Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{be4cdeb6-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDEB6-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	2040 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	265438c6977eb5ad_~wrs{c4e2f51f-dac9-49fc-b9d5-108c335c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DAC9-49FC-B9D5-108C335C54A4}.tmp
Size	39.0KB
Processes	2040 (WINWORD.EXE)
Type	data
MD5	`cb75bc2175d260efe90ee4fb6a148041`
SHA1	`4a490becc8bfc122740fe189ef7930bf92f90603`
SHA256	`265438c6977eb5adbf22272fc937ffe36b9d8dece71bab1e2061b837e586b397`
CRC32	`9C66AD32`
ssdeep	`768:rgI2Q5Q6IQXwvW5Kq2g0Bl+PTCk4Wd01ZgI2Q5Q6IQXwvW5Kq2g0ea:gSyemmrC5Wd0gSyemx`
Yara	None matched
VirusTotal	Search for analysis

Name	cac742e724d12d58_~$obeezx.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$obeezx.doc
Size	162.0B
Processes	2040 (WINWORD.EXE)
Type	data
MD5	`4b566bea16d2173ff40b076136cd7bb0`
SHA1	`e8a1a11437d864dd48f3089e6e2e7568b55c9791`
SHA256	`cac742e724d12d58cd84c2d24668b22eee70dd62ddff266a8e1c4bec314ae206`
CRC32	`B58E9599`
ssdeep	`3:yW2lWRdKMW6L7PCthJK7E7ItKsLJ/:y1lWuMWmCvK7EkK6`
Yara	None matched
VirusTotal	Search for analysis

Name	68f7799b70975853_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2040 (WINWORD.EXE)
Type	data
MD5	`98bada0be16f57b8c61470f959c47ff7`
SHA1	`baff7d718a82d502e28945f054490dd1234c2e8d`
SHA256	`68f7799b70975853add77ac66491736bd3e42505a9197f1db05f25c4e8300fcd`
CRC32	`3551890F`
ssdeep	`3:yW2lWRdKMW6L7PCthJK7E7ItKNT//:y1lWuMWmCvK7EkKNL/`
Yara	None matched
VirusTotal	Search for analysis