Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{428c0ee6-f1d4-4357-abd8-66be33795353}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{428C0EE6-F1D4-4357-ABD8-66BE33795353}.tmp
Size	1.0KB
Processes	6704 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	5198fa0f5db0645b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	6704 (WINWORD.EXE)
Type	data
MD5	`8eb7ef27966ff233cf87b14b723ff88a`
SHA1	`8c0734adcb7a05ccf6d588c3a11749fd6c902126`
SHA256	`5198fa0f5db0645b75383f7ff4a2a183b1233d88fa1585d3b72289901f4338ae`
CRC32	`8D0535B5`
ssdeep	`3:yW2lWRdvL7YMlbK7l0:y1lWnlxK7S`
Yara	None matched
VirusTotal	Search for analysis

Name	33c52bacd595d788_~$grnmidzgderqqteqnjngkoiyqalw6c.dot Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$GRnMiDzgderQQteqNjNgKoIYqaLW6C.dot
Size	162.0B
Processes	6704 (WINWORD.EXE)
Type	data
MD5	`3c39d860dde6210d2a661201276a23d3`
SHA1	`0f1ae92dded0c81055a7e11c700633d8e4c0b983`
SHA256	`33c52bacd595d788d53324bfbd543af58d9928254366dd17cf92e4d71335a5d4`
CRC32	`E9153BE5`
ssdeep	`3:yW2lWRdvL7YMlbK7l89kvlt:y1lWnlxK7gkv`
Yara	None matched
VirusTotal	Search for analysis

Name	1b023dfc2992c3ff_~wrs{b4d47d75-3ba4-4e6b-9ddd-2b4a5e165407}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{B4D47D75-3BA4-4E6B-9DDD-2B4A5E165407}.tmp
Size	1.5KB
Processes	6704 (WINWORD.EXE)
Type	data
MD5	`8b32521bac812493adffafbbfea436f4`
SHA1	`f19bb1257145d7af70c7d82cb2fa91649dc2fb26`
SHA256	`1b023dfc2992c3ffb1b4d50061754e023025d82075e62544bd2531d4b4738a72`
CRC32	`60A0BC1D`
ssdeep	`12:hKPHMWwAwN+bdk5uFJklqOTKtqsh75UGOZ:hK/MWwAQ+bK50qAO+R75UhZ`
Yara	None matched
VirusTotal	Search for analysis