Dropped Files | ZeroBOX

Name	7a4116f59a3369c6_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	34.0B
Processes	1880 (WINWORD.EXE)
Type	data
MD5	`8a5e9852626611918997608f986aa616`
SHA1	`3c18576be0d8be95da4a5c09741f31983ea19e1d`
SHA256	`7a4116f59a3369c666e0145dce03aa98106a008772566ba022e91b5537371b50`
CRC32	`85871C02`
ssdeep	`3:llql1ZgTxl2OR:lwlLgTKs`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{be4cdf4c-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDF4C-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	1880 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	97978f6af36bf7cd_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1880 (WINWORD.EXE)
Type	data
MD5	`94088f4110c8116a94db64ddd176f063`
SHA1	`af3468e771e86316c768f7626f6d0ba0c4dbd7b7`
SHA256	`97978f6af36bf7cd1f6303885ee5cf0e2790187292792567fe791e6adc8dae3b`
CRC32	`50F609B3`
ssdeep	`3:yW2lWRdgO/vW6L7/O/lhJK7Zu+lcItFO/lx6Zmll/:y1lW0OXWmjO/dK7sEF+2ZmX`
Yara	None matched
VirusTotal	Search for analysis

Name	dd9464d7bd71171d_~$tracted_at_0x20f46.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x20f46.rtf
Size	162.0B
Processes	1880 (WINWORD.EXE)
Type	data
MD5	`98b2c36809ef59406aa955b6256bdcda`
SHA1	`4393448e238409c205c8fac3258c0e786283b6da`
SHA256	`dd9464d7bd71171dc4d3d90d0a2a24388e18f69506d2dc0ac147a263f55345d4`
CRC32	`CEE1C9E8`
ssdeep	`3:yW2lWRdgO/vW6L7/O/lhJK7Zu+lcItFO/lx4Ylt:y1lW0OXWmjO/dK7sEF+jX`
Yara	None matched
VirusTotal	Search for analysis