popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name a9220271c0eb79e5_d93f411851d7c929.customDestinations-ms~RF1949e94.TMP
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF1949e94.TMP
Size 7.8KB
Type data
MD5 b0c9ff441742f3847ea27da9dee7f2cd
SHA1 c42a1eb32ba953a0ce5d8635caabf71b5b281495
SHA256 a9220271c0eb79e5750e0d0e62058ecac560e09cdf9e82ef61aeeabada5d48a4
CRC32 0BBCAB1A
ssdeep 96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:UtvXoxtvbHnorrxQ
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name d6431d5645fffd05_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2248 (powershell.exe)
Type data
MD5 260d23ce04a8f8555a73b7d2dc15e911
SHA1 ebad746fb7de847c50f7502a44f6e35534733efd
SHA256 d6431d5645fffd05a23166d630253bc7ce8c099cf6e9c956f8ae5e1249ee8588
CRC32 11D6B213
ssdeep 96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:ctvXo5tvbHnorrxQ
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 5bf3ab9c47d81525_svoutse.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\0e8d0864aa\svoutse.exe
Size 416.0KB
Processes 1872 (am10.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 934310f719707becac6a69b4579f6fd2
SHA1 27a3d6405f72f0b5b2050b0a844aa2a9b7926c80
SHA256 5bf3ab9c47d8152548db40516ff474a947393de01033b0be2a57409e08d4991c
CRC32 A946131E
ssdeep 12288:KSqMakU3v+GYLWIjD9dSbvBG5u2uQjdQccS:Fq53v+G4Wwub8Ljac1
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check
VirusTotal Search for analysis
Name ffc9090d9d2ca17c_svoutse.job
Submit file
Filepath C:\Windows\Tasks\svoutse.job
Size 272.0B
Processes 1872 (am10.exe)
Type VAX-order 68k Blit mpx/mux executable
MD5 c9b2bddcd669ebd96a916ca9ab7f469f
SHA1 432118f417d01a545feacee189f938bf334b70a6
SHA256 ffc9090d9d2ca17ccabd6f78c3acb1d147cc3a2ceda950b3494d8240bc6a100a
CRC32 297EBEB6
ssdeep 3:Khwn+BZt//u2sl/CEIduhOEjlpQlyEXlxlXVl5ebnpYejal9KlALuAttCRdk2z0x:x+xXE///UEZ+lX1Qye6YctI4y0lQdt0
Yara None matched
VirusTotal Search for analysis
Name 47a600dd7536fe6f_to.ps1
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\1000121041\to.ps1
Size 4.9KB
Processes 2124 (svoutse.exe)
Type ASCII text, with CRLF line terminators
MD5 00816fafebb898850df3ea7d199c277c
SHA1 0d58dcb07bf99780e49f3f883198542be6e3078e
SHA256 47a600dd7536fe6f6e25a6ff50959d9449c41ff0d6bbd0413b04ca37f49f83af
CRC32 292947B7
ssdeep 96:B1cUcd3itBF2FDrTD2sIlW/U6rKWf6/yW4jDjXHR:LF2FDrTD2sIlWDeWf6/yWsHHR
Yara None matched
VirusTotal Search for analysis