Dropped Files | ZeroBOX

Name	74be9903fe26c4a9_~wrs{f71e81b5-1b12-4928-be11-eb40b84d7c26}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F71E81B5-1B12-4928-BE11-EB40B84D7C26}.tmp
Size	14.0KB
Processes	2244 (WINWORD.EXE)
Type	data
MD5	`ec7247a47c35dd4f25bcd8eda2b623f3`
SHA1	`977682af3a446b049a5b45bf2a4651d92118e1f5`
SHA256	`74be9903fe26c4a999b405f76ef00d996f45319b914bd93856990c557b5ac4d1`
CRC32	`E8E63EE0`
ssdeep	`384:8AcfMphjboeensNSOS5Un/ISDvPEeZhA3EypUmr06S:Bcf6Apsy5yQSoGmrxS`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{1bcc3581-0bee-4026-8aa3-46b12efbf6c9}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{1BCC3581-0BEE-4026-8AA3-46B12EFBF6C9}.tmp
Size	1.0KB
Processes	2244 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	7842c1483df4e7bc_~$o.dot Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$o.dot
Size	162.0B
Processes	2244 (WINWORD.EXE)
Type	data
MD5	`eb745aacebf6ff332fffd8fc8071e2ae`
SHA1	`56fb6ca40f9beac56f776923c37844007e40df76`
SHA256	`7842c1483df4e7bc3c42ac289baab9fe2b7c6055e93951925d4f17a0d18048c8`
CRC32	`6FD51B4F`
ssdeep	`3:yW2lWRdvL7YMlbK7lZwnujnDplt:y1lWnlxK73ljnDp`
Yara	None matched
VirusTotal	Search for analysis

Name	20782105112e2a11_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2244 (WINWORD.EXE)
Type	data
MD5	`2cf546fc0d9fcc5b3cc8cd7c8e84fd6f`
SHA1	`ed9ce770583e0cefb58d61a86a61ce490a52a7c2`
SHA256	`20782105112e2a113fefb56df324e1810c5dec16d148afcc45ec92e36bdfd46a`
CRC32	`6B2CFEF1`
ssdeep	`3:yW2lWRdvL7YMlbK7lH:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis