Dropped Files | ZeroBOX

Name	5a0720a41fb7bab7_~wrs{d63d63ad-812c-464a-863a-d04e26fccdeb}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{D63D63AD-812C-464A-863A-D04E26FCCDEB}.tmp
Size	5.2KB
Processes	7132 (WINWORD.EXE)
Type	data
MD5	`c92f73924f7bef6294d2f2def0d7f90a`
SHA1	`452b420103a1f93d83e8f286d322507b12c40a9e`
SHA256	`5a0720a41fb7bab7c0c6d4ec49abd8b644f8a2b8e7371e9f19b7cf923526a058`
CRC32	`87C71A01`
ssdeep	`96:vJ2YGUIyylBZv5XNituP3bff9QF0ASFqMvWSsCoz+2wU/YC:vJ2YGUxylv54uT92Mvtoz+2KC`
Yara	None matched
VirusTotal	Search for analysis

Name	5198fa0f5db0645b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	7132 (WINWORD.EXE)
Type	data
MD5	`8eb7ef27966ff233cf87b14b723ff88a`
SHA1	`8c0734adcb7a05ccf6d588c3a11749fd6c902126`
SHA256	`5198fa0f5db0645b75383f7ff4a2a183b1233d88fa1585d3b72289901f4338ae`
CRC32	`8D0535B5`
ssdeep	`3:yW2lWRdvL7YMlbK7l0:y1lWnlxK7S`
Yara	None matched
VirusTotal	Search for analysis

Name	ab519031b84f742d_~$voice_533512.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$voice_533512.doc
Size	162.0B
Processes	7132 (WINWORD.EXE)
Type	data
MD5	`4c01f3f003ccce114b7e10ce98f39de0`
SHA1	`ef28def32f96de6abd70480ce02220a63c05abe2`
SHA256	`ab519031b84f742d8415e19a0d06d14a7a45acd2ec991f2f3698816513b70507`
CRC32	`D7055F0A`
ssdeep	`3:yW2lWRdvL7YMlbK7l2EQFm2t:y1lWnlxK76t`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{f4f910bc-5b2e-4157-82b9-95ec742c9cdf}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F4F910BC-5B2E-4157-82B9-95EC742C9CDF}.tmp
Size	1.0KB
Processes	7132 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis