Dropped Files | ZeroBOX

Name	4c92c2b4b537d1de_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	7724 (WINWORD.EXE)
Type	data
MD5	`61d42bf36a22da2364947427f74f72bd`
SHA1	`19f4e5568bc8078c8d1cf9cc611d89a09f98fdf2`
SHA256	`4c92c2b4b537d1de1a35650afc10189d665e0786895d461183144ebc3465d4ac`
CRC32	`1E8D8017`
ssdeep	`3:yW2lWRdvL7YMlbK7lxnlX:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	37582d969bbe49c6_~wrs{1bc29605-e12d-42c1-b602-55c9afff5a82}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{1BC29605-E12D-42C1-B602-55C9AFFF5A82}.tmp
Size	13.5KB
Processes	7724 (WINWORD.EXE)
Type	data
MD5	`18b7f91b56abba506c7b371c63870b33`
SHA1	`8d4547f14d41488e78a8ff3af7a349ded608a4d4`
SHA256	`37582d969bbe49c69e91aaeb129cb24c60b1e5cc56b6f790222b02f27fe8fc7e`
CRC32	`1BB11985`
ssdeep	`384:YWoeD3cTsdd55Kqm3lyzDIoex4jTSbqZ654NJNvrfuYm1VA:YNysTsv5gqmAzsoXmGg5KDAVA`
Yara	None matched
VirusTotal	Search for analysis

Name	f7a36bbfd8cd60d9_~$...-.-.......dot Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$...-.-.......dot
Size	162.0B
Processes	7724 (WINWORD.EXE)
Type	data
MD5	`379110c1535c653b1e016a352517b5ca`
SHA1	`39c755b42a9892f227c7ad4410cb6d5ad66d8695`
SHA256	`f7a36bbfd8cd60d9d453845616a5a0b41a537ddb341c55f90da16218976c154f`
CRC32	`719DEDD3`
ssdeep	`3:yW2lWRdvL7YMlbK7lbonTn1:y1lWnlxK7enTn`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{3d0e9f8f-477a-4264-92bd-e18293286771}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{3D0E9F8F-477A-4264-92BD-E18293286771}.tmp
Size	1.0KB
Processes	7724 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis