Dropped Files | ZeroBOX

Name	5198fa0f5db0645b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2228 (WINWORD.EXE)
Type	data
MD5	`8eb7ef27966ff233cf87b14b723ff88a`
SHA1	`8c0734adcb7a05ccf6d588c3a11749fd6c902126`
SHA256	`5198fa0f5db0645b75383f7ff4a2a183b1233d88fa1585d3b72289901f4338ae`
CRC32	`8D0535B5`
ssdeep	`3:yW2lWRdvL7YMlbK7l0:y1lWnlxK7S`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{00f84e93-56e2-4fa8-afd8-8bdf3cf361fb}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{00F84E93-56E2-4FA8-AFD8-8BDF3CF361FB}.tmp
Size	1.0KB
Processes	2228 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	21f204b1ad6ae4c5_~wrs{cc607556-4e48-4bf3-a34e-b1128a02ca0c}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{CC607556-4E48-4BF3-A34E-B1128A02CA0C}.tmp
Size	12.5KB
Processes	2228 (WINWORD.EXE)
Type	data
MD5	`a72af8c20959a798033254a7cf894276`
SHA1	`0b1a14cfc0afd0cda9e7bce39ce5a0e960d73f0e`
SHA256	`21f204b1ad6ae4c57002bd8ad55ce72a870105efee5bb1d3fd13e6ec8249b479`
CRC32	`DA63307B`
ssdeep	`384:/WjnkNDPcNDcIlR8XMXxDT2nV3oOewTA3df:/Qn6DkNAIlR8cXxDMLZOdf`
Yara	None matched
VirusTotal	Search for analysis

Name	6e81d4ee708c4404_~$voice_533767.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$voice_533767.doc
Size	162.0B
Processes	2228 (WINWORD.EXE)
Type	data
MD5	`472dff074d68d9915bcebe7ffa91a18e`
SHA1	`5c1cf95449e9a14e443aeb54d5ca4cd51f14b6bb`
SHA256	`6e81d4ee708c44047338e372faa6284c8a56fac88820acd377c01a89b41e2edb`
CRC32	`3D0B3EF6`
ssdeep	`3:yW2lWRdvL7YMlbK7lZync8:y1lWnlxK73t8`
Yara	None matched
VirusTotal	Search for analysis