Dropped Files | ZeroBOX

Name	3fdbd1b731215de4_~$tracted_at_0x20a9f.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x20a9f.rtf
Size	162.0B
Processes	1712 (WINWORD.EXE)
Type	data
MD5	`508583115c285a6c02b31f2621b77a53`
SHA1	`d20612bd90fcae27605dca9c7dee1bef019cb166`
SHA256	`3fdbd1b731215de4bfdb2b8a8220e85175df14e48c2867ada9695f0385c3ca36`
CRC32	`E0DACC6B`
ssdeep	`3:yW2lWRdqN3GoW6L7RdXK7hOuItNKel/teiRLJ/:y1lWeN3GoWmXXK7MVzfeiRLx`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{31d35423-5cdc-4ae5-9630-1138e3515487}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{31D35423-5CDC-4AE5-9630-1138E3515487}.tmp
Size	1.0KB
Processes	1712 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	fcf7a53b0db57835_~wrs{f5717022-49c2-4d0e-a626-69025836dd8c}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F5717022-49C2-4D0E-A626-69025836DD8C}.tmp
Size	30.0B
Processes	1712 (WINWORD.EXE)
Type	data
MD5	`a221e63776a4059b57d5220048c6343a`
SHA1	`c2cc325977b730ad1fbf24ebbcf7c8598b47d7c6`
SHA256	`fcf7a53b0db57835bd28b643824f0de35aae7711c6fc6f113f4023176e4e87e9`
CRC32	`14DB4EE3`
ssdeep	`3:hlmYgRe1:KYgE1`
Yara	None matched
VirusTotal	Search for analysis

Name	7c53b1ce6013f709_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1712 (WINWORD.EXE)
Type	data
MD5	`63d93adb457406b08db5d67770a60fe4`
SHA1	`97529d467173b9bb7175a98011e7434b3b1273c9`
SHA256	`7c53b1ce6013f7092f05a12e06bb854758e050ddbcfad2b09d88d985318805c5`
CRC32	`607D392E`
ssdeep	`3:yW2lWRdqN3GoW6L7RdXK7hOuItNKel/teylll:y1lWeN3GoWmXXK7MVzfeylll`
Yara	None matched
VirusTotal	Search for analysis