Dropped Files | ZeroBOX

Name	0e95a8d0ad7df055_taxd.bat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\taxd.bat
Size	70.0MB
Processes	2004 (None)
Type	Little-endian UTF-16 Unicode text, with very long lines, with no line terminators
MD5	`1e45131e295fe8263a8e0b1b7fb992d9`
SHA1	`059680ff3cd7dd66ff4667f74e1d391e6fe646fe`
SHA256	`0e95a8d0ad7df055e28732a2d2537a7f388f680fbc411a1626904918a66358e6`
CRC32	`760665DC`
ssdeep	`1536:YTYcpQyuPmhDGEhtKCHVeW9auEbtuTRNCk6wsm:kIWMaanwL`
Yara	None matched
VirusTotal	Search for analysis

Name	3a255c0024916f19_590aee7bdd69b59b.customDestinations-ms~RF1df5f2d.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms~RF1df5f2d.TMP
Size	7.8KB
Processes	2732 (powershell.exe) 2816 (powershell.exe)
Type	data
MD5	`6fd29def73b2779e0ae71c4eecd304f7`
SHA1	`4ba660e4db856e04eb93a01c59ee764259ec55e7`
SHA256	`3a255c0024916f19c5b3f5d4aa5cde453cc5d90b0784a15f0456e57e71a764b6`
CRC32	`1F966CD8`
ssdeep	`96:ctuCeGCPDXBqvsqvJCwo5tuCeGCPDXBqvsEHyqvJCworDPtDHXyf2lUVul:ctvXo5tvbHnorxTyQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis