Dropped Files | ZeroBOX

Name	3a255c0024916f19_590aee7bdd69b59b.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms
Size	7.8KB
Processes	2168 (powershell.exe)
Type	data
MD5	`6fd29def73b2779e0ae71c4eecd304f7`
SHA1	`4ba660e4db856e04eb93a01c59ee764259ec55e7`
SHA256	`3a255c0024916f19c5b3f5d4aa5cde453cc5d90b0784a15f0456e57e71a764b6`
CRC32	`1F966CD8`
ssdeep	`96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworDPtDHXyf2lUVul:ctvXo5tvbHnorxTyQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	b61db88b668aebc4_BFA3.bat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\BF92.tmp\BFA2.tmp\BFA3.bat
Size	197.0B
Processes	1932 (utilsxupdater.exe)
Type	ASCII text, with CRLF, LF line terminators
MD5	`357324c3dee28a16a77699ead1f205ae`
SHA1	`a8de60d51730031d4e822103559f10ba835591f9`
SHA256	`b61db88b668aebc41fab8f2de6327ceb95313279829317cdca1facfd6b60b087`
CRC32	`4A441686`
ssdeep	`6:NuYrOwYzLmj6IHS29jpyvi6iAKWHEM/BvW+h+n:NuYXYvm9yEU66jKkEM5OM+n`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_BF92.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\BF92.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis