Dropped Files | ZeroBOX

Name	fce19f086d2b7920_~$tracted_at_0x1f8d7.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1f8d7.rtf
Size	162.0B
Processes	1708 (WINWORD.EXE)
Type	data
MD5	`0fe09dfe9136229fab3d22b2b640e722`
SHA1	`d5c2f09f7a70b6434c921ae41101548ed37eba0f`
SHA256	`fce19f086d2b7920aea6fd8cace7c547458a680f5dabd473d9c3f433e4a5e8a6`
CRC32	`6C780B20`
ssdeep	`3:yW2lWRduW6L7jK7vTlSlKFIt4ClllxRoJlln:y1lWiWm3K7MKWdlloJ/n`
Yara	None matched
VirusTotal	Search for analysis

Name	eba10bcbb6c7157e_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	40.0B
Processes	1708 (WINWORD.EXE)
Type	data
MD5	`ef2c70a0a4f276a961b263335a5765b9`
SHA1	`43684fa051947e52e95764afe33949188fb7138d`
SHA256	`eba10bcbb6c7157e62285d53643b79db95eeacd7b23e3e9ca7a3def7d78a0c8f`
CRC32	`1CB601A4`
ssdeep	`3:qlUjJnNsLWlon:eUnsq2n`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{be4cdff3-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDFF3-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	1708 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	cfef65ed023a81a1_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1708 (WINWORD.EXE)
Type	data
MD5	`2e4173b3f42959634b0001b778e4f239`
SHA1	`6fc13c694e60567026dddc82d2981ccd78f996a0`
SHA256	`cfef65ed023a81a15b2c153a805f47aa5dc7b4a4345ad9ac594d36f70384489d`
CRC32	`BB1348F3`
ssdeep	`3:yW2lWRduW6L7jK7vTlSlKFIt4ClllxL:y1lWiWm3K7MKWdll9`
Yara	None matched
VirusTotal	Search for analysis