Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{b945009c-aa03-4017-a280-ce7561412a2a}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{B945009C-AA03-4017-A280-CE7561412A2A}.tmp
Size	1.0KB
Processes	2652 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	e53e3d2b0cc9f7cc_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2652 (WINWORD.EXE)
Type	data
MD5	`07f2df4b4f278096b9d8e895a5e124eb`
SHA1	`cdbfc8569276218e164f6cf869ee1124f9713087`
SHA256	`e53e3d2b0cc9f7cc635c75aa56b0b2a08c0d36cdf376e0fc859658f925344809`
CRC32	`29434F23`
ssdeep	`3:yW2lWRdvL7YMlbK7lUn/l:y1lWnlxK72n/`
Yara	None matched
VirusTotal	Search for analysis

Name	a867161cae6ded09_~$.h.h.h.hhhhh.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$.h.h.h.hhhhh.doC
Size	162.0B
Processes	2652 (WINWORD.EXE)
Type	data
MD5	`84fd79529d041e3e6c330da543ef57ee`
SHA1	`be55c2bd3a0335682aaf6feddceb484c972583c1`
SHA256	`a867161cae6ded098083003bee12726d62fc09615691b58a6883ea23a0f4789b`
CRC32	`44EAE0DE`
ssdeep	`3:yW2lWRdvL7YMlbK7lhZqnNWJkvll:y1lWnlxK7Rpk9`
Yara	None matched
VirusTotal	Search for analysis

Name	1770db178b3bfd21_~wrs{cf976d66-ad5c-4236-b0a9-43aa10c053f6}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{CF976D66-AD5C-4236-B0A9-43AA10C053F6}.tmp
Size	9.5KB
Processes	2652 (WINWORD.EXE)
Type	data
MD5	`ac3e81c1de5ea3926554945b861dd441`
SHA1	`4468e453ca6367b1d0e5cc26fe01fa22c2161724`
SHA256	`1770db178b3bfd21914dbab0ba8c5dbb7fc9475df82d1f66276055de28f0b6d9`
CRC32	`3A298D36`
ssdeep	`192:HXxOUqFxmgV/4YRnzoJJkpo5TqBY4hCg7ZvIiI9:HhlqK+/4azoJJkpo5TqB3hC4IiI9`
Yara	None matched
VirusTotal	Search for analysis