Dropped Files | ZeroBOX

Name	5f258a13363886eb_~wrs{f71e81b5-1b12-4928-be11-eb40b84d7c26}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F71E81B5-1B12-4928-BE11-EB40B84D7C26}.tmp
Size	5.0KB
Processes	1684 (WINWORD.EXE)
Type	data
MD5	`63ae84c8343567ee6148eca24c004bec`
SHA1	`21bc60a4a87d708c4618df95fa817c65da208958`
SHA256	`5f258a13363886eb209321297d11afdfc905e5c86ee2dd56d17d0c84ec9365ba`
CRC32	`1FCDBB63`
ssdeep	`96:Es5ZQ4wMWV1tQjZhNwLFyV/EkiJWpuROfYms1fu9gAv8nd0YSUt:Eo9WVYjPWLoMkiJW/v0u9fvU06`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{cdd192d3-0b12-4393-966b-e1ae4a03c10e}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{CDD192D3-0B12-4393-966B-E1AE4A03C10E}.tmp
Size	1.0KB
Processes	1684 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	62f7a80066679f35_~$sdf.wbk Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$sdf.wbk
Size	162.0B
Processes	1684 (WINWORD.EXE)
Type	data
MD5	`10ce2fe0c6214d61cdb111c8baacb51e`
SHA1	`6eb9eeb9fea8687f82a42dd166d26656bd079ff7`
SHA256	`62f7a80066679f35984be4eb8a96f65cdd87b4d49d2521866ba20abc1fdff616`
CRC32	`36AAA043`
ssdeep	`3:yW2lWRdvL7YMlbK7lZsnGnvnlt:y1lWnlxK73tnvn`
Yara	None matched
VirusTotal	Search for analysis

Name	955e0f806c3c2589_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1684 (WINWORD.EXE)
Type	data
MD5	`378a5abdaf971f65fafc6fe92c4e9cec`
SHA1	`ae5757b4504c5f29db4f3318cab2799a1b600e5c`
SHA256	`955e0f806c3c2589cc56dd5eeba708a1c0b0314656ab5cce18e99008f3aac25a`
CRC32	`6C42E2A1`
ssdeep	`3:yW2lWRdvL7YMlbK7lNnX:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis