Dropped Files | ZeroBOX

Name	c4c98b5e5f4e856b_~wrs{f71e81b5-1b12-4928-be11-eb40b84d7c26}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F71E81B5-1B12-4928-BE11-EB40B84D7C26}.tmp
Size	10.5KB
Processes	2240 (WINWORD.EXE)
Type	data
MD5	`ba97b02d2fca5243db0695c1f324873f`
SHA1	`23eac60948566055aa3d8bda1b3ae7f27272be51`
SHA256	`c4c98b5e5f4e856bae99f01f4f474dfa1ed6353dfb274617bef47ed93611b3de`
CRC32	`DF28E359`
ssdeep	`192:3NbumRwjIFFPZP+9+RNtBxK6ko4i4dTe7K+kNazGz:pu2woW9ABxSli45eRMazGz`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{1bcc3581-0bee-4026-8aa3-46b12efbf6c9}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{1BCC3581-0BEE-4026-8AA3-46B12EFBF6C9}.tmp
Size	1.0KB
Processes	2240 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	b94d63d5a5bc4597_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2240 (WINWORD.EXE)
Type	data
MD5	`065071323ed6d1b6ea7980dc7d9d3f76`
SHA1	`600804b6debf471838f8a42c707fc73213bde375`
SHA256	`b94d63d5a5bc4597066cbc7843e863afbd601e75cde946ae5a59fe84b628ff95`
CRC32	`89F0E588`
ssdeep	`3:yW2lWRdvL7YMlbK7l:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	f8b2c1cebdc9b856_~$reg.dot Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$reg.dot
Size	162.0B
Processes	2240 (WINWORD.EXE)
Type	data
MD5	`9e0c905f1a1cb2087aa6f77678190884`
SHA1	`0e56c196dd1a75d61cca12b717a0a9b122fc4410`
SHA256	`f8b2c1cebdc9b856661f206d3cb6f79a2e45d2cca5adebdac7f16eac0d009e88`
CRC32	`8D090036`
ssdeep	`3:yW2lWRdvL7YMlbK7lZwnujnDI:y1lWnlxK73ljnD`
Yara	None matched
VirusTotal	Search for analysis