Dropped Files | ZeroBOX

Name	1513abd30195b874_6d6f4d.hdb Submit file
Filepath	C:\Users\test22\AppData\Roaming\41D896\6D6F4D.hdb
Size	4.0B
Processes	2864 (regasm.exe)
Type	data
MD5	`faeb96cb25b5ff43b7d32cd56d71714c`
SHA1	`729df48d8e006f5948fa6afdfb46a48df65290d2`
SHA256	`1513abd30195b87453159f9abdea22c6ff0f424ddaa49ebda53de93ee86a1a5b`
CRC32	`6A770532`
ssdeep	`3:2t:K`
Yara	None matched
VirusTotal	Search for analysis

Name	6b86b273ff34fce1_6D6F4D.lck Submit file
Filepath	C:\Users\test22\AppData\Roaming\41D896\6D6F4D.lck
Size	1.0B
Processes	2864 (regasm.exe)
Type	very short file (no magic)
MD5	`c4ca4238a0b923820dcc509a6f75849b`
SHA1	`356a192b7913b04c54574d18c28d46e6395428ab`
SHA256	`6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b`
CRC32	`83DCEFB7`
ssdeep	`3:U:U`
Yara	None matched
VirusTotal	Search for analysis

Name	de4f9d40ab7b0c52_ac4wl3xp3rok.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nszFF79.tmp\ac4wl3xp3rok.dll
Size	114.5KB
Processes	4244 (regasm.exe)
Type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5	`71a6336ca356e88fad818b6484867c76`
SHA1	`0ec66085cd680eaf38065b1a7cb62066decc5d96`
SHA256	`de4f9d40ab7b0c522f0a9a74e9d0ec2f3d9550f44e4a0cde653b94132f8d580e`
CRC32	`00A52FFF`
ssdeep	`3072:H6VRfd/lT7BDsG17ZdAK1zb8AV7WDf84NO3kE1Pfg:H+rTFoGPiK1zFMT84NOZPo`
Yara	PE_Header_Zero - PE File Signature Zero IsPE32 - (no description) IsDLL - (no description) IsConsole - (no description) IsPacked - Entropy Check HasOverlay - Overlay Check HasDebugData - DebugData Check
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsuFF58.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsuFF58.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis