popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 24666ef269c0f384_wvcxc2vscerrbtlaylrrevnvz.bat
Submit file
Filepath C:\Users\Public\WVcxc2VscERRbTlaYlRreVNVZ.bat
Size 294.0B
Processes 1776 (powershell.exe)
Type ASCII text
MD5 a4dce0cd64620cc33c3905ce661da21a
SHA1 c2ec271b522fb55a324723f8ef136956cba70988
SHA256 24666ef269c0f3847eaf873ef805eb0677b7e6377ce5c96c945984abed5454ce
CRC32 29B52345
ssdeep 6:PcYycYzKnGnncYlII1R3KbQO0cGp1aHUOcYckFX0cYY24NBv:PcYycY/nncYuI1kbQpcGQcY5FkcYY/Z
Yara
  • Antivirus - Contains references to security software
VirusTotal Search for analysis
Name ff1b219e43d0ffb5_wvcxc2vscerrbtlaylrrevnvz.vbs
Submit file
Filepath C:\Users\Public\WVcxc2VscERRbTlaYlRreVNVZ.vbs
Size 970.0B
Processes 1776 (powershell.exe)
Type UTF-8 Unicode text
MD5 4d782a4bba95d8075fe15190103c2e14
SHA1 78fb169255b25264cdc1ff85e212b4d2c49ae924
SHA256 ff1b219e43d0ffb5094277f218da1a52172e57c50e885667f4c35ccf2207b0e0
CRC32 1C84C3C6
ssdeep 24:UGjuGwMVKcYPfS1/rOJMMwhV8ERlMq2RneZ//:UGRXKjqTUYKqvn
Yara None matched
VirusTotal Search for analysis
Name f8f9770673be992b_runscheduledtask.ps1
Submit file
Filepath C:\Users\Public\RunScheduledTask.ps1
Size 1.2KB
Processes 1776 (powershell.exe)
Type ASCII text, with CRLF, LF line terminators
MD5 2a3401bb6690ad8e3d1e8f214b4210fd
SHA1 e380288e95a78ba0d9f11554f75b80f82055e2d1
SHA256 f8f9770673be992b3f62a9b861e7f159a4d56fdd7d1bae1c8d4a783cd89a2c0c
CRC32 B5786021
ssdeep 24:iTq4U6B57PeLqox1QqvaK67Kc2rLlxi9YME4fo4R9+P0BNcnTsBcY1dbzXx6Bdf:Qi63aCKJciLjAzE4g4m+OnTArx6Lf
Yara None matched
VirusTotal Search for analysis
Name e033fd45f1d7812d_wvcxc2vscerrbtlaylrrevnvz.ps1
Submit file
Filepath C:\Users\Public\WVcxc2VscERRbTlaYlRreVNVZ.ps1
Size 708.5KB
Processes 1776 (powershell.exe)
Type ASCII text, with very long lines
MD5 2e3c9b34fd47bc5f1e2bb6dc4bb5d33c
SHA1 23beb9b5db51f2055fac457d8e4867064ebda002
SHA256 e033fd45f1d7812d495ac99c872e258ae142a92f715b871c8bed67cf907c6383
CRC32 E937B6AA
ssdeep 3072:srPyylczomDwZmT8VjG3/Dyqr4cwt9aU0rlAHu6mmwc0/Kz0o+i/6n/cgyjBSkD2:ZI2JkxY95mH9OdHUb3ngo0
Yara None matched
VirusTotal Search for analysis
Name a9b1dc8eaa5fcd00_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 1776 (powershell.exe)
Type data
MD5 c1d8708bab1e838a2deda26d58bb8d42
SHA1 95d39e75a804752961c139bb6c0b67f84f685035
SHA256 a9b1dc8eaa5fcd0034694cf9742ae915a5932142a1477c3ab6fada45d98750b2
CRC32 E71AF2A2
ssdeep 96:QtuC6GCPDXBqvsqvJCwoFtuC6GCPDXBqvsEHyqvJCworFS7HwxWlUVul:QtbXoFtbbHnor/xo
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis