Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{f36cfac5-c5b5-4be1-87e3-12770e30977b}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F36CFAC5-C5B5-4BE1-87E3-12770E30977B}.tmp
Size	1.0KB
Processes	2528 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	1531ad8a66f69bda_697f675.emf Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\697F675.emf
Size	4.9KB
Processes	2528 (WINWORD.EXE)
Type	Windows Enhanced Metafile (EMF) image data version 0x10000
MD5	`3fac4c2bc0e1df2f9a22e89586420bbf`
SHA1	`d84959d54a4d8f0e9b4a524df7717f855949abaf`
SHA256	`1531ad8a66f69bdabe341d23ce2478278044e778c0731e7f1a38eb968aaadc3a`
CRC32	`F4C5FB0F`
ssdeep	`48:cADMN5ner6gsdBg6qjpLkwOEG6kpYjdHkNla5b:cl26lBFq9gVU5ENOb`
Yara	None matched
VirusTotal	Search for analysis

Name	91a1baf8e29b9830_~$31_4435052411.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$31_4435052411.doc
Size	162.0B
Processes	2528 (WINWORD.EXE)
Type	data
MD5	`4f2474d5c7422b48192f131e8759ba8d`
SHA1	`b1a4048e5bdd5911a200e2004982d6574581ab9f`
SHA256	`91a1baf8e29b9830d03c18b93cd5cd7161bd6348dcd707b607c21988a3af9ca2`
CRC32	`E543BC1B`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxItRmYtjgWIart/:y1lWnlxK7ghqAYOWIet`
Yara	None matched
VirusTotal	Search for analysis

Name	cc6214d67b6c9c45_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2528 (WINWORD.EXE)
Type	data
MD5	`57c528817382a3538ec35dd5cf4be558`
SHA1	`5d8a2dd5b3b1ffa58c0f40b541058090be2d3caa`
SHA256	`cc6214d67b6c9c45c54102a97e49bb4c067e3fea454996ec098795d59c825f02`
CRC32	`CC573495`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxItO/OtjgWIart/:y1lWnlxK7ghqO2OWIet`
Yara	None matched
VirusTotal	Search for analysis