Dropped Files | ZeroBOX

Name	85666a562ee0be5c_8555326cc9661c9937dc5053b6c38763 Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8555326CC9661C9937DC5053B6C38763
Size	1.5KB
Processes	3048 (wscript.exe)
Type	data
MD5	`866912c070f1ecacacc2d5bca55ba129`
SHA1	`b7ab3308d1ea4477ba1480125a6fbda936490cbb`
SHA256	`85666a562ee0be5ce925c1d8890a6f76a87ec16d4d7d5f29ea7419cf20123b69`
CRC32	`B359B735`
ssdeep	`24:KoBiSmoBlFuztNXbAn29DdtKLrGFsRTN0d9A41vW/Xa3u47pOIjZj3qk66t6:TiSXax1bAnuKLSOpN0d+41O/8fpOI12R`
Yara	None matched
VirusTotal	Search for analysis

Name	a12f68279196d449_8555326cc9661c9937dc5053b6c38763 Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8555326CC9661C9937DC5053B6C38763
Size	326.0B
Processes	3048 (wscript.exe)
Type	data
MD5	`ba2ae49898615d86cd6cb2a4fbdb2fd9`
SHA1	`95651423dae2a0aea28e7da1e72a7c1633a21fb6`
SHA256	`a12f68279196d44927d2af931f8d4c61b2defe5f68cc92edfde46f570233688a`
CRC32	`BC322015`
ssdeep	`6:kKDriqvNyZu6FAagIZqID2yUKlVlRQl8V1:7rlks6FHZqIDVUClRQGV1`
Yara	None matched
VirusTotal	Search for analysis

Name	a9b1dc8eaa5fcd00_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2740 (powershell.exe)
Type	data
MD5	`c1d8708bab1e838a2deda26d58bb8d42`
SHA1	`95d39e75a804752961c139bb6c0b67f84f685035`
SHA256	`a9b1dc8eaa5fcd0034694cf9742ae915a5932142a1477c3ab6fada45d98750b2`
CRC32	`E71AF2A2`
ssdeep	`96:QtuC6GCPDXBqvsqvJCwoFtuC6GCPDXBqvsEHyqvJCworFS7HwxWlUVul:QtbXoFtbbHnor/xo`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis