Dropped Files | ZeroBOX

Name	d6431d5645fffd05_BP38ASWF9098139E9GYG.temp Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BP38ASWF9098139E9GYG.temp
Size	7.8KB
Processes	2588 (powershell.exe)
Type	data
MD5	`260d23ce04a8f8555a73b7d2dc15e911`
SHA1	`ebad746fb7de847c50f7502a44f6e35534733efd`
SHA256	`d6431d5645fffd05a23166d630253bc7ce8c099cf6e9c956f8ae5e1249ee8588`
CRC32	`11D6B213`
ssdeep	`96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:ctvXo5tvbHnorrxQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_d93f411851d7c929.customDestinations-ms~RF2154ff4.TMP Empty file or file not found
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF2154ff4.TMP
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	6daf835813e5444b_tmp4B47.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\tmp4B47.tmp
Size	1.5KB
Processes	1960 (summ.exe)
Type	XML 1.0 document, ASCII text
MD5	`e39c78f7cce31890ab07a2f2918394d7`
SHA1	`935444a4a1468a8188e138df4b72689a5fb5486d`
SHA256	`6daf835813e5444b6f8500a77743aa54b9ee5a8b0f285a5276ce1d883763127c`
CRC32	`86329785`
ssdeep	`24:2di4+S2qhH/1ny1mEUnrKMhEMOFGpwOzNgU3ODOiIQRvh7hwrgXuNt3lxvn:cgefAYrFdOFzOzN33ODOiDdKrsuT37v`
Yara	None matched
VirusTotal	Search for analysis