Dropped Files | ZeroBOX

Name	82d71aa2316402b7_~$12_4408305114.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$12_4408305114.doc
Size	162.0B
Processes	2648 (WINWORD.EXE)
Type	data
MD5	`03f0fe5049628bccec27e07edbd41f00`
SHA1	`17ecaec1b51fa53f5292a41c75516977aa71093c`
SHA256	`82d71aa2316402b7e65f65fc3cbba72748fb1373588169589929d9ff97014727`
CRC32	`359231A4`
ssdeep	`3:yW2lWRdvL7YMlbK7lZjn3nk9vtl:y1lWnlxK73jnX`
Yara	None matched
VirusTotal	Search for analysis

Name	7dba901e89ea319b_d4d778de.emf Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D4D778DE.emf
Size	4.9KB
Processes	2648 (WINWORD.EXE)
Type	Windows Enhanced Metafile (EMF) image data version 0x10000
MD5	`059317ebbbcad437fa76caee99a8f746`
SHA1	`8445242c4b44717ee68d4e17ce0a67f1d05021b4`
SHA256	`7dba901e89ea319bbc367b9c7c24bec42407962cbb7b37ab86cc6fcb9a8d5785`
CRC32	`C14BE600`
ssdeep	`48:FC3hNQ0BbmsdBgD89t1Tb4HKKZX3Y6kpnydHkil/aE:CTQGLBvt1X6Y+EE`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{90bf4d3a-2bd5-417c-a3c9-383507f9c55b}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{90BF4D3A-2BD5-417C-A3C9-383507F9C55B}.tmp
Size	1.0KB
Processes	2648 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	818ac9d3621dd802_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2648 (WINWORD.EXE)
Type	data
MD5	`ee32490f318ff4e444547a5f83870e80`
SHA1	`09f2ae32c5f293e2ad8ab9eef34b353b0f27362c`
SHA256	`818ac9d3621dd80293562e5769e503579c6e9fe996e67c6145f7984c532d2f9b`
CRC32	`1A78502A`
ssdeep	`3:yW2lWRdvL7YMlbK7lznXl:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis