Dropped Files | ZeroBOX

Name	e3b0c44298fc1c14_nsg975E.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsg975E.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	8dc562cda7217a3a_system.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsl97CC.tmp\System.dll
Size	12.0KB
Processes	2352 (aaa.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`cff85c549d536f651d4fb8387f1976f2`
SHA1	`d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e`
SHA256	`8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8`
CRC32	`7D3D580E`
ssdeep	`192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr`
Yara	IsPE32 - (no description) IsDLL - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis

Name	a40acc6d77365b51_1025117249 Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1025117249
Size	128.0MB
Processes	2352 (aaa.exe)
Type	data
MD5	`8c0070a3b74495dff318a51d03ee25a7`
SHA1	`7ffbb9f6e9364b76c6e0a627d47bd00b9ea7e2d3`
SHA256	`f0515fb21ce8348a576bb19f777f36ca7180a0e9f8292db78a4b727d7d537fe8`
CRC32	`9C3D98B0`
ssdeep	`3:ZLQXRABM:aXRA6`
Yara	None matched
VirusTotal	Search for analysis