Dropped Files | ZeroBOX

Name	c0c16f9072782d86_~$tracted_at_0x1e52a.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1e52a.rtf
Size	162.0B
Processes	2556 (WINWORD.EXE)
Type	data
MD5	`7eddac9bd9d534854b2cc4058dca0f25`
SHA1	`84c36b86da228f52033e116b0198fda0843646d3`
SHA256	`c0c16f9072782d8635c454e7ff440311a06304853230880de10cdc9162d52f11`
CRC32	`DF0125D5`
ssdeep	`3:yW2lWRdvL7YMlbK7lhZ1nFkt:y1lWnlxK7R1n2`
Yara	None matched
VirusTotal	Search for analysis

Name	8a0f0b40eecd960f_~wrs{e89f5ff0-8f4b-42b1-9755-0520fa4bd3cb}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E89F5FF0-8F4B-42B1-9755-0520FA4BD3CB}.tmp
Size	102.0B
Processes	2556 (WINWORD.EXE)
Type	data
MD5	`4fa4de50f0471627133fbe2e2e3d3ce9`
SHA1	`d6cef489b9ffb6a15a6eff87109b5ce98ab34e51`
SHA256	`8a0f0b40eecd960f4d94c7604541b48592214ed35372881ee5c8aa6e5fbd9bee`
CRC32	`E2F42EF8`
ssdeep	`3:NMNXyAfWfdXlAYgb66L5RIlE3AFlKOlAXhJn:mNCgWF+fElEwKOlIn`
Yara	None matched
VirusTotal	Search for analysis

Name	815f308835606014_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2556 (WINWORD.EXE)
Type	data
MD5	`731244220e4ec6d378c7d05824f99e87`
SHA1	`1ff8802067f5cf9123094ad8ec6a8894f4ef9d53`
SHA256	`815f3088356060149d06d5222942d7ab92177d2e3c4871d7205800b0f0a9dd9e`
CRC32	`46F2130E`
ssdeep	`3:yW2lWRdvL7YMlbK7lbnl:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{bfb6cb33-d795-45a3-83f9-e6d7f4190124}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BFB6CB33-D795-45A3-83F9-E6D7F4190124}.tmp
Size	1.0KB
Processes	2556 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis