Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{31d35402-5cdc-4ae5-9630-1138e3515487}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{31D35402-5CDC-4AE5-9630-1138E3515487}.tmp
Size	1.0KB
Processes	880 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	7dc5f11ee9380c30_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	880 (WINWORD.EXE)
Type	data
MD5	`8adb00d40a67959164ec4ea4f01b01c5`
SHA1	`d07bd0640669c62a4628fa60d34a6881e50e3a44`
SHA256	`7dc5f11ee9380c3070fe10aadeca16d10f8cb13149fe0583b61158aa1fc20fc5`
CRC32	`924F83A7`
ssdeep	`3:yW2lWRdFW6L796//LJK7aQXiItuXvws:y1lWpWm8XdK7aQxuXvv`
Yara	None matched
VirusTotal	Search for analysis

Name	5abdff3ce5c6218c_~$irdagodzx.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$irdagodzx.doc
Size	162.0B
Processes	880 (WINWORD.EXE)
Type	data
MD5	`92b7e6f968fba922d6e2112a3473d0a2`
SHA1	`d7d0d0a0bf47fdf37a8877fd05955665ba6cfbf9`
SHA256	`5abdff3ce5c6218c633207266d63e1228f4b6594017616b485efa11f3f111a31`
CRC32	`1A647A9C`
ssdeep	`3:yW2lWRdFW6L796//LJK7aQXiItuXvxuG:y1lWpWm8XdK7aQxuXvx5`
Yara	None matched
VirusTotal	Search for analysis

Name	7c7f679d96014e00_~wrs{f5717022-493d-4d0e-a626-6902a736dd8c}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F5717022-493D-4D0E-A626-6902A736DD8C}.tmp
Size	38.0KB
Processes	880 (WINWORD.EXE)
Type	data
MD5	`3a8c3daba103a0eb75c272262e09a530`
SHA1	`1bb96aa261b0a4717afad76d47e0bf3e8cc06c2f`
SHA256	`7c7f679d96014e001627a89b75f7c2993e628d34d36ce091f4eba5dbf73b3374`
CRC32	`F84DE1ED`
ssdeep	`768:Fs0SCWiMuz1rqAyLt+eqViz9yCFcEhZVsf8TY0en2o5CIpXsM:FDvwxKrK2folFUZ`
Yara	None matched
VirusTotal	Search for analysis