K.J_121021E.EXE – Unknown removal

K.J_121021E.EXE size: 36633463 bytes
K.J_121021E.EXE hash: 0C32089BE4EBE827632A1F09CD06798C

Created files:

%TEMP%\7ZipSfx.000\Ac.vbs
%TEMP%\7ZipSfx.000\Bios\Bios.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\bootmgr.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\data\bootmgr\bootmgr
%TEMP%\7ZipSfx.000\BIOS_Emulator\data\bootmgr_default\bootmgr
%TEMP%\7ZipSfx.000\BIOS_Emulator\data\Install_files_open\grldr
%TEMP%\7ZipSfx.000\BIOS_Emulator\data\Install_files_open\SLIC.BIN
%TEMP%\7ZipSfx.000\BIOS_Emulator\data\Install_files_vfd\grldr
%TEMP%\7ZipSfx.000\BIOS_Emulator\data\Install_files_vfd\SLIC.IMG
%TEMP%\7ZipSfx.000\BIOS_Emulator\data\Install_files_vista\grldr
%TEMP%\7ZipSfx.000\BIOS_Emulator\data\Install_files_w7\grldr
%TEMP%\7ZipSfx.000\BIOS_Emulator\data\Install_files_w7open\grldr
%TEMP%\7ZipSfx.000\BIOS_Emulator\Install_open.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\Install_vfd.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\Install_vista.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\Install_w7.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\Install_w7A.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\Install_w7open.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\rundll32.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\Successful.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\Uninstall.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\UninstallA.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\WatermarkX64.vbs
%TEMP%\7ZipSfx.000\BIOS_Emulator\WatermarkX86.vbs
%TEMP%\7ZipSfx.000\ChkWin.vbs
%TEMP%\7ZipSfx.000\DesktopGadgets.vbs
%TEMP%\7ZipSfx.000\Embedded.vbs
%TEMP%\7ZipSfx.000\Embedded_k.vbs
%TEMP%\7ZipSfx.000\FSCapture\FSCapture.vbs
%TEMP%\7ZipSfx.000\FSCapture\FSCapture2.vbs
%TEMP%\7ZipSfx.000\hs_message.vbs
%TEMP%\7ZipSfx.000\KJ_e.apm
%TEMP%\7ZipSfx.000\KMService.vbs
%TEMP%\7ZipSfx.000\ospp.vbs
%TEMP%\7ZipSfx.000\Pirate\Failed.apm
%TEMP%\7ZipSfx.000\Pirate\Install.vbs
%TEMP%\7ZipSfx.000\Pirate\Pleasewait.vbs
%TEMP%\7ZipSfx.000\Pirate\rearm.vbs
%TEMP%\7ZipSfx.000\Pirate\Rebooting.vbs
%TEMP%\7ZipSfx.000\Pirate\Successful.vbs
%TEMP%\7ZipSfx.000\Pirate\T\Rebooting.vbs
%TEMP%\7ZipSfx.000\Pirate\Uninstall.vbs
%TEMP%\7ZipSfx.000\Pirate\WinRRe.vbs
%TEMP%\7ZipSfx.000\Pirate\WinRRk.vbs
%TEMP%\7ZipSfx.000\Pirate8\msg\Failed.apm
%TEMP%\7ZipSfx.000\Pirate8\p\x64\slmgr.vbs
%TEMP%\7ZipSfx.000\Pirate8\p\x86\slmgr.vbs
%TEMP%\7ZipSfx.000\Pirate8\T\x64\slmgr.vbs
%TEMP%\7ZipSfx.000\Pirate8\T\x86\slmgr.vbs
%TEMP%\7ZipSfx.000\Pleasewait.vbs
%TEMP%\7ZipSfx.000\Pleasewait_k.vbs
%TEMP%\7ZipSfx.000\Pleasewait_v.vbs
%TEMP%\7ZipSfx.000\Rebooting.vbs
%TEMP%\7ZipSfx.000\slui.vbs
%TEMP%\7ZipSfx.000\Successful.vbs
%TEMP%\7ZipSfx.000\Successful_k.vbs
%TEMP%\7ZipSfx.000\Successful_v.vbs
%TEMP%\7ZipSfx.000\UI\8patch.vbs
%TEMP%\7ZipSfx.000\UI\8patch_R.vbs
%TEMP%\7ZipSfx.000\UI\Failed.apm
%TEMP%\7ZipSfx.000\WMIPatch\Patch.vbs
%TEMP%\7ZipSfx.000\WMIPatch\WMIPatch.vbs
%TEMP%\7ZipSfx.000\xp_e.vbs
%TEMP%\7ZipSfx.000\xp_k.vbs
%TEMP%\7ZipSfx.000\xp_s.vbs
%TEMP%\RarSFX0\K.J_121021E.exe

Detected by UnHackMe:

K.J_121021E.EXE
Default location: %TEMP%\RARSFX0\K.J_121021E.EXE

Dropper information:
MD5: 0ebc31bc14d698b1c52c10e85af92d31
File size: 37017251 bytes