popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 560ba0a768687a5b_uac.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nshFB1B.tmp\UAC.dll
Size 13.5KB
Processes 2700 (setup.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 3fa5491c158c30082b42569cf4f54381
SHA1 a2d92f2c7a1b7c468ab14bd3ae03e2574baebc1a
SHA256 560ba0a768687a5b8643062b6183991e4d8e172b870e3c0a8a8847043ce32c86
CRC32 24BE4C43
ssdeep 192:ppdvfthwGLUIcl2K7ExOhNyqyxzONcnTpI0S342aBgfqo:ppNoGLUBz7E4emcnTpIu0q
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 60f9e6030d4c75e5_modern-header.bmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nshFB1B.tmp\modern-header.bmp
Size 25.2KB
Processes 2700 (setup.exe)
Type PC bitmap, Windows 3.x format, 150 x 57 x 24
MD5 d0a335b55aea042dba383cb9eb91c093
SHA1 2883409a7b20914ef95af3a8c850196350d5704a
SHA256 60f9e6030d4c75e5ed7e9300fb13fd46346d581e2039ae5e9a66da72984c78f5
CRC32 4A75D9D9
ssdeep 768:Ln1nBdZKtcyAGdAmTRzx77nJyrrYievE4XdjmvXUuu/G1oAp79zj:L9PDyZdAmTNx77Jyn/yrXdjm8d+Kc79f
Yara
  • bmp_file_format - bmp file format
VirusTotal Search for analysis
Name e3b0c44298fc1c14_nsmFAEA.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\nsmFAEA.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis
Name 89a82c4849c21dfe_nsdialogs.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nshFB1B.tmp\nsDialogs.dll
Size 9.5KB
Processes 2700 (setup.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
CRC32 4B549370
ssdeep 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 9be23da2b8505180_setup.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\7zS40ADCD0F\setup.exe
Size 5.7MB
Processes 2564 (Content_497179.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
MD5 98b7ff04d271a6456ff75695569d0131
SHA1 615b1d967e0432bc9314cb62b1a900f2068ad8b2
SHA256 9be23da2b8505180a1f94520dab6e6a741dbe961520bf4ae1eb6a0e68d1f811d
CRC32 E0053489
ssdeep 98304:eoUdgc2ftorNFZ1wtiBL8Wg5GQ/JVGgIpl4Q8D2qVGSIFREMwp8p+JkZ1TZcsDmS:eoMgBeNFPwALa4QK7346qUvGMHsJoTmy
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • NSIS_Installer - Null Soft Installer
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 23d618a0293c78ce_system.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nshFB1B.tmp\System.dll
Size 12.0KB
Processes 2700 (setup.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 192639861e3dc2dc5c08bb8f8c7260d5
SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
CRC32 1970C45B
ssdeep 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name dcf6f31126374385_modern-wizard.bmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nshFB1B.tmp\modern-wizard.bmp
Size 150.9KB
Processes 2700 (setup.exe)
Type PC bitmap, Windows 3.x format, 164 x 314 x 24
MD5 4e50c5083442a80ccad90b7249517327
SHA1 c83a9404a9978bc661b856dc918e4532ea7bd721
SHA256 dcf6f31126374385b6b626c81262cdc29a1766e0aeb60aa830bca2ef97684023
CRC32 7C7AFAAE
ssdeep 768:kTRNmUgJh54vfQL2w9rZ0Ski8mAYxeCek9vpPpHlx88cllULCh:KmUgmvfQL2or6mAYxlek9dpHl4lUI
Yara
  • bmp_file_format - bmp file format
VirusTotal Search for analysis