Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{23b42ebd-dfe1-4738-8f1a-4cf722a0f6c2}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{23B42EBD-DFE1-4738-8F1A-4CF722A0F6C2}.tmp
Size	1.0KB
Processes	3020 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	3cc7432a08542bff_~wrs{bb756dfc-abc2-4c78-99cf-6e6e100a09ff}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BB756DFC-ABC2-4C78-99CF-6E6E100A09FF}.tmp
Size	24.0B
Processes	3020 (WINWORD.EXE)
Type	data
MD5	`c6971e99e3abcd3a6b90335aaef750ec`
SHA1	`821eb966c2c7460b99cb140caaa4b0f17146dd41`
SHA256	`3cc7432a08542bffb9c406b6fe95fb909c639ef7a42b80a7131127694d699bdf`
CRC32	`ACD93AC5`
ssdeep	`3:wljm3Dclfn:wli3Dclfn`
Yara	None matched
VirusTotal	Search for analysis

Name	e1d6ec0b8baf8d3a_~$tracted_at_0x1f6d1.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1f6d1.rtf
Size	162.0B
Processes	3020 (WINWORD.EXE)
Type	data
MD5	`648e719dd3e0888e5a4ffc78fb10e19e`
SHA1	`12d53bbb485070f123f1b16331f946e301733217`
SHA256	`e1d6ec0b8baf8d3a58def74bfe32a1dd0e35eef2efda50187fd963489df20669`
CRC32	`B852752D`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxItYl/4XhllFrll:y1lWnlxK7ghqI4xdj`
Yara	None matched
VirusTotal	Search for analysis

Name	fc3a22553b0b9c52_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	3020 (WINWORD.EXE)
Type	data
MD5	`4a1f4ab6408b7fdf10667af524456e21`
SHA1	`d967089a53ebfd34144d41b4163c08adf2401df7`
SHA256	`fc3a22553b0b9c52f3c622d5934a5b1793b2be06c92aa7cbb1b6c988ab4739fb`
CRC32	`13DE48BD`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt7mk/tyXhllFrll:y1lWnlxK7ghq7T/tyxdj`
Yara	None matched
VirusTotal	Search for analysis