Dropped Files | ZeroBOX

Name	3ad2dc318056d0a2_modern-wizard.bmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsqFF59.tmp\modern-wizard.bmp
Size	25.9KB
Processes	8768 (sisifo_setup.exe)
Type	PC bitmap, Windows 3.x format, 164 x 314 x 4
MD5	`cbe40fd2b1ec96daedc65da172d90022`
SHA1	`366c216220aa4329dff6c485fd0e9b0f4f0a7944`
SHA256	`3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2`
CRC32	`04BB5FC8`
ssdeep	`24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz`
Yara	None matched
VirusTotal	Search for analysis

Name	c2664d0c30081997_iospecial.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsqFF59.tmp\ioSpecial.ini
Size	755.0B
Processes	8768 (sisifo_setup.exe)
Type	ISO-8859 text, with CRLF line terminators
MD5	`c75726c2a51702e0747c4da53e2ac25b`
SHA1	`9a2dda4aaeb460f3d6325dac33a03d154862ed31`
SHA256	`c2664d0c300819978f2bf9fd0b3573b78954e2e2c960ef76f987ad92860ed1e8`
CRC32	`5E6DB567`
ssdeep	`12:lOu8dfAgQRvAPOLM3shtZ4gNhdQH+wTj4gNDEaout/Y+bdyIibozxqa:6kRvAZ3shtZ154H31ZEk14ozxz`
Yara	None matched
VirusTotal	Search for analysis

Name	17f0946e0847bbaa_installoptions.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsqFF59.tmp\InstallOptions.dll
Size	14.0KB
Processes	8768 (sisifo_setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`7e49eb67f1f3c62bb8c4b0a868b30645`
SHA1	`2be42e3c6059485bc3b624a537ab1fb36a10a263`
SHA256	`17f0946e0847bbaa6a06eb58aead13fce22a8606e9b3744cd2241debdf8d8bae`
CRC32	`FC057AD3`
ssdeep	`192:/6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTSK72dwF7dBdcQOz:/6JaVh4I5rpPbTS+BdhO`
Yara	IsDLL - (no description) PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis