popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name ac9dfe3b35ea4b89_system.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nsqC08D.tmp\System.dll
Size 11.5KB
Processes 940 (smss.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 0063d48afe5a0cdc02833145667b6641
SHA1 e7eb614805d183ecb1127c62decb1a6be1b4f7a8
SHA256 ac9dfe3b35ea4b8932536ed7406c29a432976b685cc5322f94ef93df920fede7
CRC32 B233B75E
ssdeep 192:qPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4U:F7VpNo8gmOyRsVc4
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 136b62e6481ef623_megapterine.buc
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Koalitionens\Dagtjenesten\Kwannon\Dissympathises\Reformatting\Megapterine.buc
Size 159.9KB
Processes 940 (smss.exe)
Type data
MD5 0782692cff38628b70495e562b2614a1
SHA1 1cf24a8842c79fa929d31571aeb187673a91cf22
SHA256 136b62e6481ef62303bd2305c8fb497ce931521c71cb331cb92179621d558e20
CRC32 EFF298EC
ssdeep 3072:KNwfAuxv4zSDxRWO0kdxyjf5TWKuT56kieBNKYAqrszfq:6wffxA+tR8jV9uT5vieBNKYfgu
Yara None matched
VirusTotal Search for analysis
Name b3e57dbe2de42502_unintriguing.tie
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Koalitionens\Unconstraint\Opskolingers\unintriguing.tie
Size 5.8KB
Processes 940 (smss.exe)
Type data
MD5 064c026c4caa1483900e7ac2c0dfff1c
SHA1 eaaf94292a01cf711b27321265a929e4c8f2a9df
SHA256 b3e57dbe2de42502f0c3d005f8347c1b2b72b6a29ec80474921c6a274ff2e081
CRC32 C380EEFA
ssdeep 96:wCHb7caV5pcvPQzcsG4LMvyER8TY8Vvj3B442oBIBr7qTRRtSubJuf+F5LzllGEt:dPcaV3cnQzc4LZECYQt2jqT1bJuWjLzR
Yara None matched
VirusTotal Search for analysis
Name db054403b148f267_reinhold.ini
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\reinhold.ini
Size 42.0B
Processes 940 (smss.exe)
Type ASCII text, with CRLF line terminators
MD5 f54a2e254a72d0cc8e1ef8327cb8a7b5
SHA1 b5635cb7a221e52073f56017fd4dbe36baac3228
SHA256 db054403b148f267de03752254eb25a8e981e59ca9f6e93f3e39c1e9d70405a7
CRC32 C685C38B
ssdeep 3:T9RurfyWGRMWyn:TaSMWyn
Yara None matched
VirusTotal Search for analysis
Name 3ce9f1f2dc922eb0_laggin.tel
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Koalitionens\Dagtjenesten\Kwannon\Dissympathises\Reformatting\laggin.tel
Size 237.7KB
Processes 940 (smss.exe)
Type data
MD5 894c5cfd443eabaa15be7a7ccea4e9f5
SHA1 c25d071c1bbdb7813b5a9eb8e7d04ffacb063389
SHA256 3ce9f1f2dc922eb0ed91c0ed1264d17506b7b4ef065e49555f77a96317a3ccd5
CRC32 0DE9BC2B
ssdeep 6144:ZATFfjMU61iyzkn+upJwQIkCqLWZNPzlmAZOibfQJGnbOKVy:sfjr61RO+uwQ5ENPzmib4Yy
Yara None matched
VirusTotal Search for analysis
Name 088c8536af2896df_engroshandlerne.agr
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Koalitionens\Dagtjenesten\Kwannon\Dissympathises\Reformatting\Engroshandlerne.agr
Size 84.4KB
Processes 940 (smss.exe)
Type data
MD5 dcda6c782e8d6ee806dd3e1a71575b12
SHA1 dd5394a4443e7e1cdba0e565d8f0095854ceb3a5
SHA256 088c8536af2896df8e6873107c4183d013d137c924bbe8c32f29a35d46874dbb
CRC32 AFF3ABAD
ssdeep 1536:3bje52+ESCvPspqbrBoZDdRxR9oEOWU0HqkL:3bq1fCvPOmrc5Rz9nWm
Yara None matched
VirusTotal Search for analysis
Name a4943074fbbb15a4_regneoperatorers.txt
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Koalitionens\Dagtjenesten\Kwannon\Dissympathises\Reformatting\regneoperatorers.txt
Size 456.0B
Processes 940 (smss.exe)
Type ASCII text, with CRLF line terminators
MD5 1693541dfb1e3b101649889aae97dc5b
SHA1 e9f89ee2a9f46abb9738625b97600ee3b56b705d
SHA256 a4943074fbbb15a41254082ab6fea90fe5d302f6e6969e963f6b04a92b49f739
CRC32 9801C2D3
ssdeep 12:U6cKWn1izXeejCThRvO4IQJWc05kC257zNC1NFLyx:U3KW1SeeYzvlIQJd0qC25MByx
Yara None matched
VirusTotal Search for analysis
Name 8b4250121c2470b3_haves.ant
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Koalitionens\Dagtjenesten\Kwannon\Dissympathises\Reformatting\haves.ant
Size 141.3KB
Processes 940 (smss.exe)
Type data
MD5 f84b9e2bda2302bc917050f4f1b5c907
SHA1 8258de54aec259536f36285708d66e494d247905
SHA256 8b4250121c2470b3e1458ee51e6db638c7dae2a188f24d9141849d267b65d36b
CRC32 85A14E74
ssdeep 3072:5w8VNxOulgKUnkFg3sgS2fm0ieW5zym0HVCmV:5woLlgKUnkFHgSURz4zIrV
Yara None matched
VirusTotal Search for analysis
Name c5ec53e76c60ce74_spongiform.for
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Koalitionens\Dagtjenesten\Kwannon\Dissympathises\Reformatting\Spongiform.For
Size 1.3MB
Processes 940 (smss.exe)
Type data
MD5 d4910fd9a8a5bbf2030e2d2480bac516
SHA1 b7cda4c565ee6bccb3956afe5dc057ca9a1b5993
SHA256 c5ec53e76c60ce7494228ba21e135c1698b8ef82365119df3759bec2dfece45c
CRC32 FEB3FFB9
ssdeep 12288:4iaNjSuAdwvibD6iNM4Fe4IeLIK12pGOifrwpSO1VmTE1tjGcMMvLLIikq5wa:mN2ivuNhbI9pGOQmSO1VHacVTLI9q6a
Yara None matched
VirusTotal Search for analysis
Name e3b0c44298fc1c14_nsaBF44.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\nsaBF44.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis