Dropped Files | ZeroBOX

Name	426a25a3f0b6722b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	3236 (WINWORD.EXE)
Type	data
MD5	`7f23beacdd54282f88abf40a44a60c64`
SHA1	`e9458aab25a6c300ab68a9b8ae7ee3c485357ac1`
SHA256	`426a25a3f0b6722b07260e5f901d2205fe7e872c4888ba5872fbc52fd063c747`
CRC32	`A044131B`
ssdeep	`3:yW2lWRdvL7YMlbK7ln:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	6965187aed17f5a4_~$o.wbk Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$o.wbk
Size	162.0B
Processes	3236 (WINWORD.EXE)
Type	data
MD5	`77a01d1d58d0a41ba3b2ff19129bff55`
SHA1	`4f83d294d59ddbf542fef797ac8b877ce6a0ba37`
SHA256	`6965187aed17f5a49b674d18ab225e7fffb1b4cffd4e949ab6d60e737beab9dc`
CRC32	`EFED2899`
ssdeep	`3:yW2lWRdvL7YMlbK7lLDj:y1lWnlxK7lDj`
Yara	None matched
VirusTotal	Search for analysis

Name	c4f63a06edb85d73_~wrs{b65013f3-9fc7-4f13-b2ff-e2ac5c8251bf}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{B65013F3-9FC7-4F13-B2FF-E2AC5C8251BF}.tmp
Size	15.5KB
Processes	3236 (WINWORD.EXE)
Type	data
MD5	`e41a29c8717d3f050618446eff528125`
SHA1	`7d270facc6e7b6530a85a31f713af5bc5fc320a9`
SHA256	`c4f63a06edb85d7375e32a8a13cf6be548fda106e2efb5d1e5d25dad22cf6eb0`
CRC32	`E8205088`
ssdeep	`384:9UfDfv35uHDfr/aVa8JUSOpJThJbelK+7Bckt33sEClCPkUsZI:9Uf0jTYa8JOFJ23t39mCP1`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{3d0e9f8f-477a-4264-92bd-e18293286771}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{3D0E9F8F-477A-4264-92BD-E18293286771}.tmp
Size	1.0KB
Processes	3236 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis