Dropped Files | ZeroBOX

Name	d21c93ab9d964e51_tmp9507.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp9507.tmp
Size	1.5KB
Processes	2544 (NMA.exe)
Type	XML 1.0 document, ASCII text
MD5	`d66fa09d249beaf0edb1be5df8a86018`
SHA1	`f5632881537fb52a5b5b3330830189dddc9cc232`
SHA256	`d21c93ab9d964e51464c402e619078389d52fe0382af90e1239f574d04d0d8fd`
CRC32	`0474BA60`
ssdeep	`24:2di4+S2qhH/1ny1mEUnrKMhEMOFGpwOzNgU3ODOiIQRvh7hwrgXuNthxvn:cgefAYrFdOFzOzN33ODOiDdKrsuTnv`
Yara	None matched
VirusTotal	Search for analysis

Name	b7c225ef3cc3e875_d93f411851d7c929.customDestinations-ms~RFefa4c1.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RFefa4c1.TMP
Size	7.8KB
Processes	2992 (powershell.exe) 2932 (powershell.exe)
Type	data
MD5	`81ca4510272caf505e8091e9a28cb716`
SHA1	`71414aeec9f1e4a6f5a461b01700cc9cc992cd9e`
SHA256	`b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf`
CRC32	`FC31E90F`
ssdeep	`96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY`
Yara	Generic_Malware_Zero - Generic Malware Antivirus - Contains references to security software
VirusTotal	Search for analysis