popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name e71803913b57c49f__queue.pyd
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\_queue.pyd
Size 25.8KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 347d6a8c2d48003301032546c140c145
SHA1 1a3eb60ad4f3da882a3fd1e4248662f21bd34193
SHA256 e71803913b57c49f4ce3416ec15dc8a9e5c14f8675209624e76cd71b0319b192
CRC32 08729D68
ssdeep 768:6+gXCwvc8pzLIsQUH25YiSyvYAMxkEl1C:KCwvcMLIsQUHM7SyexXC
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name a17667aa1e76858a_blank.aes
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\blank.aes
Size 113.9KB
Processes 2072 (Discord.exe)
Type data
MD5 f91a987c841b099940f6eba5a086f958
SHA1 37ef3c72c26a6413740e4396f9ace665a1d179c3
SHA256 a17667aa1e76858a9445091e9bddef35e04df3f09dbc1166a0acf5ad9a7713eb
CRC32 AD438EEB
ssdeep 1536:YJnf/QoOcznPhQ+bzHss2TXbIQVX8KdwpgS7KABRKNYI4H8LuyUa8k7Lbf:YJfoXcbjh2T1agS/3KqI4H8fUM7Lr
Yara None matched
VirusTotal Search for analysis
Name 9ffadcb2c40ae6b6__ctypes.pyd
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\_ctypes.pyd
Size 58.3KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 00f75daaa7f8a897f2a330e00fad78ac
SHA1 44aec43e5f8f1282989b14c4e3bd238c45d6e334
SHA256 9ffadcb2c40ae6b67ab611acc09e050bbe544672cf05e8402a7aa3936326de1f
CRC32 C328D024
ssdeep 1536:xoC2SLyUQvjpxgmylKvpe0nqi1bsYrrRh4EAgTICIsLPS/7SyxxIYY:KJuyBUEReEBsYrv/ECIsLPS/lY
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name d42c3550e58b9aa3__hashlib.pyd
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\_hashlib.pyd
Size 35.8KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 b227bf5d9fec25e2b36d416ccd943ca3
SHA1 4fae06f24a1b61e6594747ec934cbf06e7ec3773
SHA256 d42c3550e58b9aa34d58f709dc65dc4ee6eea83b651740822e10b0aa051df1d7
CRC32 08F7990D
ssdeep 768:d35lZrQBD7Xiyfulct4ziTpojMIsOIHQ5YiSyvaAMxkEr4:p5YM8ulcKljMIsOIHC7SyAxn4
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name dc03d32f681634e6__socket.pyd
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\_socket.pyd
Size 43.3KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 1a34253aa7c77f9534561dc66ac5cf49
SHA1 fcd5e952f8038a16da6c3092183188d997e32fb9
SHA256 dc03d32f681634e682b02e9a60fdfce420db9f26754aefb9a58654a064dc0f9f
CRC32 4E84DC4D
ssdeep 768:1deiwaiMMQ8HgVJbz3p8GQh4dsKwGn2Spk+XIsLwiFy5YiSyvZAMxkEa:lKFHEz3LwG2V+XIsLwiFw7SyJx+
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 8e4b9da9c95915e8__sqlite3.pyd
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\_sqlite3.pyd
Size 56.3KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 1a8fdc36f7138edcc84ee506c5ec9b92
SHA1 e5e2da357fe50a0927300e05c26a75267429db28
SHA256 8e4b9da9c95915e864c89856e2d7671cd888028578a623e761aeac2feca04882
CRC32 33B12E54
ssdeep 1536:hUoHNtQh2qxFyEefg0/EwpXycIsOQSO7Syixiq:hUiNtQhDeft8iXtIsOQSOm
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 58209c8ab4191e83_rarreg.key
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\rarreg.key
Size 456.0B
Processes 2072 (Discord.exe)
Type ASCII text
MD5 4531984cad7dacf24c086830068c4abe
SHA1 fa7c8c46677af01a83cf652ef30ba39b2aae14c3
SHA256 58209c8ab4191e834ffe2ecd003fd7a830d3650f0fd1355a74eb8a47c61d4211
CRC32 B967B544
ssdeep 12:Bn9j9sxpCDPxfhKLiaE5cNH0u/OCIhjWO:B9jiWDpf025cNU7CIEO
Yara None matched
VirusTotal Search for analysis
Name 6e6b6f7df961c119_sqlite3.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\sqlite3.dll
Size 622.8KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 dbc64142944210671cca9d449dab62e6
SHA1 a2a2098b04b1205ba221244be43b88d90688334c
SHA256 6e6b6f7df961c119692f6c1810fbfb7d40219ea4e5b2a98c413424cf02dce16c
CRC32 68A73C1E
ssdeep 12288:V8tAyniuvdUY0tHTwaj6hlwkhQsf30fmGggZzAOlcK+:VyVimdgHTwajUSOQsf0LNLcK+
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name b093aa2e84a30790__ssl.pyd
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\_ssl.pyd
Size 65.3KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 f9cc7385b4617df1ddf030f594f37323
SHA1 ebceec12e43bee669f586919a928a1fd93e23a97
SHA256 b093aa2e84a30790abeee82cf32a7c2209978d862451f1e0b0786c4d22833cb6
CRC32 FE689C3A
ssdeep 1536:W4H4dOyk5Uv1PCxFE7zkSyo3bzej9wrwIsC75jk7Syu1xUa:jYdOK9PCQ7zkSyo3ej9wsIsC75w1a
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 0e00b0e896457ecd_unicodedata.pyd
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\unicodedata.pyd
Size 295.3KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 8c42fcc013a1820f82667188e77be22d
SHA1 fba7e4e0f86619aaf2868cedd72149e56a5a87d4
SHA256 0e00b0e896457ecdc6ef85a8989888ccfbf05ebd8d8a1c493946a2f224b880c2
CRC32 FCFBE697
ssdeep 6144:6k/MXu7k+2xmvrSSrDZm9sR40BQG1pK1fS3KBG/oLwC8t+Ht:6kiuX2xmWIDE9uIpS363LwZKt
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 7da13df1f416d3ff__decimal.pyd
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\_decimal.pyd
Size 106.8KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 e3fb8bf23d857b1eb860923ccc47baa5
SHA1 46e9d5f746c047e1b2fefaaf8d3ec0f2c56c42f0
SHA256 7da13df1f416d3ffd32843c895948e460af4dc02cf05c521909555061ed108e3
CRC32 C6DBB80B
ssdeep 1536:UMXdDDugXoraALGPTI5F13YEcvG8bIKt9hxoTKaI0oZLD+rS9+aFajDlqLIsOq8T:pfSajAFFd6pIe9fN0oZueOYIsOq8CNa
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 827fdb184fdcde92_libssl-3.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\libssl-3.dll
Size 223.8KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 bf4a722ae2eae985bacc9d2117d90a6f
SHA1 3e29de32176d695d49c6b227ffd19b54abb521ef
SHA256 827fdb184fdcde9223d09274be780fe4fe8518c15c8fc217748ad5fd5ea0f147
CRC32 B3F9974C
ssdeep 6144:cIxkrRAZk7xPNsdt8qIn3ztlB28D3lKvEVGT6v:HuSaNS8r3xLJLQ0W6
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 90341ac8dcc9ec5f_rar.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\rar.exe
Size 616.0KB
Processes 2072 (Discord.exe)
Type PE32+ executable (console) x86-64, for MS Windows
MD5 9c223575ae5b9544bc3d69ac6364f75e
SHA1 8a1cb5ee02c742e937febc57609ac312247ba386
SHA256 90341ac8dcc9ec5f9efe89945a381eb701fe15c3196f594d9d9f0f67b4fc2213
CRC32 F9469D0F
ssdeep 12288:3lPCcFDlj+gV4zOifKlOWVNcjfQww0S5JPgdbBC9qxbYG9Y:3lPCcvj+YYrfSOWVNcj1JS5JPgdbBCZd
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check
VirusTotal Search for analysis
Name 69320f278d90efaa_VCRUNTIME140.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\VCRUNTIME140.dll
Size 106.9KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (console) x86-64, for MS Windows
MD5 49c96cecda5c6c660a107d378fdfc3d4
SHA1 00149b7a66723e3f0310f139489fe172f818ca8e
SHA256 69320f278d90efaaeb67e2a1b55e5b0543883125834c812c8d9c39676e0494fc
CRC32 ACA47BED
ssdeep 1536:BcghDMWyjXZZIzpdbJhKm6Kuzu8fsecbq8uOFQr+zMtY+zA:BVHyQNdbJAKuzRsecbq8uOFvyU
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check
VirusTotal Search for analysis
Name 17bfa656cabf7ef7__bz2.pyd
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\_bz2.pyd
Size 48.3KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 c413931b63def8c71374d7826fbf3ab4
SHA1 8b93087be080734db3399dc415cc5c875de857e2
SHA256 17bfa656cabf7ef75741003497a1c315b10237805ff171d44625a04c16532293
CRC32 1C1C572C
ssdeep 1536:qFvfmA9WmLbAsqCWrTZI+ufIsCViS7SyhxG:YfhAXplI+qIsCViSk
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name ff9f102264d1944f_python311.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\python311.dll
Size 1.6MB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 5f6fd64ec2d7d73ae49c34dd12cedb23
SHA1 c6e0385a868f3153a6e8879527749db52dce4125
SHA256 ff9f102264d1944fbfae2ba70e7a71435f51a3e8c677fd970b621c4c9ea71967
CRC32 69E4358F
ssdeep 49152:IHqk+Tq+DBrHf06FQAXUtzI0XTLe0EJNgZAem/Y:sOqCTfXjei0EJNlen
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 2d15c2f311528440_select.pyd
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\select.pyd
Size 25.8KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 45d5a749e3cd3c2de26a855b582373f6
SHA1 90bb8ac4495f239c07ec2090b935628a320b31fc
SHA256 2d15c2f311528440aa29934920fb0b015eaf8cbe3b3c9ad08a282a2d6ba68876
CRC32 25A42C13
ssdeep 768:sjW1g3ldg8d77x55iCpJT9IsQGH/5YiSyvmAMxkE/3:sjW1yldgy75ZT9IsQGHx7SyMxL3
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 135c772b42ba6353_libffi-8.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\libffi-8.dll
Size 29.3KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 08b000c3d990bc018fcb91a1e175e06e
SHA1 bd0ce09bb3414d11c91316113c2becfff0862d0d
SHA256 135c772b42ba6353757a4d076ce03dbf792456143b42d25a62066da46144fece
CRC32 A886B038
ssdeep 768:3p/6aepjG56w24Up3p45YiSyvkIPxWEqG:tA154spK7SytPxF
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 4a73d461851b484d_base_library.zip
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\base_library.zip
Size 1.4MB
Processes 2072 (Discord.exe)
Type Zip archive data, at least v2.0 to extract
MD5 32ede00817b1d74ce945dcd1e8505ad0
SHA1 51b5390db339feeed89bffca925896aff49c63fb
SHA256 4a73d461851b484d213684f0aadf59d537cba6fe7e75497e609d54c9f2ba5d4a
CRC32 B10CAE7D
ssdeep 24576:mQR5pATuz/R5lUKdcubgAnyfbPe30iwhBdYf9PfeFHHn:mQR5p1/RpPQ
Yara
  • zip_file_format - ZIP file format
VirusTotal Search for analysis
Name d2a7111feeaacac8__lzma.pyd
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\_lzma.pyd
Size 85.8KB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 542eab18252d569c8abef7c58d303547
SHA1 05eff580466553f4687ae43acba8db3757c08151
SHA256 d2a7111feeaacac8b3a71727482565c46141cc7a5a3d837d8349166bea5054c9
CRC32 08DBA707
ssdeep 1536:gQMcTNoOKoMWf9p5pYRCyO1yKprdsf2+iyfyiMIsZ1pc7SyExpg:9TiNo/VyMy3KpM2+id5IsZ1pcN
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 6a8c458e3d96f8dd_libcrypto-3.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\_MEI20722\libcrypto-3.dll
Size 1.6MB
Processes 2072 (Discord.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 78ebd9cb6709d939e4e0f2a6bbb80da9
SHA1 ea5d7307e781bc1fa0a2d098472e6ea639d87b73
SHA256 6a8c458e3d96f8dd3bf6d3cacc035e38edf7f127eee5563b51f8c8790ced0b3e
CRC32 E2ABAF7E
ssdeep 49152:1qs3Gg3Doju8k8lHFLRUYY1SVma7A5as1rM1CPwDvt3uFlDC:EsWg3uu6ldUYYoLA5e1CPwDvt3uFlDC
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis