popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name fccad6bb9fad48bb_cat_background.bmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\cat_background.bmp
Size 150.9KB
Processes 2568 (Revolution_Makerspace_Certificate_Installer.exe)
Type PC bitmap, Windows 3.x format, 164 x 314 x 24
MD5 b3b43857043c46c8541e1e6501dd96ac
SHA1 02111d3618af9209a74bae64f5951236b240ebc4
SHA256 fccad6bb9fad48bb9a254d3fe64936315be8e3f627809b82be40d516c5901fb6
CRC32 2C61945D
ssdeep 96:RjA9txBPXkiTmKXq1I3/5jZhRNegF6LaYFchZej8yrLT7ZoQ1CEFiQC:RQt7PtmK6165ZzNeXLa9oo7mC
Yara
  • bmp_file_format - bmp file format
VirusTotal Search for analysis
Name fc03209d76e6c41c_wlan_test.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\wlan_test.exe
Size 8.5KB
Processes 2568 (Revolution_Makerspace_Certificate_Installer.exe)
Type PE32 executable (console) Intel 80386, for MS Windows
MD5 40bca6124fa7eef106c0d76c428d9471
SHA1 dadd29d90007602be8ecd18406dc28634d0bbb2d
SHA256 fc03209d76e6c41c11dde8621f1eb03ff348a12566cb9b63e7aa2d6cef8086aa
CRC32 05A80C9D
ssdeep 96:jcKd0jhY5hCJMKzfdUuFpDocZ7F+Vq1cHQyCGOx+WFHCkvJJGrbA4ayC7tCEYyHO:jbQ4hqvZ7F+E6c3bvJJms4aPbH
Yara
  • UPX_Zero - UPX packed file
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 0351fe33a6eb1341_GetVersion.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nsiF3C7.tmp\GetVersion.dll
Size 6.0KB
Processes 2568 (Revolution_Makerspace_Certificate_Installer.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, UPX compressed
MD5 dc9562578490df8bc464071f125bfc19
SHA1 56301a36ae4e3f92883f89f86b5d04da1e52770d
SHA256 0351fe33a6eb13417437c1baaee248442fb1ecc2c65940c9996bcda574677c3f
CRC32 55B409C9
ssdeep 96:NIGlpc19q/Z+93GG+hnYJacN9F5XB5nUQHS+AlBi46AQ5Vu:CozB+9sncN9FFB5bHSTlBi46AQ5Vu
Yara
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 6a129a9eefae85a9_NSISArray.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nsiF3C7.tmp\NSISArray.dll
Size 19.5KB
Processes 2568 (Revolution_Makerspace_Certificate_Installer.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 14b848866035dea39b912da628307231
SHA1 d00c8963aee8038d8a22f098cef69b31007196e5
SHA256 6a129a9eefae85a9412e889e0c74fdaa21d20254fa13cacef5429885775017dc
CRC32 2C108CAA
ssdeep 384:J+o6oNJDOD4mqjCQ2UcW3++Mnnm8GPHltUIH4qpjiX:gDoNJyD4mqjCOsnmtHltUIYqFi
Yara
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 32487e83679c88f6_LangDLL.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nsiF3C7.tmp\LangDLL.dll
Size 7.0KB
Processes 2568 (Revolution_Makerspace_Certificate_Installer.exe)
Type PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 ccb909b48488ac50078b994947cf855c
SHA1 08ef6ff2b4df6de0bdc443611815a8db619b6c70
SHA256 32487e83679c88f63f35a9989e58ef3a3084bd70b6ebe76cda459c92ebf2c066
CRC32 10526467
ssdeep 96:X80Gzrjk9CYIh6SnCQ5ygkSoZrtjlPVng1/GsoJoiB:DGbeINnC4oZrjPdIOjqi
Yara
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name e3b0c44298fc1c14_nssF3B6.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\nssF3B6.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis
Name 4263984428f49792_System.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nsiF3C7.tmp\System.dll
Size 24.0KB
Processes 2568 (Revolution_Makerspace_Certificate_Installer.exe)
Type PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 6c09648818cf6820a769e8f03c28645d
SHA1 30bf9117443955d50e396a799792746107a282c3
SHA256 4263984428f49792f359b91d5eee19b6d248340204051dd14af9a73710967dc7
CRC32 5C6CBF47
ssdeep 384:Sju1mQpK8SvOWZqoNvRjEJMmG+cGR1J5VPY8cCxfMwdxy:4OWIoN6JMmGUjJLa6xy
Yara
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis