Dropped Files | ZeroBOX

Name	711a6108ba2ce6ca_fransescopast.txt Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\FransescoPast.txt
Size	6.0B
Processes	1076 (am.exe) 2240 (None)
Type	ASCII text, with no line terminators
MD5	`3905d7917f2b3429490b01cfb60d8f5b`
SHA1	`f78a71af8bbf8cc2f6f313549d4da14bd3771359`
SHA256	`711a6108ba2ce6ca93dd47d6817f2361db10d8ab6eec89460b2dfc2c325efabe`
CRC32	`873586F3`
ssdeep	`3:IA:9`
Yara	None matched
VirusTotal	Search for analysis

Name	5f1eaaa7781758b4_Microsoft Corporation.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Corporation.exe
Size	93.0KB
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`59b40a406af1b307f204b246371db9bf`
SHA1	`8448937d6dcd4868082a2e09fd6ff582d9c73c70`
SHA256	`5f1eaaa7781758b4830a2c576234d1687f95c1b058b48d833a4d71f2fa970d6b`
CRC32	`1FFAA5AD`
ssdeep	`768:WY3TmdD9O/pBcxYsbae6GIXb9pDX2KC98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3Y7E:hm3Ox6baIa9R/j00ljEwzGi1dDuD6gS`
Yara	PE_Header_Zero - PE File Signature Is_DotNET_EXE - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	d3d1d98df443947a_app Submit file
Filepath	C:\Users\test22\AppData\Roaming\app
Size	4.0B
Processes	1076 (am.exe) 2240 (None)
Type	UTF-8 Unicode (with BOM) text, with no line terminators
MD5	`3eb8a6afa534fadc147aa70dea76e863`
SHA1	`03b827d99098f69c9f126679598f7166c99d1624`
SHA256	`d3d1d98df443947ab0b52378acbb5f5c21593677b45f0403b3831c93d8be7fca`
CRC32	`CAB4B86D`
ssdeep	`3:W:W`
Yara	None matched
VirusTotal	Search for analysis