Dropped Files | ZeroBOX

Name	aa53bd08a50bcb65_run.dat Submit file
Filepath	C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat
Size	8.0B
Processes	744 (MSBuild.exe)
Type	data
MD5	`11cc92d40938a06edaa211ae071affe3`
SHA1	`709a8fe1a29b107021335837c8a47ad4cff5af9f`
SHA256	`aa53bd08a50bcb6529712183df0a041ab296180521c90acb6a39e8cf608daddc`
CRC32	`4BD5AAA4`
ssdeep	`3:Dg0t:EU`
Yara	None matched
VirusTotal	Search for analysis

Name	b7c225ef3cc3e875_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2944 (powershell.exe)
Type	data
MD5	`81ca4510272caf505e8091e9a28cb716`
SHA1	`71414aeec9f1e4a6f5a461b01700cc9cc992cd9e`
SHA256	`b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf`
CRC32	`FC31E90F`
ssdeep	`96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY`
Yara	Generic_Malware_Zero - Generic Malware Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	7671dcbdfbd0ec6a_tmp9853.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp9853.tmp
Size	1.5KB
Processes	2544 (a.exe)
Type	XML 1.0 document, ASCII text
MD5	`994b7d0a360a37fa7dfae0a5ec914f89`
SHA1	`8c9630caf408c044c86842a1e1cb85c71e0ed3dc`
SHA256	`7671dcbdfbd0ec6aef644bccbfb79a3516a1672b666e2fca4bd602f43acfdecb`
CRC32	`EEF707CE`
ssdeep	`24:2di4+S2qhH/1ny1mEUnrKMhEMOFGpwOzNgU3ODOiIQRvh7hwrgXuNt1xvn:cgefAYrFdOFzOzN33ODOiDdKrsuTLv`
Yara	None matched
VirusTotal	Search for analysis