Dropped Files | ZeroBOX

Name	b181500ae46b1de6_~$mlcachesclear.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$MLCachesClear.dOC
Size	162.0B
Processes	660 (WINWORD.EXE)
Type	data
MD5	`d349d0d8f523378c35bbe3e4716266d8`
SHA1	`efc40039f30cea805e58985082939443259f0e9b`
SHA256	`b181500ae46b1de65b5ec508a5f70e66c234b5a5cea4f8b85e2eebd78ba49739`
CRC32	`57883D74`
ssdeep	`3:yW2lWRdploW6L7EclpTK7BMl2HItGs/xlt:y1lWlloWmQcXK7WE4Go`
Yara	None matched
VirusTotal	Search for analysis

Name	fddfdc8e2f9db34b_~wrs{c406d63d-6831-4df5-9b66-1bc36f0d13e5}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C406D63D-6831-4DF5-9B66-1BC36F0D13E5}.tmp
Size	14.0KB
Processes	660 (WINWORD.EXE)
Type	data
MD5	`5120968b478541b683ab4538293a8525`
SHA1	`afc099a657d5350f9ff829e48105aadccb7f686d`
SHA256	`fddfdc8e2f9db34b4a65aaf6a9183b45b1a740b294e38a40b8c5e482313a163c`
CRC32	`EF0DFB28`
ssdeep	`384:AN7sJWvkXV5B/c/Qn1qugB7mRzoKALDTvQO+N:oUV5Jc/RVB+zqQO+N`
Yara	None matched
VirusTotal	Search for analysis

Name	a12b68482d4f6c2b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	660 (WINWORD.EXE)
Type	data
MD5	`72dd5bca9b89e9379201fa9822774f46`
SHA1	`41072f7c609d1bc8d43366c57d6a323f7a457857`
SHA256	`a12b68482d4f6c2b805b616a6572c5989242af4bd6d6298892f129fd2ac0c589`
CRC32	`08285626`
ssdeep	`3:yW2lWRdploW6L7EclpTK7BMl2HItGs/ln:y1lWlloWmQcXK7WE4Gs`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{31d35206-5cdc-4ae5-9630-1138e3515487}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{31D35206-5CDC-4AE5-9630-1138E3515487}.tmp
Size	1.0KB
Processes	660 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis