Dropped Files | ZeroBOX

Name	51fe6774a791f468_egopz.F.tmp Submit file
Filepath	C:\Users\test22\AppData\Roaming\egopz.F.tmp
Size	175.8KB
Type	UTF-8 Unicode text, with very long lines, with no line terminators
MD5	`5690637b34da89f603a4bf6ab79d0883`
SHA1	`92f4a17671150e5f81f2e9e51c71889ab857530a`
SHA256	`51fe6774a791f46888bd840c3799f8f9baef435a0c2275065d76d111bc91dd94`
CRC32	`63783764`
ssdeep	`3072:uz80WJ8UKJ7FYDGwheau0JRSIEs2HHXXZ49kXmQR47rYLdkl:uzrWNKJ7FYS5v0JR7HQ9iT`
Yara	NPKI_Zero - File included NPKI
VirusTotal	Search for analysis

Name	c1576e2a6542baf1_wxklwrzt.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\WXkLWrZt.exe
Size	928.5KB
Processes	1188 (kbdindev.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`1ca618bba986d71007c944f585faad2c`
SHA1	`c127407d4363ec0ba5aaad2860d2279e3be6dba8`
SHA256	`c1576e2a6542baf1bedf9a8f9b62da6a5e2f17dfcef52e5d977bc268c11306ca`
CRC32	`94E0891F`
ssdeep	`12288:54FSTZYH4sfCUXwJlqxYI6zeZ6aHdsqaB4izoxK0G6UD4ZRHxwnyLWlGnM+:84ZYYsfqJlE6ze8IdZaBw`
Yara	Malicious_Packer_Zero - Malicious Packer Generic_Malware_Zero - Generic Malware Is_DotNET_EXE - (no description) PE_Header_Zero - PE File Signature IsPE32 - (no description) Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
VirusTotal	Search for analysis

Name	113bbce061bb7395_tmpF05F.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmpF05F.tmp
Size	1.6KB
Processes	1188 (kbdindev.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`5fb150e2cc883b3606a7394c9385c1b0`
SHA1	`1b1ef5d4d47c5808d79ea4dc6ae5f204cb38c701`
SHA256	`113bbce061bb7395e1dea65bb7597bcbbe38115f5b82159f50b96978fa899feb`
CRC32	`A6433556`
ssdeep	`24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBQ+tn:cbhf7IlNQQ/rydbz9I3YODOLNdq3S4`
Yara	None matched
VirusTotal	Search for analysis

Name	824fae3331b95e2f_cIGHIGh.tmp Submit file
Filepath	C:\Users\test22\AppData\Roaming\cIGHIGh.tmp
Size	40.0KB
Type	SQLite 3.x database, last written using SQLite version 3033000
MD5	`41c19a9e8541fcb934c13c075bf47721`
SHA1	`648a7622d533d79b9a0bb31dc370134ec3a75ed7`
SHA256	`824fae3331b95e2f88ca60c87a6c9569086906ec76fc1db8d6dee9adddc4e80c`
CRC32	`560F7642`
ssdeep	`48:+35TqYzDGF/8LKBwUf9KfWfkMUEilGc7xBM6vu3f+fmyJqhU:Ulce7mlcwilGc7Ha3f+u`
Yara	None matched
VirusTotal	Search for analysis