Dropped Files | ZeroBOX
Name e840b04e7f5e1b66_MSIF452.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\MSIF452.tmp
Size 1.0MB
Processes 2664 (msiexec.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, InstallShield self-extracting archive
MD5 cfa033ab6b7bf599c850f5ea1e52d40f
SHA1 8b4facb1784c5982580a011a3d2240b7794be4c0
SHA256 e840b04e7f5e1b6687f87e88bf3037d8f89348eabbe77cc243c35718ad78030e
CRC32 4C33360B
ssdeep 24576:QUUGGnwTlkWTbuEymCl9sNHomcmvUbsEWNV5bYQgAT+QoZkdq:jGnB6yrl95mNqKYWylCk
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • CAB_file_format - CAB archive file
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check
VirusTotal Search for analysis
Name 2bef4b53dc708e42_setup.msi
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\ScreenConnect\c13606fe9009f11d\setup.msi
Size 14.4MB
Processes 2548 (248364651.exe)
Type Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Default, Author: ScreenConnect Software, Keywords: Default, Comments: Default, Template: Intel;1033, Revision Number: {80530F48-9896-FE66-A2AB-CD9170769313}, Create Time/Date: Wed Jul 24 17:08:08 2024, Last Saved Time/Date: Wed Jul 24 17:08:08 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.0.1701), Security: 2
MD5 f5a5d64c03f0d058215dfba34bd05ab0
SHA1 6928dcad8f4f5ba477759caae7b81c1fb43bc8c4
SHA256 2bef4b53dc708e4254c5e2c455385864c16a85e65b1c662468472c762fd40109
CRC32 D42BE1F5
ssdeep 196608:WUMZHM1CJi5TdMUMZHM1CJwUMZHM1CJfUMZHM1CJcUMZHM1CJaUMZHM1CJ5UMZHE:7y1ilDy1ty18y1hy1ny1Gy1Vy1
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Microsoft_Office_File_Zero - Microsoft Office File
  • CAB_file_format - CAB archive file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
VirusTotal Search for analysis