Dropped Files | ZeroBOX

Name	67b2cfa3d2f6ffc2_excelrepairkitinstall.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\is-PMPOA.tmp\ExcelRepairKitInstall.tmp
Size	744.0KB
Processes	2552 (ExcelRepairKitInstall.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`fa86d4e0eff979acb9883a0c50bb005c`
SHA1	`44fa558ceddcbd25382682449d74f73f0f7b10bb`
SHA256	`67b2cfa3d2f6ffc2bdcf45be74ef3fa2e2a952d80dd1b623b7427cbaecf05da6`
CRC32	`9249B4A8`
ssdeep	`12288:EqIRz+f+ui8TrPO37fzH4A63RRwDFtuXUZERmhrNh4dT9TaC+IGNbDtQPuLvIAyb:pIZg+uiirPO37fzH4A6haDbcUZEbdT9T`
Yara	Malicious_Library_Zero - Malicious_Library Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file mzp_file_format - MZP(Delphi) file format OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	388a796580234efc__setup64.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\is-I8MEG.tmp\_isetup\_setup64.tmp
Size	6.0KB
Processes	2604 (ExcelRepairKitInstall.tmp)
Type	PE32+ executable (console) x86-64, for MS Windows
MD5	`e4211d6d009757c078a9fac7ff4f03d4`
SHA1	`019cd56ba687d39d12d4b13991c9a42ea6ba03da`
SHA256	`388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95`
CRC32	`2CDCC338`
ssdeep	`96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0`
Yara	PE_Header_Zero - PE File Signature IsPE64 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis