popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name d6431d5645fffd05_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2100 (powershell.exe)
Type data
MD5 260d23ce04a8f8555a73b7d2dc15e911
SHA1 ebad746fb7de847c50f7502a44f6e35534733efd
SHA256 d6431d5645fffd05a23166d630253bc7ce8c099cf6e9c956f8ae5e1249ee8588
CRC32 11D6B213
ssdeep 96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:ctvXo5tvbHnorrxQ
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name a9220271c0eb79e5_d93f411851d7c929.customDestinations-ms~RF19497ce.TMP
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF19497ce.TMP
Size 7.8KB
Type data
MD5 b0c9ff441742f3847ea27da9dee7f2cd
SHA1 c42a1eb32ba953a0ce5d8635caabf71b5b281495
SHA256 a9220271c0eb79e5750e0d0e62058ecac560e09cdf9e82ef61aeeabada5d48a4
CRC32 0BBCAB1A
ssdeep 96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:UtvXoxtvbHnorrxQ
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 413852f536628cfa_F56GKLK7U4
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\F56GKLK7U4
Size 40.0KB
Type SQLite 3.x database, last written using SQLite version 3033000
MD5 91a39ee5267872c5a86c0b791bfd0fe0
SHA1 3ee10302a6d40c7aa02afe01d36498f1b27f7895
SHA256 413852f536628cfad0f6be985e814443f8a2bbdcfd55994aff9a561fbad68fe1
CRC32 B431A379
ssdeep 24:TL2C0RlPbXaFpEO5bNmISHdL6UwcOxvo5:TYLOpEO5J/KdGU1Eo5
Yara None matched
VirusTotal Search for analysis
Name 85c8b8a648c56cf5_sqlite3.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\sqlite3.dll
Size 841.2KB
Processes 2424 (netbtugc.exe)
Type PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5 5fc6cd5d5ca1489d2a3c361717359a95
SHA1 5c630e232cd5761e7a611e41515be4afa3e7a141
SHA256 85c8b8a648c56cf5f063912e0e26ecebb90e0caf2f442fd5cdd8287301fe7e81
CRC32 3E6F52F7
ssdeep 12288:jpzBGN/5Bglw5wEseqcxTHVf6SyZfG9xBBm5EhR9zpJR72Y/is:jO5jglzcqoViSyExrm5E79V7R/is
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 8274a340b59d469c_sqlite3.def
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\sqlite3.def
Size 5.0KB
Processes 2424 (netbtugc.exe)
Type ASCII text
MD5 cd9b704b328573406d319f6e22e043be
SHA1 fb88536357cf2a7db522684887affd85ab5747da
SHA256 8274a340b59d469c27eb238a7984d250287c7820556a9e2693e8f1ecd907936a
CRC32 EAC202F7
ssdeep 96:GcuN/gR+7Oc0XRMcCM3KOGOF++BlMtvrENw+Y0ac:E/Q+7Oc0JKOBF++EvrENw+cc
Yara None matched
VirusTotal Search for analysis
Name 824fae3331b95e2f_F56GKLK7U4
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\F56GKLK7U4
Size 40.0KB
Type SQLite 3.x database, last written using SQLite version 3033000
MD5 41c19a9e8541fcb934c13c075bf47721
SHA1 648a7622d533d79b9a0bb31dc370134ec3a75ed7
SHA256 824fae3331b95e2f88ca60c87a6c9569086906ec76fc1db8d6dee9adddc4e80c
CRC32 560F7642
ssdeep 48:+35TqYzDGF/8LKBwUf9KfWfkMUEilGc7xBM6vu3f+fmyJqhU:Ulce7mlcwilGc7Ha3f+u
Yara None matched
VirusTotal Search for analysis
Name 77e14caae3daf05c_quote.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\quote.exe
Size 264.5KB
Processes 2100 (powershell.exe) 2424 (netbtugc.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 1dcce19e1a6306424d073487af821ff0
SHA1 9de500775811f65415266689cbdfd035e167f148
SHA256 77e14caae3daf05c1f5a6a3d10e4936cc58944d6ae9ec6943b1be6d995e94b5c
CRC32 656091CE
ssdeep 6144:ZhKO/bBUzpHw6Zw4KKmnZlypy0s1LNbDlLJkEU:ZhKYd8HthKKNy0sX1HU
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis