Dropped Files | ZeroBOX

Name	6fcea34c8666b063_system.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nst6490.tmp\System.dll
Size	11.5KB
Processes	1116 (dra.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`fccff8cb7a1067e23fd2e2b63971a8e1`
SHA1	`30e2a9e137c1223a78a0f7b0bf96a1c361976d91`
SHA256	`6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e`
CRC32	`7D939E74`
ssdeep	`192:xPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4v:g7VpNo8gmOyRsVc4`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	b8dc2fc916d03078_cnjzlce4xu8c0m Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\cnjzlce4xu8c0m
Size	160.5KB
Processes	1116 (dra.exe)
Type	data
MD5	`ac77a66673256d9d83d525d857966994`
SHA1	`fdbefd66a2ded909c8c1a210ca6fdf9f6ad947f9`
SHA256	`b8dc2fc916d030786c61d3151e688c45ca21eee5ee176bb0f8f882a0008f6536`
CRC32	`DA045C7C`
ssdeep	`3072:XDdeP/oWcoTWnbtkYpWQrVHtogBdh+LmiuebIQ9j8chq5pbAk1YltyJ0QFD3Ys:XpePgWcnnbtkjQptvdh+CiueMQiCkClc`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsd647F.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsd647F.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	0746c2c0334d95a0_bxqvp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\bxqvp
Size	55.3KB
Processes	1116 (dra.exe)
Type	data
MD5	`c774f3a92b412d3528ca7a18dac49589`
SHA1	`8a34ffe2021623243a3017d36552c2e38f51cd23`
SHA256	`0746c2c0334d95a0b11bf227c2239004d78e0d6c6a9994cb868ee5dbecfe6fb3`
CRC32	`7F15C972`
ssdeep	`1536:E8T+o+i4jH9ptZIdbldyNE1F+8FdzXF2qvZMJoYHtgTzxL+:EO+CYptMp4oFPFdzV2qvyNHtgE`
Yara	None matched
VirusTotal	Search for analysis