Dropped Files | ZeroBOX

Name	c0649bf559f975e1_~$tracted_at_0x1f2b2.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1f2b2.rtf
Size	162.0B
Processes	1072 (WINWORD.EXE)
Type	data
MD5	`c8cf27088cbabe1a03b7d8d710fe1380`
SHA1	`699ff88309ed0d495b4cfa7b3b9044c4525e8e0c`
SHA256	`c0649bf559f975e16c49797f3df6eb941a89d80358b4254be1ef3fdbe7ff0660`
CRC32	`C1DCD970`
ssdeep	`3:yW2lWRdNdW6L77SllLJK73zUS/iIt8RVYtn:y1lWhdWmHWXK7IiB8zI`
Yara	None matched
VirusTotal	Search for analysis

Name	45c405d382d015a3_~wrs{f5717022-49c2-4d0e-a626-69025836dd8c}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F5717022-49C2-4D0E-A626-69025836DD8C}.tmp
Size	62.0B
Processes	1072 (WINWORD.EXE)
Type	data
MD5	`a0b382b221e5d5df2bfd5fbc0258ad90`
SHA1	`61283df65b0dfd7c4286bac6130ea1bdb273a6d1`
SHA256	`45c405d382d015a367c19a08cc531a00b38f65f829020cfea2f81558f8626a1d`
CRC32	`157DF94F`
ssdeep	`3:Rl+BflLrATl3KljfQbxl+Slin:C0p6ljYbj+Skn`
Yara	None matched
VirusTotal	Search for analysis

Name	c0f5dbe312abf5a3_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1072 (WINWORD.EXE)
Type	data
MD5	`37467f93a08da67cd413612d6966c9e0`
SHA1	`94f39885829d009cf391a69bc5a2450bec62dd13`
SHA256	`c0f5dbe312abf5a3c2bdaa65f60067c6227a0c009c751335f3e43c14b9c2d4d8`
CRC32	`D2489B5A`
ssdeep	`3:yW2lWRdNdW6L77SllLJK73zUS/iIt8RNLl:y1lWhdWmHWXK7IiB8LLl`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{31d35451-5cdc-4ae5-9630-1138e3515487}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{31D35451-5CDC-4AE5-9630-1138E3515487}.tmp
Size	1.0KB
Processes	1072 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis