popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name e317fe7d8d54c293_regaasm.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\RegAAsm.exe
Size 282.5KB
Processes 884 (laserrr.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 da401fe564d861a209ff600633e4a845
SHA1 a03a9d038f464984717322ff18996d8024242b51
SHA256 e317fe7d8d54c2935cb43168e3a65954c180f2c82d97fee05ada76d87af0c52c
CRC32 24A06275
ssdeep 6144:ITjvc2H8VD5tUTHmvlvEVj/LUsuULqmV4vGCaW7lTXNFwpV:OBTHmNEVj/LDuULVV4NVaV
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 824fae3331b95e2f_6511-iOQ--
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\6511-iOQ--
Size 40.0KB
Type SQLite 3.x database, last written using SQLite version 3033000
MD5 41c19a9e8541fcb934c13c075bf47721
SHA1 648a7622d533d79b9a0bb31dc370134ec3a75ed7
SHA256 824fae3331b95e2f88ca60c87a6c9569086906ec76fc1db8d6dee9adddc4e80c
CRC32 560F7642
ssdeep 48:+35TqYzDGF/8LKBwUf9KfWfkMUEilGc7xBM6vu3f+fmyJqhU:Ulce7mlcwilGc7Ha3f+u
Yara None matched
VirusTotal Search for analysis
Name 413852f536628cfa_6511-iOQ--
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\6511-iOQ--
Size 40.0KB
Type SQLite 3.x database, last written using SQLite version 3033000
MD5 91a39ee5267872c5a86c0b791bfd0fe0
SHA1 3ee10302a6d40c7aa02afe01d36498f1b27f7895
SHA256 413852f536628cfad0f6be985e814443f8a2bbdcfd55994aff9a561fbad68fe1
CRC32 B431A379
ssdeep 24:TL2C0RlPbXaFpEO5bNmISHdL6UwcOxvo5:TYLOpEO5J/KdGU1Eo5
Yara None matched
VirusTotal Search for analysis
Name a15fd84ee61b54c9_sqlite3.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\sqlite3.dll
Size 1.0MB
Processes 2664 (runonce.exe)
Type PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5 f1e5f58f9eb43ecec773acbdb410b888
SHA1 f1b8076b0bbde696694bbc0ab259a77893839464
SHA256 a15fd84ee61b54c92bb099dfb78226548f43d550c67fb6adf4cce3d064ab1c14
CRC32 2FA811D1
ssdeep 24576:chlbC7QSGIt3dr8mVpn1MRRlnCSLvcdLpi:cnZoNrLn1M3lnV4E
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 35c648fa355503c4_sqlite3.def
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\sqlite3.def
Size 7.2KB
Processes 2664 (runonce.exe)
Type ASCII text
MD5 a199f89960429326ae36f645ffc387af
SHA1 85e4281d0f95aa75611f2946fb4212a70f7e7b75
SHA256 35c648fa355503c4b6608c4d482bf8c0ae34af33d70f08172ecd43816aaab733
CRC32 ADB208F6
ssdeep 96:kCcuN/mXU+anR+7GgbXgXdMcAM3K4tGvAF+GEhwIEVtvaENwzY0aR:kA/B+7GgbQbKWrF+GEeJvaENwzcR
Yara None matched
VirusTotal Search for analysis