Dropped Files | ZeroBOX

Name	90005c3b383dec36_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	14.0B
Processes	1372 (WINWORD.EXE)
Type	data
MD5	`afa700161e46742350a0763ac99ffb4a`
SHA1	`622d157ae2fa5be0f6316d425656cb0d7b52346c`
SHA256	`90005c3b383dec36a6989393a35967f4794e9b928388cfc6f91a67cf373b76e7`
CRC32	`BA4CD519`
ssdeep	`3:5lvMl:rk`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{be4cdef5-8279-41d0-b946-07cb50716005}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDEF5-8279-41D0-B946-07CB50716005}.tmp
Size	1.0KB
Processes	1372 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	5c270f912dc6b206_~$tracted_at_0x24d0e.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x24d0e.rtf
Size	162.0B
Processes	1372 (WINWORD.EXE)
Type	data
MD5	`0f9f1f31eba3adf90e72f337f3bd2fb4`
SHA1	`7a9b69333d142c9b3028e34fce370af306b35d1a`
SHA256	`5c270f912dc6b2062a7171ac30dbcc761224e887376ed2a7d2d548be5b8a82b3`
CRC32	`C6E4E6F4`
ssdeep	`3:yW2lWRdZW6L7s/vK7YGzllkFItcr+QG:y1lWtWmMK7YGoWcr+j`
Yara	None matched
VirusTotal	Search for analysis

Name	101fa4b18e12a70b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1372 (WINWORD.EXE)
Type	data
MD5	`7cef2225ca09ed7c716a4be331bed0bc`
SHA1	`1fc5df12dd8b043d20682b353c4f4af020e9c387`
SHA256	`101fa4b18e12a70bf8d86aad6093c33b3a94699a40b271b7555103f3a78c631c`
CRC32	`3C66A6A4`
ssdeep	`3:yW2lWRdZW6L7s/vK7YGzllkFItcr+hSl/n:y1lWtWmMK7YGoWcr+hG`
Yara	None matched
VirusTotal	Search for analysis