Dropped Files | ZeroBOX

Name	e3b0c44298fc1c14_nsxE147.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsxE147.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	4e2208c2c5d75fbc_c084gc7ygxyonfi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\c084gc7ygxyonfi
Size	282.0KB
Processes	2824 (cks.jpg)
Type	data
MD5	`c2b7c5ce4818fb56fd67385bd228bf67`
SHA1	`28d494df0ded18bd6f181d0acfe372d3ccebc124`
SHA256	`4e2208c2c5d75fbc492468bb08e6fece8b9a5eecc7aee82e961709a4763d25e0`
CRC32	`6646BE91`
ssdeep	`6144:bsXISriExptB1KVTuMLa3EEKT9jlRKh9NhU0DqHlu+20GSc:b2ISrxxpv8VTY0Ee9LA9rUQD+Kz`
Yara	None matched
VirusTotal	Search for analysis

Name	f0daf8b889f3eb30_jfikotvjyq.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsnE1A6.tmp\jfikotvjyq.dll
Size	324.0KB
Processes	2824 (cks.jpg)
Type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5	`8492609d1730d62b5a2c6755bd3c202d`
SHA1	`1a3753c2fb8427e5cbdc15723f3ecc12b389d578`
SHA256	`f0daf8b889f3eb301049c7c5fb3d593696399063c8932bfdea2b729c0e3ac962`
CRC32	`817B6DB6`
ssdeep	`6144:piTVctYV+wZaxVTnCfuj1trHRcWGzsQDk3KPlinS++YPHdW:pi6tYVVaLRJtrxcb7cAinv+YPc`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description) IsDLL - (no description)
VirusTotal	Search for analysis