Dropped Files | ZeroBOX

Name	49a7d15151afd26d_~wrs{b65013f3-9fc7-4f13-b2ff-e2ac5c8251bf}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{B65013F3-9FC7-4F13-B2FF-E2AC5C8251BF}.tmp
Size	4.0KB
Processes	812 (WINWORD.EXE)
Type	data
MD5	`9238321c0e81ac89936168205e47d992`
SHA1	`43eaaa3439f8aaaef674179bc0926b28b2043e65`
SHA256	`49a7d15151afd26db88556d4feb89a63599253440fc4aaf81a053bc13fd8ce6b`
CRC32	`C02B0E6B`
ssdeep	`48:Ibashk0aipcikdQyIul+ZGoOTleuZzVHALEAlrxrzwD5lUK+MlNkOMu2fUt:Iba7iwTIuE50wuJHufxrzwdln+ykcIUt`
Yara	None matched
VirusTotal	Search for analysis

Name	68b8aaa96edb7d7e_~$u.wbk Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$u.wbk
Size	162.0B
Processes	812 (WINWORD.EXE)
Type	data
MD5	`8017d12f5fdbd4a5edf2bf901672a515`
SHA1	`68c642ada44a07b2e8094fa0de6921a8398fc285`
SHA256	`68b8aaa96edb7d7e7eecc75819f9b7d57472cc5b648a4c33879f39673f05ca14`
CRC32	`F6254863`
ssdeep	`3:yW2lWRdvL7YMlbK7lrAI7X:y1lWnlxK7xA`
Yara	None matched
VirusTotal	Search for analysis

Name	775d96a776c17239_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	812 (WINWORD.EXE)
Type	data
MD5	`e87e9c30c5e25a003c4471a455cd26eb`
SHA1	`1ca519dcecc22b1cb26b45c69bad587f17e4fe27`
SHA256	`775d96a776c17239d6961400ec56707e3d8f8267d1b4eb7bc033c658b70250e2`
CRC32	`392301FF`
ssdeep	`3:yW2lWRdvL7YMlbK7lhnX:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{3d0e9f8f-477a-4264-92bd-e18293286771}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{3D0E9F8F-477A-4264-92BD-E18293286771}.tmp
Size	1.0KB
Processes	812 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis