popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 08c4dcea75ead4ed_CSCC673.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\CSCC673.tmp
Size 652.0B
Processes 2872 (csc.exe)
Type MSVC .res
MD5 15df1fba29d5bfa2175fcd93427cbdec
SHA1 47de891babdc2adda804172abe8753b56167e102
SHA256 08c4dcea75ead4ed33712009b49c83a2f19a7a4265218522d9139664826230f7
CRC32 E9A60BDF
ssdeep 12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gryWgak7Ynqq9FPN5Dlq5J:+RI+ycuZhNsgakS9FPNnqX
Yara None matched
VirusTotal Search for analysis
Name 81ad8fb27a7d9047_RESC6E1.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\RESC6E1.tmp
Size 1.2KB
Processes 2996 (cvtres.exe) 2872 (csc.exe)
Type Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x406, 9 symbols
MD5 7b4643980e0829db8323bb269a9df666
SHA1 c30f55845778cccb1272920c391f44cc739ce6ab
SHA256 81ad8fb27a7d904739034b73427d551cb62939194e26b606db4a3d887ab1bf1b
CRC32 EF607BEF
ssdeep 24:HGtJ9YernuTSmHJoUnhKLI+ycuZhNsgakS9FPNnqjtd:miernvmhnhKL1ulsga39fqjH
Yara None matched
VirusTotal Search for analysis
Name e3b0c44298fc1c14_jt3gryjx.err
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\jt3gryjx.err
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis
Name 3a255c0024916f19_590aee7bdd69b59b.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms
Size 7.8KB
Processes 2728 (powershell.exe)
Type data
MD5 6fd29def73b2779e0ae71c4eecd304f7
SHA1 4ba660e4db856e04eb93a01c59ee764259ec55e7
SHA256 3a255c0024916f19c5b3f5d4aa5cde453cc5d90b0784a15f0456e57e71a764b6
CRC32 1F966CD8
ssdeep 96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworDPtDHXyf2lUVul:ctvXo5tvbHnorxTyQ
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 2de87f04c76eddc5_jt3gryjx.cmdline
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\jt3gryjx.cmdline
Size 311.0B
Processes 2728 (powershell.exe)
Type UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators
MD5 a55f16a5360f86d084cf62c5b5e73565
SHA1 1ee139a5062f9c5c6893838ec509213b3c9fa152
SHA256 2de87f04c76eddc5f56e3fbb7e7c3f26809d69c46141f6b2c42853d4030323ef
CRC32 55A02ED7
ssdeep 6:pAu+H2LvFJDdq++bDdqBnmQpcLJ23fBmGsSAE2NmQpcLJ23fG:p37LvXOLMZnPAE2xOLM+
Yara None matched
VirusTotal Search for analysis
Name 502031b34a2dd0b9_jt3gryjx.0.cs
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\jt3gryjx.0.cs
Size 471.0B
Processes 2728 (powershell.exe)
Type C++ source, UTF-8 Unicode (with BOM) text, with very long lines
MD5 ea42e2b6a08d8bead2da3e27b03ba300
SHA1 3d1b4a4190305fbfb83f9716ffc3d0538709b492
SHA256 502031b34a2dd0b9fa86a923c6fbd461b0272c5a1fe328548a55a881aaee4102
CRC32 141D221A
ssdeep 6:V/DsYLDS81zuN0wmMGfJQXReKJ8SRHy4H0R6mctewe/LoaIy:V/DTLDfuNjXfHUkzy
Yara None matched
VirusTotal Search for analysis
Name 1b7b865aade6a625_jt3gryjx.out
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\jt3gryjx.out
Size 598.0B
Processes 2728 (powershell.exe)
Type UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
MD5 5790971e51ed0b099870374fff72227f
SHA1 fb078d1d8d3b4e80fd727a473b721081bab39ee9
SHA256 1b7b865aade6a625221b2a4189c958e4935dd7f14012f250791bab560713d3f9
CRC32 99275CA3
ssdeep 12:K4X/NzR37LvXOLMZnPAE2xOLMfKai31bIKIMBj6I5BFR5y:KyNzd3BZnIE2nfKai31bIKIMl6I5Dvy
Yara None matched
VirusTotal Search for analysis
Name c29e86dd193f12a0_jt3gryjx.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\jt3gryjx.dll
Size 3.5KB
Processes 2872 (csc.exe) 2728 (powershell.exe)
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 99bb19375977039131e094336a32b3e8
SHA1 596e0b7ac2a5a015dd683f473c33a375fd2d8bb6
SHA256 c29e86dd193f12a0c487f05f7e68d1843928f3ff5ce9fad8ffc1f412e2278600
CRC32 E9CABA75
ssdeep 24:etGST9iWaEwR/ZNknMUbdPtkZfhl1cXmI+ycuZhNsgakS9FPNnq:6ExBZQMMuJhlK21ulsga39fq
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE32 - (no description)
  • Is_DotNET_DLL - (no description)
VirusTotal Search for analysis
Name 184888131820b11e_jt3gryjx.pdb
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\jt3gryjx.pdb
Size 7.5KB
Processes 2872 (csc.exe) 2728 (powershell.exe)
Type MSVC program database ver 7.00, 512*15 bytes
MD5 1c775eecd6010db303ebaacffd81ab69
SHA1 b711169ff335c708f288f0c7231e1bac8f566378
SHA256 184888131820b11ed3387a6898a07c795770ae67c6c8659d0736c81a99f9bd58
CRC32 3F08D01F
ssdeep 6:zz/BamfXllNS/4JtQAl31mllxrS/77715KZYX5JtQAVoGggksl/3YXBGQu+e0KWI:zz/H1W/zESXS/pwTUmqRi
Yara None matched
VirusTotal Search for analysis