popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 4bbc2904dd371073_opencv_ml2410.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\ew\Tubolabellate255\drmmesynerne\Craney\opencv_ml2410.dll
Size 589.7KB
Processes 2556 (sahost.exe)
Type PE32+ executable (DLL) (console) x86-64, for MS Windows
MD5 b594b796565158e677eb91827faa7fb6
SHA1 6d4b7c9942733837c5354731d7b2ed21676b9971
SHA256 4bbc2904dd371073bbd411aa76be0e73dfdd445f2c61efe63f55085781813cbf
CRC32 084FCF0C
ssdeep 12288:NyIaXe9xfExypragYbRwtFOD1AUPI6m6Ldq5iU1FwX9YYG2:NyRX4raLGQ1Az6m6Ldq5iyqYYG
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name e4ca55655af23955_preferences-desktop-display-symbolic.symbolic.png
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\ew\Tubolabellate255\drmmesynerne\Craney\preferences-desktop-display-symbolic.symbolic.png
Size 207.0B
Processes 2556 (sahost.exe)
Type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
MD5 6dc9d7bac1cd6319f7a6ca7048451a55
SHA1 3c69657f57a1911b75cf0b1883f024f1af42cd40
SHA256 e4ca55655af23955e282a8b7bbb46925e4a49043e1dece378f4071472be59603
CRC32 9CC73418
ssdeep 6:6v/lhPyswGrrZhi6+dsLp4qDSihVgRdBdp:6v/7QGB+dYpZDjhVuBz
Yara
  • PNG_Format_Zero - PNG Format
VirusTotal Search for analysis
Name 808ca72ec3cc6434_application-exit-symbolic.svg
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\ew\Tubolabellate255\drmmesynerne\Craney\application-exit-symbolic.svg
Size 2.1KB
Processes 2556 (sahost.exe)
Type SVG Scalable Vector Graphics image
MD5 65bcbc2bf92eb113af40b4a284b236d9
SHA1 f890242f02607a33f27232ac2341d262991dd9ad
SHA256 808ca72ec3cc64348cf951658f8b40ec16f09ebebee10a1753ac958e060108ba
CRC32 72F7500F
ssdeep 48:7QQDNtAecFXGueINtAecFiGPciNtAecFX8:PDziteIziBPcizim
Yara None matched
VirusTotal Search for analysis
Name b7c225ef3cc3e875_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2664 (powershell.exe)
Type data
MD5 81ca4510272caf505e8091e9a28cb716
SHA1 71414aeec9f1e4a6f5a461b01700cc9cc992cd9e
SHA256 b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf
CRC32 FC31E90F
ssdeep 96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 5ce709bae9f4efb1_tagvandets.dec160
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\ew\Tubolabellate255\drmmesynerne\Tagvandets.Dec160
Size 53.0KB
Processes 2556 (sahost.exe)
Type ASCII text, with very long lines, with no line terminators
MD5 5a35b04906429682adc702905829ad20
SHA1 7d3eba28ca548aa0cb85a7097b21c939b9860613
SHA256 5ce709bae9f4efb12d1fb2c6d9a507edc6af6721ffdb92940aad542d5956dc62
CRC32 E17E6951
ssdeep 1536://0Co2AAHFgN1B2pK4wfcTH+Tm//4/iCPG2:/cCJA7NP2pKi0G/WPG2
Yara None matched
VirusTotal Search for analysis
Name 6f9378b4b070e0d1_pointoptllingernes.sde
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\ew\Tubolabellate255\drmmesynerne\Pointoptllingernes.Sde
Size 363.9KB
Processes 2556 (sahost.exe)
Type TTComp archive, binary, 4K dictionary
MD5 6db608cf2b564d4858c4dbc00a5343e2
SHA1 ad0b5b86ec82b8625c6e8199e00f275a60f84249
SHA256 6f9378b4b070e0d1e9161914e83f06aa66e76c790621fb5588ac12b55efd7bd2
CRC32 1E9E285D
ssdeep 6144:ttKaNSfWrUZ/IaHcaPFen9dwUe9CNX+bDK7ClwMRKKDeacGdeaWkLZgxE7lz/oax:tt/JAZ/rcEFe9C9CNX6DKtqeWeaWkLZL
Yara None matched
VirusTotal Search for analysis
Name e3b0c44298fc1c14_nsbF05B.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\nsbF05B.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis