Dropped Files | ZeroBOX

Name	3a255c0024916f19_590aee7bdd69b59b.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms
Size	7.8KB
Processes	2256 (powershell.exe)
Type	data
MD5	`6fd29def73b2779e0ae71c4eecd304f7`
SHA1	`4ba660e4db856e04eb93a01c59ee764259ec55e7`
SHA256	`3a255c0024916f19c5b3f5d4aa5cde453cc5d90b0784a15f0456e57e71a764b6`
CRC32	`1F966CD8`
ssdeep	`96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworDPtDHXyf2lUVul:ctvXo5tvbHnorxTyQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	87f13ab659926682_yo.bat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\IXP000.TMP\yo.bat
Size	466.0B
Processes	1440 (1.exe)
Type	DOS batch file, ASCII text, with CRLF line terminators
MD5	`18b38d63fc221213d032e3dfc11566a3`
SHA1	`0e28db3426f495088c17da65fb124ef0609710ac`
SHA256	`87f13ab6599266825bc38f3288074e8bdcb191a14f5cf582dd076a0d15838900`
CRC32	`782D193C`
ssdeep	`12:lKz95l9c8XM8n2/Zh6di+opfSIur1980QpcWcEvkS:MzLl9e8ngZE0jur3EsS`
Yara	None matched
VirusTotal	Search for analysis

Name	8acfdd50f5146cf1_AddExclusion.ps1 Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\AddExclusion.ps1
Size	72.0B
Processes	1648 (cmd.exe)
Type	ASCII text, with CRLF line terminators
MD5	`bff23a9ba114f3a0a93710bbafc667ca`
SHA1	`b24d77d2b9fc06f6493a846dc97d61b30048d461`
SHA256	`8acfdd50f5146cf11c1a5ae8ccfe935b05395f9600e3889dc548a41f82cec6d6`
CRC32	`957A92BC`
ssdeep	`3:6PWLCXLIvSCceGAFddGeWLCXPLC6v:6P7LIWeGgdEYr`
Yara	None matched
VirusTotal	Search for analysis