Dropped Files | ZeroBOX

Name	66e2420c53b92380_~$cument.wbk Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$cument.wbk
Size	162.0B
Processes	2236 (WINWORD.EXE)
Type	data
MD5	`a9b0b9a557a1e20221bc7723e8a5f868`
SHA1	`12525745b33054f32c5deb91697a419d42b211ec`
SHA256	`66e2420c53b9238070c2e0f40f19c5a00e7af47d06876a664b7f288f8e6be72f`
CRC32	`520AD33D`
ssdeep	`3:yW2lWRdvL7YMlbK7lZ8Nm:y1lWnlxK738N`
Yara	None matched
VirusTotal	Search for analysis

Name	b94d63d5a5bc4597_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2236 (WINWORD.EXE)
Type	data
MD5	`065071323ed6d1b6ea7980dc7d9d3f76`
SHA1	`600804b6debf471838f8a42c707fc73213bde375`
SHA256	`b94d63d5a5bc4597066cbc7843e863afbd601e75cde946ae5a59fe84b628ff95`
CRC32	`89F0E588`
ssdeep	`3:yW2lWRdvL7YMlbK7l:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	8dc1cb866a5b9a81_~wrs{cda3b211-f04e-45e6-86b5-7da222b136a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{CDA3B211-F04E-45E6-86B5-7DA222B136A4}.tmp
Size	6.0KB
Processes	2236 (WINWORD.EXE)
Type	data
MD5	`05977f3de2ea28cf0b4606ee645e4c71`
SHA1	`f367c2a4fd2a420c46538dc5c36a31ee403ffa97`
SHA256	`8dc1cb866a5b9a8189d42ff132bae489c0f0276d6a571ec56f72af2dab6e22cb`
CRC32	`6708B360`
ssdeep	`96:Rk+DalKtuqMXYU6MznvEqdlIttrLVEKSl0SSgU8j9XvIcxDiERwJ3zSFeYN6sKUr:s6uXYQvEqdlIXrvSeRg5fnWEy4bNjP`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{451a703c-a47e-45fe-a2de-fce5197be4cd}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{451A703C-A47E-45FE-A2DE-FCE5197BE4CD}.tmp
Size	1.0KB
Processes	2236 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis