Dropped Files | ZeroBOX

Name	efe72970b5f738a8_~$grnmidzgderqqteqnjngkoiyqalw6c.dot Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$GRnMiDzgderQQteqNjNgKoIYqaLW6C.dot
Size	162.0B
Processes	2952 (WINWORD.EXE)
Type	data
MD5	`4bc7f51b57f06af2da406b3c59ac5ca3`
SHA1	`d61508975b2ab69c804c7150d76a39210b6eb54d`
SHA256	`efe72970b5f738a84ab3c224cb0a2cc49173723baf4e507b3e3d383b05d8b2d2`
CRC32	`B98C63B1`
ssdeep	`3:yW2lWRdvL7YMlbK7lEa9P/ll:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{f4f910bc-5b2e-4157-82b9-95ec742c9cdf}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F4F910BC-5B2E-4157-82B9-95EC742C9CDF}.tmp
Size	1.0KB
Processes	2952 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	c6d5c11d72ab526a_~wrs{886ad67e-631c-4a1c-9bd5-23ff5e75b8c3}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{886AD67E-631C-4A1C-9BD5-23FF5E75B8C3}.tmp
Size	1.5KB
Processes	2952 (WINWORD.EXE)
Type	data
MD5	`c55b61ed1d27542a24829e9912bfe8af`
SHA1	`71593a4bc8466cf530a2737a286ed9b776d1f016`
SHA256	`c6d5c11d72ab526aa9b97e8845af59c8d91c50b6202f1be9b2c6a53891b8ea75`
CRC32	`DD70DFB5`
ssdeep	`12:hKPHMWwAwN+bdk5uFJklqOTKt7sh75UGOZ:hK/MWwAQ+bK50qAO+o75UhZ`
Yara	None matched
VirusTotal	Search for analysis

Name	faac314ee37313aa_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2952 (WINWORD.EXE)
Type	data
MD5	`23bcebf8de8ac139ccfc520780f355de`
SHA1	`61a8bedb335fe4d9c6260fce6cd4df9067e74a10`
SHA256	`faac314ee37313aa444a184f7503ee29310e416c0ac29b9d2136bba08541b3c8`
CRC32	`AD5A635C`
ssdeep	`3:yW2lWRdvL7YMlbK7lZll:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis