Dropped Files | ZeroBOX

Name	9593a706e2f4b587_ex.bat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\IXP000.TMP\ex.bat
Size	570.0B
Processes	2052 (pump.exe)
Type	DOS batch file, ASCII text, with CRLF line terminators
MD5	`9779cdc0ed14479ad19bbe8e77661c7f`
SHA1	`a34e09c03ea50690ab4e61696ccd64bd99dba926`
SHA256	`9593a706e2f4b5870448a9ea1c1802058df049c83d478f0210dce4904e87e93f`
CRC32	`717BFBC8`
ssdeep	`12:Ikj76qBGLLLdERSTYfOpIuiGpiST080QpcR9kIIEBGKdmmk6uG3GKp:97BoOYEOGur8a4Cep`
Yara	None matched
VirusTotal	Search for analysis

Name	8acfdd50f5146cf1_add_exclusion.ps1 Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\add_exclusion.ps1
Size	72.0B
Processes	2148 (cmd.exe)
Type	ASCII text, with CRLF line terminators
MD5	`bff23a9ba114f3a0a93710bbafc667ca`
SHA1	`b24d77d2b9fc06f6493a846dc97d61b30048d461`
SHA256	`8acfdd50f5146cf11c1a5ae8ccfe935b05395f9600e3889dc548a41f82cec6d6`
CRC32	`957A92BC`
ssdeep	`3:6PWLCXLIvSCceGAFddGeWLCXPLC6v:6P7LIWeGgdEYr`
Yara	None matched
VirusTotal	Search for analysis

Name	3a255c0024916f19_590aee7bdd69b59b.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms
Size	7.8KB
Processes	2216 (powershell.exe)
Type	data
MD5	`6fd29def73b2779e0ae71c4eecd304f7`
SHA1	`4ba660e4db856e04eb93a01c59ee764259ec55e7`
SHA256	`3a255c0024916f19c5b3f5d4aa5cde453cc5d90b0784a15f0456e57e71a764b6`
CRC32	`1F966CD8`
ssdeep	`96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworDPtDHXyf2lUVul:ctvXo5tvbHnorxTyQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis