Dropped Files | ZeroBOX

Name	e3b0c44298fc1c14_nsdEE57.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsdEE57.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	c80b48148c310cb5_agidm.bdk Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\agidm.bdk
Size	219.9KB
Processes	2556 (WmiPrvSE.exe)
Type	data
MD5	`5d7c34836dad195ce5f11c78355ec9e8`
SHA1	`a1bedef390b6741a4ab02bfe3dd8e990eea7d879`
SHA256	`c80b48148c310cb5c23868c7016cd27f3df9eefc685d955fc6fdf9dbe2903c05`
CRC32	`32797242`
ssdeep	`6144:mdndl1VvwqhxAOD7vFtI/Sr0LhWh2ZI7BxqDZb:mddKqhxAS7dtI/K2Z59`
Yara	None matched
VirusTotal	Search for analysis

Name	b34ef16461be2e9d_knbxxpu.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nsoEE98.tmp\knbxxpu.dll
Size	44.5KB
Processes	2556 (WmiPrvSE.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a045c9df7ea13482def712a8d0ed1ee7`
SHA1	`3cf372ad7b704e888a74c572d173d876bce6c87b`
SHA256	`b34ef16461be2e9d44e9f77a63c6d46b90dc091ee78ff28af045f1d3ec8fa1b4`
CRC32	`1E4C0419`
ssdeep	`768:/VLQDmPDEVplA3jQYubJyqzvDAONtOEJVNnHCd3So9OZR++zRhtiOz1vm+Ydj:/VsDmPDwAz/q70ONwEJVNASoEfhtiOJQ`
Yara	IsDLL - (no description) PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description)
VirusTotal	Search for analysis