Dropped Files | ZeroBOX

Name	72fbca28d6ecd311_java update checker (64 bit).lnk Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\java Update Checker (64 bit).lnk
Size	733.0B
Processes	1932 (x.exe)
Type	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Tue Jul 16 15:02:17 2024, mtime=Tue Jul 16 15:02:17 2024, atime=Tue Jul 16 15:02:17 2024, length=43008, window=hide
MD5	`b0dbf6f2912255fef8eb3a075dc69900`
SHA1	`b971e9e2a4efdc8d3ce6496f0055db7d4b7f3488`
SHA256	`72fbca28d6ecd31190810786de59fc44f9fd2446a56479f7bc63ab2463cad735`
CRC32	`8DFF5D41`
ssdeep	`12:8l5C3IXa3+s0e3fKrojDujAlhReCHGbFWjDXEgB:8zC3+FtojeAHCFWjTEO`
Yara	lnk_file_format - Microsoft Windows Shortcut File Format Lnk_Format_Zero - LNK Format
VirusTotal	Search for analysis

Name	3a255c0024916f19_590aee7bdd69b59b.customDestinations-ms~RFf0804c.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms~RFf0804c.TMP
Size	7.8KB
Processes	2272 (powershell.exe) 2692 (powershell.exe)
Type	data
MD5	`6fd29def73b2779e0ae71c4eecd304f7`
SHA1	`4ba660e4db856e04eb93a01c59ee764259ec55e7`
SHA256	`3a255c0024916f19c5b3f5d4aa5cde453cc5d90b0784a15f0456e57e71a764b6`
CRC32	`1F966CD8`
ssdeep	`96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworDPtDHXyf2lUVul:ctvXo5tvbHnorxTyQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	9208a02c664094fa_java update checker (64 bit).exe Submit file
Filepath	C:\ProgramData\java Update Checker (64 bit).exe
Size	42.0KB
Processes	1932 (x.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`eacd19fe747d17c6740b0a8a50de29ac`
SHA1	`4f47aa2b91b52caa981197d9bed3435422d48d80`
SHA256	`9208a02c664094fa2633d6834c10c680fb24e1e900d449814dbbd1c48718f4ba`
CRC32	`0B1332B0`
ssdeep	`768:PuTA4z0hZZH6wCWSctKuuuElZPUmfFWPC9v66dOMh+adnMC:PuTC9P3TtKuuPjTFJ9v66dOM4AnMC`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software Is_DotNET_EXE - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis