Dropped Files | ZeroBOX

Name	4e7a6a3489ff6afd_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1680 (WINWORD.EXE)
Type	data
MD5	`5b6bdea01471aa435fb5da996aaee210`
SHA1	`e3249c9d280d8eb44bc9b2f1e93ec3f9ceceada7`
SHA256	`4e7a6a3489ff6afd134942cde7bd50329d69d90e808284dd024ee733399b0a68`
CRC32	`C666D5AA`
ssdeep	`3:yW2lWRd0bSyW6L7xVljlJK7Ix/MHIt5l/A4lt:y1lWQbSyWm/VK7Ix/M48ot`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{be4ca12a-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CA12A-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	1680 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	6a0304a9213499ab_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	13.0KB
Processes	1680 (WINWORD.EXE)
Type	data
MD5	`96d48f1e01cb5675b108cd4bd4d1a730`
SHA1	`3559df69785265c48b3981858de2c942760c289f`
SHA256	`6a0304a9213499ab05aebb3ea089dd7d2529b74de6e04f7a8e75a812b7efbc50`
CRC32	`56DCE88F`
ssdeep	`192:tehpU6YsyFIa6ASsnZnHY7sM1oSuByK1YCMQCbUosFTLyKntIHPeliTyNgje:QhmR1UsZGN1oSuBRjzxIHP6L+e`
Yara	None matched
VirusTotal	Search for analysis

Name	397a00e9a6f10c6a_~$crosofttechnologyunavailabletemporyforprotectpcitsajokeiknowwelldontworry.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$crosofttechnologyunavailabletemporyforprotectpcitsajokeiknowwelldontworry.Doc
Size	162.0B
Processes	1680 (WINWORD.EXE)
Type	data
MD5	`7700fa0a0d4c875650ca5d9be70665ed`
SHA1	`a2ea00c35dca73ecb07ff9952439eb8a5537659a`
SHA256	`397a00e9a6f10c6a6191cc08a84dfc167386f2521e76b90e854aedafc8a0d37f`
CRC32	`573E78AB`
ssdeep	`3:yW2lWRd0bSyW6L7xVljlJK7Ix/MHIt5l/AjLl/:y1lWQbSyWm/VK7Ix/M48j5`
Yara	None matched
VirusTotal	Search for analysis