Dropped Files | ZeroBOX

Name	0e18a46eaa502a88_~wrs{e8e559fc-8f4b-42b1-9755-0520fa4bd3cb}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E8E559FC-8F4B-42B1-9755-0520FA4BD3CB}.tmp
Size	76.0B
Processes	2548 (WINWORD.EXE)
Type	data
MD5	`706a2dbfaa68c8617c831b0009ba532a`
SHA1	`3bec3f77fd90d1455ef06db8821e1ac520b12602`
SHA256	`0e18a46eaa502a88d5681a16079750dfae1227ce32470b8f0e6d8e67020ab1f8`
CRC32	`2C050737`
ssdeep	`3:slZl4pl+ApN1feIKlAIuvsl:slb8l+AxWfHuM`
Yara	None matched
VirusTotal	Search for analysis

Name	686dd10d72cb2d65_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2548 (WINWORD.EXE)
Type	data
MD5	`a222637086acbaefbbc0c86c4be166c9`
SHA1	`1cc45d8c0112e327dd3067c25e67cb16025ce271`
SHA256	`686dd10d72cb2d6528e1b480f9510b9e4d3aa0842dbcaa4cb184f3b384fef045`
CRC32	`87EA92F3`
ssdeep	`3:yW2lWRdvL7YMlbK7lVt:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	9d5ab2356cbd684a_~$tracted_at_0x22ba3.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x22ba3.rtf
Size	162.0B
Processes	2548 (WINWORD.EXE)
Type	data
MD5	`93e9fb620dbd3a327300856e8039566e`
SHA1	`dedfbf6baec3cd3ab1ca0db6d0bd5f5c83592c11`
SHA256	`9d5ab2356cbd684a6cea34cce5cce9057344f90b4af187e735cbc392d9db3fa7`
CRC32	`EA116F0E`
ssdeep	`3:yW2lWRdvL7YMlbK7lhZ2nAk6Vt:y1lWnlxK7Rdk6`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{bfb6cb33-d795-45a3-83f9-e6d7f4190124}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BFB6CB33-D795-45A3-83F9-E6D7F4190124}.tmp
Size	1.0KB
Processes	2548 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis