Dropped Files | ZeroBOX

Name	52772a299c1740a6_~$tracted_at_0x1e2e3.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1e2e3.rtf
Size	162.0B
Processes	1460 (WINWORD.EXE)
Type	data
MD5	`ce3ab8a0f2b18606e542a3b21c9c3bd3`
SHA1	`f47bb25a6ae4956a891fabb35aab82cb92819bec`
SHA256	`52772a299c1740a6b9193b9ee1035ccce767bddcb12fd721471569553dad831b`
CRC32	`EB4BD6E4`
ssdeep	`3:yW2lWRdboGoW6L7sglnXK7iGghuItGgfU7hax:y1lWXoGoWm4glnXK7iGghVGoU7Q`
Yara	None matched
VirusTotal	Search for analysis

Name	f4b96a4c4021fe55_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1460 (WINWORD.EXE)
Type	data
MD5	`7accc57c0b6213ea305ea7dae1efcd35`
SHA1	`74e1a05b429e35286594d27c9cbba5c83c75bf22`
SHA256	`f4b96a4c4021fe556aa041a15ca549946a05337123b9400c0c2f59eaae90662c`
CRC32	`32F16D88`
ssdeep	`3:yW2lWRdboGoW6L7sglnXK7iGghuItGgfU7hUl//n:y1lWXoGoWm4glnXK7iGghVGoU7i1`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{be4cdef5-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDEF5-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	1460 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	d6082558728df46a_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	32.0B
Processes	1460 (WINWORD.EXE)
Type	data
MD5	`16a8209cb764b283ef16bdbb34b153c2`
SHA1	`0ffc432bc1c73dcad538e77468b9ede9c10af52c`
SHA256	`d6082558728df46a2f0fa75e22a460b6f63c0848467b42775fb2a751e6568e15`
CRC32	`413CCF4B`
ssdeep	`3:TkKIJlFlRlvk:TDcfTk`
Yara	None matched
VirusTotal	Search for analysis