Dropped Files | ZeroBOX

Name	9397c633649db8b9_~$ontent.dotm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$ontent.dotm
Size	162.0B
Processes	1128 (WINWORD.EXE)
Type	data
MD5	`86f419756605e7748cf5f088ff0c517e`
SHA1	`f47efb6e9a095000ce598843a1e393c7fdb24e3a`
SHA256	`9397c633649db8b9c2d053d529964b27018d2e82ef83db50b0874d6eee7a1727`
CRC32	`EBF5811C`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt50iSjlVt3s9tK:y1lWnlxK7ghqqF3C4`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_cer55DB.tmp Empty file or file not found
Filepath	C:\Windows\cer55DB.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{3a16a7e1-6a11-4eeb-b327-674ce69edc43}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{3A16A7E1-6A11-4EEB-B327-674CE69EDC43}.tmp
Size	1.0KB
Processes	1128 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	64945e24d8dde382_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1128 (WINWORD.EXE)
Type	data
MD5	`797c7420742d78d0fd110487ec24e23f`
SHA1	`147b40c75c6511449cd7ac2d520f5b68c7b4c7c3`
SHA256	`64945e24d8dde38214db0bd81dde27d1962c3c2dd5d32c5d158ddcde9ac791c1`
CRC32	`516D8F88`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt50iSjlVt9n99K:y1lWnlxK7ghqqFdS`
Yara	None matched
VirusTotal	Search for analysis