Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{d0f010b3-d030-4d18-a5d8-023d9f846984}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{D0F010B3-D030-4D18-A5D8-023D9F846984}.tmp
Size	1.0KB
Processes	1548 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	b28e6506d981fde9_63c27c0b.emf Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\63C27C0B.emf
Size	4.9KB
Processes	1548 (WINWORD.EXE)
Type	Windows Enhanced Metafile (EMF) image data version 0x10000
MD5	`ad167e9b9bf95a12063e9289145bee60`
SHA1	`e9c9c952022bc4b62234b18e2afd52079a0839d8`
SHA256	`b28e6506d981fde9ac48f53513e15869b17de32c196a5977d72e4ce103f95093`
CRC32	`386C40A9`
ssdeep	`48:FXNAUxNrsdBg6qjpLkwOEG6kpYjdHkLWaKLLN:3bxN2BFq9gVU5EL6N`
Yara	None matched
VirusTotal	Search for analysis

Name	cc6214d67b6c9c45_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1548 (WINWORD.EXE)
Type	data
MD5	`57c528817382a3538ec35dd5cf4be558`
SHA1	`5d8a2dd5b3b1ffa58c0f40b541058090be2d3caa`
SHA256	`cc6214d67b6c9c45c54102a97e49bb4c067e3fea454996ec098795d59c825f02`
CRC32	`CC573495`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxItO/OtjgWIart/:y1lWnlxK7ghqO2OWIet`
Yara	None matched
VirusTotal	Search for analysis

Name	7315a8a9c6c49156_~$14_4534346255302.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$14_4534346255302.doc
Size	162.0B
Processes	1548 (WINWORD.EXE)
Type	data
MD5	`dc0ff2f039d3fdcf9df82b37a7362ec8`
SHA1	`6039e755e3a1924399ff5a2f10d6139a0a0368fd`
SHA256	`7315a8a9c6c491565901b4f631ec950b7c707bed6b40ff7c5d2358bb7d89578d`
CRC32	`6F10D3F3`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt8ll2tjgWIart/:y1lWnlxK7ghq8+OWIet`
Yara	None matched
VirusTotal	Search for analysis