Dropped Files | ZeroBOX

Name	7ad148080519362e_~$voice_886558.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$voice_886558.doc
Size	162.0B
Processes	4208 (WINWORD.EXE)
Type	data
MD5	`1bb55a4178c4ffbec521d3a49f3eb9d5`
SHA1	`d33bccce4c2a6d1859c7a16e31de682be428c481`
SHA256	`7ad148080519362ee19983b18d6a212cf01c3e3824b44ae0f0dd4410accbc978`
CRC32	`93A36C13`
ssdeep	`3:yW2lWRdvL7YMlbK7lIJkpll/:y1lWnlxK7YkL`
Yara	None matched
VirusTotal	Search for analysis

Name	cd4dace84e59ad55_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	4208 (WINWORD.EXE)
Type	data
MD5	`9d17d35d077cc6507d3b4d88aec60297`
SHA1	`960c76699406df0624376a61f68afce30ea51837`
SHA256	`cd4dace84e59ad553c91dea3f07a8261c99b58cf11f410be9a45bff3f91b4da8`
CRC32	`245D3F64`
ssdeep	`3:yW2lWRdvL7YMlbK7lSn/l/:y1lWnlxK7wn/`
Yara	None matched
VirusTotal	Search for analysis

Name	7f5873b0c27eb3c5_~wrs{79f661ad-83d7-46ae-b74c-ce08189c836c}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{79F661AD-83D7-46AE-B74C-CE08189C836C}.tmp
Size	9.5KB
Processes	4208 (WINWORD.EXE)
Type	data
MD5	`29eb7054c14b996ae0fa854fa631d11d`
SHA1	`0931faf30ef2a06a9b1dc0363e4a53cb788b2890`
SHA256	`7f5873b0c27eb3c5a8e43d6261c8207150a0e2b12c7a8827ed9c64d4404ff7d7`
CRC32	`75F7E27A`
ssdeep	`192:3ADucgCermsp7WVZZxCZoEIligt164WJBBAnry:3ADucgbFoXxxEIligH64kHAry`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{36773fa7-b334-4cb5-befd-554cd568effc}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{36773FA7-B334-4CB5-BEFD-554CD568EFFC}.tmp
Size	1.0KB
Processes	4208 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis