Dropped Files | ZeroBOX

Name	376623aac651aeda_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	16.0B
Processes	1932 (WINWORD.EXE)
Type	data
MD5	`0a7644f55388b477ce4743ee64adc9e2`
SHA1	`7b8664bc14e9020d5f4baa788064316ab28f3421`
SHA256	`376623aac651aeda6e4aafc8f23fc59a6678e18bc91efb19b4f4848a7561573f`
CRC32	`5CF05C4D`
ssdeep	`3:olTilAfl:oliAN`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{be4cdf93-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDF93-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	1932 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	4571d1779a38c2fd_~$tracted_at_0x22c2a.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x22c2a.rtf
Size	162.0B
Processes	1932 (WINWORD.EXE)
Type	data
MD5	`ee7af39b747f5b70c8c83cf5c46e9046`
SHA1	`14c602e8f880bf9918bbe50c8260d04621425f8e`
SHA256	`4571d1779a38c2fd60a84add602c558dac517ad6bd1addc3572d8fd350d946d4`
CRC32	`E2A27581`
ssdeep	`3:yW2lWRdrlSloW6L7JK7TK70MlMHItvLedMjhX:y1lWvlWoWmk7TK70MlBSdMV`
Yara	None matched
VirusTotal	Search for analysis

Name	ab0fd8fad429c996_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1932 (WINWORD.EXE)
Type	data
MD5	`577475438ecf282c26d9521d19f007c3`
SHA1	`fdae0a5dfe757be8bda2c1ec503f092bbc7ac882`
SHA256	`ab0fd8fad429c996e604f98cc579c401afac2c424b74367c5a6a7c772f8c135b`
CRC32	`D0ABEEAB`
ssdeep	`3:yW2lWRdrlSloW6L7JK7TK70MlMHItvLedM4Zlt:y1lWvlWoWmk7TK70MlBSdMKlt`
Yara	None matched
VirusTotal	Search for analysis