Dropped Files | ZeroBOX

Name	05a3bca341577db4_~wrs{ab0f7a07-1d9f-4676-b1b5-0123709f296f}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{AB0F7A07-1D9F-4676-B1B5-0123709F296F}.tmp
Size	1.5KB
Processes	3324 (WINWORD.EXE)
Type	data
MD5	`e924588c2e2028c0f7a58fcfcf48b06a`
SHA1	`cdfd1cc913757efeffed649a779082787f9a086f`
SHA256	`05a3bca341577db4a39fa4634e73c12476aed5156785f99d22c610ac2330755d`
CRC32	`0B91E8F7`
ssdeep	`24:C8VCsw1kJ1TYr7U1kM/Q2HmACg1FNSBi+:6kLTYekp2Hm4FUU+`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{e10f912f-794e-43ee-a850-82eb494265cd}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E10F912F-794E-43EE-A850-82EB494265CD}.tmp
Size	1.0KB
Processes	3324 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	5198fa0f5db0645b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	3324 (WINWORD.EXE)
Type	data
MD5	`8eb7ef27966ff233cf87b14b723ff88a`
SHA1	`8c0734adcb7a05ccf6d588c3a11749fd6c902126`
SHA256	`5198fa0f5db0645b75383f7ff4a2a183b1233d88fa1585d3b72289901f4338ae`
CRC32	`8D0535B5`
ssdeep	`3:yW2lWRdvL7YMlbK7l0:y1lWnlxK7S`
Yara	None matched
VirusTotal	Search for analysis

Name	2c721d14d5c144f9_~$news.docx Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$News.docx
Size	162.0B
Processes	3324 (WINWORD.EXE)
Type	data
MD5	`29d2717ebeff3a5e2217aa2db3c5d848`
SHA1	`e400e627852bcdc4bb5a4bef09f31de10e15f0a0`
SHA256	`2c721d14d5c144f9775cd412d727df4dcdda71aa59ef2d754f76cbf4eea86519`
CRC32	`A40C84C3`
ssdeep	`3:yW2lWRdvL7YMlbK7ljnlZmX:y1lWnlxK7ll0X`
Yara	None matched
VirusTotal	Search for analysis