Dropped Files | ZeroBOX

Name	57d31524eb8685bb_~$tracted_at_0x26a99.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x26a99.rtf
Size	162.0B
Processes	2052 (WINWORD.EXE)
Type	data
MD5	`2a105aa6272c20d99384ad26c99e2830`
SHA1	`8c9570cc48a3283a7b18d1e4925cf40702b4331d`
SHA256	`57d31524eb8685bb1b4a881e3b4fff6a71f6bafd11afbca8817dbf639e538dd0`
CRC32	`46BDCDB6`
ssdeep	`3:yW2lWRd+BQyW6L7PjlJK74hIHIt3lPCLx:y1lW/yWmbK74u44l`
Yara	None matched
VirusTotal	Search for analysis

Name	dffc54b28a69551f_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2052 (WINWORD.EXE)
Type	data
MD5	`769e81723f82752232b0651da5a9f76d`
SHA1	`57fb2c3579ce81cfeb69e4fc1a32f97d3e1115d8`
SHA256	`dffc54b28a69551f44e535acdcdf961aa3f9e9646792ce1942359944103a5947`
CRC32	`602D4611`
ssdeep	`3:yW2lWRd+BQyW6L7PjlJK74hIHIt3lPCD/6/ll:y1lW/yWmbK74u44jK/`
Yara	None matched
VirusTotal	Search for analysis

Name	dec531ce630bb6e2_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size	20.0B
Processes	2052 (WINWORD.EXE)
Type	data
MD5	`938e70a7f7555e6a3e11bfb32b191a3a`
SHA1	`76a5f260767293d45753ae8eb8e6ecf9e84c93aa`
SHA256	`dec531ce630bb6e2601ca7caf08c47422af2ae5f98c1aa9945a75cca07f36419`
CRC32	`A1C3CCCE`
ssdeep	`3:xlwii+:xr`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{61f8c77b-54a9-427b-8b7b-266c935d161c}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{61F8C77B-54A9-427B-8B7B-266C935D161C}.tmp
Size	1.0KB
Processes	2052 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis