Dropped Files | ZeroBOX

Name	ba98d29c30f9d2f2_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	184 (WINWORD.EXE)
Type	data
MD5	`d4250cb06f3f9f607ffa77772273b539`
SHA1	`b219104551641a31b9577f646ac085cc374d8d79`
SHA256	`ba98d29c30f9d2f2ebd1fe5b2a177fd439e0aa690405fef484a0043713471eba`
CRC32	`F15C3316`
ssdeep	`3:yW2lWRd9f/W6L78TllvXK73JgFItSfWtiX:y1lWJf/WmE/vXK75gW6WoX`
Yara	None matched
VirusTotal	Search for analysis

Name	0c5209106f26c622_~$tracted_at_0x1fefb.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x1fefb.rtf
Size	162.0B
Processes	184 (WINWORD.EXE)
Type	data
MD5	`ec94dcaabaee35c11106f1df0ba32f07`
SHA1	`8b01d405a2af770709feab93db2faa4bf2cffab7`
SHA256	`0c5209106f26c62287efe6fe1d28e55749da1bd888c7856ccfa9ec90dda79761`
CRC32	`136FAF99`
ssdeep	`3:yW2lWRd9f/W6L78TllvXK73JgFItSf9l:y1lWJf/WmE/vXK75gW6H`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{be4cde67-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDE67-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	184 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	0f3167d52bf80ea6_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	44.0B
Processes	184 (WINWORD.EXE)
Type	data
MD5	`d44c9a53a34dc2033cc6c3094a1dee7d`
SHA1	`a258a49bcf23e1b791f32944d45d7e8637c4fbe5`
SHA256	`0f3167d52bf80ea69b86bbbc2eda5d5e4b94b3c8eee76e04e2aa1673134936cc`
CRC32	`01986B97`
ssdeep	`3:olB5lRkFlEDBflZXhJLln:olfwED9R`
Yara	None matched
VirusTotal	Search for analysis