Dropped Files | ZeroBOX

Name	439e5f590b4bea13_evpz.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsk6471.tmp\evpz.dll
Size	32.5KB
Processes	2212 (vbc.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c820bfe346d35f1ed0d3017cadb8f16d`
SHA1	`a98131691df2b4445124304307130888050fe410`
SHA256	`439e5f590b4bea13a9bfb7c94bbd8fa99f45a310dc44c241db2375b4e8923cb3`
CRC32	`1BA8B00E`
ssdeep	`384:uIbr7TBKwNuNjiVMauKBO1AhvxF756rLAK5GNrPAg9K8OtwBpYxjETl7:uIZfYNjCy1kxFsr5GNr195OccETp`
Yara	Malicious_Packer_Zero - Malicious Packer PE_Header_Zero - PE File Signature OS_Processor_Check_Zero - OS Processor Check IsPE32 - (no description) IsDLL - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nse6450.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nse6450.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	d4c502704e2bf2c9_l07z1x3gztcicr Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\l07z1x3gztcicr
Size	214.0KB
Processes	2212 (vbc.exe)
Type	data
MD5	`d158a7c6d2ddb341da0c3c5bea4216f3`
SHA1	`8f2bdcddc1488f890424c5f67b51a5997d6b4300`
SHA256	`d4c502704e2bf2c9baf8d19dc36e985126fc2184325c26c723fcd618915bfe68`
CRC32	`E043658A`
ssdeep	`6144:njkKOj7tCX0oZn6Cg+8kdO5lp+4tb0Vc4LHgroVuTKdn1bLA:nFOntW1g+iX+xcrcXLA`
Yara	None matched
VirusTotal	Search for analysis