Dropped Files | ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Dropped Files | ZeroBOX

Name	9cb6b58eb2c41e24_logs.dat Submit file
Filepath	C:\Users\test22\AppData\Roaming\Appsync\logs.dat
Size	260.0B
Processes	2520 (mvmqykdtoq.exe)
Type	data
MD5	`455517dfb23260c13cb41d759deb6cfd`
SHA1	`34a89566d165873324e1d27e9217135586ccebd6`
SHA256	`9cb6b58eb2c41e2443449e6518012d4fe787168561f9798fc96a1da59b4df2e1`
CRC32	`12B01DAF`
ssdeep	`6:Kl9lWtDql55YcIeeDAlOWA4dbJWEogltmgXl1oV:KlHHhec0WNW+ltZI`
Yara	None matched
VirusTotal	Search for analysis

Name	e54838f057565301_time_20230320_134716.jpg Submit file
Filepath	C:\Users\test22\AppData\Roaming\Screenshots\time_20230320_134716.jpg
Size	159.9KB
Processes	2520 (mvmqykdtoq.exe)
Type	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1024x768, frames 3
MD5	`f693ae827999cdfa46fa0aaaf57fc397`
SHA1	`a1212b4eb9a18cd420da3e94ba3b830f1484ba64`
SHA256	`e54838f0575653016e504cf42f04be625c8c35588eae96bf4dfbba9054e86a82`
CRC32	`CA5B2AD7`
ssdeep	`3072:z5QQmwkUYVDZOPYRD9MrsOQRQAk8zprSmujzsOvf9UuROmemS8q/ntMy7g+Y7LWi:zKbSYxZf5Crs7RQAkymjzxnAhmHq/tM9`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	7cf20047456c95d3_vdvqyhhc.ni Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\vdvqyhhc.ni
Size	7.6KB
Processes	2060 (vbc.exe)
Type	data
MD5	`1025c3ed11dc1fb3fd990893f39f726c`
SHA1	`6c0cc3ae64ccfb0405f6966199237cd1ff2eff3d`
SHA256	`7cf20047456c95d33774717fc7ffb9924891fe49712a8d1f402e62b464af880b`
CRC32	`F647EF9D`
ssdeep	`192:darcitQvArWiPv2Ob9qvP8YEVkpOtM/GYdhkwLxu1D7:uCYrNPv2QoREVkppFdhkYux7`
Yara	None matched
VirusTotal	Search for analysis

Name	73f3ebe66e875aa6_rbjhkoqfsoc.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\nyyv\rbjhkoqfsoc.exe
Size	58.5KB
Processes	2152 (mvmqykdtoq.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`fc8b51725b20f64aa9e8d0aef6c83fcf`
SHA1	`f52bf23bd9fd07e3f577b0d9d7936940da267426`
SHA256	`73f3ebe66e875aa67b198a080858d83cda0ca4a513e513e2a3430f4dfdb6671b`
CRC32	`BB54F4A1`
ssdeep	`768:kpbnyq696YM4+FJV/dRuDh96ir6VhAkAXuabEoK3r412IGXM5x8dsr:kpbRrYSJV/ToZr6VhhAXj7GnI15is`
Yara	Malicious_Library_Zero - Malicious_Library Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis

Name	df83e80813f110e4_lpxqm.sqm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\lpxqm.sqm
Size	496.2KB
Processes	2060 (vbc.exe)
Type	data
MD5	`591c62463167f3c75e96589790fcbd42`
SHA1	`c9b0a979d06d0f20813c5b73c4966a25b49821c6`
SHA256	`df83e80813f110e4e131a405ccf7f7c729fa6788794214b5d256216ada1078fb`
CRC32	`DBF26990`
ssdeep	`12288:oXlrbXSLv7OdDHsNr1l2vsOYZrZvwlMkcGg:oX5XSLv8sN1E0zZVvQg`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsmC37A.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsmC37A.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis