Dropped Files | ZeroBOX

Name	010f31830c3ea049_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	43.1KB
Processes	1932 (WINWORD.EXE)
Type	data
MD5	`6f332cf326bd333e7e7aea6d356bf3ca`
SHA1	`ef1ef86cb2a269f208af50554ad82e6610999f6f`
SHA256	`010f31830c3ea049959bc093b27975ae58ec64f53d54840caed0d423b737528e`
CRC32	`884A6A98`
ssdeep	`768:+s0SCWiMuz1rqAyLt+eqViz9yCFcEhZVsfFiqgbnCMvzR7PUeA+um9V:GDvwxKrK2f9gbCMvzR7Meln9V`
Yara	None matched
VirusTotal	Search for analysis

Name	138060271dccc08f_~$mplezx.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$mplezx.doc
Size	162.0B
Processes	1932 (WINWORD.EXE)
Type	data
MD5	`430225b0cfff7cf00aba5831c5038726`
SHA1	`c8134d591a7b662ca4d3c8c600bdb15b9430695b`
SHA256	`138060271dccc08f735994ccf843f5f73e13bc75c4d4a86f14229a7dc912e70b`
CRC32	`27EFD9D4`
ssdeep	`3:yW2lWRd/XW6L7oK7zN/KFIt85llZVn:y1lWjWm0K7YWihn`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{be4cde57-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDE57-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	1932 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	6da261c5029775ee_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1932 (WINWORD.EXE)
Type	data
MD5	`0bb8ce96db0150b0d5decc1147663449`
SHA1	`111e1f6392cc9a9a23c24e9ca475d6de8acecd49`
SHA256	`6da261c5029775eeca281520cbd7b3034bf937cbf9d7a06697639b3ef1f16c12`
CRC32	`DC6C50B7`
ssdeep	`3:yW2lWRd/XW6L7oK7zN/KFIt85llZSo/:y1lWjWm0K7YWi2o`
Yara	None matched
VirusTotal	Search for analysis