Dropped Files | ZeroBOX

Name	cf3b50d7ef270538_~$tracted_at_0x1bf88.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1bf88.rtf
Size	162.0B
Processes	872 (WINWORD.EXE)
Type	data
MD5	`3f58d4581e95bad9840ce47896ce8ae1`
SHA1	`83cc780b52bca0a930cce739a66752a676338ba4`
SHA256	`cf3b50d7ef2705384a8a69e1996faddc6dbbb0988eedb6b47f59d41caa3fa073`
CRC32	`2950D24E`
ssdeep	`3:yW2lWRdUAtQloW6L7C7TK76gOHItYXtep//n:y1lW4floWmKK76B45`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{be4cdfc1-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDFC1-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	872 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	c1da9597cca50fd3_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	58.0B
Processes	872 (WINWORD.EXE)
Type	data
MD5	`cd9ca374bfb6d17816e4c2da024a4fbe`
SHA1	`fab7c72c3b4669a22efc2ab113931c49caf8f3a4`
SHA256	`c1da9597cca50fd39024eab6a9f48b4668e45925168d8c3c581b15ea1e7e7009`
CRC32	`16E49392`
ssdeep	`3:elTl0lTgPCltPK:el6zl0`
Yara	None matched
VirusTotal	Search for analysis

Name	6fc35cd7cb9e2c43_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	872 (WINWORD.EXE)
Type	data
MD5	`1409fee0c739281911fc83664dbd07dc`
SHA1	`aae6ef96efe65fd9da795879fe4a7d25bc28328c`
SHA256	`6fc35cd7cb9e2c43a2c45649045c0a362f1bb3ed70961eb98a7d533f9a58fbca`
CRC32	`891E8B3A`
ssdeep	`3:yW2lWRdUAtQloW6L7C7TK76gOHItYXt2iX:y1lW4floWmKK76B46X`
Yara	None matched
VirusTotal	Search for analysis