popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 629bfd98a5d9342c_catalog.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\catalog.dat
Size 192.0B
Processes 2580 (Um9L61WgOApLFKJ.exe)
Type data
MD5 8a78a49cc68d573b0de068efb011de81
SHA1 081c65c748657fe8257821f64fce78feeff82c3e
SHA256 629bfd98a5d9342c61185b2892e563303f9639711eaee8dff3f369a92da95fab
CRC32 3F45AB93
ssdeep 3:XrURGizD7cnRNGbgCFKRNX/pCNysvyKGHfBXV8FQEUqm/LQ74/f6SR55WoXL1:X4LDAnybgCFcpCN0KG5xkm0UhnWKh
Yara None matched
VirusTotal Search for analysis
Name d6431d5645fffd05_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2532 (powershell.exe)
Type data
MD5 260d23ce04a8f8555a73b7d2dc15e911
SHA1 ebad746fb7de847c50f7502a44f6e35534733efd
SHA256 d6431d5645fffd05a23166d630253bc7ce8c099cf6e9c956f8ae5e1249ee8588
CRC32 11D6B213
ssdeep 96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:ctvXo5tvbHnorrxQ
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name a9220271c0eb79e5_d93f411851d7c929.customDestinations-ms~RF1de5cc1.TMP
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF1de5cc1.TMP
Size 7.8KB
Type data
MD5 b0c9ff441742f3847ea27da9dee7f2cd
SHA1 c42a1eb32ba953a0ce5d8635caabf71b5b281495
SHA256 a9220271c0eb79e5750e0d0e62058ecac560e09cdf9e82ef61aeeabada5d48a4
CRC32 0BBCAB1A
ssdeep 96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:UtvXoxtvbHnorrxQ
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name d8c15cad6aefe270_task.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size 54.0B
Processes 2580 (Um9L61WgOApLFKJ.exe)
Type ASCII text, with no line terminators
MD5 782c14b1b16c5a49147ac5f4378d21bf
SHA1 5efa0562550e2dff4a437e7f8c99dd131ed6c64e
SHA256 d8c15cad6aefe27057c479ea80a5eece0d81a760ef4193f663dbe2884efe5c48
CRC32 56554A32
ssdeep 3:oNmWxpcL4E2J5xAIZgkV+L4A:oNmQpcLJ23fZgkVDA
Yara None matched
VirusTotal Search for analysis
Name bb9181b3935b8681_tmp4C62.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp4C62.tmp
Size 1.3KB
Processes 2580 (Um9L61WgOApLFKJ.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 be81f72fa4dbc827132836ee2af92c96
SHA1 fe5ded04ab4932dea6cf414e9e4428f43da70d03
SHA256 bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f
CRC32 7AA438E3
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j
Yara None matched
VirusTotal Search for analysis
Name 97798407c9685c1b_storage.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\storage.dat
Size 310.8KB
Processes 2580 (Um9L61WgOApLFKJ.exe)
Type data
MD5 a2a0a9ec321d08e2eb636285c7860ecf
SHA1 f83a112dc167665c4b6c8fb01fc10b39d360f670
SHA256 97798407c9685c1b3e82d3e74d983d4dc48be7d438250e2a35b11ecb82bcebd0
CRC32 43D65A36
ssdeep 6144:xlHHk2kfkS89VPqcnKrKzX7x3iamj5DYj6qTEzHSBq6RE93EWP3cXaZ2:xlHEd96ViYKrCAuIm46Ro3Ec3kaM
Yara None matched
VirusTotal Search for analysis
Name 9b13deac0c96a5ad_tmp4ACA.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp4ACA.tmp
Size 1.3KB
Processes 2580 (Um9L61WgOApLFKJ.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 4964bd2b762b56a779cbd1faa84ecccd
SHA1 ec2c88fa74df7d93011d2ef3182563f9f5116142
SHA256 9b13deac0c96a5ad13e49c2203dceca50044ad1b60ce0bfca5b5db4b62df637b
CRC32 0580E4F5
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0ZhD8xtn:cbk4oL600QydbQxIYODOLedq3YhIj
Yara None matched
VirusTotal Search for analysis
Name 73b0b92179c61c26_settings.bin
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bin
Size 40.0B
Processes 2580 (Um9L61WgOApLFKJ.exe)
Type data
MD5 ae0f5e6ce7122af264ec533c6b15a27b
SHA1 1265a495c42eed76cc043d50c60c23297e76cce1
SHA256 73b0b92179c61c26589b47e9732ce418b07edee3860ee5a2a5fb06f3b8aa9b26
CRC32 7C56D530
ssdeep 3:9bzY6oRDMjmPl:RzWDMCd
Yara None matched
VirusTotal Search for analysis
Name fa7db231126642c6_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 2580 (Um9L61WgOApLFKJ.exe)
Type ISO-8859 text, with no line terminators
MD5 c5f79e8177ee50ca66ea9a540c0f1bac
SHA1 2720af25ba80baac709471fda4f379af36892c73
SHA256 fa7db231126642c6dd8091350397f7fb9abbfc5d891957870dcb0208f2c07a3b
CRC32 894E9BCD
ssdeep 3:ab:ab
Yara None matched
VirusTotal Search for analysis