Dropped Files | ZeroBOX

Name	512e4e95427a8c66_tmp1E60.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp1E60.tmp
Size	36.0KB
Type	SQLite 3.x database, last written using SQLite version 3021000
MD5	`f4c540f52d5c08d24a79805eda1d7abf`
SHA1	`22be46826df7693f58736adb232ab2da790f2571`
SHA256	`512e4e95427a8c66b2993b27bb23d99cdab2ebd6e9e8937c7f6a39ed8c6a5b94`
CRC32	`95C9FB3A`
ssdeep	`24:TLmg/5UcJOyTGVZTPaFpEvg3obNmCFk6Uwcc85fB34444z:T5/ecVTgPOpEveoJZFrU1cQB34444z`
Yara	None matched
VirusTotal	Search for analysis

Name	dfce2d4d06de6452_protect544cd51a.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\Protect544cd51a.dll
Size	742.5KB
Processes	2552 (hv.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`544cd51a596619b78e9b54b70088307d`
SHA1	`4769ddd2dbc1dc44b758964ed0bd231b85880b65`
SHA256	`dfce2d4d06de6452998b3c5b2dc33eaa6db2bd37810d04e3d02dc931887cfddd`
CRC32	`94895C27`
ssdeep	`12288:wCMz4nuvURpZ4jR1b2Ag+dQMWCD8iN2+OeO+OeNhBBhhBBgoo+A1AW8JwkaCZ+36:wCs4uvW4jfb2K90oo+C8JwUZc0`
Yara	Malicious_Library_Zero - Malicious_Library IsPE32 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description) UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis