Dropped Files | ZeroBOX

Name	8247cde262fe373d_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	872 (WINWORD.EXE)
Type	data
MD5	`7eef8034b40c1e458e56c4efda290798`
SHA1	`5357d7a3b7b5597554c664231084dc064ad25d77`
SHA256	`8247cde262fe373deee6138e6ee682eabca92c93aa119003296a711744bc009b`
CRC32	`83010181`
ssdeep	`3:yW2lWRdhmllvW6L7JtvK7gCFItTl1V7Lt:y1lWNml1WmdtvK7gCWpf75`
Yara	None matched
VirusTotal	Search for analysis

Name	398e3d382b8a3bc6_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	36.0B
Processes	872 (WINWORD.EXE)
Type	data
MD5	`be92a59b9b9e0411a03c1d8f5896ae10`
SHA1	`6e221a0a410e4ad1b3a8a8aa040f20d3aa9cb53b`
SHA256	`398e3d382b8a3bc69240a5518a49fc84ef85cd7d8c54ff9f4c9d43fdfc3fcbde`
CRC32	`0BE0A689`
ssdeep	`3:jFilnlxfNleV:jglnjfuV`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{714e55b1-82eb-4fd5-bbd8-f0f464ffd411}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{714E55B1-82EB-4FD5-BBD8-F0F464FFD411}.tmp
Size	1.0KB
Processes	872 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	124cf9cf45632560_~$tracted_at_0x1c9ad.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1c9ad.rtf
Size	162.0B
Processes	872 (WINWORD.EXE)
Type	data
MD5	`a24b18f08c497eedbe5c2d92285431ee`
SHA1	`e85fb85ce63ea484305314ba31749a0903892a5d`
SHA256	`124cf9cf45632560fa535060bbe1d1290d05e3e134e65135b1397138bbd388d1`
CRC32	`5CBFD490`
ssdeep	`3:yW2lWRdhmllvW6L7JtvK7gCFItTl11n:y1lWNml1WmdtvK7gCWpTn`
Yara	None matched
VirusTotal	Search for analysis