Dropped Files | ZeroBOX

Name	3dccd53003b9a1fd_~wrs{592c14cb-bc77-4ece-9f25-ff88279647fe}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{592C14CB-BC77-4ECE-9F25-FF88279647FE}.tmp
Size	1.5KB
Processes	2324 (WINWORD.EXE)
Type	data
MD5	`3c93257e4fa0e6c28f44cdafd6198f96`
SHA1	`f8aa6ea72cc48657d269e257fe322a15641298d0`
SHA256	`3dccd53003b9a1fd672b5675f4466ef19ff04da979fe8ac8806e638a060eafcb`
CRC32	`F1C170AB`
ssdeep	`6:IiiiiiiiiiI4/9+Qc8++lPkalT4Mu8lPloBl/uY:W49+QG+3//Y`
Yara	None matched
VirusTotal	Search for analysis

Name	cca1ab4c3172bd26_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2324 (WINWORD.EXE)
Type	data
MD5	`db2ce17c7b3639e48e038c9dae558943`
SHA1	`2d21785e95f41152954eb25f9414296bb595d81a`
SHA256	`cca1ab4c3172bd261de35907cbe737b271011f9294af5a6bc76364ddb01757c0`
CRC32	`53EA2D1B`
ssdeep	`3:yW2lWRdG/vW6L7LtvK7kL/lKFItSa/l6dSllln:y1lWCvWmlK7kDkWSNdil`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{86ea363d-f5d7-4a71-a55b-3e9c5088fa4b}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{86EA363D-F5D7-4A71-A55B-3E9C5088FA4B}.tmp
Size	1.0KB
Processes	2324 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	bb25c1964169a8ee_~$o_template.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$o_template.doc
Size	162.0B
Processes	2324 (WINWORD.EXE)
Type	data
MD5	`4e36d3d51cf9c879659c6da2c4972cbc`
SHA1	`8fd2ffe8ec017de4d6edfc1d281c9f3a8112be6c`
SHA256	`bb25c1964169a8eee56297e5d999f3bb94b54a28ba9f4c2c7374c84a6ddb215c`
CRC32	`DCCA250F`
ssdeep	`3:yW2lWRdG/vW6L7LtvK7kL/lKFItSa/ljX:y1lWCvWmlK7kDkWSGX`
Yara	None matched
VirusTotal	Search for analysis