Dropped Files | ZeroBOX

Name	4826c0d860af884d_~wrs{7adcf0ea-6539-46e0-8674-a9c912ac3903}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{7ADCF0EA-6539-46E0-8674-A9C912AC3903}.tmp
Size	1.0KB
Processes	2628 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	001f49e3459d4f4e_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2628 (WINWORD.EXE)
Type	data
MD5	`dfb15853cc1fc485e12f595243bdd05a`
SHA1	`6ce99814768cb93cb6e3ec63f5521195a2746c72`
SHA256	`001f49e3459d4f4e4015a6300c3093e513431642b66af28883ccb3a99298ec41`
CRC32	`4F19B374`
ssdeep	`3:yW2lWRdvL7YMlbK7lfnXl:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	085901855341ac96_~$tracted_at_0x24e2e.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x24e2e.rtf
Size	162.0B
Processes	2628 (WINWORD.EXE)
Type	data
MD5	`e5e78b855090e35cd9e580eeca8e2437`
SHA1	`3a0dca848ce9ad6cced4ff2e1a4e322fb426c287`
SHA256	`085901855341ac9667c9a32fcb6dbea1b71e4b79c9e4e666e59da7b59e085987`
CRC32	`ACF392C9`
ssdeep	`3:yW2lWRdvL7YMlbK7lhZpnNWiqnlZBl:y1lWnlxK7RpnEicl`
Yara	None matched
VirusTotal	Search for analysis

Name	eafa70ebafb93c1c_~wrs{27a2338e-7d21-4dc0-a0a1-b6a3d45fffaa}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{27A2338E-7D21-4DC0-A0A1-B6A3D45FFFAA}.tmp
Size	24.0B
Processes	2628 (WINWORD.EXE)
Type	data
MD5	`fdd6cc13e55496a4c1e98d7d74768aed`
SHA1	`282d7dc9f2529bcbb8c66bf51f895cd37c70fb3a`
SHA256	`eafa70ebafb93c1c5d79ca963c5e423743d8ba45d676a5c53ae83137287f4113`
CRC32	`CE6FC509`
ssdeep	`3:Kl+TilAfl:viAN`
Yara	None matched
VirusTotal	Search for analysis