Dropped Files | ZeroBOX

Name	3095c18633d6d744_msi12cc9.log Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\MSI12cc9.LOG
Size	366.0B
Processes	2556 (msiexec.exe)
Type	Little-endian UTF-16 Unicode text, with CR line terminators
MD5	`2ed7b248c118fea49ff868de0a4cb63a`
SHA1	`d440bbda6b0b1e2531aa9631fe4fef7ddf589cff`
SHA256	`3095c18633d6d744b2985ef0c72fefed684ba11d684e7d224d643f57696b0ab6`
CRC32	`70AF4FC7`
ssdeep	`6:Qg78CcIaKERs9lecLZii9lAeqYr2cIaKEDQjE7+ocIcIaKGefvxjP9:QU8CcIaeLZikN2cIabR+ocIcIadWjP9`
Yara	None matched
VirusTotal	Search for analysis

Name	42e3cd57b0431c54_538f535b7fbde384e456cc9f5da5fbab Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\538F535B7FBDE384E456CC9F5DA5FBAB
Size	194.0B
Processes	2556 (msiexec.exe)
Type	data
MD5	`711abf6843d32b78b5fc38b8942c2015`
SHA1	`6ebe16b4f2f1ee5cba11603f5d9ec65241790965`
SHA256	`42e3cd57b0431c541157d85ca0bd189ce4f3035c77c496f1152cae7ce42fc74b`
CRC32	`222ECBAC`
ssdeep	`3:kkFklofllXlE/8NAxtM1Cd+iYl+X7al1kmEy1XQlAl1/:kKjWXd1a0/0XQlAP`
Yara	None matched
VirusTotal	Search for analysis

Name	2cfa13f9aebfb881_MSIFC22.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\MSIFC22.tmp
Size	1.1MB
Processes	2556 (msiexec.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, InstallShield self-extracting archive
MD5	`abc4c2333f9c258f7ee20f424fb1d600`
SHA1	`370ea376c59d62c24b9d87723c90a88b2573039e`
SHA256	`2cfa13f9aebfb8814bed8f05c01ca4fa7ead37e6de2c7b1d47087b8647fcb203`
CRC32	`14C65D1A`
ssdeep	`24576:QIl+CwktlAJuakdfLnwBZdutRTlQhigggKVz311k1evKv:QIl+CftSJ56TwDdutRk9ggKVp1sMKv`
Yara	Malicious_Library_Zero - Malicious_Library IsPE32 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description) ASPack_Zero - ASPack packed file CAB_file_format - CAB archive file UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	b676f2eddae8775c_538f535b7fbde384e456cc9f5da5fbab Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\538F535B7FBDE384E456CC9F5DA5FBAB
Size	1.5KB
Processes	2556 (msiexec.exe)
Type	data
MD5	`6d469ed9256d08235b5e747d1e27dbf2`
SHA1	`d3dd483e2bbf4c05e8af10f5fa7626cfd3dc3092`
SHA256	`b676f2eddae8775cd36cb0f63cd1d4603961f49e6265ba013a2f0307b6d0b804`
CRC32	`1887CA4D`
ssdeep	`24:MaPSmk1cdLwk1cdPWs/bIjEogUjdfj5rwBmlIdnccmeXlanGfZ/M0yAwcQuYu6m/:zPwcFncxTMhVF5Idccm286M0LwcTB`
Yara	None matched
VirusTotal	Search for analysis