Dropped Files | ZeroBOX

Name	121249d594a9d8c4_autC07D.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\autC07D.tmp
Size	9.7KB
Processes	776 (EPQ.exe)
Type	data
MD5	`93e51b39b4cde10aff796e85627613ba`
SHA1	`2c02b46c9eb4571bef10a408991c39cadcecb56b`
SHA256	`121249d594a9d8c453581adcad4720e9e5b3d810acb0928f8b34793d5f051f6d`
CRC32	`F155E7DC`
ssdeep	`192:m+cKcfThm0awkUGhVuqhQ4/jtzSNfG0aop3igloCR8yn1XxLfiCV7rC:97c1mtwkUyXhQ47tzANaopTloCR8KX9M`
Yara	None matched
VirusTotal	Search for analysis

Name	261a2c8c507dc06b_autC05D.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\autC05D.tmp
Size	261.5KB
Processes	776 (EPQ.exe)
Type	old packed data
MD5	`ae74415cd5e15b9244462f535bfa1483`
SHA1	`d1296196c60fb5ebaa68354f2e2d6d065c3aee16`
SHA256	`261a2c8c507dc06be6d683b456b46f979abadb1d6f0157a09a13ba07327a4eab`
CRC32	`1E248D48`
ssdeep	`6144:dXgOb/xktCLhQqOdr1X/2XsIjQ0YrOxz/PyANSZUHTflHH:5UQqqO/sQ0Y8z7oZkln`
Yara	None matched
VirusTotal	Search for analysis

Name	8df404ad76c69b20_nonsubmerged Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nonsubmerged
Size	29.0KB
Processes	776 (EPQ.exe) 2200 (EPQ.exe)
Type	ASCII text, with very long lines, with no line terminators
MD5	`c4de0cb7a44d1c73f2e1e81e09bc8fd1`
SHA1	`4ef513564fb628c4169a23e5607aafccc05de7f1`
SHA256	`8df404ad76c69b20382fad3d9da093bd9c205f0288286b89b703b9ba3f640395`
CRC32	`BB248940`
ssdeep	`768:wiTZ+2QoioGRk6ZklputwjpjBkCiw2RuJ3nXKUrvzjsNbeE+IH6w54vfF3if6gyy:wiTZ+2QoioGRk6ZklputwjpjBkCiw2Rj`
Yara	Suspicious_Obfuscation_Script_2 - Suspicious obfuscation script (e.g. executable files)
VirusTotal	Search for analysis