Dropped Files | ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

latestReport
11.15 01:11
wwbizsrvs.exe
11.15 01:11
op.exe
11.15 01:11
msf.exe
11.15 01:11
lum250.exe
11.15 01:11
msf443.exe
11.13 04:11
hello.exe
11.13 03:11
espsemhvcioff.exe
11.13 02:11
Geek_se.exe
11.13 02:11
cred64.dll
11.13 02:11
svhost.exe

Latest News
11.16 04:11
Warning: DEEPDATA Malw...
11.16 03:11
It’s a Soldering Iron!...
11.16 12:11
Critical Unauthenticat...
11.16 12:11
BASIC Co-Inventor Thom...
11.16 09:11
존쿡 델리미트 외식 매장서 ‘연말맞이 다...
11.16 09:11
서울퓨처랩, 누적체험객 6만명 돌파…프로...
11.16 09:11
니지모리스튜디오 갤러리, 일본 일러스트 ...
11.16 09:11
RISC-V Pushes 400 Mill...
11.16 09:11
IT Sicherheitsnews tae...
11.16 07:11
Anduril’s Chair Consul...

Dropped Files | ZeroBOX

Name	307825cea8af6c41_heqtnvfb.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nslF0AB.tmp\heqtnvfb.dll
Size	277.5KB
Processes	2548 (RegEdit.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`742832ba3c099d07751e6405cac76dd4`
SHA1	`42eb205c6f3a3b11bb1df8b2e1e8ae1e1505770d`
SHA256	`307825cea8af6c41025578bbc6272e561579c38c2caad845453cfc9008c04932`
CRC32	`79538370`
ssdeep	`6144:8yL7uptL3AQZIODJuJXliwZ81A+ByuiKa4olv:8yPutD1ZIODJuJXjuiKaHlv`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	fab71445ba5eeb7e_covypqmz.xd Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\covypqmz.xd
Size	205.0KB
Processes	2548 (RegEdit.exe)
Type	data
MD5	`ea22079d92c9ec83498299c1f89dd1a0`
SHA1	`fbcb2f09720c829b7e3ca6f1980b03b462e86b01`
SHA256	`fab71445ba5eeb7ed8f50fda258cf45d1c222091898cc25cc96420837b14683f`
CRC32	`D1C51C44`
ssdeep	`3072:EvXHhWSdrXHObF/UZPrziGD2PU3cWIfp+D+L5UQBsL9sjrTovVj0U2i4SFzwsUfE:k3f0VcrH8UMfpRvU9Q/YVgU9FcsSTHTk`
Yara	None matched
VirusTotal	Search for analysis

Name	aa1df689ef5b0c7e_smdppqci.f Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\smdppqci.f
Size	7.5KB
Processes	2548 (RegEdit.exe)
Type	data
MD5	`8485cd8128262b971e85689ef8d1d027`
SHA1	`c3c0f801b4362cc2a363bc3454afcee643a31968`
SHA256	`aa1df689ef5b0c7e780dce8203cc9fa90c566e0c0ae5ad888a6ac29cdcf267f6`
CRC32	`3B060C2F`
ssdeep	`192:LWTtJD/vGJbz1z8T5abho60opoKCOxKhr3opJOG+PDaPAsWL4l:KTtJLQb5z8T5abu6laKCOxKhTkYVwAsH`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nslF05B.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nslF05B.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	53bb0f293733cadb_fbkktp.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\iiqaavf\fbkktp.exe
Size	352.7KB
Processes	2548 (RegEdit.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
MD5	`923b2cf57335ee5730c03f793b9b465a`
SHA1	`a27545f9f552769d83c2aa846d79cd1252ed7ca3`
SHA256	`53bb0f293733cadbf6b5704cd0359b61acaa6367eb49268905714492d35ddf81`
CRC32	`1678514B`
ssdeep	`6144:vYa6VB0R719FRWlAQR/P9Zpim8lMvGMsAzKDv4Wkm2wG+8p9rNvQr/zh/QCM9OF7:vYnyR71H4RsmaMvX+DAWkZMCVKzhC9It`
Yara	UPX_Zero - UPX packed file Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature NSIS_Installer - Null Soft Installer IsPE32 - (no description)
VirusTotal	Search for analysis