Dropped Files | ZeroBOX

Name	9438520d8c63f228_~wrs{f16ac57e-561d-4c12-89c0-e3aaec389c46}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F16AC57E-561D-4C12-89C0-E3AAEC389C46}.tmp
Size	17.0KB
Processes	2252 (WINWORD.EXE)
Type	data
MD5	`0fac42212ef393fcdabb11e61fcf7d67`
SHA1	`8ee3dbd0bbbb9a5451a32eb84afae03ba90583a4`
SHA256	`9438520d8c63f228c3367c0df488f381f632b8e9b929f8eb68c154b8fd88fb15`
CRC32	`035B4551`
ssdeep	`384:zec9rJiPkipYvKhd4Yd+WRb2kUOC+jr/+cZN2ctBltDnDyemyUr3h:zB5izpBL4hbdOCsrL2qZD26wR`
Yara	None matched
VirusTotal	Search for analysis

Name	9fca0c465b967a1e_~$v.dot Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$v.dot
Size	162.0B
Processes	2252 (WINWORD.EXE)
Type	data
MD5	`56d6dd59b93b539b046272b3dfb6525a`
SHA1	`adb23cd6f92d0c56b8f3bd4909edf42273ad079a`
SHA256	`9fca0c465b967a1e6d319d10aa72f6b89489442ee76ff48e67720131c0f23926`
CRC32	`7242FAF6`
ssdeep	`3:yW2lWRdvL7YMlbK7lZonNWbnkcl:y1lWnlxK73tnk`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{cdd192d3-0b12-4393-966b-e1ae4a03c10e}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{CDD192D3-0B12-4393-966B-E1AE4A03C10E}.tmp
Size	1.0KB
Processes	2252 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	67c719db7aa08f70_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2252 (WINWORD.EXE)
Type	data
MD5	`9a88e72cdbbb3e78283c098693d5df39`
SHA1	`279c280abe3ef5054aa412e3762141e4b1e23f63`
SHA256	`67c719db7aa08f70c8d8e05300dbd70f58c58f3fcb81d1cb6073747b4bc9b406`
CRC32	`4207C333`
ssdeep	`3:yW2lWRdvL7YMlbK7lZn/l:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis