Dropped Files | ZeroBOX

Name	e3b0c44298fc1c14_nsyE270.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsyE270.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	6b86b273ff34fce1_6D6F4D.lck Submit file
Filepath	C:\Users\test22\AppData\Roaming\41D896\6D6F4D.lck
Size	1.0B
Processes	2956 (scan_01.exe)
Type	very short file (no magic)
MD5	`c4ca4238a0b923820dcc509a6f75849b`
SHA1	`356a192b7913b04c54574d18c28d46e6395428ab`
SHA256	`6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b`
CRC32	`83DCEFB7`
ssdeep	`3:U:U`
Yara	None matched
VirusTotal	Search for analysis

Name	872e5aa466a8fc41_itbd.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsyE2BF.tmp\itbd.dll
Size	88.5KB
Processes	2836 (scan_01.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`139dbcbeeaaf2d5a55c634208a0efa34`
SHA1	`515576bdd64f07f007843ead1197ac34a4d65243`
SHA256	`872e5aa466a8fc417fbf49fef4aaeb3ce941200a62794fd7b8f1cdbb8cdddcc0`
CRC32	`196DE7E4`
ssdeep	`1536:W1h8Lsu0K4ZjTTm4qTfYS375Q+kZT8ywzViIkzSzRrsWjcdKkzo6KAUSnWgVpXP:Wr8MKkGDTDVZnkzSzRUKkzo6KSNZP`
Yara	PE_Header_Zero - PE File Signature OS_Processor_Check_Zero - OS Processor Check IsPE32 - (no description) IsDLL - (no description) Malicious_Library_Zero - Malicious_Library UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	9a5fbfd94a1c416c_n4dcf4vdlmlp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\n4dcf4vdlmlp
Size	211.6KB
Processes	2836 (scan_01.exe)
Type	data
MD5	`a743dfafdb72b276c3f755e5e4472218`
SHA1	`331f3ef5106443590f9c28b5734b5766cf2fb542`
SHA256	`9a5fbfd94a1c416c2bd1982009d00b2a119b24fa5f2ca87f5d78f16aff93a8a4`
CRC32	`2554E105`
ssdeep	`6144:SSm5/drB7FJE7dO9T6uiOvpsQgmoA32l7B:+xbAufLgV02r`
Yara	None matched
VirusTotal	Search for analysis