Dropped Files | ZeroBOX

Name	1107b49310e7c748_~wrs{2ed20ffd-e6f5-4cae-833c-a4c789a7fedc}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{2ED20FFD-E6F5-4CAE-833C-A4C789A7FEDC}.tmp
Size	7.0KB
Processes	4356 (WINWORD.EXE)
Type	data
MD5	`3e8d2202208b56abaf730d37b97e259c`
SHA1	`72bfa782f1cf1a7b53da8123c744e9c598e8ee6a`
SHA256	`1107b49310e7c74897af0d82e2556ff63fca963cfb502de9bd11cef0237556aa`
CRC32	`72CA78F9`
ssdeep	`96:pTGY5ZoleHa+BbD1bqSRdT0hfaR4P+vi/InXM8EyAHv6JsfscNnrJJwyqVo2BUt:MUZo5WdO3hH/InXM8EhHyJssMihW`
Yara	None matched
VirusTotal	Search for analysis

Name	89f6194e464bb7fe_~$s.dot Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$s.dot
Size	162.0B
Processes	4356 (WINWORD.EXE)
Type	data
MD5	`2750ca271e485afc62a05f507fbf029b`
SHA1	`353de424b7aaf9c56a27a77c9aef19fce9bf2702`
SHA256	`89f6194e464bb7feff8c9267ba4dd281b4ab3559b6a0c61370fba759a82c7bbd`
CRC32	`FAE07C05`
ssdeep	`3:yW2lWRdvL7YMlbK7lA9MDY:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	b94d63d5a5bc4597_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	4356 (WINWORD.EXE)
Type	data
MD5	`065071323ed6d1b6ea7980dc7d9d3f76`
SHA1	`600804b6debf471838f8a42c707fc73213bde375`
SHA256	`b94d63d5a5bc4597066cbc7843e863afbd601e75cde946ae5a59fe84b628ff95`
CRC32	`89F0E588`
ssdeep	`3:yW2lWRdvL7YMlbK7l:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{4ec1eb67-4bc6-4c94-9543-e2babcb0cb29}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{4EC1EB67-4BC6-4C94-9543-E2BABCB0CB29}.tmp
Size	1.0KB
Processes	4356 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis