Dropped Files | ZeroBOX

Name	4826ae37b3b5f8ad_~wrs{091c7ad1-8228-49c5-8a1d-3681f55c655e}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{091C7AD1-8228-49C5-8A1D-3681F55C655E}.tmp
Size	15.0KB
Processes	1896 (WINWORD.EXE)
Type	data
MD5	`ed2be82228c23f4e72c3ce79248d843b`
SHA1	`96889c3317b044a4b28830c4a93e3614b3bcbf71`
SHA256	`4826ae37b3b5f8adf36da6b75110c37bf84141a49730b7be247a171c02ba40a4`
CRC32	`E9971762`
ssdeep	`384:NznKkNxvbDxsbez7ZeX3KHM4KiLi62a1ZDDuN+mvVC8:ZnKAZbXZI3KHbKimzIZPulvVP`
Yara	None matched
VirusTotal	Search for analysis

Name	71aabb9d97bf07ef_~$voice_000300020.wbk Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$voice_000300020.wbk
Size	162.0B
Processes	1896 (WINWORD.EXE)
Type	data
MD5	`573e585dd00f27d97f49cff2e2079bac`
SHA1	`61e9b050f91aad5e2a89eab915b1f6f79418d803`
SHA256	`71aabb9d97bf07efb387f4c69837c607808fafde0673b312600f7a68163cfa47`
CRC32	`D8729909`
ssdeep	`3:yW2lWRdvL7YMlbK7lZqnSnD:y1lWnlxK73rnD`
Yara	None matched
VirusTotal	Search for analysis

Name	0a4d950191e1fc44_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	1896 (WINWORD.EXE)
Type	data
MD5	`f95e94c1ea3257be40e88379abf8fae4`
SHA1	`8be44964c7da48b2337f50f6a0655d966787d50e`
SHA256	`0a4d950191e1fc44e50e008aa7fb5f583086ee144a5aa6ec5a3d22d9046be57f`
CRC32	`14D12E45`
ssdeep	`3:yW2lWRdvL7YMlbK7lInl:y1lWnlxK7qn`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{49f0111d-868e-4fa0-b0e0-7477ab9be03f}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{49F0111D-868E-4FA0-B0E0-7477AB9BE03F}.tmp
Size	1.0KB
Processes	1896 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis