Dropped Files | ZeroBOX

Name	74b28da506cb8f7e_~$mlcache.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$MLcache.doc
Size	162.0B
Processes	2568 (WINWORD.EXE)
Type	data
MD5	`9ecb59659c21e5b08e5eb31875b1bbf8`
SHA1	`a714a5cb252244c3e871975d7837af2396e2a1f5`
SHA256	`74b28da506cb8f7e2f338027e514cbf181aa90bbf0b72833e5da4caee78357c0`
CRC32	`65FE77EE`
ssdeep	`3:yW2lWRdvL7YMlbK7lhZunSnD:y1lWnlxK7RPnD`
Yara	None matched
VirusTotal	Search for analysis

Name	815f308835606014_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2568 (WINWORD.EXE)
Type	data
MD5	`731244220e4ec6d378c7d05824f99e87`
SHA1	`1ff8802067f5cf9123094ad8ec6a8894f4ef9d53`
SHA256	`815f3088356060149d06d5222942d7ab92177d2e3c4871d7205800b0f0a9dd9e`
CRC32	`46F2130E`
ssdeep	`3:yW2lWRdvL7YMlbK7lbnl:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	3fdc696ac536b2be_~wrs{6cd57d0a-2df8-4904-a0d8-8568c704ecc4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{6CD57D0A-2DF8-4904-A0D8-8568C704ECC4}.tmp
Size	16.5KB
Processes	2568 (WINWORD.EXE)
Type	data
MD5	`e22e9b073bb2b6e2186f3c9190163b3d`
SHA1	`66fe57fc698fc2315b9af6d3c761066d2bee735e`
SHA256	`3fdc696ac536b2bedefefd50bcd971e41b20f33ca2564af7dae1806cb8f642b3`
CRC32	`97E97E86`
ssdeep	`384:nrmq5amZHaqyfCnZiVnY44XsxOIpmTU4s:R5lSfl1zxOIpCUj`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{bfb6cb33-d795-45a3-83f9-e6d7f4190124}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BFB6CB33-D795-45A3-83F9-E6D7F4190124}.tmp
Size	1.0KB
Processes	2568 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis