Dropped Files | ZeroBOX

Name	70bb4de5318aca07_~wrs{096a7c35-8228-49c5-8a1d-3681f55c655e}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{096A7C35-8228-49C5-8A1D-3681F55C655E}.tmp
Size	16.5KB
Processes	1108 (WINWORD.EXE)
Type	data
MD5	`fa21dd570333f4539b09fa2cc3da3723`
SHA1	`e8af76cd64204f680f88eb57f28dcd28b40aab3e`
SHA256	`70bb4de5318aca07ac21331a38da8c97dabd338dffff96d7cdc58db1bac8521b`
CRC32	`20A12462`
ssdeep	`384:oOunZ1QIeWGZJC8h0mWfU8z5RtNgh+S9qQKGFO2endXsI:ancIeWG3hWZPJdJ4O2endcI`
Yara	None matched
VirusTotal	Search for analysis

Name	815f308835606014_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1108 (WINWORD.EXE)
Type	data
MD5	`731244220e4ec6d378c7d05824f99e87`
SHA1	`1ff8802067f5cf9123094ad8ec6a8894f4ef9d53`
SHA256	`815f3088356060149d06d5222942d7ab92177d2e3c4871d7205800b0f0a9dd9e`
CRC32	`46F2130E`
ssdeep	`3:yW2lWRdvL7YMlbK7lbnl:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	a2611a3399bcffde_~$vc_009030009.wbk Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$vc_009030009.wbk
Size	162.0B
Processes	1108 (WINWORD.EXE)
Type	data
MD5	`f128da8668bcab1a4899d5ce4cc492af`
SHA1	`e4cc461b1a22045bb85760b999a4d0411b42234d`
SHA256	`a2611a3399bcffde5296d8c18dc9185c4cc9dcd0df9cfb86a813f1822bd40947`
CRC32	`EADB645A`
ssdeep	`3:yW2lWRdvL7YMlbK7lZ2nPkzbn:y1lWnlxK73+eb`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{49f0111d-868e-4fa0-b0e0-7477ab9be03f}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{49F0111D-868E-4FA0-B0E0-7477AB9BE03F}.tmp
Size	1.0KB
Processes	1108 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis