Dropped Files | ZeroBOX

Name	f7c41fd77ad01b8a_35d95414.emf Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\35D95414.emf
Size	4.8KB
Processes	2444 (WINWORD.EXE)
Type	Windows Enhanced Metafile (EMF) image data version 0x10000
MD5	`e53903ac2c9a77065afadd6ca0788389`
SHA1	`1f09704250f319ba849a8f350a0f0c43b7023540`
SHA256	`f7c41fd77ad01b8a2c79993742a2a05da592fea24e0d99f831cc6c9ed56c6971`
CRC32	`B39601F9`
ssdeep	`48:FUD3hNLxsT5AMobmsdBg6qjpLkwOEG6kpYjdHkya52:mTLwAhLBFq9gVU5Ee`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{5f8b61f0-3c4f-4530-a0a2-26cab4cfd072}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{5F8B61F0-3C4F-4530-A0A2-26CAB4CFD072}.tmp
Size	1.0KB
Processes	2444 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	349eb6b6fa7fe7ee_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2444 (WINWORD.EXE)
Type	data
MD5	`e77b47eae52ea536ee260f98d19c202d`
SHA1	`f120af698e4b7a639a99f7dd4b0a5d070af4e750`
SHA256	`349eb6b6fa7fe7eecb56c9b6ecbcbf50686305e6bf9888864b332a0dc259b7d9`
CRC32	`767E022F`
ssdeep	`3:yW2lWRdvL7YMlbK7lBn/l:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	cb487a06e0d33866_~$20_2812845003972.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$20_2812845003972.doc
Size	162.0B
Processes	2444 (WINWORD.EXE)
Type	data
MD5	`744b6a18e5c24584fdd2a63ccb0d5b18`
SHA1	`3e6043c2ed33ffe9a8e6fe280b4a3d45674bbdc3`
SHA256	`cb487a06e0d338662b952b43f928f20e98653d82b7db8dafe6ce67beebc18aec`
CRC32	`E4991489`
ssdeep	`3:yW2lWRdvL7YMlbK7lZ/O1ZHl:y1lWnlxK73/O1Z`
Yara	None matched
VirusTotal	Search for analysis