Dropped Files | ZeroBOX

Name	dcc659401ac55bfa_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	7032 (WINWORD.EXE)
Type	data
MD5	`bdbd68a9109d6af6daa83f5251261d26`
SHA1	`099ed6dd074e3bc88be3530280f5cc353992d898`
SHA256	`dcc659401ac55bfa49a9e60e7b9301f58296721a29bf296666e704fbef7df3ce`
CRC32	`04B16099`
ssdeep	`3:yW2lWRdvL7YMlbK7l9n/l:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	0cfb4f7d61beb1b8_~$.................dot Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$.................dot
Size	162.0B
Processes	7032 (WINWORD.EXE)
Type	data
MD5	`7f36eee4ede60b489d1007ffb3ca828e`
SHA1	`4c6c9c20b19be333e64ab3c459b454866a2a459e`
SHA256	`0cfb4f7d61beb1b871c1dd7eafffa0a4cc218c38cf9a5c3d4849609a2160af39`
CRC32	`35B0AA01`
ssdeep	`3:yW2lWRdvL7YMlbK7lwjnDhll:y1lWnlxK7SjnD`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{4ec1eb67-4bc6-4c94-9543-e2babcb0cb29}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{4EC1EB67-4BC6-4C94-9543-E2BABCB0CB29}.tmp
Size	1.0KB
Processes	7032 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	bfb61b1b0859f94a_~wrs{2ed20ffd-e6f5-4cae-833c-a4c789a7fedc}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{2ED20FFD-E6F5-4CAE-833C-A4C789A7FEDC}.tmp
Size	13.0KB
Processes	7032 (WINWORD.EXE)
Type	data
MD5	`7e91d8c98278de8aacbbf80a7e77d649`
SHA1	`9cf947e705a94bdcda49f52d5a6ef0af5273dd39`
SHA256	`bfb61b1b0859f94a9ebed7fa47bbba28de6eaf27c1ceeb1167ed1e2617fc3027`
CRC32	`538CFBA3`
ssdeep	`384:YWoeD3cTsdd55Kqm3lyzDIoex4jTSbqZ654NJNvrfuYm1Vc:YNysTsv5gqmAzsoXmGg5KDAVc`
Yara	None matched
VirusTotal	Search for analysis