Dropped Files | ZeroBOX

Name	cf11d6b3c18d4c02_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	1456 (powershell.exe)
Type	data
MD5	`f2f5505600e2895c007b3ff3cfe3d4aa`
SHA1	`f0235a3c8056872d55eeef803d1bc33bac37a753`
SHA256	`cf11d6b3c18d4c02466b670bcb0394ac49382e6a87ad58d2561f2660922b586c`
CRC32	`9AF5ED3C`
ssdeep	`96:EtuCojGCPDXBqvsqvJCwoJtuCojGCPDXBqvsEHyqvJCworc7HwxGlUVul:Etu6XoJtu6bHnorXxY`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	830333e50982a744_truyqvzb.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tRuYQvZb.dat
Size	242.5KB
Processes	1456 (powershell.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`c49408f0b7e92caf4bddb85619d52279`
SHA1	`317b304b7fa36f14f70573ca81138ce44a575262`
SHA256	`830333e50982a744aa1e594466ce3c9d50a115af8945ecfae084cf49d8a2334b`
CRC32	`7974FC90`
ssdeep	`3072:lT/aaUF7JjCqyWFDUX9Yk2YMsLICMB61BDWY4t4OIvWcg/9s:INeEDtk2gLpj1IY4t4OIF`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis