popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 3aa2e90db618bf6a_vmuxw6e3.cmdline
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\vmuxw6e3.cmdline
Size 311.0B
Processes 2548 (powershell.exe)
Type UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators
MD5 8da72ffd96d5f18c7a331e6052d21487
SHA1 81f254e7c8d1bba0b288aa15663a2f5d7212ae9b
SHA256 3aa2e90db618bf6a842a1caa48565355cf3e7a7e2815ecd41dcda0221f3cc7d8
CRC32 76A5BAB2
ssdeep 6:pAu+H2LvFJDdq++bDdqBnmQpcLJ23fawmGsSAE2NmQpcLJ23f0x:p37LvXOLMPnPAE2xOLMQ
Yara None matched
VirusTotal Search for analysis
Name 9545e59ffeb3b998_RES5E63.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\RES5E63.tmp
Size 1.2KB
Processes 2240 (cvtres.exe) 2468 (csc.exe)
Type Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x406, 9 symbols
MD5 f6efcada8e034dda7e317aac58dc1d3a
SHA1 d06df8cff86b502f55a4df1a442cf50137bc4d01
SHA256 9545e59ffeb3b998ffdd718d95ca5d72315b40c0fd268093833c06434bc0984b
CRC32 1024615C
ssdeep 24:H3J9YernM4mHYUnhKLI+ycuZhNLakSNPNnqjtd:gerndmznhKL1ulLa3XqjH
Yara None matched
VirusTotal Search for analysis
Name 710c3a16b975f143_vmuxw6e3.0.cs
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\vmuxw6e3.0.cs
Size 477.0B
Processes 2548 (powershell.exe)
Type C++ source, UTF-8 Unicode (with BOM) text, with very long lines
MD5 f5f34a2a8e45cddfb6b2237a49c66c92
SHA1 615982371d18c545e33503554a412775f0e57af9
SHA256 710c3a16b975f143deb8819e359cd49475f2aaacf4fe814857717c27013c82f8
CRC32 7948043D
ssdeep 6:V/DsYLDS81zuQ402PMmBQXReKJ8SRHy4H7J6CZ6mO7J/QEIy:V/DTLDfud+XfH5/aay
Yara None matched
VirusTotal Search for analysis
Name d959b7cc75226f26_CSC5DE5.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\CSC5DE5.tmp
Size 652.0B
Processes 2468 (csc.exe)
Type MSVC .res
MD5 103682050caf3c16b38ecc9899a543b7
SHA1 7c10f8ea2236b88dc1fc74d4de58a845b011d07f
SHA256 d959b7cc75226f26a836d82b5443c55bb8ac40ff9f7869c1bb8968f2c061d887
CRC32 738FC220
ssdeep 12:DXt4Ii3ntuAHia5YA49aUGiqMZAiN5gryZak7YnqqNPN5Dlq5J:+RI+ycuZhNLakSNPNnqX
Yara None matched
VirusTotal Search for analysis
Name 3991b352fa353171_vmuxw6e3.out
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\vmuxw6e3.out
Size 598.0B
Processes 2548 (powershell.exe)
Type UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
MD5 a2fe77eea82ac8fbc21c42e6c66792de
SHA1 5297c2e32f4fce07934b8e76f345cafc5f1424ac
SHA256 3991b352fa3531718eb5901da932c31890629b7d1405af052749827e6e0bb558
CRC32 E851A942
ssdeep 12:K4X/NzR37LvXOLMPnPAE2xOLMFKai31bIKIMBj6I5BFR5y:KyNzd3BPnIE2nFKai31bIKIMl6I5Dvy
Yara None matched
VirusTotal Search for analysis
Name 0ed5b0823e71e0e3_590aee7bdd69b59b.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms
Size 7.8KB
Processes 2548 (powershell.exe)
Type data
MD5 f4a8a3e56bca0190031a365f104571cf
SHA1 7a4eac7016b8feca961f757cfe05bfeb4b76c10f
SHA256 0ed5b0823e71e0e3262a8a73ff269499135b20c9c5aa71e34b57a9f43218ed41
CRC32 E95A2C69
ssdeep 96:QtuC6GCPDXBqvsqvJCwoFtuC6GCPDXBqvsEHyqvJCworQStDHXyWlUVul:QtbXoFtbbHnorFTyo
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 93f8322968cc524c_vmuxw6e3.pdb
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\vmuxw6e3.pdb
Size 7.5KB
Processes 2468 (csc.exe) 2548 (powershell.exe)
Type MSVC program database ver 7.00, 512*15 bytes
MD5 d9cd6eb4a19e71d73c9e428a195da482
SHA1 fcff5c9bfcbaec95ea09be1359ca8ae690fcd855
SHA256 93f8322968cc524cdfd128121b4a4ad588e45f5091235d4c4a1fc948ff57a13a
CRC32 DB7725D7
ssdeep 6:zz/BamfXllNS/KvT1mllxrS/77715KZYXvv7oGggksl/3YXBGQu+e0KWEi+:zz/H1W/KRSXS/pwqTmqRi
Yara None matched
VirusTotal Search for analysis
Name eadc0e4f8087d9bd_vmuxw6e3.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\vmuxw6e3.dll
Size 3.5KB
Processes 2468 (csc.exe) 2548 (powershell.exe)
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 06213681e06cef3e06c0b6933dc0c86f
SHA1 1ac8ccf7f5463840fc5aed162a416e1f727f4eb8
SHA256 eadc0e4f8087d9bd7ed64bd83c78cdbe692c47a22249a60569bf9939c747e437
CRC32 E4D23D91
ssdeep 24:etGSFN6G7wcZX10kB9VUbdPtkZfFhFjgj1Z8ZmI+ycuZhNLakSNPNnq:6iY1n9VMuJFhujos1ulLa3Xq
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE32 - (no description)
  • Is_DotNET_DLL - (no description)
VirusTotal Search for analysis
Name e3b0c44298fc1c14_vmuxw6e3.err
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\vmuxw6e3.err
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis