Dropped Files | ZeroBOX

Name	22507ecbff8d37dc_~$voice_996446.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$voice_996446.doc
Size	162.0B
Processes	112 (WINWORD.EXE)
Type	data
MD5	`f809d7864feecfd3bc88c6f0556f050a`
SHA1	`278cd72e4ca369916359a1e41ea68fef564ecb11`
SHA256	`22507ecbff8d37dc438e5a3501c9e832d63160ce62e67b83527e86146624dbce`
CRC32	`E95D88DF`
ssdeep	`3:yW2lWRdvL7YMlbK7lZxnBMct:y1lWnlxK73xn+0`
Yara	None matched
VirusTotal	Search for analysis

Name	5198fa0f5db0645b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	112 (WINWORD.EXE)
Type	data
MD5	`8eb7ef27966ff233cf87b14b723ff88a`
SHA1	`8c0734adcb7a05ccf6d588c3a11749fd6c902126`
SHA256	`5198fa0f5db0645b75383f7ff4a2a183b1233d88fa1585d3b72289901f4338ae`
CRC32	`8D0535B5`
ssdeep	`3:yW2lWRdvL7YMlbK7l0:y1lWnlxK7S`
Yara	None matched
VirusTotal	Search for analysis

Name	cfb76cbc480fb106_~wrs{c35f8530-0471-4684-b992-ae3dca60fd0f}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C35F8530-0471-4684-B992-AE3DCA60FD0F}.tmp
Size	9.5KB
Processes	112 (WINWORD.EXE)
Type	data
MD5	`689834af5525041f70803f88538d2626`
SHA1	`f3c5f69b6b26cb95072536971231741d033666fa`
SHA256	`cfb76cbc480fb106154c6136ecb72ebed60e2639b2202d1fd76fe9d6f1219295`
CRC32	`356E160F`
ssdeep	`192:lid7DuPzhhPV8y3MvMgfEW31qV1lZL8rVdpyU3U2Off:lQDShJWy3MB3I17LIV7JU2OH`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{5f8b61f0-3c4f-4530-a0a2-26cab4cfd072}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{5F8B61F0-3C4F-4530-A0A2-26CAB4CFD072}.tmp
Size	1.0KB
Processes	112 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis