Dropped Files | ZeroBOX

Name	bae78ce299ed044c_mrhlhnsgyk.h Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mrhlhnsgyk.h
Size	263.6KB
Processes	792 (iccu.exe)
Type	data
MD5	`eaa872857cb340101b4dcac231baa343`
SHA1	`9279ce4f54b4d7c56710c5de745872b4b8ef1ec8`
SHA256	`bae78ce299ed044cbbe2a9081f2979f7324055d3e27db5b334d1c71a12e0fb06`
CRC32	`45494BB2`
ssdeep	`6144:sJR51P1BHSaB3elXTEFZjH4xDd3SHlGiYyEfxyMzKygUFZtqxuCGd:sJR5XByaN5jAIlKyU4Mey/FZvCq`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nslC1B5.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nslC1B5.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	13f8b888a0fdab50_fzoqhij.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsqC1D6.tmp\fzoqhij.dll
Size	10.0KB
Processes	792 (iccu.exe)
Type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5	`27e2109bf3764e69ca432c284dd2d3ff`
SHA1	`20fe60a05b2250fc2b10ced9845144310e5fe8bd`
SHA256	`13f8b888a0fdab507eb04afce398167ceff84b784a3623d7f6aa6ed52d63d29b`
CRC32	`802F76F8`
ssdeep	`192:2612zATvBhZ7+5QnIQYe+qfaSd4wO124u:N12z+uiDiSdo2F`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	6c5a466bb0fe8288_gzlgij.p Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\gzlgij.p
Size	5.5KB
Processes	792 (iccu.exe)
Type	data
MD5	`17e3b41b81e51ad6d4df23917a09a4aa`
SHA1	`338b447e993fca4d8083766a473db162d28852c3`
SHA256	`6c5a466bb0fe828890a00a683988f78fdc0f37ddda3401abb0d0a3308392bd5b`
CRC32	`B4DA177F`
ssdeep	`96:8UfTtXiAlVO0aMCiL+WtMKMB2zC1ISr0P1Aqe2Nht+Nu7vDGwv:tTtXiA35XKKM9r0P1Z/t+sDGwv`
Yara	None matched
VirusTotal	Search for analysis