Dropped Files | ZeroBOX

Name	5198fa0f5db0645b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	620 (WINWORD.EXE)
Type	data
MD5	`8eb7ef27966ff233cf87b14b723ff88a`
SHA1	`8c0734adcb7a05ccf6d588c3a11749fd6c902126`
SHA256	`5198fa0f5db0645b75383f7ff4a2a183b1233d88fa1585d3b72289901f4338ae`
CRC32	`8D0535B5`
ssdeep	`3:yW2lWRdvL7YMlbK7l0:y1lWnlxK7S`
Yara	None matched
VirusTotal	Search for analysis

Name	f7c41fd77ad01b8a_a594a006.emf Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A594A006.emf
Size	4.8KB
Processes	620 (WINWORD.EXE)
Type	Windows Enhanced Metafile (EMF) image data version 0x10000
MD5	`e53903ac2c9a77065afadd6ca0788389`
SHA1	`1f09704250f319ba849a8f350a0f0c43b7023540`
SHA256	`f7c41fd77ad01b8a2c79993742a2a05da592fea24e0d99f831cc6c9ed56c6971`
CRC32	`B39601F9`
ssdeep	`48:FUD3hNLxsT5AMobmsdBg6qjpLkwOEG6kpYjdHkya52:mTLwAhLBFq9gVU5Ee`
Yara	None matched
VirusTotal	Search for analysis

Name	86dc184177a1341b_~$20_2812845003972.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$20_2812845003972.doc
Size	162.0B
Processes	620 (WINWORD.EXE)
Type	data
MD5	`41e11d5af40d73bc60880c080395bc2f`
SHA1	`f9c1cf269ee92aa069454e4accc6b6ad8d5d4fee`
SHA256	`86dc184177a1341bf5d4d91916c369fcfce3cbac37fa7e442bc6f402a9c7d2ce`
CRC32	`CFE50CB9`
ssdeep	`3:yW2lWRdvL7YMlbK7lZpnGct:y1lWnlxK73pnG0`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{49f0111d-868e-4fa0-b0e0-7477ab9be03f}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{49F0111D-868E-4FA0-B0E0-7477AB9BE03F}.tmp
Size	1.0KB
Processes	620 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis