Dropped Files | ZeroBOX

Name	9d742321eb103aa8_~$file.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$file.rtf
Size	162.0B
Processes	1016 (WINWORD.EXE)
Type	data
MD5	`231ce16d40ec11081b700b827a551f7a`
SHA1	`3baf77351a16ea517d1152f41c06530894b1d1cc`
SHA256	`9d742321eb103aa8fa329145bc7e748c87fb83478bad64f4a9410f72f745497a`
CRC32	`1226BF45`
ssdeep	`3:yW2lWRdvL7YMlbK7lZxnBMBnlll:y1lWnlxK73xn+B`
Yara	None matched
VirusTotal	Search for analysis

Name	2e4a992c324d273b_1.a Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1.a
Size	16.0KB
Processes	1016 (WINWORD.EXE)
Type	ASCII text, with very long lines, with CRLF, LF line terminators
MD5	`1d93dd5a656657c47dde32e853bc0805`
SHA1	`40cff0c439fdd1aaf168f3934373137250bdfad5`
SHA256	`2e4a992c324d273bf41e0af2ea7e90814864d951d795bd81a6ae63186282ade3`
CRC32	`6765073C`
ssdeep	`384:w72KAZD2vyhOZtAu927gZM3K32RVV3kntDTPuVC/ba:w7VAh4IUA+OZUQYnBTPuVC/m`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{5f8b61f0-3c4f-4530-a0a2-26cab4cfd072}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{5F8B61F0-3C4F-4530-A0A2-26CAB4CFD072}.tmp
Size	1.0KB
Processes	1016 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	349eb6b6fa7fe7ee_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1016 (WINWORD.EXE)
Type	data
MD5	`e77b47eae52ea536ee260f98d19c202d`
SHA1	`f120af698e4b7a639a99f7dd4b0a5d070af4e750`
SHA256	`349eb6b6fa7fe7eecb56c9b6ecbcbf50686305e6bf9888864b332a0dc259b7d9`
CRC32	`767E022F`
ssdeep	`3:yW2lWRdvL7YMlbK7lBn/l:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis