Dropped Files | ZeroBOX

Name	4a48124561b1a5c5_cred64.dll Submit file
Filepath	C:\Users\test22\AppData\Roaming\a091ec0a6e2227\cred64.dll
Size	126.0KB
Processes	2632 (nbveek.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`4a9e02f2913522b55571d2644800e15b`
SHA1	`9167a2b50bd7357737cf3b06686260736c318f2a`
SHA256	`4a48124561b1a5c5f3c80fc5f5a71d520dc6961f85c9162bd282b5acf4dd3ecc`
CRC32	`92023B4F`
ssdeep	`3072:Yx7pOYzBek53tiINwyP7XSSJds3zhrjPcnqULv4u9:Yx7ZNh53vwyOztPc3L`
Yara	IsPE32 - (no description) Malicious_Library_Zero - Malicious_Library IsDLL - (no description) PE_Header_Zero - PE File Signature Win32_PWS_Loki_Zero - Win32 PWS Loki
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_pypfhc2o51o.exe Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\1000001001\pypfhc2o51o.exe
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis