Dropped Files | ZeroBOX

Name	3ad2dc318056d0a2_modern-wizard.bmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsl9BA4.tmp\modern-wizard.bmp
Size	25.9KB
Processes	6012 (sisifo_setup.exe)
Type	PC bitmap, Windows 3.x format, 164 x 314 x 4
MD5	`cbe40fd2b1ec96daedc65da172d90022`
SHA1	`366c216220aa4329dff6c485fd0e9b0f4f0a7944`
SHA256	`3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2`
CRC32	`04BB5FC8`
ssdeep	`24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz`
Yara	None matched
VirusTotal	Search for analysis

Name	190b2a4472e2ed4d_iospecial.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsl9BA4.tmp\ioSpecial.ini
Size	754.0B
Processes	6012 (sisifo_setup.exe)
Type	ISO-8859 text, with CRLF line terminators
MD5	`109b3f0957c0eb60b131e8901b617771`
SHA1	`4edf0bb58e90a0daa9271b0f0a6653acc15452d7`
SHA256	`190b2a4472e2ed4d7d707dc1f650aad67ce5c9395fd927bdf8eb81b6e8bef1e0`
CRC32	`628E9ED5`
ssdeep	`12:lOu8dfAgQRvAPOLM7jhh84gNhdQH+wI4gNDEaout/Y+bdyIibozxqIV:6kRvAZ7jhh8154HI1ZEk14ozxTV`
Yara	None matched
VirusTotal	Search for analysis

Name	17f0946e0847bbaa_installoptions.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsl9BA4.tmp\InstallOptions.dll
Size	14.0KB
Processes	6012 (sisifo_setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`7e49eb67f1f3c62bb8c4b0a868b30645`
SHA1	`2be42e3c6059485bc3b624a537ab1fb36a10a263`
SHA256	`17f0946e0847bbaa6a06eb58aead13fce22a8606e9b3744cd2241debdf8d8bae`
CRC32	`FC057AD3`
ssdeep	`192:/6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTSK72dwF7dBdcQOz:/6JaVh4I5rpPbTS+BdhO`
Yara	IsDLL - (no description) PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis