Dropped Files | ZeroBOX

Name	d52a633fee08de36_me.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\me.exe
Size	706.5KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`b691fc64d3750b2f7fd2041064f7cbc4`
SHA1	`d0709307b33707c79a530016d646f1e80b36f9ab`
SHA256	`d52a633fee08de3642e5cdbf18c2e57e2b46ec1a43cfb5cd7e1591ba175d4600`
CRC32	`ECB0B2E6`
ssdeep	`12288:ZoeJDzAJAAuQqA9WU7eDoy7IhnFD9xQFBeJ2bmrHIu/YuaJQ8abvAcqdB7P9ykJ:K4x3QqA9KMy7IXRyeJsmU2KyvAcE7xJ`
Yara	PE_Header_Zero - PE File Signature ASPack_Zero - ASPack packed file IsPE32 - (no description) UPX_Zero - UPX packed file mzp_file_format - MZP(Delphi) file format
VirusTotal	Search for analysis

Name	47bd4f759aec34d0_pester.bat Submit file
Filepath	C:\Users\test22\360Downloads\Pester.bat
Size	147.0B
Processes	2448 (me.exe)
Type	ASCII text, with CRLF line terminators
MD5	`3d8176273d12c6396a06ded1eb1ede92`
SHA1	`c65f014a4ab095242cf5f89192c5a460a1e7bb2d`
SHA256	`47bd4f759aec34d0cdc9d1f6520bee137a26aaae8d317b218fab52da6cec61fa`
CRC32	`19C8D4C2`
ssdeep	`3:GLrDlA+D3OmWxpcL4E2J5xAIFACHovluwD3OmWxpcL4E2J5xAIvjg02ovn:GLdf+mQpcLJ23fFVov7+mQpcLJ23fv3X`
Yara	None matched
VirusTotal	Search for analysis

Name	26c4ff80ea73d6e5_Microsoft Edge.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\Microsoft Edge.ini
Size	334.0B
Processes	2448 (me.exe) 2508 (cmd.exe)
Type	ASCII text, with CRLF line terminators
MD5	`22c6eec9026d771b792fe196a63ae142`
SHA1	`2d6984cf5938aeebfdf4883784cc3392f4a8cd72`
SHA256	`26c4ff80ea73d6e5a3fef089bd382a22251335f3e71d07fc39f0eb5badef82da`
CRC32	`FD640F90`
ssdeep	`6:KReoZeUQrwGNWjINdAWVZj9RTeXYm8b4+8e6RyUxXc+bwD/gLZG6kyn:uJL2NWMNd7Zx1eXYm1s6RyWc+DLVky`
Yara	None matched
VirusTotal	Search for analysis