Dropped Files | ZeroBOX

Name	99eff9f9f8b287ee_9dee5e48.emf Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9DEE5E48.emf
Size	4.9KB
Processes	1136 (WINWORD.EXE)
Type	Windows Enhanced Metafile (EMF) image data version 0x10000
MD5	`2d132b8d63a6ada5df4919d1c9630a51`
SHA1	`173e4c5e4b79a252fe729273e45790326f1fae4f`
SHA256	`99eff9f9f8b287ee675cac900b549c7bff212e743cdc9785190d087cda93a0f6`
CRC32	`7E48DCF7`
ssdeep	`48:c10MNyOklhwxgsdBg6qjpLkwOEG6kpYjdHkNMb:c1ByrhwxlBFq9gVU5ENMb`
Yara	None matched
VirusTotal	Search for analysis

Name	cc6214d67b6c9c45_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1136 (WINWORD.EXE)
Type	data
MD5	`57c528817382a3538ec35dd5cf4be558`
SHA1	`5d8a2dd5b3b1ffa58c0f40b541058090be2d3caa`
SHA256	`cc6214d67b6c9c45c54102a97e49bb4c067e3fea454996ec098795d59c825f02`
CRC32	`CC573495`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxItO/OtjgWIart/:y1lWnlxK7ghqO2OWIet`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{fd460a48-8147-4f90-a237-b0226f0cef7c}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{FD460A48-8147-4F90-A237-B0226F0CEF7C}.tmp
Size	1.0KB
Processes	1136 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	880b03d3b1fb736b_~$18_7617422488.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$18_7617422488.doc
Size	162.0B
Processes	1136 (WINWORD.EXE)
Type	data
MD5	`587e462cdcea3824df08f7187f08ae7a`
SHA1	`8147c49f9e61f6c4d0b997f2482c7b4eb7d91844`
SHA256	`880b03d3b1fb736bf7e1385f572965ad6758b12ba6b04f52107651dd20c576b0`
CRC32	`AA03F8DA`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxItlmXItjgWIart/:y1lWnlxK7ghqlmXIOWIet`
Yara	None matched
VirusTotal	Search for analysis