Dropped Files | ZeroBOX

Name	9cba1183ed6a9a89_wkybeb.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\nskC06E.tmp\wkybeb.dll
Size	49.0KB
Processes	1932 (wininit.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9da370474c2a7427495e83bed70b87ab`
SHA1	`de2b22ba5cf618e0fc6ff30a8927820f1544068a`
SHA256	`9cba1183ed6a9a89a34805730da01edaed2026b3d3cad0e3ef9710fbeb3ec442`
CRC32	`034E53F4`
ssdeep	`768:giAlYLUf/o8gAvsR60hFoOeVI8/9s/ESLRhD46mnTED+N7vyo:giAlYLUf/50hFoRVV/9sRLvDoDUo`
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsvC05D.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsvC05D.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	0b9d20e88f6ef853_lbpnv.kn Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\lbpnv.kn
Size	216.3KB
Processes	1932 (wininit.exe)
Type	data
MD5	`3d152490d9d0bf9519d446a25b0f8266`
SHA1	`59c1bd25bd94771d8107b693dfbd00333f52a3cd`
SHA256	`0b9d20e88f6ef853f2e049ca32b14c8a85fd21b431bf63d1f4b91adae3801d5e`
CRC32	`145B330E`
ssdeep	`6144:2yBfxGgpAScMZVz6ITeBL3bK4Sssc50K0hKb:2MfxGkASc6VjyrscyK0s`
Yara	None matched
VirusTotal	Search for analysis