Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{cd2c45d7-3755-4b62-976d-ce4f8d38ce15}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{CD2C45D7-3755-4B62-976D-CE4F8D38CE15}.tmp
Size	1.0KB
Processes	524 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	121d3f1cf4447912_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	34.0B
Processes	524 (WINWORD.EXE)
Type	data
MD5	`616fc2a459d5d43a0c67cb8bdbece6f0`
SHA1	`058eb6e34140e83911175e81e330cd809f06b52a`
SHA256	`121d3f1cf4447912990a095f3b2a49c431b9d8b1717c34c74d46b1803186f647`
CRC32	`22699810`
ssdeep	`3:Els/gXrrD:Mjz`
Yara	None matched
VirusTotal	Search for analysis

Name	149ec12104fc9137_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	524 (WINWORD.EXE)
Type	data
MD5	`cb88e2ccc666339dafe977e5cc063d4b`
SHA1	`dc82497cd131f4936f5298f3356da440dccc979f`
SHA256	`149ec12104fc9137f4e81ac26a4c6bab15c123561fff72f1818d208b233da219`
CRC32	`BC2F03BD`
ssdeep	`3:yW2lWRd6W6L7zK7Q+FIt32iwmX:y1lWOWmnK7Q+W32FmX`
Yara	None matched
VirusTotal	Search for analysis

Name	2a6afdc23f5b2833_~$tracted_at_0x24ae2.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x24ae2.rtf
Size	162.0B
Processes	524 (WINWORD.EXE)
Type	data
MD5	`a96d7b125fd82a46cb22b3d27885b7c8`
SHA1	`dbffe720aad6c69613475e526d7d5ce67d7946f1`
SHA256	`2a6afdc23f5b2833a887065ca2f72e79d66cfdec01e96d32aac34e0a6e138d70`
CRC32	`DF67F965`
ssdeep	`3:yW2lWRd6W6L7zK7Q+FIt32aG:y1lWOWmnK7Q+W329`
Yara	None matched
VirusTotal	Search for analysis