Dropped Files | ZeroBOX

Name	65c96bc49cce9cf1_~wrs{2bffd2e8-1b2b-4da7-ac79-28a93e778034}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{2BFFD2E8-1B2B-4DA7-AC79-28A93E778034}.tmp
Size	8.8KB
Processes	1884 (WINWORD.EXE)
Type	data
MD5	`1a1aafa2e8c5316084a2481e559a92c6`
SHA1	`9f40c45753ba5f7adab7150a8297b25daa467ea1`
SHA256	`65c96bc49cce9cf1a52735220d72c536b616431132f2945ffd65b99683cffe65`
CRC32	`C38D8333`
ssdeep	`192:5J/52SMe7e3zxFYOxWP25bDVhrgrKYLhsETwlq:5x52SC/QMbDVhZY1Es`
Yara	None matched
VirusTotal	Search for analysis

Name	5c835e073542987e_~$j.ghj.ghj.ghj.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$j.ghj.ghj.ghj.doc
Size	162.0B
Processes	1884 (WINWORD.EXE)
Type	data
MD5	`a3377cd168fc3b22256f20723f1cb3b1`
SHA1	`ac247f9489a8f1e6e66a2d4e1e6a0f231fc584cd`
SHA256	`5c835e073542987eb3b45195318107fc82f8b9ad648009b57e1ce96593b3e357`
CRC32	`E0B255D4`
ssdeep	`3:yW2lWRdCW6L7VJK7j4cItAw2mNg1/:y1lWuWmPK72Al6G`
Yara	None matched
VirusTotal	Search for analysis

Name	814bee273cd12907_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1884 (WINWORD.EXE)
Type	data
MD5	`f83a0bbcaa5e8957878521e5e2409f5c`
SHA1	`0990ee569a69e1d4e890a496db6bffaf036f2176`
SHA256	`814bee273cd1290761ff89e5ecf4c13a19ac9892bb82088695f2e9810394d11d`
CRC32	`D6FD29E7`
ssdeep	`3:yW2lWRdCW6L7VJK7j4cItAw2m9t:y1lWuWmPK72Ale`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{a04a32ad-2f2c-485c-af66-7fac378d47e3}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{A04A32AD-2F2C-485C-AF66-7FAC378D47E3}.tmp
Size	1.0KB
Processes	1884 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis