Dropped Files | ZeroBOX

Name	51ce4a95c911798a_openandclose.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\OpenAndClose.exe
Size	14.9MB
Processes	2556 (Booking_information.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`ce79be6531d3f05b0f3dfabb846acb71`
SHA1	`218e07e6a6f89c46015883a0e385576a834e776e`
SHA256	`51ce4a95c911798a4d7a0cd7b16a68509d4b171cf3e4b8281cd46517d1f2e61c`
CRC32	`C3723BA9`
ssdeep	`393216:lLoWQe1RaMbYZX8Fyx3LlgFK38Tn7KBz:NdQeHanK83LlsKMjeh`
Yara	Malicious_Library_Zero - Malicious_Library IsPE32 - (no description) PE_Header_Zero - PE File Signature Is_DotNET_EXE - (no description)
VirusTotal	Search for analysis

Name	d37fcb160d37cfdd_settings.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size	40.0B
Processes	2860 (chrome.exe)
Type	data
MD5	`a3122d4670c51912628b97bdd6fffb80`
SHA1	`45d2e3060e09f46071125d6125983c81ae4970a1`
SHA256	`d37fcb160d37cfddefea794094044b7e588d44c4883c72ba0ef1503e5f9c7d59`
CRC32	`77809701`
ssdeep	`3:FkXD3WyqUm:+ix`
Yara	None matched
VirusTotal	Search for analysis