Dropped Files | ZeroBOX

Name	a13df2b543e0c0a6_mcdrnobpz.akg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mcdrnobpz.akg
Size	205.4KB
Processes	2624 (enstomc2.1.exe)
Type	data
MD5	`6651c7e94b7cd6ae3995dbdca2cf6813`
SHA1	`a89f3a0657b5ca6a0b04e6b48f553a0ff8a65803`
SHA256	`a13df2b543e0c0a69c69e0d318e5968b77c10d7a0043c425d881ef106c3cdc29`
CRC32	`093C82FF`
ssdeep	`3072:hESNFv3S+S7WsiIVrCwXgodA02+wMgIZM8Tfa/ctJNX5FwWhgVVI6g2KcQCyrnr1:hrFfSd7WYCUdA02hUNJ1xhgVVvQCyZ`
Yara	None matched
VirusTotal	Search for analysis

Name	0de4b8af21e1b55b_rqxiof.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsyEED6.tmp\rqxiof.dll
Size	255.0KB
Processes	2624 (enstomc2.1.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`db6682d6a456f9c3e308e5ec949a1618`
SHA1	`7e57de1351edd8a3984adea0c34d9c94195773a6`
SHA256	`0de4b8af21e1b55b988f9e60709182e8634dc508f9037f1b934234be0939fce0`
CRC32	`A0B1760D`
ssdeep	`6144:Pnqz32YGozQzaUEk6Nt8/Uh7mYkdmTxIUYQ8BWuFLO7rxhS:PA32azQzaUEkit8chyYkdmrYSuFLWhS`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	ca9fdf1b3f17f967_dzvtmmb.l Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dzvtmmb.l
Size	5.5KB
Processes	2624 (enstomc2.1.exe)
Type	data
MD5	`7629a96952b81c8ebc4ea6eef73b464c`
SHA1	`95556e8c73226d945b0b8dc03ae3fad1ba3a1a07`
SHA256	`ca9fdf1b3f17f967f8536006951e257bc5ae2fe95038383b52b23ee60d68640f`
CRC32	`D20ED539`
ssdeep	`96:8UfTtXiAlVO0amOfiL+vP2Lmj5hYXw6waOZcibi8wy7o77ePWxNVgyoh1rXajDe2:tTtXiA3ZuxvYAz6ibtwiomPWnuyoDrR2`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsyEE86.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsyEE86.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis