popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name d198c4d82eba42cc_5.t
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\5.t
Size 142.0KB
Processes 8052 (WINWORD.EXE)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 d843b58f31c687d22de09a6765b3ba3b
SHA1 176a0468dd70abe199483f1af287e5c5e2179b8c
SHA256 d198c4d82eba42cc3ae512e4a1d4ce85ed92f3e5fdff5c248acd7b32bd46dc75
CRC32 CE58F972
ssdeep 3072:QxLfvvQTQ0GKJwwugziBPsx8ZUxleOSuRKwHu9T5V0R8RhlCwLPm8lk7l:MLfvvQTmIzijQlnbRLu9T/R1k7l
Yara
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 0750cc183179f72b_~$main.jpg
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\~$Main.jpg
Size 162.0B
Processes 8052 (WINWORD.EXE)
Type data
MD5 93ad872ef7c992887b0fb2d97e8ae3ac
SHA1 d01dee05b2e26e8ad67678f2a368452224a7cba8
SHA256 0750cc183179f72b609fc27d711906fc34dfc6ff2f9a0783c99230bf9c2a7349
CRC32 0CA73CCC
ssdeep 3:yW2lWRdvL7YMlbK7l89k8ll:y1lWnlxK7gk
Yara None matched
VirusTotal Search for analysis
Name 8d80e9b9b39cd00f_bd03113.wmf
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\BD03113.wmf
Size 162.0B
Processes 8052 (WINWORD.EXE)
Type Targa image data - Map - RLE 18 x 65536 x 0 "\005"
MD5 975b76e8e77d57cc386af977a08b1e31
SHA1 cf893a58ef1a0f4a2f0ad3fe3a241c0c5bbcafa6
SHA256 8d80e9b9b39cd00f3bfadb3b2538dc46845fe8d0e7854d5dd9c9c381150dedad
CRC32 1C8E435A
ssdeep 3:Vmcll/6/lyll6/lollvlgiolog/lLnl/oEXa04/8/elGbVtfeXavt/y:MUl/6t2oto90ogtlozv8WlGbVIXC1y
Yara None matched
VirusTotal Search for analysis
Name 91769e6281fe0fb9_~wrs{5efd3d72-b5d4-479b-a6e9-e7ba2496530a}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{5EFD3D72-B5D4-479B-A6E9-E7BA2496530A}.tmp
Size 1.6KB
Processes 8052 (WINWORD.EXE)
Type data
MD5 383e687f0789aeac7dfc12fd18b3e8d7
SHA1 77eb570a29007b0e28c5f0b9b47cefc7e60ee2c3
SHA256 91769e6281fe0fb9308f11e40b693eab0dc56bf8fdba4276408ffd8069b89c2c
CRC32 73C47AD9
ssdeep 24:CUIUAWwAQdiMClnGidwP+nd1MClXwsN50h:tlKiZGhyd16s0
Yara None matched
VirusTotal Search for analysis
Name 8a6976db8aad8dda_~$normal.dotm
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size 162.0B
Processes 8052 (WINWORD.EXE)
Type data
MD5 d4e62d4bd463157e2c0182c51f4f057a
SHA1 beffe6ebab39146aac9a18c971df9691904521e9
SHA256 8a6976db8aad8dda6eaa6e466045624cc0ff3d0857aefe75e15c76000c62cca4
CRC32 68B7329C
ssdeep 3:yW2lWRdvL7YMlbK7lPn/l:y1lWnlxK7
Yara None matched
VirusTotal Search for analysis
Name 4826c0d860af884d_~wrs{4ec1eb67-4bc6-4c94-9543-e2babcb0cb29}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{4EC1EB67-4BC6-4C94-9543-E2BABCB0CB29}.tmp
Size 1.0KB
Processes 8052 (WINWORD.EXE)
Type data
MD5 5d4d94ee7e06bbb0af9584119797b23a
SHA1 dbb111419c704f116efa8e72471dd83e86e49677
SHA256 4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1
CRC32 23C03491
ssdeep 3:ol3lYdn:4Wn
Yara None matched
VirusTotal Search for analysis