Dropped Files | ZeroBOX

Name	af16bca486588ee7_~wrs{fa887317-69aa-4c2f-99f2-acb200716517}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{FA887317-69AA-4C2F-99F2-ACB200716517}.tmp
Size	10.0B
Processes	3036 (WINWORD.EXE)
Type	data
MD5	`2b81a49db45488e8abcf13305c3571fc`
SHA1	`d83cfd5db3207c73db2496892d74fd1553d4ce09`
SHA256	`af16bca486588ee79f866d40501d0431cf673bc6d6d947c733cde6d058a0c647`
CRC32	`76B431EE`
ssdeep	`3:7l+:h+`
Yara	None matched
VirusTotal	Search for analysis

Name	fc3a22553b0b9c52_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	3036 (WINWORD.EXE)
Type	data
MD5	`4a1f4ab6408b7fdf10667af524456e21`
SHA1	`d967089a53ebfd34144d41b4163c08adf2401df7`
SHA256	`fc3a22553b0b9c52f3c622d5934a5b1793b2be06c92aa7cbb1b6c988ab4739fb`
CRC32	`13DE48BD`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIt7mk/tyXhllFrll:y1lWnlxK7ghq7T/tyxdj`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{e99450b3-1c4b-4775-a5a1-dea78f5fd255}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E99450B3-1C4B-4775-A5A1-DEA78F5FD255}.tmp
Size	1.0KB
Processes	3036 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	47d15197e38273b3_~$tracted_at_0x24be8.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x24be8.rtf
Size	162.0B
Processes	3036 (WINWORD.EXE)
Type	data
MD5	`b7cb13109f05c73abdc50762571c7240`
SHA1	`f9870fc5364aa81e4ba277f33c03ef9ceabf599b`
SHA256	`47d15197e38273b38f99e3d5b046a0a1b00dba8507920d59fccac4dadb21ebc0`
CRC32	`A090CFFE`
ssdeep	`3:yW2lWRdvL7YMlbK7g7lxIttmXyXhllFrll:y1lWnlxK7ghqtmXyxdj`
Yara	None matched
VirusTotal	Search for analysis