Dropped Files | ZeroBOX

Name	81fb3ef81f3cd63b_~$.......dot Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$.......dot
Size	162.0B
Processes	8780 (WINWORD.EXE)
Type	data
MD5	`633a1ebda3199d1037cccb4855434a6d`
SHA1	`ec5750c0227cbc34f884fc586e9ab618c0235dd9`
SHA256	`81fb3ef81f3cd63b80b083616cc319886dcfbdf1581d44caf2f75fef036d6472`
CRC32	`9A4D3443`
ssdeep	`3:yW2lWRdvL7YMlbK7lKXnkf:y1lWnlxK7Ynk`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{0d9d6f97-cbc9-49dd-b408-aadb30ff4dea}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{0D9D6F97-CBC9-49DD-B408-AADB30FF4DEA}.tmp
Size	1.0KB
Processes	8780 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	15e1de4f0c1f1eca_~wrs{6c006243-5b99-45ad-bd51-2cf78a9c05e9}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{6C006243-5B99-45AD-BD51-2CF78A9C05E9}.tmp
Size	16.5KB
Processes	8780 (WINWORD.EXE)
Type	data
MD5	`1b37cefcb5c7cc3bb79e7ef87a806699`
SHA1	`313c0562f4ced99932b2e6fe5e621f149a51cf05`
SHA256	`15e1de4f0c1f1eca22025b193c85ff9641e976eee4734b92f5c92a2fec012293`
CRC32	`E7C480EF`
ssdeep	`384:hS4aDwnIpP43ub25LRlaYNL/wHwr94iCajBZL4bvfOozl:BaDwecaYNzwQr94QMjfOMl`
Yara	None matched
VirusTotal	Search for analysis

Name	b94d63d5a5bc4597_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	8780 (WINWORD.EXE)
Type	data
MD5	`065071323ed6d1b6ea7980dc7d9d3f76`
SHA1	`600804b6debf471838f8a42c707fc73213bde375`
SHA256	`b94d63d5a5bc4597066cbc7843e863afbd601e75cde946ae5a59fe84b628ff95`
CRC32	`89F0E588`
ssdeep	`3:yW2lWRdvL7YMlbK7l:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis