Dropped Files | ZeroBOX

Name	e3b0c44298fc1c14_nsyED2E.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsyED2E.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	e0b9509c0aa6ccff_wnvjnokxxy.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\wnvjnokxxy.exe
Size	26.0KB
Processes	2564 (gib.exe)
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`cfa51cfa7c6f5bf9fb33b74d80d8948a`
SHA1	`bbd9157baec515385936374e24699ad928508acb`
SHA256	`e0b9509c0aa6ccffa28cf67bc0b733ae6d253537fd38d72d83c813a82aa5b087`
CRC32	`E4ED905F`
ssdeep	`768:Bk/XrIDvHDqUdWSIREnabCBklr0vXl99q/XmGE9QEKH+ImAT7SXug:m/XrIDvHDqUdWSSEnabCBklr0v199q/8`
Yara	IsPE32 - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis

Name	b61ddb5658fd971c_arofxivtwdm.hjz Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\arofxivtwdm.hjz
Size	263.4KB
Processes	2564 (gib.exe)
Type	data
MD5	`29d7208c93e91a9b888fe26111a2580f`
SHA1	`116d87d6b87b8a6fa3fca4320a1d06a95b6f6a59`
SHA256	`b61ddb5658fd971cb0312ddfc9be766548457ba53f971e93db1552609fc21937`
CRC32	`0FFEB13C`
ssdeep	`6144:WgYPEn1B953oXVe4G9F6F5j/5r8gbd1Km0SuH6fenXTcj:WHWB9p19Ur8gbrFulwj`
Yara	None matched
VirusTotal	Search for analysis

Name	1129502b9c04c141_juyxpwva.zwc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\juyxpwva.zwc
Size	7.8KB
Processes	2564 (gib.exe)
Type	data
MD5	`00d6e183e3ed31b21323d9c0f19dc7f1`
SHA1	`dd6d70ce237bbb6f4021b00e0f0311fc71db8df8`
SHA256	`1129502b9c04c141615931e76b6e174f820e297298625b8bc362fee20790dd8f`
CRC32	`F90941F0`
ssdeep	`192:darcitQvArWiPvvk/b9pPkFgLu7ArlAaTVWqNmAtC8MmLh:uCYrNPvvkTsFMAgVS3Tm9`
Yara	None matched
VirusTotal	Search for analysis