Dropped Files | ZeroBOX

Name	ec6d1cfdaa074cb6_msforms.exd Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\VBE\MSForms.exd
Size	143.8KB
Processes	1616 (WINWORD.EXE)
Type	data
MD5	`e7b66af472c34613ef29b298df624b17`
SHA1	`3905ed2361905132a334cbf7a5ee08f63e1e3b62`
SHA256	`ec6d1cfdaa074cb618af7a29e3ba8f09e34059182c4aaefc132e714173f19611`
CRC32	`640626B9`
ssdeep	`1536:CknL3FNSc8SetKB96vQVCjumVMOej6mXmYarrJQcd1FaLcmB:CsJNSc83tKBAvQVCGOtmXmLpLmB`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{45c874f1-cb9d-4a63-b900-f08b2b44ffe8}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{45C874F1-CB9D-4A63-B900-F08B2B44FFE8}.tmp
Size	1.0KB
Processes	1616 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	fefecc3498a57bb1_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1616 (WINWORD.EXE)
Type	data
MD5	`1835dd17ce750cb8714058044b281d81`
SHA1	`053d941c9c524560f6a78a134d8d5dcef23349ba`
SHA256	`fefecc3498a57bb1ce46f84e8c748ad3e86930e2939f95da978c4a6ea26b34fd`
CRC32	`05C69797`
ssdeep	`3:yW2lWRdcndW6L7dlldK7EhlkFIt///Emlllln:y1lW4dWmxVK7EzkWPEmlt`
Yara	None matched
VirusTotal	Search for analysis

Name	b55cb6bf7b2b1316_~$agram-114.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$agram-114.doc
Size	162.0B
Processes	1616 (WINWORD.EXE)
Type	data
MD5	`3c5e808753eff40a09e7b4bd8e1e31ba`
SHA1	`b3ad8c4be2769dbb6a8dd11f69933ec8ebd5124c`
SHA256	`b55cb6bf7b2b1316efd2ebb4ba25482326b3be48cc90fdc9f02029b5bcbb7d53`
CRC32	`B814B502`
ssdeep	`3:yW2lWRdcndW6L7dlldK7EhlkFIt///vl/:y1lW4dWmxVK7EzkWPvt`
Yara	None matched
VirusTotal	Search for analysis