popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 6b6dd8b11f84fb78_scanningnetworks.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\System\ScanningNetworks.txt
Size 59.0B
Processes 1532 (None)
Type ASCII text, with CRLF line terminators
MD5 409930721dbce1ee58227d109cca4570
SHA1 767f86ffec769d8415f07b4372a108cba1bf7221
SHA256 6b6dd8b11f84fb78e3e8cfaa7c5fca569d79402b9fc5861b00960b25607c911e
CRC32 CE532972
ssdeep 3:joFkaQXMtS1ME/M2en:jYVQXOS1TUn
Yara None matched
VirusTotal Search for analysis
Name 43587be447bba435_documents.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\Directories\Documents.txt
Size 484.0B
Processes 1532 (None)
Type UTF-8 Unicode text, with CRLF line terminators
MD5 372efb4dbcce2bab0d4deb4a5eef6f7f
SHA1 8da820ceb5990813424a57ef3aeec6543ef93a1e
SHA256 43587be447bba435f72fe513f5d87d050b0c569028917f2ea56d375826b79aeb
CRC32 78BED726
ssdeep 12:+SYk6AhcjLKOEwTXECRF8kUl+xGIYKS7TY7RKsI1X:J6Ahca946SGIYKS7M7R0
Yara None matched
VirusTotal Search for analysis
Name 5badaeac411b4026_temp.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\Directories\Temp.txt
Size 4.6KB
Processes 1532 (None)
Type UTF-8 Unicode text, with CRLF line terminators
MD5 ed7a319ebd69f9524799f4ebac60806a
SHA1 ba87af110501da16837cfc53c726f76c69b1e40e
SHA256 5badaeac411b4026996d729f38a3027e2a11901515db709d5351ddc04c16ff18
CRC32 1F04475A
ssdeep 96:hTtNzZbXkc4vSaJI/m1AdriUlWv45KTctxQLCdMnOGAprO3NFuwYybYX+QfpjeMe:hLtjkccYc3NFuwIez
Yara
  • anti_vm_detect - Possibly employs anti-virtualization techniques
VirusTotal Search for analysis
Name c84c98bbf5e0ef9c_bookmarks.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\Browsers\Firefox\Bookmarks.txt
Size 105.0B
Processes 1532 (None)
Type ASCII text
MD5 2e9d094dda5cdc3ce6519f75943a4ff4
SHA1 5d989b4ac8b699781681fe75ed9ef98191a5096c
SHA256 c84c98bbf5e0ef9c8d0708b5d60c5bb656b7d6be5135d7f7a8d25557e08cf142
CRC32 06923351
ssdeep 3:RGtjybXLGSWK+ZjMGvRS3ZMz9GSOLj2SjyRE2qJ:hvWF7Ipg9OL2RE2m
Yara None matched
VirusTotal Search for analysis
Name 0b8607fdf72f3e65_tmpBB2E.tmp.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpBB2E.tmp.dat
Size 96.0KB
Type SQLite 3.x database, user version 12, last written using SQLite version 3038003
MD5 d367ddfda80fdcf578726bc3b0bc3e3c
SHA1 23fcd5e4e0e5e296bee7e5224a8404ecd92cf671
SHA256 0b8607fdf72f3e651a2a8b0ac7be171b4cb44909d76bb8d6c47393b8ea3d84a0
CRC32 842B3569
ssdeep 12:DQAwfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAwff32mNVpP965Ra8KN0MG/lO
Yara None matched
VirusTotal Search for analysis
Name 1aeaae9e348e4a90_pictures.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\Directories\Pictures.txt
Size 38.0B
Processes 1532 (None)
Type ASCII text, with CRLF line terminators
MD5 dd263295db0ff3f186fc82005f424092
SHA1 2e6aad15cb235693738d7b3357daa028e8108aa4
SHA256 1aeaae9e348e4a9032750e15981663added0c233873341a37135c38adeb0c312
CRC32 223EC129
ssdeep 3:YBrLKch+Aks:srLKLAR
Yara None matched
VirusTotal Search for analysis
Name edb006e05cfa8501_tmpBADC.tmp.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpBADC.tmp.dat
Size 36.0KB
Type SQLite 3.x database, last written using SQLite version 3033000
MD5 3f5ca3e29b1b60e298aeca0a32164c03
SHA1 f9b5ee59c31a3b06a6b8e476b22d2d7cf1fa8b66
SHA256 edb006e05cfa85015aa76c758d6298c279fd318cff0dbb286927c7ad45105488
CRC32 E1ACA097
ssdeep 24:TL2C0RlPbXaFpEO5bNmISHdL6UwcOxvo5:TYLOpEO5J/KdGU1Eo5
Yara None matched
VirusTotal Search for analysis
Name a67aa329b7d878de_videos.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\Directories\Videos.txt
Size 23.0B
Processes 1532 (None)
Type ASCII text, with CRLF line terminators
MD5 1fddbf1169b6c75898b86e7e24bc7c1f
SHA1 d2091060cb5191ff70eb99c0088c182e80c20f8c
SHA256 a67aa329b7d878de61671e18cd2f4b011d11cbac67ea779818c6dafad2d70733
CRC32 0E4761EF
ssdeep 3:k+JrLKB:k+JrLKB
Yara None matched
VirusTotal Search for analysis
Name 2f345865397ff195_history.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\Browsers\Firefox\History.txt
Size 94.0B
Processes 1532 (None)
Type UTF-8 Unicode text
MD5 61cdd7492189720d58f6c5c975d6dfbd
SHA1 6966afe0dec5b0abd90291fa12c0f6b7ef73ed43
SHA256 2f345865397ff1952921db0588a6b589baf30e67a90e11f7064e515ac162e862
CRC32 E765C263
ssdeep 3:RGEnGPHA9lfMJJEFAN2DSLvIJiMhKVX3L2WdXuvn:DG/CF0EFAN2OLciA8d+v
Yara None matched
VirusTotal Search for analysis
Name 0cbf0abe4e6719f4_worldwind.jpg
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\System\WorldWind.jpg
Size 87.1KB
Processes 1532 (None)
Type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1024x768, frames 3
MD5 e4fe55eda163717123ea2e14b9f7c463
SHA1 6bfa306e148bca6def4953e6e7cb047f0cd23659
SHA256 0cbf0abe4e6719f4e9a4c7b5dd3d626d81987c7db77815875659e3f5c50e3957
CRC32 C0B030C5
ssdeep 1536:08qQRlKOtginlq635zhSXx/QptztsoI8e9dGwRJHX+q3sH4vtA4PS/g7iD:NRlk8lq6pzhwCLyo7OGwRpX+nH4v+4PY
Yara
  • JPEG_Format_Zero - JPEG Format
VirusTotal Search for analysis
Name 65512887a285ce98_cookies.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\Browsers\Thunderbird\Cookies.txt
Size 359.0B
Processes 1532 (None)
Type ASCII text, with CRLF line terminators
MD5 440b132b2baad0d96538678d0f5c7601
SHA1 b67b60e391f3684e3d89859e0c2420b2960b0bcd
SHA256 65512887a285ce98bcd220532983a4642865b25610e55be9cb22756be5ae4767
CRC32 82DB5A3D
ssdeep 6:JihKRphXX7aQ2vSI95Bj9GfBHthf+CthfMl0kq/H+LkihKRphXXrSdrNBPPi1H:JZThXraQ2v795BxGfBHff+CffMOkqP0q
Yara None matched
VirusTotal Search for analysis
Name 54cfed4f859d0ec3_tmpBADD.tmp.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpBADD.tmp.dat
Size 116.0KB
Type SQLite 3.x database, last written using SQLite version 3033000
MD5 6f490da5428093674c9e609077dcdef2
SHA1 d77592944313656a90f359fea62921c20078ff19
SHA256 54cfed4f859d0ec37535b9f16acfe42cae6206fad4b1652c2a3d33d5acf636c7
CRC32 A046246D
ssdeep 48:T4ItVG+3C7nNfVcS2+VANULn36uw5NPM5ETQTpUPxK2PIs6kJL5R2+zaSZ00LTLU:ce/C7n/c0VANUjwQU+KraSZ00LTL0J
Yara None matched
VirusTotal Search for analysis
Name 824fae3331b95e2f_tmpBADB.tmp.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpBADB.tmp.dat
Size 40.0KB
Type SQLite 3.x database, last written using SQLite version 3033000
MD5 41c19a9e8541fcb934c13c075bf47721
SHA1 648a7622d533d79b9a0bb31dc370134ec3a75ed7
SHA256 824fae3331b95e2f88ca60c87a6c9569086906ec76fc1db8d6dee9adddc4e80c
CRC32 560F7642
ssdeep 48:+35TqYzDGF/8LKBwUf9KfWfkMUEilGc7xBM6vu3f+fmyJqhU:Ulce7mlcwilGc7Ha3f+u
Yara None matched
VirusTotal Search for analysis
Name bc70f1c6d6c29573_desktop.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\Directories\Desktop.txt
Size 37.0B
Processes 1532 (None)
Type ASCII text, with CRLF line terminators
MD5 0b3aadcd559146d41265f1caa7430e54
SHA1 9aa21aa80161fd86bbc5041dedd850925a84ffff
SHA256 bc70f1c6d6c29573c7ac7f4e781242641caa970ddfb933f2f7ccdcc90bda6992
CRC32 5C68A1AA
ssdeep 3:oAov8LKch+Ag:vov8LKLAg
Yara None matched
VirusTotal Search for analysis
Name c119a54b6bef3a48_tmpBACA.tmp.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpBACA.tmp.dat
Size 80.0KB
Type SQLite 3.x database, last written using SQLite version 3033000
MD5 255929949dea51a2f43a1f40e63764ec
SHA1 8f32ab419264fdad05f4f3828db3c1cd38d919fd
SHA256 c119a54b6bef3a48234950dc07fe70f73b69d1390ef0235e66481faa1048ead6
CRC32 F7A79605
ssdeep 96:5Bc7fYLKYZCIdE8XwUWaPdUDg738Hsa/NhuK0l0q8oc5PyWTJereWb3lxzasq9u4:5BPOUNlCTJMb3rEDFAa6E/
Yara None matched
VirusTotal Search for analysis
Name 5feceb66ffc86f38_msgid.dat
Submit file
Filepath C:\Users\test22\AppData\Local\3a2766c9f045d227337ea361446b7f9a\msgid.dat
Size 1.0B
Processes 1532 (None)
Type very short file (no magic)
MD5 cfcd208495d565ef66e7dff9f98764da
SHA1 b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
CRC32 F4DBDF21
ssdeep 3:V:V
Yara None matched
VirusTotal Search for analysis
Name 88f9dc0b9a633e43_tmpBBBD.tmp.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpBBBD.tmp.dat
Size 512.0KB
Type SQLite 3.x database, user version 11, last written using SQLite version 3031001
MD5 dd47ebe6866ad2ab59d0caa1de28d09e
SHA1 afdf6eb7a01bb7ef4c9d768b65abbbeae5ba2663
SHA256 88f9dc0b9a633e43c6d2c6fae136e782c15aa38c1601dcff948987f1c2a391c3
CRC32 8DEE9EEA
ssdeep 24:DQHtJl32mNVpP965hKN0MG/lZpNjCKRIaU5BnCMOkC0JCpL3FYay:DQfrbWTTTqtStLm
Yara None matched
VirusTotal Search for analysis
Name c32dc2f98f07abe2_history.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\Browsers\Thunderbird\History.txt
Size 102.0B
Processes 1532 (None)
Type UTF-8 Unicode text
MD5 55f3ed9b9ba0c808a4d9b9d411f33a15
SHA1 2c04212258fb030bd62a488d3dcc29d97348e984
SHA256 c32dc2f98f07abe2c595694e7315fe4bdf7fe883e54752ce445fce4513f1e607
CRC32 92836EBF
ssdeep 3:RG5fXHSsPHA9lfMJJEFAN2DSLvIJiMhKVX3LXLydMgn:+HSs/CF0EFAN2OLciAqG3
Yara None matched
VirusTotal Search for analysis
Name b3dfa692f7da19ee_tmpBB2F.tmp.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpBB2F.tmp.dat
Size 5.0MB
Type SQLite 3.x database, user version 69, last written using SQLite version 3038003
MD5 c395620f9a8337341636a78a98f5b3d9
SHA1 97700ec4db7362e02a56df5e70dd828ad9823d24
SHA256 b3dfa692f7da19eede9aa2fe2ac76052cfaa32a7d30cc53b88ea5ef23ec32624
CRC32 476CDB88
ssdeep 192:StsqHQnwkYjcoBMc+uySBQies13A29D+oBpp0:StsbwVTBMc+uySOiJ3Z
Yara None matched
VirusTotal Search for analysis
Name 169c04331f72fe4a_tmpBBBE.tmp.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpBBBE.tmp.dat
Size 5.0MB
Type SQLite 3.x database, user version 53, last written using SQLite version 3031001
MD5 f77930486de1b1bb4b397d5d8f3cd124
SHA1 e3f5727a0774c7cba17f0b10569012dcea24cb55
SHA256 169c04331f72fe4ae9958da09e1b28ec5910f7ea523d6105b7e4ad521b2baaee
CRC32 D85072F9
ssdeep 96:Dm8j5PnH6xY2Wi+67tH2iB4q2xfX7ZbiZzdFzb4PPwI3A7:l5/IYOTAlQzdFzaDm
Yara None matched
VirusTotal Search for analysis
Name 28a3d7e613c3963f_productkey.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\System\ProductKey.txt
Size 29.0B
Processes 1532 (None)
Type ASCII text, with no line terminators
MD5 78228209143c0ec2819a3520df0c1ca4
SHA1 65d4c92e7898a793c47deeb1300f0a466a4ac36f
SHA256 28a3d7e613c3963f6d798b3d01c09ca8edacc65365ec402802a3074309f3c6b2
CRC32 37628EDA
ssdeep 3:BwT:M
Yara None matched
VirusTotal Search for analysis
Name f92f43e592bfd79a_startup.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\Directories\Startup.txt
Size 73.0B
Processes 1532 (None)
Type UTF-8 Unicode text, with CRLF line terminators
MD5 8f96f81a2318c2feab75135449711a25
SHA1 2fbb1b072c91c0cda23723db2c291efbd5b7689c
SHA256 f92f43e592bfd79a252224f101cf06ea21942d7455dbd2d3513128ee0427a522
CRC32 0E718DBF
ssdeep 3:jgihjJVxOQtllfYLKYa/v:jtHIQtlGLK5v
Yara None matched
VirusTotal Search for analysis
Name 653bfbcd58914a99_process.txt
Submit file
Filepath C:\Users\test22\AppData\Local\b8d49ce8173876de297cd77d05ff844f\test22@TEST22-PC_ko-KR\System\Process.txt
Size 2.3KB
Processes 1532 (None)
Type ASCII text
MD5 3fcebc86d36e7bd56181792d90a4b0b2
SHA1 8662ae25703fac6dc1a97cddfd2bdd8a05291b6e
SHA256 653bfbcd58914a99391f10d2fc0d4167063ab6c13955188d8f37827f6138fcd4
CRC32 7A54E8ED
ssdeep 24:2ZQTbmY2ndqtvMsBpzTXq6p9cnd2vFRjT6nRWA3lmovDkRRRov2eJv6CsndcPQcQ:B+A5MQT5q3WwTECQ17W2
Yara None matched
VirusTotal Search for analysis