Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{be4cde00-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDE00-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	884 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	de3b4b0e01d7e725_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	22.0B
Processes	884 (WINWORD.EXE)
Type	data
MD5	`5b48d853f25dd40d6851b4815785c87e`
SHA1	`b7e28f9ac2b5d6510ee23231c7a9cfc9fa15958f`
SHA256	`de3b4b0e01d7e7258cff467f8e0d324a5f204bb6ff21a2d51e9f8eda369ff660`
CRC32	`3FEBA183`
ssdeep	`3:6lFlzlPQRfln:6lfz2b`
Yara	None matched
VirusTotal	Search for analysis

Name	f935f15118d81193_~$tracted_at_0x22ec8.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x22ec8.rtf
Size	162.0B
Processes	884 (WINWORD.EXE)
Type	data
MD5	`81120d6b2367b42413ca805de6c4be3e`
SHA1	`1546ea8153b1cdb8be002f08fcca760a62324bbf`
SHA256	`f935f15118d8119309f5cb17cd70ee2c2dfeb8b328a58220ec61b51d3c563dbc`
CRC32	`ACF60972`
ssdeep	`3:yW2lWRdG2/t/W6L7qOYXK7Y1mpgFItT2l7zl/n:y1lWR/WmWnXK7Y0gWW7x`
Yara	None matched
VirusTotal	Search for analysis

Name	0807aeae366c0cc5_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	884 (WINWORD.EXE)
Type	data
MD5	`5af49800f49b53bc1100f4b5a6d1302f`
SHA1	`2e36e549e8771f64adb6b906a387621430badde2`
SHA256	`0807aeae366c0cc5fc4000a707f618e96a585649b78157be8facd456c39c3a6b`
CRC32	`F7392A89`
ssdeep	`3:yW2lWRdG2/t/W6L7qOYXK7Y1mpgFItT2llt:y1lWR/WmWnXK7Y0gWWlt`
Yara	None matched
VirusTotal	Search for analysis