Dropped Files | ZeroBOX

Name	e3b0c44298fc1c14_nshC203.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nshC203.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	59c1c06cd3a67925_ofsbzdwj.lqq Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\ofsbzdwj.lqq
Size	336.3KB
Processes	1440 (ORo0LtlX0gmac.exe)
Type	data
MD5	`1e4c6de651f576fdb8d06ebb1e149924`
SHA1	`f7475cff1d2c57ed7b52291c9a7ad3722ddbbc70`
SHA256	`59c1c06cd3a67925320f188929ad8581a75b88e9c4c70f16faba733b424787df`
CRC32	`F52BD9F4`
ssdeep	`6144:WzLuRk7UoMhnyp3pzCn6eaVwyAVi8AtWh9vw1+qnC/My4DozUoU7oZUf58h:Lpyp3Y6eMwCW/D/GQbKxf+h`
Yara	None matched
VirusTotal	Search for analysis

Name	4129543d41c705d2_gdugzcy.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\gdugzcy.exe
Size	277.5KB
Processes	1440 (ORo0LtlX0gmac.exe)
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`78282cc1629eae83c236d1eeccb79ead`
SHA1	`46f7cfa3bd1b82a949d186e09ea272a7db9dc2c5`
SHA256	`4129543d41c705d267cc5662a6a40511f52be1c2449681586cd919bcd6f4148b`
CRC32	`CDEC83DB`
ssdeep	`3072:KCU0m/gpX42XXcD6k5zuZmrMqtJJROVZaGhB8TvV4t7jh+dZ9/KQ68BaAg0FuesT:TPZXRvLhSB4tBwZ9iF9AO8i7qwR`
Yara	Malicious_Library_Zero - Malicious_Library OS_Processor_Check_Zero - OS Processor Check UPX_Zero - UPX packed file PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis