Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{7adcf0ea-6539-46e0-8674-a9c912ac3903}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{7ADCF0EA-6539-46E0-8674-A9C912AC3903}.tmp
Size	1.0KB
Processes	2612 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	5198fa0f5db0645b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2612 (WINWORD.EXE)
Type	data
MD5	`8eb7ef27966ff233cf87b14b723ff88a`
SHA1	`8c0734adcb7a05ccf6d588c3a11749fd6c902126`
SHA256	`5198fa0f5db0645b75383f7ff4a2a183b1233d88fa1585d3b72289901f4338ae`
CRC32	`8D0535B5`
ssdeep	`3:yW2lWRdvL7YMlbK7l0:y1lWnlxK7S`
Yara	None matched
VirusTotal	Search for analysis

Name	9113d03efe4a40aa_~$tracted_at_0x1ec6b.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1ec6b.rtf
Size	162.0B
Processes	2612 (WINWORD.EXE)
Type	data
MD5	`c86fea1e1ca188f97d580e34c08950c9`
SHA1	`7346096470b47ec2edf1ffdcd392dd1478161ad1`
SHA256	`9113d03efe4a40aa92592c649a04822a83c10543d0fac15d1edb7be3b82eae22`
CRC32	`8D90B549`
ssdeep	`3:yW2lWRdvL7YMlbK7lhZ/8:y1lWnlxK7RU`
Yara	None matched
VirusTotal	Search for analysis

Name	0d84b1bc7dfa9936_~wrs{27be35b6-7d21-4dc0-a0a1-b6a3d45fffaa}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{27BE35B6-7D21-4DC0-A0A1-B6A3D45FFFAA}.tmp
Size	1.5KB
Processes	2612 (WINWORD.EXE)
Type	data
MD5	`d3ee8dc48a5651c5f577026a4f7d5247`
SHA1	`8100d704d47f1bf1b3ee9f767f3b2e415ce34430`
SHA256	`0d84b1bc7dfa9936366bcb85be05ec3233d29fff6682889a926e4e2676666580`
CRC32	`277D287A`
ssdeep	`3:TLE4kgLE4MMlsX1l5l37kt0u/D/lu/HHhKjMhlTvlgl7vlIs:Y42rgtZ0B4MhRmrn`
Yara	None matched
VirusTotal	Search for analysis