Dropped Files | ZeroBOX

Name	0b8607fdf72f3e65_cookies.sqlite Submit file
Filepath	C:\Users\test22\AppData\Roaming\vm5rdwft.1le\Firefox\Profiles\qxo5wa6x.default-release\cookies.sqlite
Size	96.0KB
Type	SQLite 3.x database, user version 12, last written using SQLite version 3038003
MD5	`d367ddfda80fdcf578726bc3b0bc3e3c`
SHA1	`23fcd5e4e0e5e296bee7e5224a8404ecd92cf671`
SHA256	`0b8607fdf72f3e651a2a8b0ac7be171b4cb44909d76bb8d6c47393b8ea3d84a0`
CRC32	`842B3569`
ssdeep	`12:DQAwfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAwff32mNVpP965Ra8KN0MG/lO`
Yara	None matched
VirusTotal	Search for analysis

Name	512e4e95427a8c66_Cookies Submit file
Filepath	C:\Users\test22\AppData\Roaming\vm5rdwft.1le\Chrome\Default\Cookies
Size	36.0KB
Type	SQLite 3.x database, last written using SQLite version 3021000
MD5	`f4c540f52d5c08d24a79805eda1d7abf`
SHA1	`22be46826df7693f58736adb232ab2da790f2571`
SHA256	`512e4e95427a8c66b2993b27bb23d99cdab2ebd6e9e8937c7f6a39ed8c6a5b94`
CRC32	`95C9FB3A`
ssdeep	`24:TLmg/5UcJOyTGVZTPaFpEvg3obNmCFk6Uwcc85fB34444z:T5/ecVTgPOpEveoJZFrU1cQB34444z`
Yara	None matched
VirusTotal	Search for analysis

Name	3629ed9b94ae5d0f_svchost.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\svchost.exe
Size	621.5KB
Processes	2568 (docgen20230925.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`ed9d91fe584d5109d4067734ac452753`
SHA1	`c277e57866833509d94787fc6f4d634a2714825d`
SHA256	`3629ed9b94ae5d0f2659d02dcb7ce258cb5c2497d5bf18f3c4fed78878fba030`
CRC32	`F9547DD3`
ssdeep	`3072:BgYB72Q1ulDBuk18+NRnZY5OWTP9inYRBCDMLKU+wmeqBXYcLho34dmeGmoE:B2Q1OkynW1NCD/XYkqodzo`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description) Is_DotNET_EXE - (no description)
VirusTotal	Search for analysis

Name	4317a445e0f23149_general.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\general.exe
Size	167.5KB
Processes	2828 (docgen20230925.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`f7b54d0ab4c048a115f3d0b55c09ae29`
SHA1	`805c5a53e0f985b5e9c1b89f2cdf0e95d419114a`
SHA256	`4317a445e0f231494a0f328442153e1d7852cd56577fe22042dc030908a2200c`
CRC32	`65CEC1A0`
ssdeep	`3072:C1TEL0rVBRjXGonZQz4LxkaMPnaljBzx3TGDvDbaHS1ZE76/M/4/wpXCMvG4PnxU:CVEL0UonZOeaaMPnaljBzx3TGDvDbaHe`
Yara	Malicious_Library_Zero - Malicious_Library UPX_Zero - UPX packed file PE_Header_Zero - PE File Signature IsPE32 - (no description) Is_DotNET_EXE - (no description)
VirusTotal	Search for analysis