Dropped Files | ZeroBOX

Name	a9220271c0eb79e5_d93f411851d7c929.customDestinations-ms~RF3907ab.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF3907ab.TMP
Size	7.8KB
Type	data
MD5	`b0c9ff441742f3847ea27da9dee7f2cd`
SHA1	`c42a1eb32ba953a0ce5d8635caabf71b5b281495`
SHA256	`a9220271c0eb79e5750e0d0e62058ecac560e09cdf9e82ef61aeeabada5d48a4`
CRC32	`0BBCAB1A`
ssdeep	`96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:UtvXoxtvbHnorrxQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	44ce29d8d88c0a3e_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2680 (powershell.exe)
Type	data
MD5	`e04cf7a99e7bcafa69190e426f82066a`
SHA1	`2e407c6a420005d3d8c7616d1af6570d11c42889`
SHA256	`44ce29d8d88c0a3ea471987949192a096a9197cf81cec8dcb58beefbf6f4d6cd`
CRC32	`926A05F2`
ssdeep	`96:QtuCeGCPDXBqvsqvJCwottuCeGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:QtvXottvbHnorrxQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis