popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 96b9d852c5b5416d_zxjtzkturmh.w
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\zxjtzkturmh.w
Size 265.2KB
Processes 2576 (vbc.exe)
Type PGP\011Secret Key -
MD5 d1d7349e885e86216aca8ddd8b77dd49
SHA1 8a15bb28bfaae0518ccba9365f15730090f34f56
SHA256 96b9d852c5b5416dac2be3f72906ad8922ec059b7939f2775ab0cb24e9f3f10f
CRC32 C9F6F2C4
ssdeep 6144:Y4wtKn6Lj95j5jfVpstzIbDBoVZGdYoMBKGbY89jLLAz/6n:Y4gKn6LZ5lByIpBRUfb5L06n
Yara None matched
VirusTotal Search for analysis
Name 0b8607fdf72f3e65_cookies.sqlite
Submit file
Filepath C:\Users\test22\AppData\Roaming\velxehi1.bxw\Firefox\Profiles\qxo5wa6x.default-release\cookies.sqlite
Size 96.0KB
Type SQLite 3.x database, user version 12, last written using SQLite version 3038003
MD5 d367ddfda80fdcf578726bc3b0bc3e3c
SHA1 23fcd5e4e0e5e296bee7e5224a8404ecd92cf671
SHA256 0b8607fdf72f3e651a2a8b0ac7be171b4cb44909d76bb8d6c47393b8ea3d84a0
CRC32 842B3569
ssdeep 12:DQAwfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAwff32mNVpP965Ra8KN0MG/lO
Yara None matched
VirusTotal Search for analysis
Name 512e4e95427a8c66_Cookies
Submit file
Filepath C:\Users\test22\AppData\Roaming\velxehi1.bxw\Chrome\Default\Cookies
Size 36.0KB
Type SQLite 3.x database, last written using SQLite version 3021000
MD5 f4c540f52d5c08d24a79805eda1d7abf
SHA1 22be46826df7693f58736adb232ab2da790f2571
SHA256 512e4e95427a8c66b2993b27bb23d99cdab2ebd6e9e8937c7f6a39ed8c6a5b94
CRC32 95C9FB3A
ssdeep 24:TLmg/5UcJOyTGVZTPaFpEvg3obNmCFk6Uwcc85fB34444z:T5/ecVTgPOpEveoJZFrU1cQB34444z
Yara None matched
VirusTotal Search for analysis
Name f33a2cfb4cc17088_mccljk.bte
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\mccljk.bte
Size 7.7KB
Processes 2576 (vbc.exe)
Type data
MD5 290f83a3042feedea79131004b6a7a8c
SHA1 95cec976ee95dc82a42520cd4cf942ab71547687
SHA256 f33a2cfb4cc17088445dd741148ea99ed8c1159099c1dcf02d61b5cef6dac232
CRC32 5C6057AA
ssdeep 192:2LsBtKXtqXeo18fjEZM3qt1fsxU0lP9cKIUFi:/BtK9q78fwZM3mfsxU0ZRI2i
Yara None matched
VirusTotal Search for analysis
Name 9f20125e93f21744_lpgkbrvm.exe
Submit file
Filepath C:\Users\test22\AppData\Roaming\vaqhlcswriyeu\lpgkbrvm.exe
Size 268.4KB
Processes 2576 (vbc.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
MD5 73a8a9702255cbfe07e92e81ccec6dca
SHA1 8e48e7f9bd242678ecc007b37cd9797cefeb7166
SHA256 9f20125e93f217448a2a774a8470196dc28c401fdb2a2efb77455b392483eb9e
CRC32 6A12EEB8
ssdeep 6144:vYa6nxQgTTovUTB+UDPFsPPG4XlgXePZs4XRbMTrFt:vY9K0TQRjzlye2oMTrr
Yara
  • UPX_Zero - UPX packed file
  • Malicious_Library_Zero - Malicious_Library
  • NSIS_Installer - Null Soft Installer
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name e3b0c44298fc1c14_nsxF107.tmp
Empty file or file not found
Filepath C:\Users\test22\AppData\Local\Temp\nsxF107.tmp
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis
Name ee2b03654e60b68c_iprzt.dll
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\nshF147.tmp\iprzt.dll
Size 5.0KB
Processes 2576 (vbc.exe)
Type PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5 0334c99c89837dc61206b12a0477ff4d
SHA1 19379b054ccc1b099e610fcf0a2450960af76b12
SHA256 ee2b03654e60b68cddb9a9fd9c4a383c4ee82020848e39cd64ea893163bf0933
CRC32 B92F3BB5
ssdeep 48:qDdFP8mKSvqqZ1Y41ka241+pllM8jAy9iH/jnRvGC/WEyIrJegBJ0gd:KdLfQ41E41+hMDy9iH/NH/WdId3J0
Yara
  • IsDLL - (no description)
  • Network_Downloader - File Downloader
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis