Dropped Files | ZeroBOX

Name	f528960da03267f9_~$d.wbk Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$d.wbk
Size	162.0B
Processes	2252 (WINWORD.EXE)
Type	data
MD5	`bacbe0984c8219d02caf01aa9e971698`
SHA1	`836049199c26631b3cd4f33c8cb9c7a904eee930`
SHA256	`f528960da03267f9abbc59b43c9fb5426f5a3d7320ce2c5dacd7de77809fa378`
CRC32	`D1A89336`
ssdeep	`3:yW2lWRdvL7YMlbK7lZ0nNWzjnDI:y1lWnlxK73hjnD`
Yara	None matched
VirusTotal	Search for analysis

Name	703227d7a0e1d607_~wrs{f71e81b5-1b12-4928-be11-eb40b84d7c26}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F71E81B5-1B12-4928-BE11-EB40B84D7C26}.tmp
Size	16.0KB
Processes	2252 (WINWORD.EXE)
Type	data
MD5	`fe5bffadd21278f5ce04a171e18ad96f`
SHA1	`c174a0ae03f204f82a4d9b267ebbd1ee22e69db4`
SHA256	`703227d7a0e1d60756b11f7ac762dabe0c3756e198a69e1361befe1d9c7a1f0b`
CRC32	`69BFFC3B`
ssdeep	`384:rUbi7sZfne0l2UIXyy7dWuh4EX5tLdEq/Fm7ZomdlJPXNg873SQrzRw:8Bnwiy7dWO5dE4U1oiLfG87SQpw`
Yara	None matched
VirusTotal	Search for analysis

Name	b94d63d5a5bc4597_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2252 (WINWORD.EXE)
Type	data
MD5	`065071323ed6d1b6ea7980dc7d9d3f76`
SHA1	`600804b6debf471838f8a42c707fc73213bde375`
SHA256	`b94d63d5a5bc4597066cbc7843e863afbd601e75cde946ae5a59fe84b628ff95`
CRC32	`89F0E588`
ssdeep	`3:yW2lWRdvL7YMlbK7l:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{cdd192d3-0b12-4393-966b-e1ae4a03c10e}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{CDD192D3-0B12-4393-966B-E1AE4A03C10E}.tmp
Size	1.0KB
Processes	2252 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis