Dropped Files | ZeroBOX

Name	3f568e28656dd07c_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2624 (WINWORD.EXE)
Type	data
MD5	`2e694599e49d95f8edd7835fe2b7575f`
SHA1	`195f4f251e721d2801b85c3aa1902797e7a2feac`
SHA256	`3f568e28656dd07ccc9fff2182c6b45d34218c8e27e644984bdfb0ffc115c080`
CRC32	`0E72059A`
ssdeep	`3:yW2lWRdvL7YMlbK7ln:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{7adcf0ea-6539-46e0-8674-a9c912ac3903}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{7ADCF0EA-6539-46E0-8674-A9C912AC3903}.tmp
Size	1.0KB
Processes	2624 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	140136daed86a818_~$tracted_at_0x1e6b0.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1e6b0.rtf
Size	162.0B
Processes	2624 (WINWORD.EXE)
Type	data
MD5	`73e934dfd849f7541148ec155b773ec3`
SHA1	`7b8428abb2d6321ae7ad9bc025dc8ad2aecbfc41`
SHA256	`140136daed86a81862f7dce531d579fbeb9f5ab312b69d93a6438279c85eee2c`
CRC32	`220A241D`
ssdeep	`3:yW2lWRdvL7YMlbK7lhZtnK:y1lWnlxK7Rtn`
Yara	None matched
VirusTotal	Search for analysis

Name	869f1dfb999a452f_~wrs{27ac317e-7d21-4dc0-a0a1-b6a3d45fffaa}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{27AC317E-7D21-4DC0-A0A1-B6A3D45FFFAA}.tmp
Size	2.0B
Processes	2624 (WINWORD.EXE)
Type	data
MD5	`93b47212aea013b33dda11d51fbad42f`
SHA1	`2386e77cf610f786b06a91af2c1b3fd2282d2745`
SHA256	`869f1dfb999a452f497a4cf7f44db2d6ee661f74a9e7e05251bc1420e50672d4`
CRC32	`D45D365D`
ssdeep	`3:f:f`
Yara	None matched
VirusTotal	Search for analysis