Dropped Files | ZeroBOX

Name	5198fa0f5db0645b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	112 (WINWORD.EXE)
Type	data
MD5	`8eb7ef27966ff233cf87b14b723ff88a`
SHA1	`8c0734adcb7a05ccf6d588c3a11749fd6c902126`
SHA256	`5198fa0f5db0645b75383f7ff4a2a183b1233d88fa1585d3b72289901f4338ae`
CRC32	`8D0535B5`
ssdeep	`3:yW2lWRdvL7YMlbK7l0:y1lWnlxK7S`
Yara	None matched
VirusTotal	Search for analysis

Name	1536d33b81904bad_~wrs{09687cf1-8228-49c5-8a1d-3681f55c655e}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{09687CF1-8228-49C5-8A1D-3681F55C655E}.tmp
Size	15.0KB
Processes	112 (WINWORD.EXE)
Type	data
MD5	`b75c0f80eac5822e91ee6ab72ace6f77`
SHA1	`47e8af675b1dd1e16c66573b527ee430958b7d86`
SHA256	`1536d33b81904bad9ff8ea510b2a392c205ecf5d3413f9ec1794fb8f1d2e1821`
CRC32	`1BF33FA2`
ssdeep	`384:RzXi6cuND9+OaAyCPCD/72Lz1ecsvlJM9ZrJ:Rbi6cuNDeVCPCX2Lz1eRM97`
Yara	None matched
VirusTotal	Search for analysis

Name	691bf0a892c16331_~$k.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$k.doc
Size	162.0B
Processes	112 (WINWORD.EXE)
Type	data
MD5	`861d8c4e60c5f9883fc12d7ceba5b508`
SHA1	`cf6d81d2631f140157506e18b5b7e764a6b0ac3b`
SHA256	`691bf0a892c16331d0afd05ccff5c4bcaa90e1d5eb85c0a50a2a36484cb5e02b`
CRC32	`0F0349E4`
ssdeep	`3:yW2lWRdvL7YMlbK7lZunNWJkrlt:y1lWnlxK73tkj`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{49f0111d-868e-4fa0-b0e0-7477ab9be03f}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{49F0111D-868E-4FA0-B0E0-7477AB9BE03F}.tmp
Size	1.0KB
Processes	112 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis