Dropped Files | ZeroBOX

Name	ae80917d8d4a4c7d_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	516 (WINWORD.EXE)
Type	data
MD5	`b367a5ef461775465b141ffaf756fe5f`
SHA1	`5f46dcabe21002fd2eaa348695facace2f24e10e`
SHA256	`ae80917d8d4a4c7d8a9640f1f0302e27662cd9b5e7509f719e4583f2bf531b88`
CRC32	`6807B685`
ssdeep	`3:yW2lWRdWJXW6L7zRlvK7m/rCFItf1lll:y1lW6XWmzK7mGWtt`
Yara	None matched
VirusTotal	Search for analysis

Name	1558c8a63e5b9071_~wrs{c4e2f51f-dac9-49fc-b9d5-108c335c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DAC9-49FC-B9D5-108C335C54A4}.tmp
Size	33.0KB
Processes	516 (WINWORD.EXE)
Type	data
MD5	`e40863ec2fb7549ca024739bd273c76d`
SHA1	`1b22d302394fa48df9c87c916a8ec7ef67251a6d`
SHA256	`1558c8a63e5b9071b4d2ba457fea64d753d52ded12eeb83cfdf22cb570a50c2b`
CRC32	`DEFE7C86`
ssdeep	`768:es0SCWiMuz1rqAyLt+eqViz9yCFcEhZVsfoDFZ:mDvwxKrK2foT`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{be4cdc6b-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDC6B-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	516 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	36620fa332f078f9_~$lhmgi2.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$lhMGI2.doc
Size	162.0B
Processes	516 (WINWORD.EXE)
Type	data
MD5	`62d24c28881535608b4aaa42aeb2eff4`
SHA1	`89d2b2a94405369052185f1b1c8e99997bc1e20f`
SHA256	`36620fa332f078f99ce228edce16851fdccbcf4250bb1127b450b6d1022cda53`
CRC32	`FC3FC48F`
ssdeep	`3:yW2lWRdWJXW6L7zRlvK7m/rCFItfcXn:y1lW6XWmzK7mGWUn`
Yara	None matched
VirusTotal	Search for analysis