Dropped Files | ZeroBOX

Name	e3b0c44298fc1c14_nsgC118.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsgC118.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	9afab9ba494050f8_wdgnvi.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsmC13A.tmp\wdgnvi.dll
Size	12.0KB
Processes	296 (shedin2.1.exe)
Type	PE32 executable (DLL) (native) Intel 80386, for MS Windows
MD5	`4d3d21f2fe998dbe0b76b9dc822c0040`
SHA1	`113b8409a54e794a9b9552ce027076589b3ae66f`
SHA256	`9afab9ba494050f8d087afbd5d5a42661a7bd3dc84216d972369c93c1aabb6d8`
CRC32	`5C2F8E91`
ssdeep	`96:FzmUKdtz7+bqgnjoQ4cwcJdNW6mC0IFUfTtXiAlVO0ahgiL+k/x+yGJDUjHserjU:FPIZ7Ol5j8TtXiA3q/0pZ+c3aPDsWL4`
Yara	IsDLL - (no description) PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	1030befd21b4d88e_dohgdvbrpml.x Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\dohgdvbrpml.x
Size	262.6KB
Processes	296 (shedin2.1.exe)
Type	data
MD5	`f5db89ecaf28475a761cc578243a6e9b`
SHA1	`2734bab0832685a354ee6f23d1bcd75c3f240065`
SHA256	`1030befd21b4d88ea8db3e38a050e9062aa5400c8096eae9e91b3bb01b4e9108`
CRC32	`20C06A46`
ssdeep	`6144:1paidl0oM1V7gGHFXxVc/yWlqs3rwNwcpThbVqkEe2Meqmo:faiIoM1V7gGhY/yq7witkf2Lqmo`
Yara	None matched
VirusTotal	Search for analysis