Dropped Files | ZeroBOX

Name	7a798abd17d6ec4f_~$logszx.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$logszx.doc
Size	162.0B
Processes	2624 (WINWORD.EXE)
Type	data
MD5	`037db1084f102d3e0626a9646549ea37`
SHA1	`fc03577835f7015c17ed91e01646fa6768482eb2`
SHA256	`7a798abd17d6ec4fc4a5163ac5543f35460498acf70848f3dc10b73e81c26dbb`
CRC32	`C9605B49`
ssdeep	`3:yW2lWRdvL7YMlbK7lhZxnkkrlt:y1lWnlxK7Rxnkkj`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{7adcf0ea-6539-46e0-8674-a9c912ac3903}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{7ADCF0EA-6539-46E0-8674-A9C912AC3903}.tmp
Size	1.0KB
Processes	2624 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	5198fa0f5db0645b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2624 (WINWORD.EXE)
Type	data
MD5	`8eb7ef27966ff233cf87b14b723ff88a`
SHA1	`8c0734adcb7a05ccf6d588c3a11749fd6c902126`
SHA256	`5198fa0f5db0645b75383f7ff4a2a183b1233d88fa1585d3b72289901f4338ae`
CRC32	`8D0535B5`
ssdeep	`3:yW2lWRdvL7YMlbK7l0:y1lWnlxK7S`
Yara	None matched
VirusTotal	Search for analysis

Name	cc415623935ea70f_~wrs{27b240a6-0baf-4bea-b240-45d59cfcf4b3}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{27B240A6-0BAF-4BEA-B240-45D59CFCF4B3}.tmp
Size	43.0KB
Processes	2624 (WINWORD.EXE)
Type	data
MD5	`d799a3b1a1e823ec97900812287d3752`
SHA1	`a1bd31d0b271dd90713443caf92f6e1defd5ee4f`
SHA256	`cc415623935ea70fe4de731f29648fcf6a3451ffb957c931c96353baea58b180`
CRC32	`6DD69A55`
ssdeep	`768:+s0SCWiMuz1rqAyLt+eqViz9yCFcEhZVsfZk+0utgSdmeEjjG5Hip:GDvwxKrK2fuumSGjK5Hip`
Yara	None matched
VirusTotal	Search for analysis