popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name a770ecba3b08bbab_freebl3.dll
Submit file
Filepath C:\ProgramData\freebl3.dll
Size 326.5KB
Processes 2404 (Dxndvkhrxwosconsoleapp14.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 ef2834ac4ee7d6724f255beaf527e635
SHA1 5be8c1e73a21b49f353c2ecfa4108e43a883cb7b
SHA256 a770ecba3b08bbabd0a567fc978e50615f8b346709f8eb3cfacf3faab24090ba
CRC32 B698D0CA
ssdeep 6144:C8YBC2NpfYjGg7t5xb7WOBOLFwh8yGHrIrvqqDL6XPowD:CbG7F35BVh8yIZqn65D
Yara
  • PE_Header_Zero - PE File Signature
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)
  • IsDLL - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 21e84224e2521ec4_dxndvkhrxwosconsoleapp14.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\Dxndvkhrxwosconsoleapp14.exe
Size 390.0KB
Processes 2680 (Uxqcrfgglyzuwogibeigruaconsoleapp12.exe)
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 c958e1bd43224bd5e3d74106e9be579d
SHA1 6ca966f745e661c3eff660616bd18a8c1b0bfa31
SHA256 21e84224e2521ec496d68d6d6678efb4d847c24d3b492f184b6dac825351aaf0
CRC32 C23EDC6A
ssdeep 6144:2x9N2JETkt9XSS9aK/97V9PDAoazsFdVV6fZDEWYkV5sjCDr2V:s2ETkt9XLaUpDv1QfdECsOD
Yara
  • PE_Header_Zero - PE File Signature
  • Generic_Malware_Zero - Generic Malware
  • IsPE32 - (no description)
  • Is_DotNET_EXE - (no description)
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
VirusTotal Search for analysis
Name 4c4c054253fa0b46_uxqcrfgglyzuwogibeigruaconsoleapp12.exe
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\Uxqcrfgglyzuwogibeigruaconsoleapp12.exe
Size 653.5KB
Processes 2348 (asdfg.exe)
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 ac1e7e050ae20b96b165a51dc782dd8c
SHA1 933321877628be5ebe8c754bef3844c8173e4554
SHA256 4c4c054253fa0b462c388d40eb52de7d31c4212a729ef7924fcffb8ce20f6589
CRC32 E0681CD3
ssdeep 12288:LbEbSOl0pN79Ntk2l+QnmUoPXntu8Q9Q5WlKSyoFpN32GrNEU:DxA2MUIsT25w/y23
Yara
  • PE_Header_Zero - PE File Signature
  • Generic_Malware_Zero - Generic Malware
  • IsPE32 - (no description)
  • Is_DotNET_EXE - (no description)
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
VirusTotal Search for analysis
Name 43536adef2ddcc81_softokn3.dll
Submit file
Filepath C:\ProgramData\softokn3.dll
Size 141.5KB
Processes 2404 (Dxndvkhrxwosconsoleapp14.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 a2ee53de9167bf0d6c019303b7ca84e5
SHA1 2a3c737fa1157e8483815e98b666408a18c0db42
SHA256 43536adef2ddcc811c28d35fa6ce3031029a2424ad393989db36169ff2995083
CRC32 760685C5
ssdeep 3072:UAf6suip+d7FEk/oJz69sFaXeu9CoT2nIVFetBWsqeFwdMIo:p6PbsF4CoT2OeU4SMB
Yara
  • PE_Header_Zero - PE File Signature
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)
  • IsDLL - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 3fe6b1c54b8cf28f_mozglue.dll
Submit file
Filepath C:\ProgramData\mozglue.dll
Size 134.0KB
Processes 2404 (Dxndvkhrxwosconsoleapp14.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 8f73c08a9660691143661bf7332c3c27
SHA1 37fa65dd737c50fda710fdbde89e51374d0c204a
SHA256 3fe6b1c54b8cf28f571e0c5d6636b4069a8ab00b4f11dd842cfec00691d0c9cd
CRC32 E28A5E21
ssdeep 3072:7Gyzk/x2Wp53pUzPoNpj/kVghp1qt/dXDyp4D2JJJvPhrSeTuk:6yQ2Wp53iO/kVghp12/dXDyyD2JJJvPR
Yara
  • Malicious_Packer_Zero - Malicious Packer
  • PE_Header_Zero - PE File Signature
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)
  • IsDLL - (no description)
  • UPX_Zero - UPX packed file
VirusTotal Search for analysis
Name 16574f51785b0e2f_sqlite3.dll
Submit file
Filepath C:\ProgramData\sqlite3.dll
Size 630.5KB
Processes 2404 (Dxndvkhrxwosconsoleapp14.exe)
Type PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5 e477a96c8f2b18d6b5c27bde49c990bf
SHA1 e980c9bf41330d1e5bd04556db4646a0210f7409
SHA256 16574f51785b0e2fc29c2c61477eb47bb39f714829999511dc8952b43ab17660
CRC32 9F30A75E
ssdeep 12288:i0zrcH2F3OfwjtWvuFEmhx0Cj37670jwX+E7tFKm0qTYh:iJUOfwh8u9hx0D70NE7tFTYh
Yara
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • IsDLL - (no description)
VirusTotal Search for analysis
Name 5225ee4fbeff7c3f_dvdljtaccvivylcfphls.vbs
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\Dvdljtaccvivylcfphls.vbs
Size 113.0B
Processes 2680 (Uxqcrfgglyzuwogibeigruaconsoleapp12.exe)
Type ASCII text, with no line terminators
MD5 9aeffb0d8c22e939199d4884f9bc8e81
SHA1 d52cc767d58e9a009d8744ca09a4abbf121a186e
SHA256 5225ee4fbeff7c3f5dee7b05d5b5b7a3436c660317e746809dd596570b328027
CRC32 1C6C4F03
ssdeep 3:FER/n0eFHHomWxpcL4E2J5xAIBiXS1IMFjM:FER/lFHImQpcLJ23fACtZM
Yara None matched
VirusTotal Search for analysis
Name 334e69ac9367f708_msvcp140.dll
Submit file
Filepath C:\ProgramData\msvcp140.dll
Size 429.8KB
Processes 2404 (Dxndvkhrxwosconsoleapp14.exe)
Type PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5 109f0f02fd37c84bfc7508d4227d7ed5
SHA1 ef7420141bb15ac334d3964082361a460bfdb975
SHA256 334e69ac9367f708ce601a6f490ff227d6c20636da5222f148b25831d22e13d4
CRC32 97BCF588
ssdeep 12288:Mlp4PwrPTlZ+/wKzY+dM+gjZ+UGhUgiW6QR7t5s03Ooc8dHkC2es9oV:Mlp4PePozGMA03Ooc8dHkC2ecI
Yara
  • PE_Header_Zero - PE File Signature
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)
  • IsDLL - (no description)
  • UPX_Zero - UPX packed file
  • Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet
VirusTotal Search for analysis
Name d810417ec9f01b55_rmfigo.vbs
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\Rmfigo.vbs
Size 124.0B
Processes 2348 (asdfg.exe)
Type ASCII text, with no line terminators
MD5 c52f9d51eff12571095c4ac48b344b10
SHA1 5c72f55afbdd9c5e11ef991622f76c0825ff8db7
SHA256 d810417ec9f01b556d71e03666e36e97ef2e37a6237cc131a3efbbe2892d974c
CRC32 B995BBB5
ssdeep 3:FER/n0eFHHomWxpcL4E2J5xAIMQ4cGpChGOJJdkHMFjM:FER/lFHImQpcLJ23fAsQipZM
Yara None matched
VirusTotal Search for analysis