Dropped Files | ZeroBOX

Name	a6f59ac71dcc3c6c_~$v 272590.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$v 272590.doc
Size	162.0B
Processes	2088 (WINWORD.EXE)
Type	data
MD5	`2f1a9af87828ba2fd00074f229c8ce5d`
SHA1	`1a19498742f828b87b85f0a17c3d3450fe64c1ba`
SHA256	`a6f59ac71dcc3c6cc3f3b41d983804b130e404efc29f7114daa91d0730f253ed`
CRC32	`F1AA3D07`
ssdeep	`3:yW2lWRdvL7YMlbK7lZynDkWM/:y1lWnlxK739/`
Yara	None matched
VirusTotal	Search for analysis

Name	9e1722e88383ef72_~wrs{98a7e1ae-3f6e-4957-bc11-eb40b94d7c26}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{98A7E1AE-3F6E-4957-BC11-EB40B94D7C26}.tmp
Size	1.5KB
Processes	2088 (WINWORD.EXE)
Type	data
MD5	`f282c84806508a79df94fc36eb28447a`
SHA1	`b3f2d377357be443356e5ec304499dcbd72926fb`
SHA256	`9e1722e88383ef722989a714b5644672d94f2b339f4482249b6a7798dcba3647`
CRC32	`97878577`
ssdeep	`6:IiiiiiiiiiE/bYflo3dc8++ZYSySkssqA1+tKHq:S/XtG+aSpk1j1+tKHq`
Yara	None matched
VirusTotal	Search for analysis

Name	ef70d8440773abc9_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2088 (WINWORD.EXE)
Type	data
MD5	`8a24628ccb2d4e4ebc2905d356784069`
SHA1	`57297fbc57f342cb0c4097fdffb9e3558f0932e3`
SHA256	`ef70d8440773abc9988211524db5613a3b7a47a22a169e8a62da8f1b6820dd12`
CRC32	`04772F42`
ssdeep	`3:yW2lWRdvL7YMlbK7lR/:y1lWnlxK7P/`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{c6d4b6bf-ca85-4bb8-b5f5-0f177d240f0e}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C6D4B6BF-CA85-4BB8-B5F5-0F177D240F0E}.tmp
Size	1.0KB
Processes	2088 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis