Dropped Files | ZeroBOX

Name	ebe84408fda8db35_~$2206.dotm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$2206.dotm
Size	162.0B
Processes	2776 (WINWORD.EXE)
Type	data
MD5	`0fc8366845d635b7c796940c11c08bac`
SHA1	`f18fb1806cc160ef30feebca583ff1f328dc4454`
SHA256	`ebe84408fda8db359defeb06812afccc9d6d51582d67713e3bcedd3eac8fef72`
CRC32	`AFAFB28D`
ssdeep	`3:yW2lWRdvL7YMlbK7lZznNWon8nl5:y1lWnlxK73znEon2l`
Yara	None matched
VirusTotal	Search for analysis

Name	6a18dcab425d142d_~wrs{7b59442a-ed1a-46f5-8562-465584cb8db5}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{7B59442A-ED1A-46F5-8562-465584CB8DB5}.tmp
Size	4.0KB
Processes	2776 (WINWORD.EXE)
Type	data
MD5	`0911ea8f2c80f2156ff3beeeb20b9fe8`
SHA1	`2b7189438792b04656a45b7ddeaac03d512f9754`
SHA256	`6a18dcab425d142da639bb77771a321ceea62069c04d5ba8835f9e741c6f7512`
CRC32	`67B6C2D2`
ssdeep	`48:INfPXJ+oPUx9FCBPO0RRPphTMWs2s+CMmctPkGCw+C8o6MXPelDv494Zn:ofPZ+oPpm+hTMX7Fgj+C8o69lDv490n`
Yara	None matched
VirusTotal	Search for analysis

Name	815f308835606014_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2776 (WINWORD.EXE)
Type	data
MD5	`731244220e4ec6d378c7d05824f99e87`
SHA1	`1ff8802067f5cf9123094ad8ec6a8894f4ef9d53`
SHA256	`815f3088356060149d06d5222942d7ab92177d2e3c4871d7205800b0f0a9dd9e`
CRC32	`46F2130E`
ssdeep	`3:yW2lWRdvL7YMlbK7lbnl:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{49f0111d-868e-4fa0-b0e0-7477ab9be03f}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{49F0111D-868E-4FA0-B0E0-7477AB9BE03F}.tmp
Size	1.0KB
Processes	2776 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis