Dropped Files | ZeroBOX

Name	34e13b1605d36659_~wrs{d67005a2-9e0e-4591-8dda-89f6a2b3f795}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{D67005A2-9E0E-4591-8DDA-89F6A2B3F795}.tmp
Size	10.0KB
Processes	2552 (WINWORD.EXE)
Type	data
MD5	`dc864d3b53f0c8bf8155535b4bae0062`
SHA1	`7fc0b66db52304e7e12e61b9ad7f5f243891e402`
SHA256	`34e13b1605d3665979532958fcf2c16ed9fb3e6176ff5f6e339f1d2b03282037`
CRC32	`0C32EF57`
ssdeep	`192:hA3LpYc55ibnXiWCH8PBPYQN0DIsNld0y1uBIjx+W6UFt9RC54BzV0oqaMKlT5:G2bnXiL05Yu2d0JIjxJnLyIr0AT5`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{d3b06899-7496-4e49-889d-ee1fe702b860}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{D3B06899-7496-4E49-889D-EE1FE702B860}.tmp
Size	1.0KB
Processes	2552 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	b94d63d5a5bc4597_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2552 (WINWORD.EXE)
Type	data
MD5	`065071323ed6d1b6ea7980dc7d9d3f76`
SHA1	`600804b6debf471838f8a42c707fc73213bde375`
SHA256	`b94d63d5a5bc4597066cbc7843e863afbd601e75cde946ae5a59fe84b628ff95`
CRC32	`89F0E588`
ssdeep	`3:yW2lWRdvL7YMlbK7l:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	74780e32a14a8744_~$m.dot Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$m.dot
Size	162.0B
Processes	2552 (WINWORD.EXE)
Type	data
MD5	`d8cae0eac0a0028391ca2ac36aa557f4`
SHA1	`1fbd6f0b24ad2c5efaf99c8889052445d5fe5c0b`
SHA256	`74780e32a14a8744a961f636686f5dad4db8b1deca083fc7e3f90f525c09519e`
CRC32	`D318A76A`
ssdeep	`3:yW2lWRdvL7YMlbK7lZsnGn8:y1lWnlxK73tn`
Yara	None matched
VirusTotal	Search for analysis