Dropped Files | ZeroBOX

Name	611d702670c2195c_~$tracted_at_0x1e350.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1e350.rtf
Size	162.0B
Processes	3028 (WINWORD.EXE)
Type	data
MD5	`fd835b6b598a2c4ef42178a2c7e0eb3d`
SHA1	`18f65673ca574828dc568871883aa22fb6b7ee36`
SHA256	`611d702670c2195ccc33414486435ff0f8945ddcb43c461c9fbea2cef7bbe038`
CRC32	`600B5949`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt50iSjlVt3mlIXhn:y1lWnlxK7ghqqF3mlIxn`
Yara	None matched
VirusTotal	Search for analysis

Name	7e078cccc3fb6397_~wrs{a0ca8975-08aa-4444-929a-7e3f21530679}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{A0CA8975-08AA-4444-929A-7E3F21530679}.tmp
Size	46.0B
Processes	3028 (WINWORD.EXE)
Type	data
MD5	`77796d6f1801da82c70f8f10f0975721`
SHA1	`f628114460e35f654d25b8c048a41c476e800da6`
SHA256	`7e078cccc3fb639766cf8578b040f6546dffc1110050562898884f771955829d`
CRC32	`D2417CF4`
ssdeep	`3:RlCNIdXMuXjaTl:KIdXMCap`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{00d6a047-2ceb-476a-993e-dad713eb90be}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{00D6A047-2CEB-476A-993E-DAD713EB90BE}.tmp
Size	1.0KB
Processes	3028 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	d516a371b6fc0a52_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	3028 (WINWORD.EXE)
Type	data
MD5	`56a4532b2fc2cf6fd4ec62a29758d231`
SHA1	`60f68bd8ac5b3f7290daa236bebd5f9c0f1510fd`
SHA256	`d516a371b6fc0a5270a1323f271bc2a36bc34f9cf06c783a642020c0da8948c3`
CRC32	`E93E4529`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt50iSjlVtNmk/tyXhn:y1lWnlxK7ghqqFNT/tyxn`
Yara	None matched
VirusTotal	Search for analysis