Dropped Files | ZeroBOX

Name	89e20b218aad7fdd_test.png Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\RarSFX0\test.png
Size	9.9KB
Processes	1872 (Meetings.exe)
Type	PNG image data, 373 x 373, 8-bit/color RGBA, non-interlaced
MD5	`329b841d023d61c53b5037d7ece66196`
SHA1	`68f0b196d48a87b77c0592ebc2e6da65df40ce69`
SHA256	`89e20b218aad7fddb992b856444f080e8100257bcf70278045a0f2f307826dd4`
CRC32	`2D888177`
ssdeep	`192:DD/XTiqIwuaC0yd06D1FTPauxJ339YSyEQVQlQwEF56Eu1229cqSx1qn6Q7f8M6K:DDmeeXTaiiJQOwI6EumPxKrriQEX9S`
Yara	PNG_Format_Zero - PNG Format
VirusTotal	Search for analysis

Name	f850edcfc0a41c02_1sesc.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\RarSFX0\1sesc.exe
Size	72.1KB
Processes	1872 (Meetings.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`c4f4156638ac479952f64a7e95f2f90b`
SHA1	`895d46fdd02604e99841a1b1daa6c989ccd4d55e`
SHA256	`f850edcfc0a41c0296474dc465bfb53d7299f9ebb56737fbb4e6a970cd2e5f13`
CRC32	`37E92CD1`
ssdeep	`1536:IpheAoMDZno/tzNDVHnwGjqbfZigjeg9ZWCMb+KR0Nc8QsJq39:qheAoMDZnoyff5e0Nc8QsC9`
Yara	PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	3c471334e9483885_favicon.ico Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\RarSFX0\favicon.ico
Size	14.7KB
Processes	1872 (Meetings.exe)
Type	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
MD5	`78cb2ff3886c0386513cad5a2c472349`
SHA1	`18a9eb4dc3a213edf5b973b05ea466a5baf06486`
SHA256	`3c471334e9483885a47a6548a466813670cb14b29e36b339a88b0ea2350bf54a`
CRC32	`4E1A2177`
ssdeep	`96:Bo4UE1dWTmzA5EJaLFAzrOyXiwGt0G8lOPeTRYR4uTiINd8cNkvNeaNyenX2pO2+:BmOAi0LizZyt+lLTRYR4AtevkaPeP38`
Yara	icon_file_format - icon file format
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14___tmp_rar_sfx_access_check_9714468 Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\RarSFX0\__tmp_rar_sfx_access_check_9714468
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis