Dropped Files | ZeroBOX

Name	92e1b89d6ab03cf7_~wrs{78d3d577-086f-4c48-9a41-f4912318170f}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{78D3D577-086F-4C48-9A41-F4912318170F}.tmp
Size	16.0B
Processes	3028 (WINWORD.EXE)
Type	data
MD5	`0d1df1d9da804097c0277454f2bd36fb`
SHA1	`d72a1c15c5f3cc068960735d81e34a6beaf7519a`
SHA256	`92e1b89d6ab03cf7700e0c2c503c97a1f17658ec430d096c2c2d459208424c73`
CRC32	`E6D84378`
ssdeep	`3:ll5FZfIk:Gk`
Yara	None matched
VirusTotal	Search for analysis

Name	d516a371b6fc0a52_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	3028 (WINWORD.EXE)
Type	data
MD5	`56a4532b2fc2cf6fd4ec62a29758d231`
SHA1	`60f68bd8ac5b3f7290daa236bebd5f9c0f1510fd`
SHA256	`d516a371b6fc0a5270a1323f271bc2a36bc34f9cf06c783a642020c0da8948c3`
CRC32	`E93E4529`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt50iSjlVtNmk/tyXhn:y1lWnlxK7ghqqFNT/tyxn`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{8712f6aa-ecd1-406a-ba72-163c028324de}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{8712F6AA-ECD1-406A-BA72-163C028324DE}.tmp
Size	1.0KB
Processes	3028 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	2644be94af539be0_~$tracted_at_0x23fec.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x23fec.rtf
Size	162.0B
Processes	3028 (WINWORD.EXE)
Type	data
MD5	`b9f20698f86c068c488e6769f792d782`
SHA1	`04b701894500fa677660ce2660eeb54b89661916`
SHA256	`2644be94af539be0467222ad9f17f1359f76dd14e7607e5e869876ff31e31a0c`
CRC32	`B255F35F`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt50iSjlVteDlwXhn:y1lWnlxK7ghqqF26xn`
Yara	None matched
VirusTotal	Search for analysis