Dropped Files | ZeroBOX

Name	cf11d6b3c18d4c02_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	1664 (powershell.exe)
Type	data
MD5	`f2f5505600e2895c007b3ff3cfe3d4aa`
SHA1	`f0235a3c8056872d55eeef803d1bc33bac37a753`
SHA256	`cf11d6b3c18d4c02466b670bcb0394ac49382e6a87ad58d2561f2660922b586c`
CRC32	`9AF5ED3C`
ssdeep	`96:EtuCojGCPDXBqvsqvJCwoJtuCojGCPDXBqvsEHyqvJCworc7HwxGlUVul:Etu6XoJtu6bHnorXxY`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	28b7750116c484b2_04-07-2022 Submit file
Filepath	C:\Users\test22\AppData\Roaming\Logs\04-07-2022
Size	224.0B
Processes	2392 (None)
Type	data
MD5	`606e51682eed2339f0aeb4ee65c448d7`
SHA1	`8ee55dfccbd99d02e6b040ad957745213b239f1e`
SHA256	`28b7750116c484b259cd73fa53a8c4ede926d23a02038550579acffcf8f0385d`
CRC32	`E7F86DFE`
ssdeep	`6:XQ+SEO8f6ZgM/Est+Oh8K/gPp3MQEyGhnR+aoMNUZsZ/W7d:XQ/nwQgM/B+OhfgRBdsasB+d`
Yara	None matched
VirusTotal	Search for analysis

Name	6a3ffd999df743b2_tmp8567.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp8567.tmp
Size	1.5KB
Processes	2804 (Quote#0022.exe)
Type	XML 1.0 document, ASCII text
MD5	`be069a60166bbf2c2bf42cba103f0ca4`
SHA1	`de20b29679aeeead8e98b62adc6bdc710f5916f2`
SHA256	`6a3ffd999df743b2885ca128ceeb6a9d881cc6e4becf700e2b883f4fcb2d385b`
CRC32	`0C9D2EB8`
ssdeep	`24:2di4+S2qhH/1ny1mEUnrKMhEMOFGpwOzNgU3ODOiIQRvh7hwrgXuNtMB+xvn:cgefAYrFdOFzOzN33ODOiDdKrsuTMIv`
Yara	None matched
VirusTotal	Search for analysis