Dropped Files | ZeroBOX

Name	e3b0c44298fc1c14_cred64.dll Empty file or file not found
Filepath	C:\Users\test22\AppData\Roaming\465dbc52837d81\cred64.dll
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	d7d33223ad4088db_832866432405 Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\832866432405
Size	85.0KB
Processes	2308 (Utsysc.exe)
Type	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1024x768, frames 3
MD5	`0aff6a9fc0f372d4e4cf8c544d4e9b4e`
SHA1	`8efa1fb6cd4d9ca909a203111ca0e5b81d8de1be`
SHA256	`d7d33223ad4088db57dafb72874d909cc2c864362cbaa2f02b2c9ecc50c90a34`
CRC32	`000898EC`
ssdeep	`1536:08qQRlKOtginlqeQf4gq7W9r8Wa8+3vMqHILIIsw/jUrBte:NRlk8lqjQg/N8WA0qoLhd/jUFte`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	93583dfa872b44e1_utsysc.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\037ceed7fc\Utsysc.exe
Size	1.5MB
Processes	2068 (Jqjfw.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`6866f4e7450d085b19ad1aa9adaca819`
SHA1	`4afc3a0de610f45dbf8eb83da2a16052c2a81b01`
SHA256	`93583dfa872b44e13e449cdfbbe20e64851dbe0e615f30b0313d2cb6a9b2309e`
CRC32	`0E90C60E`
ssdeep	`24576:NQIsq2Q2GOAO4fCCy7gtsICmEly/nDBRyqni3xbU4eWxDJ3YsXv6+tH9ZPz1:NQIsq2Q2GOAO4fCZ7YsL8/KqihAsxDJX`
Yara	Malicious_Library_Zero - Malicious_Library IsPE32 - (no description) PE_Header_Zero - PE File Signature Is_DotNET_EXE - (no description) Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis