Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{be4cdabe-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDABE-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	1884 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	93b479a69c2e9036_~$mpomzx.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$mpomzx.doc
Size	162.0B
Processes	1884 (WINWORD.EXE)
Type	data
MD5	`fd7f20f40ec2e172a8c2cbefc07feaf4`
SHA1	`5013375c08f4aa5dedf4bc450f58591de5a6713a`
SHA256	`93b479a69c2e9036820a56b3a75ab4a7c0c403480be4dd4ffdd6852a7636fbc7`
CRC32	`3A894796`
ssdeep	`3:yW2lWRde/woW6L75fVK7wzyIt9z8NXn:y1lWXoWmtVK7w9W`
Yara	None matched
VirusTotal	Search for analysis

Name	17a35fa665ea5285_~wrs{c4e2f51f-dac9-49fc-b9d5-108c335c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DAC9-49FC-B9D5-108C335C54A4}.tmp
Size	36.5KB
Processes	1884 (WINWORD.EXE)
Type	data
MD5	`e4c4389a671b122e61880f14de23a88f`
SHA1	`b4f042dd2c86c1c5a31d7dc13211515b8d4611b9`
SHA256	`17a35fa665ea528543c8d635349d20412d0c60f53bfcc2da38d4636a13d89b05`
CRC32	`87A89477`
ssdeep	`768:Us0SCWiMuz1rqAyLt+eqViz9yCFcEhZVsfx6sPaLjcOZ:MDvwxKrK2fxfaLga`
Yara	None matched
VirusTotal	Search for analysis

Name	508df916b98781ff_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1884 (WINWORD.EXE)
Type	data
MD5	`32c18a4601d5f3f61270acbb0e05423f`
SHA1	`04e81cc941603ab84378aed031b750d933ca63d5`
SHA256	`508df916b98781ffaebaeab189e07be6f240fb059b2c637eb184de9ecc454aa5`
CRC32	`227E932A`
ssdeep	`3:yW2lWRde/woW6L75fVK7wzyIt9z80h//:y1lWXoWmtVK7w9dJ/`
Yara	None matched
VirusTotal	Search for analysis