Dropped Files | ZeroBOX

Name	c11065e2d61c6cc4_zitnf.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nssEEE6.tmp\zitnf.dll
Size	64.5KB
Processes	2568 (wind.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9ef4a90783a187507f823ee3758dae5d`
SHA1	`77fdb8fda916a69d8fce1fbdc9e90d4e8fd60f4f`
SHA256	`c11065e2d61c6cc4e269e1d18aa6c5b97e161829ec666942ace848812c07a9d7`
CRC32	`4DD6D23A`
ssdeep	`1536:irF9DUyPQfgAwqPoADsz5HuTte+mHusA:Y3U4rDYsz52ausA`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nssEE96.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nssEE96.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	58585cc53ae7899a_lmswi.bu Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\lmswi.bu
Size	264.3KB
Processes	2568 (wind.exe)
Type	data
MD5	`ce2e8fc69f0a920a75cf0bda39fc0129`
SHA1	`18b0abaf6a7bee3871368216d746b8c4481bd538`
SHA256	`58585cc53ae7899acc307136850843a7f5e022fe1a9622e7fd1acd51d92030ee`
CRC32	`2AC9054A`
ssdeep	`6144:PKOV/RF5CNbCvVSszX6MalGWeSpH7oDQa2SIHH:CW3uuvZzXVareyoE1HH`
Yara	None matched
VirusTotal	Search for analysis

Name	518ef92be8423418_ojscxhqmrb.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\rbwgcluqajf\ojscxhqmrb.exe
Size	294.5KB
Processes	2568 (wind.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
MD5	`5af410f004c467ec40f00a34b3d9a49f`
SHA1	`1d4ea61318bdc6298d46664f6d3dd92e8900fc71`
SHA256	`518ef92be84234185738f94f0fef4dcd67cf58a9c424f6c0d4c4cd991db9caef`
CRC32	`FB152D5B`
ssdeep	`6144:vYa6oNE1rOl79P0I4vE77m/ZCemfOjiDPShGIY72TAGnkLxAk+V:vY2srOP0I9CIj+iDPShG1OAGnkLxANV`
Yara	UPX_Zero - UPX packed file NSIS_Installer - Null Soft Installer Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis