Dropped Files | ZeroBOX

Name	70dfbc0374edfdbb_~$.o.o.ooo.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$.o.o.ooo.doc
Size	162.0B
Processes	2556 (WINWORD.EXE)
Type	data
MD5	`f59c10393718dc577f4584eafc8f363e`
SHA1	`1d344a37f357aa0c08b4eaca1bc65e28700dbacc`
SHA256	`70dfbc0374edfdbb5e3b3e3022f940c469efc0dd8b2c4805ac9cc0eba5085c8c`
CRC32	`9F9C9957`
ssdeep	`3:yW2lWRdvL7YMlbK7lhZjnNWQkCM/:y1lWnlxK7RjnEQk/`
Yara	None matched
VirusTotal	Search for analysis

Name	325965d15e26cc20_~wrs{e8a7ede8-8c29-4445-85b4-f656c24827bd}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E8A7EDE8-8C29-4445-85B4-F656C24827BD}.tmp
Size	13.5KB
Processes	2556 (WINWORD.EXE)
Type	data
MD5	`491724df8fc0d35428d7c7af1042bffb`
SHA1	`224a28f288c8799723a44d8d01dd842abf2c784f`
SHA256	`325965d15e26cc200a1c6c4326777af46daead633488d88a57959a44a00cafb3`
CRC32	`152377AA`
ssdeep	`384:gDtfzOJImjGvho2rSqzqh4y+cH6OJ2bnXiL05YuMx:S9qJI62rSeq4rcEjXiA5Yn`
Yara	None matched
VirusTotal	Search for analysis

Name	ef70d8440773abc9_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2556 (WINWORD.EXE)
Type	data
MD5	`8a24628ccb2d4e4ebc2905d356784069`
SHA1	`57297fbc57f342cb0c4097fdffb9e3558f0932e3`
SHA256	`ef70d8440773abc9988211524db5613a3b7a47a22a169e8a62da8f1b6820dd12`
CRC32	`04772F42`
ssdeep	`3:yW2lWRdvL7YMlbK7lR/:y1lWnlxK7P/`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{bfb6cb33-d795-45a3-83f9-e6d7f4190124}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BFB6CB33-D795-45A3-83F9-E6D7F4190124}.tmp
Size	1.0KB
Processes	2556 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis