Dropped Files | ZeroBOX

Name	9762047f04bae522_temp0923 Submit file
Filepath	C:\Users\test22\AppData\Roaming\temp0923
Size	10.0B
Processes	2104 (cvtres.exe)
Type	ASCII text, with no line terminators
MD5	`02c1bee62492c575b2b6a2e6e1567694`
SHA1	`d29bc230d7626084d369e94bb54f5fadf0583a5d`
SHA256	`9762047f04bae522e542cd4b5b40acbe6264a7c513f125981dc0929a038c8578`
CRC32	`D965E90C`
ssdeep	`3:MIVw:MIC`
Yara	None matched
VirusTotal	Search for analysis

Name	b39fc625927448fa_txtkzzwfo.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\fOWeBGYAp\TxTKzZWFO.exe
Size	36.5KB
Processes	184 (Build.exe)
Type	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`76a22609f559db1a73201b95a09053e7`
SHA1	`56d1d8da4e5cea24045cfadc46df0d01be4f161c`
SHA256	`b39fc625927448fa634bf0241a8eabd228d9acffb3e66e1091eb1a7cb3f9d719`
CRC32	`D51C167E`
ssdeep	`768:m10OhbWGFX9QY2A8ZaTJeXARCaib2Fgc44dxSi59J8:m1j7eYiZK1Lib2WGbSi59y`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software Is_DotNET_EXE - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis