Dropped Files | ZeroBOX

Name	d83f2c3a5c91cdd5_~DF3C6A17AFA0513CFB.TMP Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~DF3C6A17AFA0513CFB.TMP
Size	6.0KB
Type	Composite Document File V2 Document, Cannot read section info
MD5	`7a7c424c9f3ad2f69b0109ac954c500e`
SHA1	`68f8bf2b51e3e43d1b9ac620c3817155a39a1485`
SHA256	`d83f2c3a5c91cdd502690df4fa938914d05a61a165187dc9eb89530da8b79574`
CRC32	`53E94747`
ssdeep	`48:r4HvFs0dSngGJ1JpK6O5r59qx6Is+W8wYry58nP0pB/ewjcYzrd67O/1:MuaSnTO5rL/JUOQGJ6+`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis

Name	49c4a85bce2fb8cb_d93f411851d7c929.customDestinations-ms~RFe448eb.TMP Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RFe448eb.TMP
Size	7.8KB
Processes	1660 (powershell.exe) 1376 (powershell.exe)
Type	data
MD5	`4eba3b6a4f05a26106a2d772c79da044`
SHA1	`45ae375ea2f305e4409aabc22803cd1471f0983e`
SHA256	`49c4a85bce2fb8cb6db4279591d0966cbd2fb84bc43f252ee5ad14d3d615b2b5`
CRC32	`2DF7F691`
ssdeep	`96:YtuCaGCPDXBqvsqvJCwo9tuCaGCPDXBqvsEHyqvJCworM7HwxWlUVul:YtzXo9tzbHnornxo`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis