CatsnDogs Posted April 12, 2017 ID:1116992 Share Posted April 12, 2017 Hello, Recently went to a website (TomsHardware) via Chrome 57.0.2987.133, and two random files (FILE) automatically downloaded to my Downloads folder, both labeled USNC, both less than 1KB in size - One was 200 bytes in size, the other 800 bytes in size. I uploaded both to VirusTotal, no prior uploads mentioned, with information showing they were likely plain text files. Scanning the files with MBAM didn't come up with anything. The site they were downloaded from showed up as Clean Sites on VirusTotal: http://cs.ffbtas.com/usnc?i=1&ec=c1x&ei=AE73CC4D624A4BF2B6BB7AE642FF18F0&r=http://sync.c1exchange.com%2Fsync%2Fuser%3Fk%3Dffuid%26v%3D[FF_UID]%26pid%3Dp17%26s%3DaHR0cDovL2Fkcy5zZXJ2ZWJvbS5jb20vcGFydG5lcj9jYj0zMzUxJnN2Yz11cyZpZD0yMCZ1aWQ9JEMxWFVJRA%3D%3D I've since deleted the files, and have run scans from a few different AVs including MBAM with clean results. I'm wondering if anyone could assist with any insight as to what could have happened? Thank you very much in advance. Link to post Share on other sites More sharing options...
CatsnDogs Posted April 13, 2017 Author ID:1116998 Share Posted April 13, 2017 I thought I should post the summaries from VirusTotal: https://www.virustotal.com/en/file/fd0c5901dbbc52abdfd51ecd600f189e9588d5fbe6c5e0d40ee7ea3296d52373/analysis/1492037740/ https://www.virustotal.com/en/file/18648674a37f031a802841264b0b48b145575107d41a5ecbfaa3dd052c070457/analysis/1492037804/ Link to post Share on other sites More sharing options...
David H. Lipman Posted April 13, 2017 ID:1117001 Share Posted April 13, 2017 From the VT Report URLS " Magic literal ASCII text" From what I see a non-incident. Link to post Share on other sites More sharing options...
CatsnDogs Posted April 13, 2017 Author ID:1117003 Share Posted April 13, 2017 Thank you for the reply. It's good to know this doesn't seem like a cause for concern. Does something like this just happen randomly every now and then? I'm not very knowledgeable with technical matters, and the closest articles I could find online had to do with Chrome and f.txt. Thank you very much again. Link to post Share on other sites More sharing options...
David H. Lipman Posted April 13, 2017 ID:1117009 Share Posted April 13, 2017 I can't state 'cause "...something like this..." isn't well defined. I can only state that a prima facie review of the Virus Total Reports, indicates the files were of no concern. Link to post Share on other sites More sharing options...
CatsnDogs Posted April 13, 2017 Author ID:1117015 Share Posted April 13, 2017 Thank you for the reply. Sorry for the vague question. I was wondering about Chrome downloading 1KB files without prompts of any kind. It doesn't mean much, but I've never had that happen before. That might also be a question for the Google Products forum. Thank you very much though, whether the files were malicious was all I really wanted to know. Link to post Share on other sites More sharing options...
David H. Lipman Posted April 13, 2017 ID:1117017 Share Posted April 13, 2017 (edited) What Chrome downloads is dependent upon what site is pushing the content. That content needs context as well as other associated details like what was actually in the file as well as where the file was downloaded to. There is just not enough information to draw conclusions. Browsers download files all the time. They can download graphic files such as PNG and GIF and scripts such as JavaScript and HTML. The Browser needs those files to render the material to be viewed. Only a small percentage of this material will request authorization. Most will be downloaded simply because that's needed by the Browser to function. However that material will be downloaded to the Browser's cache. Edited April 13, 2017 by David H. Lipman Edited for content, clarity, spelling and grammar Link to post Share on other sites More sharing options...
CatsnDogs Posted April 13, 2017 Author ID:1117034 Share Posted April 13, 2017 Thank you for this. It puts into perspective just how much goes on behind the scenes. The part about not enough information to draw conclusions rings especially true in this case. I should just count myself lucky it wasn't anything of note. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now