Dropped Files | ZeroBOX
Name cf11d6b3c18d4c02_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 1396 (powershell.exe)
Type data
MD5 f2f5505600e2895c007b3ff3cfe3d4aa
SHA1 f0235a3c8056872d55eeef803d1bc33bac37a753
SHA256 cf11d6b3c18d4c02466b670bcb0394ac49382e6a87ad58d2561f2660922b586c
CRC32 9AF5ED3C
ssdeep 96:EtuCojGCPDXBqvsqvJCwoJtuCojGCPDXBqvsEHyqvJCworc7HwxGlUVul:Etu6XoJtu6bHnorXxY
Yara
  • Antivirus - Contains references to security software
VirusTotal Search for analysis
Name 33f2fe94b672b013_b9a77cd03e9148549e867d43e632c547
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\b9a77cd03e9148549e867d43e632c547
Size 1.7MB
Processes 2444 (ashleybinx.exe)
Type ASCII text, with very long lines, with no line terminators
MD5 602376c0216c5a03c1e4ed7548d3e43c
SHA1 88dfcf03e122515e726bcaa4875dfd54a475b729
SHA256 33f2fe94b672b0131eeb957965e92e8ed35b5c03887f8f032fc4128452d6f160
CRC32 BF4C680C
ssdeep 12288:avPe9c1BcjuShxSv9TpD0rPusQLYVTQ8eYApO1UJtA9TDZMa2jYGaepWml7zypmV:D/D0YRCH
Yara None matched
VirusTotal Search for analysis