popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 5c97751a7f1565d7_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2688 (powershell.exe)
Type data
MD5 c54f8cd77ba61d2eaf8e9591a3a87397
SHA1 0801488bbd3fe935879af0c30c836fae9fe1fdd3
SHA256 5c97751a7f1565d7fbe89cbe8ef744571bbe602b68c57150b59cf593f68b4fad
CRC32 D8824F11
ssdeep 96:EtuCeGCPDXBqvsqvJCwoZtuCeGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:EtvXoZtvbHnorrxQ
Yara
  • Generic_Malware_Zero - Generic Malware
  • Antivirus - Contains references to security software
VirusTotal Search for analysis
Name a9220271c0eb79e5_d93f411851d7c929.customDestinations-ms~RF214c160.TMP
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF214c160.TMP
Size 7.8KB
Type data
MD5 b0c9ff441742f3847ea27da9dee7f2cd
SHA1 c42a1eb32ba953a0ce5d8635caabf71b5b281495
SHA256 a9220271c0eb79e5750e0d0e62058ecac560e09cdf9e82ef61aeeabada5d48a4
CRC32 0BBCAB1A
ssdeep 96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:UtvXoxtvbHnorrxQ
Yara
  • Generic_Malware_Zero - Generic Malware
  • Antivirus - Contains references to security software
VirusTotal Search for analysis
Name e3b0c44298fc1c14_Documents.ps1
Empty file or file not found
Filepath C:\ProgramData\Document\Documents.ps1
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep 3::
Yara None matched
VirusTotal Search for analysis
Name 2eedf268d94eff49_servicing.vbs
Submit file
Filepath C:\ProgramData\Document\servicing.vbs
Size 393.0B
Processes 300 (powershell.exe)
Type ASCII text, with CRLF line terminators
MD5 a8caa0c823c5328ef4d1b2715df9206f
SHA1 a677724dc4735e4649d3486a1d3a1ff120ad98f5
SHA256 2eedf268d94eff4996beb6e5e724b9c4c1710374aad9f16cd936d7b70e973452
CRC32 7A428682
ssdeep 12:Vt5vWd+a/qQL8KNfx6BnX6kbQpw/OTzWQz0u+hm6:/5A+6NQKyhTbXGTSQh+U6
Yara
  • Antivirus - Contains references to security software
VirusTotal Search for analysis
Name d6431d5645fffd05_d93f411851d7c929.customDestinations-ms~RF2151452.TMP
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF2151452.TMP
Size 7.8KB
Processes 300 (powershell.exe) 2688 (powershell.exe)
Type data
MD5 260d23ce04a8f8555a73b7d2dc15e911
SHA1 ebad746fb7de847c50f7502a44f6e35534733efd
SHA256 d6431d5645fffd05a23166d630253bc7ce8c099cf6e9c956f8ae5e1249ee8588
CRC32 11D6B213
ssdeep 96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:ctvXo5tvbHnorrxQ
Yara
  • Generic_Malware_Zero - Generic Malware
  • Antivirus - Contains references to security software
VirusTotal Search for analysis