Dropped Files | ZeroBOX

Name	b7c225ef3cc3e875_d93f411851d7c929.customDestinations-ms~RFa628ae.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RFa628ae.TMP
Size	7.8KB
Processes	2676 (powershell.exe) 2960 (powershell.exe)
Type	data
MD5	`81ca4510272caf505e8091e9a28cb716`
SHA1	`71414aeec9f1e4a6f5a461b01700cc9cc992cd9e`
SHA256	`b7c225ef3cc3e87506150eb140e7b9cc127a3469c50a808854acac71a53d98bf`
CRC32	`FC31E90F`
ssdeep	`96:EtuCcBGCPDXBqvsqvJCwoRtuCcBGCPDXBqvsEHyqvJCwor/47HwxGlUVul:EtCgXoRtCgbHnorLxY`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	aa64fa03dc8bda91_Proxifier.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\Proxifier.exe
Size	861.5KB
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`603db03582b0bf9af87364e0a3947442`
SHA1	`87b1fbe30732fde3a0740a438d6c356b580c4564`
SHA256	`aa64fa03dc8bda91a403ea065b3a396548b8d4b459fbe3647a83e8a528f33564`
CRC32	`D89F8AF0`
ssdeep	`24576:syeWpdOigaFD2Ob2z/N1YyOgFgmUdsmcOC:syJ9bd2bfBFgDBfC`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Is_DotNET_EXE - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis