Dropped Files | ZeroBOX
Name 166426f855aa24cf_tmp8642.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\tmp8642.tmp
Size 1.5KB
Processes 2552 (wins.exe)
Type XML 1.0 document, ASCII text
MD5 7893c842bc8ea9fd0636d7eaedae2331
SHA1 6513a46fa003cf5aa1db065c2758c3c648b91076
SHA256 166426f855aa24cf655c7ac14b37dd48606f58b565f3ef9c634a3c3bf804fcfe
CRC32 9B46B195
ssdeep 24:2di4+S2qhH/1ny1mEUnrKMhEMOFGpwOzNgU3ODOiIQRvh7hwrgXuNtIxvn:cgefAYrFdOFzOzN33ODOiDdKrsuTov
Yara None matched
VirusTotal Search for analysis
Name b7c225ef3cc3e875_d93f411851d7c929.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size 7.8KB
Processes 2864 (powershell.exe)
Type data
MD5 81ca4510272caf505e8091e9a28cb716
SHA1 71414aeec9f1e4a6f5a461b01700cc9cc992cd9e
SHA256 b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf
CRC32 FC31E90F
ssdeep 96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY
Yara
  • Antivirus - Contains references to security software
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis