Dropped Files | ZeroBOX

Name	fa536d889affb813_Microsoft Corporation.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Corporation.exe
Size	93.0KB
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`cd49dea59efe62d7288c76280c38f134`
SHA1	`35097c84b9dad414b72022eb368ccb0e4be5563d`
SHA256	`fa536d889affb81391ee202980d417e82cee0b46d97da4070b4a4e2052d33d82`
CRC32	`E11D4599`
ssdeep	`768:oY3gub30YTXspgM0m2zGjpyDtdXWuhtXYLWhyXxrjEtCdnl2pi1Rz4Rk3HsGdpz3:wuT0AA0mT1mrWxL5jEwzGi1dDTDzgS`
Yara	PE_Header_Zero - PE File Signature Is_DotNET_EXE - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	711a6108ba2ce6ca_fransescopast.txt Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\FransescoPast.txt
Size	6.0B
Processes	2056 (99999.exe) 2188 (server.exe)
Type	ASCII text, with no line terminators
MD5	`3905d7917f2b3429490b01cfb60d8f5b`
SHA1	`f78a71af8bbf8cc2f6f313549d4da14bd3771359`
SHA256	`711a6108ba2ce6ca93dd47d6817f2361db10d8ab6eec89460b2dfc2c325efabe`
CRC32	`873586F3`
ssdeep	`3:IA:9`
Yara	None matched
VirusTotal	Search for analysis

Name	f87e55f1a423b65f_autorun.inf Submit file
Filepath	C:\autorun.inf
Size	55.0B
Processes	2188 (server.exe)
Type	Microsoft Windows Autorun file, ASCII text, with CRLF line terminators
MD5	`40b1630be21f39cb17bd1963cae5a207`
SHA1	`63c14bd151d42820dd45c033363fa5b9e1d34124`
SHA256	`f87e55f1a423b65fd639146f71f6027dbd4d6e69b65d9a17f1744774aa6589e1`
CRC32	`903049B1`
ssdeep	`3:It1KV2PHQCyK0x:e1KAwCyD`
Yara	None matched
VirusTotal	Search for analysis

Name	ba0e21ceb11b1ec6_app Submit file
Filepath	C:\Users\test22\AppData\Roaming\app
Size	5.0B
Processes	2056 (99999.exe) 2188 (server.exe)
Type	UTF-8 Unicode (with BOM) text, with no line terminators
MD5	`8fc22f973bec7f0525710dcf02f05edf`
SHA1	`418f88fe2c59f8d9579994aec4034d785e8ac00c`
SHA256	`ba0e21ceb11b1ec62709b0141373ce65de5a156b822c9b6d3c3f9ed9ab224a46`
CRC32	`A4137761`
ssdeep	`3:i:i`
Yara	None matched
VirusTotal	Search for analysis