Dropped Files | ZeroBOX

Name	3ad2dc318056d0a2_modern-wizard.bmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsf6098.tmp\modern-wizard.bmp
Size	25.9KB
Processes	1868 (inst77player_1.0.0.1.exe)
Type	PC bitmap, Windows 3.x format, 164 x 314 x 4
MD5	`cbe40fd2b1ec96daedc65da172d90022`
SHA1	`366c216220aa4329dff6c485fd0e9b0f4f0a7944`
SHA256	`3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2`
CRC32	`04BB5FC8`
ssdeep	`24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsk6068.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsk6068.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	75b77553b418e46b_iospecial.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsf6098.tmp\ioSpecial.ini
Size	663.0B
Processes	1868 (inst77player_1.0.0.1.exe)
Type	ISO-8859 text, with CRLF line terminators
MD5	`b255df60f0ada4eb8bc84d929036e7b5`
SHA1	`c33f098496e2b864fbcb34d23869093e0300c767`
SHA256	`75b77553b418e46b5e7382d7ac6f9976b36435401de4d749996adbac84eedf66`
CRC32	`94139F5B`
ssdeep	`12:lOu8dfAgQRvAPOLMYhvs4gNhJ2Kqij+4gNDBab6vup3SbY5GR:6kRvAZYhU1NBF+1ZBa+vu4uGR`
Yara	None matched
VirusTotal	Search for analysis

Name	8f24c6cf0b06d18f_installoptions.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsf6098.tmp\InstallOptions.dll
Size	14.5KB
Processes	1868 (inst77player_1.0.0.1.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d753362649aecd60ff434adf171a4e7f`
SHA1	`3b752ad064e06e21822c8958ae22e9a6bb8cf3d0`
SHA256	`8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586`
CRC32	`46854CCE`
ssdeep	`192:3Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijnK72dwF7dBEnbok:3GvdH4qMebzPY2Vijn+BEnbo`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis