Dropped Files | ZeroBOX

Name	5df14180ec85b54f_ibwae.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\ibwae.exe
Size	199.5KB
Processes	3028 (po# 348839.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`61e36b917f2d78732dbfec6126481df1`
SHA1	`535cbfe4c347219b4c1aeea3f5ee43084a924beb`
SHA256	`5df14180ec85b54f1f6c12526541eb8efdd05fdeb30cb2c49bcfb12fc67d1c82`
CRC32	`FDEFAB9C`
ssdeep	`3072:UY0Otn/kw2ulOl7wUJ2EYe9e7eH9/VanSKUtV+Ag0Fuj4dTg8oV8:UY0OZflY7wA5Y7KHtVSAOnV8`
Yara	UPX_Zero - UPX packed file Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsi2EEA.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsi2EEA.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	db82e0d188eab321_btewug.z Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\btewug.z
Size	231.3KB
Processes	3028 (po# 348839.exe)
Type	data
MD5	`d0f9f9f8beef00e2c9671ff4951e1329`
SHA1	`237dbb17578db584446c31f629efd1fd62c6a0e0`
SHA256	`db82e0d188eab321f9088a20fc2bb55404c5910294f6e61107a1cc049dd0ad16`
CRC32	`567C51D9`
ssdeep	`6144:kxXEJzupnRQQBH4NSWRS4x3MTz4LeduKFW6TfjDtq08cZd2nL:kxmzyF4XjBrQVTrkzL`
Yara	None matched
VirusTotal	Search for analysis