Dropped Files | ZeroBOX

Name	8b9eda0b73185033_diversityCourtby.js Submit file
Filepath	C:\ProgramData\diversityCourtby.js
Size	200.7KB
Type	ASCII text, with very long lines, with CRLF line terminators
MD5	`ef0b4c4b31d3de1f1c786313f1f6e9bb`
SHA1	`86cd1506157d9f4e49565313488e35a746b44a8d`
SHA256	`8b9eda0b731850331889728f7f399499da6d6a017457bd15a8cac1a05abf7f0e`
CRC32	`2100A9C5`
ssdeep	`3072:MRabQr4l1qDvatIVFcWwblWrj6/ns5JoDXn0Pns:MADqDvatIVifQJorKs`
Yara	None matched
VirusTotal	Search for analysis

Name	56363635f776269e_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	1196 (powershell.exe)
Type	data
MD5	`1e5b1b548c072c1259872f3dcf4dcb26`
SHA1	`811e9d78e9ec7aa7d0918b4b51d1ca27e65a1d95`
SHA256	`56363635f776269ea7e5821ba00aee18f54e44252c55d57b9f1ae79815ab83d2`
CRC32	`813FE152`
ssdeep	`96:TwtuC6GCPDXBqvsqvJCwomwtuC6GCPDXBqvsEHyqvJCworFS7HwxWlUVul:TwtbXomwtbbHnor/xo`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis