Dropped Files | ZeroBOX

Name	dc184d5f35e1e0d2_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2548 (WINWORD.EXE)
Type	data
MD5	`def32a5616596f04971eea61c5f5bffb`
SHA1	`550d62f2267257efc040ecfa267ab56a09e17e86`
SHA256	`dc184d5f35e1e0d2bc5b054235fb7482f077eabd2845974c2fac2a2108f8ae15`
CRC32	`6828F9CD`
ssdeep	`3:yW2lWRdvL7YMlbK7lOX:y1lWnlxK7`
Yara	None matched
VirusTotal	Search for analysis

Name	c1633050dcebb846_~$mlincache.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$MLincache.doc
Size	162.0B
Processes	2548 (WINWORD.EXE)
Type	data
MD5	`30e98a7469abca89d09b4acbffa3cae8`
SHA1	`7386b07d6df612b8e11ae1779bbe33170a92b87c`
SHA256	`c1633050dcebb846c06de8ace151771d17560cee67c816ab478ef6d17bb690ad`
CRC32	`377CBCF3`
ssdeep	`3:yW2lWRdvL7YMlbK7lhZvnLr:y1lWnlxK7Rvn`
Yara	None matched
VirusTotal	Search for analysis

Name	e6c82d31cfd35afe_~wrs{6cd57c66-2df8-4904-a0d8-8568c704ecc4}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{6CD57C66-2DF8-4904-A0D8-8568C704ECC4}.tmp
Size	9.0KB
Processes	2548 (WINWORD.EXE)
Type	data
MD5	`03d6b7aef3732d9c0e296486e8ee30de`
SHA1	`4343f06fb7a1c774b6fde74d93df780409361c2d`
SHA256	`e6c82d31cfd35afec49dc281b05fbca734d0589dd05916f75b15d72f1e269528`
CRC32	`6A15A28C`
ssdeep	`192:XFghRD3/jyFbCruYY4VHGScd7aDCpzJFmXNhrHcsngpttHSsGwv:XFg3D3bKM3vNqrI9hr8sW6M`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{bfb6cb33-d795-45a3-83f9-e6d7f4190124}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BFB6CB33-D795-45A3-83F9-E6D7F4190124}.tmp
Size	1.0KB
Processes	2548 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis