Dropped Files | ZeroBOX

Name	352b436324a87627_jeqzqzkmkp.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsm67FB.tmp\jeqzqzkmkp.dll
Size	99.5KB
Processes	1772 (vbc.exe)
Type	PE32 executable (DLL) (native) Intel 80386, for MS Windows
MD5	`8dc3c0063d341a832e27d7c13e815e0f`
SHA1	`0be9c4da37598b60604928ec9fcefc69c6a47a0f`
SHA256	`352b436324a87627e2732511330feabe368c4f68cc932cc1d3e1495f786a02ea`
CRC32	`13C798FA`
ssdeep	`1536:kpSeDtv0/h3W43MNjp5IHqrcIbUfswQcSywG/yEZ:kpXDtmjMFdNdy40`
Yara	PE_Header_Zero - PE File Signature OS_Processor_Check_Zero - OS Processor Check IsPE32 - (no description) IsDLL - (no description) Malicious_Library_Zero - Malicious_Library UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	5755ed0d73815609_44000yphj50juj6llaj Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\44000yphj50juj6llaj
Size	211.1KB
Processes	1772 (vbc.exe)
Type	data
MD5	`f2c88890e3584279fcabc0f9e6352dad`
SHA1	`64f8d3f6c53b88b5e3818cfe1807722ca7a555ea`
SHA256	`5755ed0d73815609165c4ea0725be2eaa2da81f046cecfe53454b62683d92392`
CRC32	`40336E46`
ssdeep	`6144:M/0wIHQllfYeh5Xt1lbuJNO+gZe/IVl6OI9g:CllLzzkeLKOJ`
Yara	None matched
VirusTotal	Search for analysis

Name	6b86b273ff34fce1_6D6F4D.lck Submit file
Filepath	C:\Users\test22\AppData\Roaming\41D896\6D6F4D.lck
Size	1.0B
Processes	2256 (vbc.exe)
Type	very short file (no magic)
MD5	`c4ca4238a0b923820dcc509a6f75849b`
SHA1	`356a192b7913b04c54574d18c28d46e6395428ab`
SHA256	`6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b`
CRC32	`83DCEFB7`
ssdeep	`3:U:U`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsb67BB.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsb67BB.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis