Dropped Files | ZeroBOX

Name	5457d8acf1f66dc2_rbhso.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\rbhso.exe
Size	199.0KB
Processes	1648 (lightmuzik2.1.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`8b574a3a25bfbb6bdbc398a7e896aa38`
SHA1	`f60a3157012fac21cb5ed021e367ca6b7c81f1e4`
SHA256	`5457d8acf1f66dc2874d4c1920158f1ccdc4661843e3257cb862cdaf6b16b521`
CRC32	`762AD379`
ssdeep	`3072:dF4lxcYDUB88t104ltxOt+Hv6coXXTlRAwPMXA++9AbsKKq:dmL4B88k4l9aTkwUXAut`
Yara	Malicious_Library_Zero - Malicious_Library IsPE32 - (no description) PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	755581a74aa3f16b_gtmmioq.kcb Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\gtmmioq.kcb
Size	333.3KB
Processes	1648 (lightmuzik2.1.exe)
Type	data
MD5	`375ed6962fbb4aae9e11b37f17959060`
SHA1	`5c2c00f87f958eab387f5c8f12b4386c18d8d492`
SHA256	`755581a74aa3f16b61662dfab04c954cd4375be0218f936d557c4297b9eac2c4`
CRC32	`2E535A01`
ssdeep	`6144:9Li1/KP977r6555enimrQIjNLKWflxd8MJWwfWf/yT2+yeJ2eE:9Yo7O55gD3JJx9WJ/yTAegeE`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nslC0E9.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nslC0E9.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis