL - (no description)
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name e3b0c44298fc1c14_a-lmrnrp.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\a-lmrnrp.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis
Name 3bd11e3be80a7200_a-lmrnrp.out
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\a-lmrnrp.out
Size 607.0B
Processes 2576 (powershell.exe)
Type UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
MD5 fe00d1a62eeae2cb3cdbc9a005331cae
SHA1 c1ed6ad01927a992fac85d4cf6415caecb80e3fe
SHA256 3bd11e3be80a7200d025ea2f14590c06b74cf7c0d0d6437f5aae3da4d51f18ff
CRC32 E2F3FB36
ssdeep 12:K4OLM9nzR37LvXOLMdGmnPAE2xOLMdGaKai31bIKIMBj6I5BFR5y:K+9nzd3BdGmnIE2ndGaKai31bIKIMl6v
Yara None matched
VirusTotal Search for analysis
Name 54dc97b3a24a8137_a-lmrnrp.0.cs
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\a-lmrnrp.0.cs
Size 449.0B
Processes 2576 (powershell.exe)
Type UTF-8 Unicode (with BOM) text, with CRLF, LF line terminators
MD5 e8c41bf3708cc4bd505851f38966151a
SHA1 ab943b19fb2e837904c97a3c52309c1f2c20dc9c
SHA256 54dc97b3a24a8137d2b4dcb052b104ffde93bd4a89297ee2fb522fa346bb01e9
CRC32 03FE77EB
ssdeep 12:V/DTLDfuBphILmnE+mMlFLeyjOwIEiPMWlFTYy:JjmBALmnE+mMfLXAE+plFTYy
Yara None matched
VirusTotal Search for analysis
Name 0447c2972ed2d7f8_a-lmrnrp.cmdline
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\a-lmrnrp.cmdline
Size 311.0B
Processes 2576 (powershell.exe)
Type UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators
MD5 916f7937072b1e1df2637064972dcc7d
SHA1 5436b1d66ebb5136ebf101ab3ce3844686b3e2c2
SHA256 0447c2972ed2d7f89ccc1ae728d256c298b05d2216b5d6250cd282ba1c9c050e
CRC32 90D28F16
ssdeep 6:pAu+H2LvFJDdq++bDdqBnmQpcLJ23f1GmmGsSAE2NmQpcLJ23f1Gbn:p37LvXOLMdGmnPAE2xOLMdGb
Yara None matched
VirusTotal Search for analysis
Name 3d654a7abbb8732c_RESF5EA.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\RESF5EA.tmp
Size 1.2KB
Processes 2772 (cvtres.exe) 2704 (csc.exe)
Type Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x406, 9 symbols
MD5 fd2dcd46fa22480a0aea4471f5e34b39
SHA1 2af20b59448e92adcbff1edde83da746cc3d0197
SHA256 3d654a7abbb8732c1490011b3820dd50c9c5b4fa6e21cee0cc04b8ed0f95c8f3
CRC32 FA157DB7
ssdeep 24:HuJ9YernbqmH+UnhKLI+ycuZhNRakSPPNnqjtd:Dernmm5nhKL1ulRa3NqjH
Yara None matched
VirusTotal Search for analysis
Name b7c225ef3cc3e875_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2576 (powershell.exe)
Type data
MD5 81ca4510272caf505e8091e9a28cb716
SHA1 71414aeec9f1e4a6f5a461b01700cc9cc992cd9e
SHA256 b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf
CRC32 FC31E90F
ssdeep 96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 34c6b1157a7f08fa_CSCF5D9.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\CSCF5D9.tmp
Size 652.0B
Processes 2704 (csc.exe)
Type MSVC .res
MD5 b870da23bbaa8d6480ae473b52d34bb8
SHA1 3e1f9c9bf5290d9dd8e406bbd9308cd106df5773
SHA256 34c6b1157a7f08fae1f17637ff0f2240d36a9fdeb5132393d293ca53184f25ae
CRC32 1057A232
ssdeep 12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gryS+ak7Ynqq3fPN5Dlq5J:+RI+ycuZhNRakSPPNnqX
Yara None matched
VirusTotal Search for analysis
Name b69b6f867891c8d0_a-lmrnrp.pdb
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\a-lmrnrp.pdb
Size 7.5KB
Processes 2704 (csc.exe) 2576 (powershell.exe)
Type MSVC program database ver 7.00, 512*15 bytes
MD5 eac540bd7fe8d8630a1c38014d4e8666
SHA1 e1aa20a02e06d471af4d825d19aba107a539bc6b
SHA256 b69b6f867891c8d072559c3d623f78fc0e0665ad9ef404608865263916b8a664
CRC32 69EF3D2B
ssdeep 6:zz/BamfXllNS/1iF1mllxrS/77715KZYXxGQu+e0KpYXEiloGggksl/cEDf:zz/H1W/1iSXS/pw2qFORD
Yara None matched
VirusTotal Search for analysis