Dropped Files | ZeroBOX

Name	cf192dd84c8cb644_airxybggzuu.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nszDF74.tmp\airxybggzuu.dll
Size	85.5KB
Processes	2808 (vbc.exe)
Type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5	`bc80d3d208f9bc729451646a72d849a0`
SHA1	`42cd606fdded29b7d6f5a3e1cd4ae1c8b736839a`
SHA256	`cf192dd84c8cb64401c1cb0625fb1b6fd051f13ca2a719db51ffd51d87de00c1`
CRC32	`7B6579A9`
ssdeep	`1536:/TmI202u3m4HYe0NdL3ig2WcwQ9cIbUfsebcxQDaGB:/Tk0XxHYVWycxg9`
Yara	PE_Header_Zero - PE File Signature OS_Processor_Check_Zero - OS Processor Check IsPE32 - (no description) IsDLL - (no description) Malicious_Library_Zero - Malicious_Library UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	bcf306f8bc0928f9_edyi46t5lxxpnry Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\edyi46t5lxxpnry
Size	210.7KB
Processes	2808 (vbc.exe)
Type	data
MD5	`31f41d94f6644661bc89d353a1d3a69b`
SHA1	`67c209721e28f547c9587aa90d389171251d39d1`
SHA256	`bcf306f8bc0928f963a72b5094b92143169598d97fce66109e6df1bec3885378`
CRC32	`BA97D58B`
ssdeep	`6144:6aY1/vs+f6EAb4WEBquTA3h4lMHBlqI5P2ylR2YTRDlR:6aosY6jb4WS36SuBHl2y326DlR`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsoDF34.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsoDF34.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis