popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 53964e756d7d84db_docs.jse
Submit file
Filepath C:\Users\Public\Libraries\Docs.jse
Size 1.2KB
Processes 2988 (hh.exe)
Type data
MD5 e341b10bfd663d2d380d1c136c7ffee9
SHA1 1f4723a967ec70dfecd780ac73c31e94675567f0
SHA256 53964e756d7d84dbfdbf53b16beba02ef87035bf68e562afd63231dffd339f54
CRC32 4714E703
ssdeep 24:GjGrmALCmN1Xmo0CD6sY75KTq/1vEL011wyZHVi+DWFT:GjWmAHXgKlY7EL0oy3tCJ
Yara None matched
VirusTotal Search for analysis
Name 5f1c40a287da194d_blt_listn[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BYECVYBT\blt_listn[1].gif
Size 1.1KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 3 x 5
MD5 f4f827661cf749717e2f477110c91807
SHA1 89c84bb08c4dc429be6bc10754e35a35d6dba171
SHA256 5f1c40a287da194d3875216b4bb7ceae6527f53e0b13417162c0f67910c6bd0b
CRC32 E2FA22F7
ssdeep 24:AOal1he91Wwh82lYSKwcEo7S+jVa+4T3ouyJ3VTTacgGY8A:AfqQvnLJNUIJ31ToL8A
Yara None matched
VirusTotal Search for analysis
Name 124c93a1de0adf48_btn_provicy[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZTDTA402\btn_provicy[1].gif
Size 269.0B
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 89 x 16
MD5 07c6c99d1b12f05bb058c2dad952871f
SHA1 af4f0d68d64cc659ff172f02e91d3eafbf60c041
SHA256 124c93a1de0adf48becc18661a9d4b007b8ae44046cc8aa75a61667b4f4efc81
CRC32 27D7BF16
ssdeep 6:6rrDCj1Rlo7f1+N8RbKK6s4pBUa8g6pxFwOLfr8vKPn:6viXif1urPpBUa96pxFXfbn
Yara None matched
VirusTotal Search for analysis
Name 87ffd163a263e6a4_promytxt[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VKMIWH9C\promyTxt[1].gif
Size 4.5KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 750 x 30
MD5 92fde6fc971554ab3fe1ed4bd2609182
SHA1 0c4f635f61b47ed6206c5e52058863bbd1d32b5f
SHA256 87ffd163a263e6a40a9640f299f6ba5377a9c24a9ff39c6b63f6511deb55881c
CRC32 1703515B
ssdeep 96:cvhkgY2qxf33Pf3ZfszoN6qH0BjtHG/AtK7MfHnfhpRDdN+em39L:GDSnhfszXIEHfhpRDq39L
Yara None matched
VirusTotal Search for analysis
Name b27197e0393d9ea1_dowjones2[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VKMIWH9C\dowJones2[1].gif
Size 68.8KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 750 x 303
MD5 b695dbf958d0d5567584b1c858a79b87
SHA1 76900aee5f823b199ac857c2be6d5d8145179164
SHA256 b27197e0393d9ea1180403255e56df4bfdfc1cb0c246ad7f64e36a41b768afb3
CRC32 2C266634
ssdeep 1536:JnRkkUM/yWoTAZw1UCO4gYRkP3MyhKb/Mwds5QzfOHC2JhO:x/yrf1UF4gYRW3Hh/OswfOiwhO
Yara None matched
VirusTotal Search for analysis
Name 6183d19a31f1bdc7_localmenu2[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VKMIWH9C\localMenu2[1].gif
Size 2.7KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 106 x 40
MD5 426bbf21454d355b6d8b1241085c2349
SHA1 da1682b5a087cb50466046eb56ad017fb47844df
SHA256 6183d19a31f1bdc755d80aaa9b7bf3baafb06f717f2ed73eed9bb5f7039a0933
CRC32 24EFC245
ssdeep 48:csFVczVhvRh5r0hLKJl5x84f+nWk7GPQX7GbvE0oRIF36m1Lhz:cUgt+nWkaPQX6bMjuFhz
Yara None matched
VirusTotal Search for analysis
Name d049d7763e047587_qrcode[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZTDTA402\qrcode[1].gif
Size 5.2KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 68 x 68
MD5 5766776377193237922b972796e89057
SHA1 da6fadc99c5d7a41edf378c3998ac5e3cdba6187
SHA256 d049d7763e04758727829853399269abb6c437fce6471815c2aab97ed7a8180b
CRC32 FF823F63
ssdeep 96:U/I2fuZRY2eLCef3yI5taYCkr6uVWS97NlttfwWSBqOHsIx6Mke:Eq9atalS6u397NlrIWeNnx6MX
Yara None matched
VirusTotal Search for analysis
Name dd22a330e4a73987_localmenu1[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BYECVYBT\localMenu1[1].gif
Size 5.1KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 172 x 40
MD5 98d9906649c19decb8d1b43c16a7bf15
SHA1 89b52a6ea80351e453e7f0837efb4e41333b8ded
SHA256 dd22a330e4a73987aebae0b37d691ae00ccbf3d7c98347f5f36ca83549903430
CRC32 25E9A9B2
ssdeep 96:1CuwY2jj5rjA1NAeT+dun4wCyG6/RwbMmgNBOs4xSm4Fy4gY0QFO1yiBqC+:mf5wXff4wLebQ3OsG0FyBJQO1h8
Yara None matched
VirusTotal Search for analysis
Name ea124c60d5c4fbfd_blt_h4[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZTY94C7J\blt_h4[1].gif
Size 1.2KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 13 x 13
MD5 b643ed2a848e464d1d4ce9f2c81f2a25
SHA1 d576a877f466410b021d5827d03b5bd79019a69d
SHA256 ea124c60d5c4fbfd0f66f0f9325720ae92457c89d6eaf48110bccc548a1a945b
CRC32 5806795D
ssdeep 24:gWelkal1he91Wwjx82lY2T3ouVFvnK4z3yJ3VkQeKQQGY8nXe:CFqQNn2xrvvziJ3KQoQL8nXe
Yara None matched
VirusTotal Search for analysis
Name cf4e5baadc0e7d04_checkmyinsurance2[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VKMIWH9C\checkMyinsurance2[1].gif
Size 6.2KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 750 x 56
MD5 03c9e8c6d8f39a67133f46cd2f71a202
SHA1 44d93987445edc074bcdcb82d322bddaedb08268
SHA256 cf4e5baadc0e7d041ec69d57866faba933e85ea88fb979096b0597a62ccbed3c
CRC32 2EA297FE
ssdeep 96:bcWkfuyY2TuvJPgS5KkX4pLKw1PwsyIrm8nA9n5Hjd4Y5wcjozG:4Dfuyk8keLbPwor5GjdUcj9
Yara None matched
VirusTotal Search for analysis
Name fa7cd5cb5f4e9305_localmenu3[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BYECVYBT\localMenu3[1].gif
Size 3.8KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 77 x 40
MD5 9228bcf81a544d4b44202e2edd7b5ead
SHA1 b8dd2f00175649c5878c8abdd704cf4f3c22d8d7
SHA256 fa7cd5cb5f4e93052768620250ee311484ad661bb92af79f3912659ecc7777ba
CRC32 F16CAE7C
ssdeep 96:m42wi9VsZalgYjzGq1CWNLeMvPOdwnjyqAxAMebLxt19MKCeWJRol37ci:mZwi9VsZijj3ooWwnjVAxzEFfoot
Yara None matched
VirusTotal Search for analysis
Name 19a379080d71e7fe_emblem[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZTDTA402\emblem[1].gif
Size 3.7KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 129 x 56
MD5 07d426462712b29481a7335c8b8566ad
SHA1 42865774b37cb7bfb5937862f74fe419717e620c
SHA256 19a379080d71e7fe8ee5637dc41f8ff3fda3831dec3df0c0eb87eb04bce2f832
CRC32 BDC00C13
ssdeep 96:AM6eEXEZIQDU28Y2lUpMOf/RCsuPwTbZ5RLwiqKV:ATELDV8NNVYTniizV
Yara None matched
VirusTotal Search for analysis
Name 44e8aa0601fffe82_590aee7bdd69b59b.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms
Size 7.8KB
Processes 2176 (powershell.exe)
Type data
MD5 ee6cfd78f72f03663db2a7df0c696dd7
SHA1 56126e81a5f6577f8e24a890185d0c9eb600fa02
SHA256 44e8aa0601fffe82c494bbc7d7280aa3bc5e90effe2aee2d716d5716e1d6b568
CRC32 F27137C4
ssdeep 96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCworu4tDHXyGlUVul:EtCgXoRtCgbHnorBTyY
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 6375954eff38ea48_localmenu4[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZTDTA402\localMenu4[1].gif
Size 5.7KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 124 x 40
MD5 1ee5c36fc823a673ef58901c3e014dad
SHA1 713f965caa425d9739cdafd41883f4fa571fcde8
SHA256 6375954eff38ea488f3058087d06649458dde7e0be69bfc0554caa2e3c7860c2
CRC32 DB3E0EB7
ssdeep 96:Dp6oftmFb4cBWXdWhovPNr7wXOn70m2K0a2kynfTzCb3bBZqyl0Kowo524gHQs9D:xuBWXdhdrUXGh2DarYfvAkKowucHQso4
Yara None matched
VirusTotal Search for analysis
Name 375c08d9f3bde6fc_localmenu5[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZTY94C7J\localMenu5[1].gif
Size 4.9KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 105 x 40
MD5 bda1ef039da7a5d48bacef06a88071eb
SHA1 bec2ad09ea2dbd9743be3edc8a35a8957273fe22
SHA256 375c08d9f3bde6fc6a87fdced5a7a7d0fe1746ea9349829133c14c6c8171b85c
CRC32 93A082DC
ssdeep 96:HlXPC4/gFU99KjpPIRin+oGven6jyoYMMU9blTQa/gwJeG2fiUv8LI:Hla4/gFo9XRm3n63bMgBQa/hJ12+U
Yara None matched
VirusTotal Search for analysis
Name 3522b5faf4253879_lnbbg[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZTY94C7J\lnbBg[1].gif
Size 2.3KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 52 x 40
MD5 339f516b2dc39cbc3b423f4042b1950b
SHA1 b9a4a83505afff571f29c6c8f6faaff175977ed1
SHA256 3522b5faf4253879c9c3ca51884880adc9d953ec7e0ee98e0df19dd9b26f6964
CRC32 5F779F4F
ssdeep 48:636OKWMLy0ZRuIoTjyLviU9+m+08ykvDkLSaUb8iqAWyUooXc7X:6367WeoTjqOm+F5vDk+qcYcz
Yara None matched
VirusTotal Search for analysis
Name 58677899df6785aa_toplogo[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VKMIWH9C\topLogo[1].gif
Size 4.2KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 145 x 40
MD5 cb5f3482f5d1fc7edb1afe5cae30175a
SHA1 d96ce2336387d0aa96e96e3f5fd2c135bf1cfc52
SHA256 58677899df6785aa0a33e39aeaa2bb523520f4d43e3ece12c019de6c8059d987
CRC32 FEF6BDC6
ssdeep 96:c2FAArr/knS2iPL1YuT7sTomVdT39EqfFw6ZsOGBMZ:c2FAO/kn0LvssadzhfC6mTMZ
Yara None matched
VirusTotal Search for analysis
Name 0444be2e282aec51_dbins_secure.html
Submit file
Filepath C:\Users\Public\Libraries\dbins_secure.html
Size 22.5KB
Processes 2988 (hh.exe)
Type HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
MD5 c61eb9f5569c6d000169a9d0ee235d38
SHA1 399bb8b25b199e776a02251ea2ca39c2ead8460a
SHA256 0444be2e282aec51a9fac96208f155d20b4ecaf3c2f45bbc68079b51d780c730
CRC32 49AFD8B3
ssdeep 192:kigxPxD9iP4vgSLexU1Mn3t/N51yvNSVDtTz7P5Ru9JU9pe5NBvLbOLC5icmsqgq:Lgd45twac5fzbCC55mA1bDG
Yara None matched
VirusTotal Search for analysis
Name e3f717870ac7f5ee_check[1].htm
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VKMIWH9C\Check[1].htm
Size 1.8KB
Processes 2668 (hh.exe)
Type HTML document, ASCII text, with CRLF line terminators
MD5 e7c08d2cd1cfc001918ba0e2c34a5650
SHA1 884c68d24533b34990a3e8e6e96cb9bd7672f75e
SHA256 e3f717870ac7f5ee49a0f297c93b1a99c2f88c0328febaebf5d2ebe52519dbfe
CRC32 ED050AA7
ssdeep 24:kiLN7DEVkYcL3FtYcLEm/HFFzhAvfvcWaYlEph+oBD/ba6sS7mFthwAYMyb2j2MS:kAGczQcBHWXNauEv+oR2umR1Pyaj2MQj
Yara None matched
VirusTotal Search for analysis
Name 5631247917e188a7_arrbullet[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZTY94C7J\arrBullet[1].gif
Size 54.0B
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 3 x 5
MD5 7e049d0a081f6690fd99ab810fe0188d
SHA1 8e8a17b02a935a03f8c2b0c6b7020b89ff8509dc
SHA256 5631247917e188a7e5515f6c7f4707d5a2fd87d7169a719ba398f76cb42c62f9
CRC32 CF1E1535
ssdeep 3:CGcladwkwl7/lBnGdq:JcA6l/
Yara None matched
VirusTotal Search for analysis
Name 118a1d150c4dbfe7_headbg_longservice_car67[1].jpg
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZTY94C7J\headBG_longService_car67[1].jpg
Size 72.0KB
Processes 2668 (hh.exe)
Type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 744x226, frames 3
MD5 636f9f9e2a1bb7213a5d08c42501d741
SHA1 6c6eaf11f0132def3fb8fde25e13902298761820
SHA256 118a1d150c4dbfe718e674bcec0936a8dabd356fb6511af50508b9fb49f1283b
CRC32 8BA6A6B8
ssdeep 1536:X1KA7B663oPMuzHlnXeTY+5HptAlJ1P00I4oKdsdnKQUb6:lKA86YPBzFG/HpW/pQ1
Yara
  • JPEG_Format_Zero - JPEG Format
VirusTotal Search for analysis
Name f5d25c6b38d33d1f_localmenu6[1].gif
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZTDTA402\localMenu6[1].gif
Size 3.8KB
Processes 2668 (hh.exe)
Type GIF image data, version 89a, 160 x 40
MD5 e2739254431c63a0e97d3113b8430d4d
SHA1 8b40de5a00046ba2d92343199512101ae7a4f7e0
SHA256 f5d25c6b38d33d1fadbe3c4fbbbc33e81d67164170c6621864b9812fb11ba3a0
CRC32 D6313B6E
ssdeep 48:NQ3QJToIgmvah/5SNCSTvrB/h/Dktkp2vOabutlK5jqt5e8wmSDm73J+rg/B/zmN:NQAJTxgmPNjByY24jk5jDmXB/kd
Yara None matched
VirusTotal Search for analysis