Dropped Files | ZeroBOX

Name	03df598f36bc15c3_shield.lnk Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Shield.lnk
Size	1.6KB
Processes	2544 (xxx.exe)
Type	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Mon Jul 13 14:32:37 2009, mtime=Mon Jul 13 14:32:37 2009, atime=Mon Jul 13 16:14:24 2009, length=452608, window=hidenormalshowminimized
MD5	`290958b0cfe13c85f26b8444af645971`
SHA1	`d992ea791075fbd2a16bed0e2002607dffda94b8`
SHA256	`03df598f36bc15c37269d90c7a7fecc32e73a81b19ca40af5e14e9877e10980c`
CRC32	`6ECECDF7`
ssdeep	`24:8dJCO0VQbkjnqIraAmW7d1+/CWl+/CWg3+/CWLZUotUMkWar9BPyoiliK:8rV4PedmBtHCrzyZ`
Yara	lnk_file_format - Microsoft Windows Shortcut File Format Antivirus - Contains references to security software Lnk_Format_Zero - LNK Format Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis