Dropped Files | ZeroBOX

Name	5cebff07d1229cb5_~wrs{6738c4be-a566-4b74-b75e-29e8018e7106}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{6738C4BE-A566-4B74-B75E-29E8018E7106}.tmp
Size	9.5KB
Processes	1824 (WINWORD.EXE)
Type	data
MD5	`1ef778674b71df54efc05a6549165ee8`
SHA1	`60da356d9ab35ea40049bb2166e38d6241356d11`
SHA256	`5cebff07d1229cb5c14f04a5365d5afec593efad591614b741bda5771927567a`
CRC32	`DBB339EA`
ssdeep	`192:vFF/uDAwtIq9htH2SdHAi0gGPEZ5YzfIFtKVn:nuDAnez2wAHVHgaVn`
Yara	None matched
VirusTotal	Search for analysis

Name	97631a851c48a567_~$vc_0098008.wbk Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$vc_0098008.wbk
Size	162.0B
Processes	1824 (WINWORD.EXE)
Type	data
MD5	`aaad06d435e455e2c1808952e778d390`
SHA1	`3724769fec64a0c28b5940cc57ea09cfd735062d`
SHA256	`97631a851c48a5671e5f32347587dca640739980c024725bf1b55df5c4536d96`
CRC32	`AFBA6026`
ssdeep	`3:yW2lWRdvL7YMlbK7lZ/nNWonwnlw:y1lWnlxK73/nEonSl`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{1bcc3581-0bee-4026-8aa3-46b12efbf6c9}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{1BCC3581-0BEE-4026-8AA3-46B12EFBF6C9}.tmp
Size	1.0KB
Processes	1824 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	b94d63d5a5bc4597_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1824 (WINWORD.EXE)
Type	data
MD5	`065071323ed6d1b6ea7980dc7d9d3f76`
SHA1	`600804b6debf471838f8a42c707fc73213bde375`
SHA256	`b94d63d5a5bc4597066cbc7843e863afbd601e75cde946ae5a59fe84b628ff95`
CRC32	`89F0E588`
ssdeep	`3:yW2lWRdvL7YMlbK7l:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis