Dropped Files | ZeroBOX

Name	59fc4cb4e8268040_~$tracted_at_0x1ef92.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1ef92.rtf
Size	162.0B
Processes	3024 (WINWORD.EXE)
Type	data
MD5	`502639f819abe96cd2dd9d0c41e505ba`
SHA1	`019750ab46050da7bbf985ee337e8577a9bfe76a`
SHA256	`59fc4cb4e8268040b6900f02c393996133bbe752aab0c55e978715af88387c9e`
CRC32	`5F48B8C0`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt50iSjlVtDmXyXhn:y1lWnlxK7ghqqF6ixn`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{81f53281-66f6-4e4b-8e2b-ad3018c564c9}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{81F53281-66F6-4E4B-8E2B-AD3018C564C9}.tmp
Size	1.0KB
Processes	3024 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	e8f6d8e37528560e_~wrs{9a32582e-2429-46c2-b6b4-2c144b7f8154}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{9A32582E-2429-46C2-B6B4-2C144B7F8154}.tmp
Size	48.0B
Processes	3024 (WINWORD.EXE)
Type	data
MD5	`e12d851098914135344539663dbc5c78`
SHA1	`c15e74925330b65df188f088a5f5b9f09f8bdc26`
SHA256	`e8f6d8e37528560e3bf34509eee5f3f07977977d09ca61bdc775fa1f103960a9`
CRC32	`57A39DCE`
ssdeep	`3:zlwSlMIDYrslLlBfl+fl:zndYrslRKN`
Yara	None matched
VirusTotal	Search for analysis

Name	d516a371b6fc0a52_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	3024 (WINWORD.EXE)
Type	data
MD5	`56a4532b2fc2cf6fd4ec62a29758d231`
SHA1	`60f68bd8ac5b3f7290daa236bebd5f9c0f1510fd`
SHA256	`d516a371b6fc0a5270a1323f271bc2a36bc34f9cf06c783a642020c0da8948c3`
CRC32	`E93E4529`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt50iSjlVtNmk/tyXhn:y1lWnlxK7ghqqFNT/tyxn`
Yara	None matched
VirusTotal	Search for analysis