Dropped Files | ZeroBOX

Name	6dca2a6e4a3d9700_~wrs{988b5872-9f21-4660-9378-8af0293a243b}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{988B5872-9F21-4660-9378-8AF0293A243B}.tmp
Size	26.0B
Processes	3052 (WINWORD.EXE)
Type	data
MD5	`45f61b47a738efe6c9bba2074a6e7176`
SHA1	`191f24e676c3398c1405934b2ca6624434f3a0cd`
SHA256	`6dca2a6e4a3d9700fb13a8a623ee0ec83654814a080517ac6ee6f58d5bd2a866`
CRC32	`6C374A9E`
ssdeep	`3:RQl6/n:C6/`
Yara	None matched
VirusTotal	Search for analysis

Name	782f707a7f972de7_~$tracted_at_0x1e851.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1e851.rtf
Size	162.0B
Processes	3052 (WINWORD.EXE)
Type	data
MD5	`95aaea8d1a41df50ffb0392cfce54836`
SHA1	`5fd0673c5035bb872e9cc461d83b70e528d76163`
SHA256	`782f707a7f972de73de714cf471c334dbde93482d676c58c7f8e81fb86864214`
CRC32	`CA9C4A63`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt4sjSX4XhllFrll:y1lWnlxK7ghq4suX4xdj`
Yara	None matched
VirusTotal	Search for analysis

Name	fc3a22553b0b9c52_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	3052 (WINWORD.EXE)
Type	data
MD5	`4a1f4ab6408b7fdf10667af524456e21`
SHA1	`d967089a53ebfd34144d41b4163c08adf2401df7`
SHA256	`fc3a22553b0b9c52f3c622d5934a5b1793b2be06c92aa7cbb1b6c988ab4739fb`
CRC32	`13DE48BD`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt7mk/tyXhllFrll:y1lWnlxK7ghq7T/tyxdj`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{6ff07e8a-c8c2-4999-836e-b946d8ddaa23}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{6FF07E8A-C8C2-4999-836E-B946D8DDAA23}.tmp
Size	1.0KB
Processes	3052 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis