popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name bb9181b3935b8681_tmpF97F.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpF97F.tmp
Size 1.3KB
Processes 2480 (gseTC3ENkK2egL4.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 be81f72fa4dbc827132836ee2af92c96
SHA1 fe5ded04ab4932dea6cf414e9e4428f43da70d03
SHA256 bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f
CRC32 7AA438E3
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j
Yara None matched
VirusTotal Search for analysis
Name d6431d5645fffd05_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2436 (powershell.exe)
Type data
MD5 260d23ce04a8f8555a73b7d2dc15e911
SHA1 ebad746fb7de847c50f7502a44f6e35534733efd
SHA256 d6431d5645fffd05a23166d630253bc7ce8c099cf6e9c956f8ae5e1249ee8588
CRC32 11D6B213
ssdeep 96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:ctvXo5tvbHnorrxQ
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 2d7704b83f1d4573_tmpF836.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmpF836.tmp
Size 1.3KB
Processes 2480 (gseTC3ENkK2egL4.exe)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 6f7b49d94b0c8c7deadacf0c07149915
SHA1 1c7ba07550b36a6cb6cdc99dd898b2a472ddfea8
SHA256 2d7704b83f1d457351c63619160ea5b1e0cf93fd60d32dce259c25970a92a31b
CRC32 F68F1A64
ssdeep 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Zhzxtn:cbk4oL600QydbQxIYODOLedq3Ypj
Yara None matched
VirusTotal Search for analysis
Name 689e4d2d819704fd_task.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat
Size 54.0B
Processes 2480 (gseTC3ENkK2egL4.exe)
Type ASCII text, with no line terminators
MD5 b8a0494bb8eb7ed60e517fa96a5845b9
SHA1 27fa47355728782ec3c358f47c9fb76fbcd6b91c
SHA256 689e4d2d819704fd43161673bb87cf0b971e9edb7a72412d1786ac250dfa48d9
CRC32 EAF34A69
ssdeep 3:oNmWxpcL4E2J5xAIpnrhpt4A:oNmQpcLJ23ftrJN
Yara None matched
VirusTotal Search for analysis
Name a9220271c0eb79e5_d93f411851d7c929.customDestinations-ms~RF1827cfa.TMP
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF1827cfa.TMP
Size 7.8KB
Type data
MD5 b0c9ff441742f3847ea27da9dee7f2cd
SHA1 c42a1eb32ba953a0ce5d8635caabf71b5b281495
SHA256 a9220271c0eb79e5750e0d0e62058ecac560e09cdf9e82ef61aeeabada5d48a4
CRC32 0BBCAB1A
ssdeep 96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:UtvXoxtvbHnorrxQ
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 7d5fd40ea2dd5336_run.dat
Submit file
Filepath C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size 8.0B
Processes 2480 (gseTC3ENkK2egL4.exe)
Type ISO-8859 text, with no line terminators
MD5 8f8c388e0396423880d33055ff7a4adf
SHA1 9234a9bbc10a3af04405fd75e9128a1b91ff2a5f
SHA256 7d5fd40ea2dd5336cd3b11da431a73d5521e0286149a6fbb2343d2b7b08d2dd3
CRC32 27292451
ssdeep 3:CKpn:Ci
Yara None matched
VirusTotal Search for analysis