Dropped Files | ZeroBOX

Name	26f368a9982f6466_~wrs{2ed20ffd-e6f5-4cae-833c-a4c789a7fedc}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{2ED20FFD-E6F5-4CAE-833C-A4C789A7FEDC}.tmp
Size	15.2KB
Processes	5192 (WINWORD.EXE)
Type	data
MD5	`2bf8cecdb227871621c55ca6eb9bec70`
SHA1	`e7801cc9d997983b9542c511682be4b9d0cda763`
SHA256	`26f368a9982f6466c00bef00f35a73c927e6915ef866af8587f5f8b92cca2c81`
CRC32	`FA4D702D`
ssdeep	`384:GQE/X1sYCsdLca4ZzOE31IeVGT79ue5Mj1kRQZINf:GQEOYujzL1Ihp5Mj1kyE`
Yara	None matched
VirusTotal	Search for analysis

Name	b94d63d5a5bc4597_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	5192 (WINWORD.EXE)
Type	data
MD5	`065071323ed6d1b6ea7980dc7d9d3f76`
SHA1	`600804b6debf471838f8a42c707fc73213bde375`
SHA256	`b94d63d5a5bc4597066cbc7843e863afbd601e75cde946ae5a59fe84b628ff95`
CRC32	`89F0E588`
ssdeep	`3:yW2lWRdvL7YMlbK7l:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{4ec1eb67-4bc6-4c94-9543-e2babcb0cb29}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{4EC1EB67-4BC6-4C94-9543-E2BABCB0CB29}.tmp
Size	1.0KB
Processes	5192 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	58b9f198a2fadff2_~$d.dot Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$d.dot
Size	162.0B
Processes	5192 (WINWORD.EXE)
Type	data
MD5	`3198f37dcb8ec42f38d90ae1255a8d18`
SHA1	`36111d823c992593b1b047d50a6eb48bf5a4cc42`
SHA256	`58b9f198a2fadff209943e64b91e183dc6f0eb577b47bf5caf6c27479360a931`
CRC32	`DF98250C`
ssdeep	`3:yW2lWRdvL7YMlbK7l38:y1lWnlxK7d`
Yara	None matched
VirusTotal	Search for analysis