popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name d6788b30679bab9f_editdata.mso
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\결의대회초안.files\editdata.mso
Size 11.3KB
Processes 2740 (WINWORD.EXE)
Type data
MD5 c01f59f3b695717df94c74e2e15727b3
SHA1 5493b265c0e9925ec6781ba26f05096b9a52bc86
SHA256 d6788b30679bab9fbc92f28b3e853f25b0e8f063e00120429de324d4ecf2a0b4
CRC32 06AA8454
ssdeep 192:PilHEgb52evdPVQoj/SK8DB6LYVaintRs15Q/Pw5eh8qx5m6:Pi/tpsorSKeyYVa4gU58qx5m6
Yara None matched
VirusTotal Search for analysis
Name 34f7a9d9f4d9abc4_~$결의대회초안.doc
Submit file
Size 162.0B
Type data
MD5 61187d1fcb3b138bb3fa0bc53cf05909
SHA1 a09b68b1edb55576dcc3d20340a07799d2b5429c
SHA256 34f7a9d9f4d9abc4534be84c656ba7450074e75d5b89f82cc78f4de30d9fd9ab
CRC32 25221D74
ssdeep 3:yW2lWRdvL7YMlbK7lZCnKnEl:y1lWnlxK73rnM
Yara None matched
VirusTotal Search for analysis
Name de0e63f732668c55_~wrs{31ae0fbd-add4-4759-8986-b9973118ad5f}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{31AE0FBD-ADD4-4759-8986-B9973118AD5F}.tmp
Size 1.5KB
Processes 2740 (WINWORD.EXE)
Type data
MD5 184bc6717504ff68140b3caa45706a0c
SHA1 4210490780b33c640bb3bd19b06c305f55c27ca8
SHA256 de0e63f732668c55125c9b7d10dfe450cbf3e5abbeb0df8c3cd7173040e177b5
CRC32 56B92ADD
ssdeep 6:IiiiiiiiiiE/bYflo3dc8++ZYSySkssqA1+tKHM9:S/XtG+aSpk1j1+tKH8
Yara None matched
VirusTotal Search for analysis
Name d1738d7883383266_결의대회초안.htm
Submit file
Size 26.4KB
Type HTML document, ISO-8859 text, with CRLF line terminators
MD5 4b362b6d0b87e9ec642ea23edeae6bd0
SHA1 b17ec3edbfb25f943a27790f6240184c10032055
SHA256 d1738d7883383266712faaecafe7e687af8c7f3b5465642293193a8977e4a6b0
CRC32 04A9A7CE
ssdeep 768:d8hF7wbwZfcOPwHeve0e6/e4aeJDTz1eLjb:diF7wowHeve0e4e4aeJDTz1eLjb
Yara None matched
VirusTotal Search for analysis
Name 5d89fdc489550c94_image001.png
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\결의대회초안.files\image001.png
Size 45.1KB
Processes 2740 (WINWORD.EXE)
Type PNG image data, 1564 x 606, 8-bit/color RGBA, non-interlaced
MD5 0816facd3bdd446b5c863282b6df608c
SHA1 77e5e58dda9daa2038b43dce062f96bce4b6333e
SHA256 5d89fdc489550c9471b483d5ba2a670fd1c4b9741747102a91411620f6254f0c
CRC32 0DF19B69
ssdeep 768:DDlRx3GgGZuEVjnteFHWzOmTJ+xdr4qMSvH70vNYE6a3+kzQOvOGJFFPFdZ1iSQA:DDF3GgG3LwM9QxdrTFj0HLukz3vOCFdF
Yara
  • PNG_Format_Zero - PNG Format
VirusTotal Search for analysis
Name bba986c435a45c34_filelist.xml
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\결의대회초안.files\filelist.xml
Size 348.0B
Processes 2740 (WINWORD.EXE)
Type UTF-8 Unicode text, with CRLF line terminators
MD5 f6c040730712d246f2ef14fecda416b1
SHA1 ec94f9899864b6a8bd6c3df0fdd6e9becaec0643
SHA256 bba986c435a45c340eff92eeab0e30223e3865d8328f24d72ed54e75aac59791
CRC32 190EA796
ssdeep 6:wIARu/QwdZBRjQhHeVYSKgE3UST+hPMv2STpV2tv2ST8dCqMv2eBMRCreVSWp0:wNqQwd9Qle6ZpegV2kCBQr0
Yara None matched
VirusTotal Search for analysis
Name 65f3cdbc4390c81b_colorschememapping.xml
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\결의대회초안.files\colorschememapping.xml
Size 314.0B
Processes 2740 (WINWORD.EXE)
Type XML 1.0 document, ASCII text, with CRLF line terminators
MD5 6b7a472a22fbdbff4b2b08ddb4f43735
SHA1 c6df700168d3f5a90ff2713b78f8ef1446927102
SHA256 65f3cdbc4390c81b94fa960b7362917443fc1e6a51e3f81e4cb4c4dfa09da4be
CRC32 57C7CEDA
ssdeep 6:TMVBd6OjzVlNAUifYRZ5YUvLGDmaN4bJU6Yizg:TMHdtnGfYF/CSaibJUzf
Yara None matched
VirusTotal Search for analysis
Name 3ee85b18074605e4_~$normal.dotm
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size 162.0B
Processes 2740 (WINWORD.EXE)
Type data
MD5 faf44829d6268f37a8d7150ceccbf42d
SHA1 e2de20e73862b9b9c6981732be3a75a74b5897b0
SHA256 3ee85b18074605e48070494529575b9f6a9e1566e3b18329d0d41b21fa835a28
CRC32 8DB63CA1
ssdeep 3:yW2lWRdvL7YMlbK7lGl:y1lWnlxK7M
Yara None matched
VirusTotal Search for analysis
Name be6b6b60813c7b0b_~$결의대회초안.htm
Submit file
Size 162.0B
Type data
MD5 03223fc85275c5c2d7b133a560d08de7
SHA1 d1f844603539c51bb08fe7f6ed252f9b0e5df239
SHA256 be6b6b60813c7b0b1b235b1275d073664147317e8e876b286ddcd435d0869ef6
CRC32 36910B80
ssdeep 3:yW2lWRdvL7YMlbK7lZCnKnHl/:y1lWnlxK73rnF/
Yara None matched
VirusTotal Search for analysis
Name 804f9df372bdb80e_image002.png
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\결의대회초안.files\image002.png
Size 83.9KB
Processes 2740 (WINWORD.EXE)
Type PNG image data, 1205 x 467, 8-bit/color RGBA, non-interlaced
MD5 5666ee4028bc299e99a56f54c394d61d
SHA1 4fa0502b3f6285ab93ee8f806b6749c2f0a2a2f3
SHA256 804f9df372bdb80e28b12c3b4361f694cfc56424fa2d02e554d8d0aef9c45bda
CRC32 938BA34D
ssdeep 1536:QoT6qGEcfBWxMBWsr/K+95U4+M13iiVCkW4GVTOp87K/ae:QoTFGECEMBWsri+9P+4yO0Ka7aae
Yara
  • PNG_Format_Zero - PNG Format
VirusTotal Search for analysis
Name 4ef06a0d19740752_themedata.thmx
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\결의대회초안.files\themedata.thmx
Size 3.0KB
Processes 2740 (WINWORD.EXE)
Type Microsoft OOXML
MD5 b6ac5e265e788c85d7faa4d965186633
SHA1 472c5808ff013b36fa5080e9b4193687a1820042
SHA256 4ef06a0d19740752df81c0438186b24dbff38abe2434652779d60379a78cb252
CRC32 C4A38E3D
ssdeep 48:9ryGRaHpmtTfbVxrNkUYrUKilJ2jmq5xcJn/i+WruPDkW3g4zSdlViuvTe7xFhza:FyGRsp6bfuPIKSsO/i+WwH3gnHViuL6A
Yara None matched
VirusTotal Search for analysis
Name 4826c0d860af884d_~wrs{5f8b61f0-3c4f-4530-a0a2-26cab4cfd072}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{5F8B61F0-3C4F-4530-A0A2-26CAB4CFD072}.tmp
Size 1.0KB
Processes 2740 (WINWORD.EXE)
Type data
MD5 5d4d94ee7e06bbb0af9584119797b23a
SHA1 dbb111419c704f116efa8e72471dd83e86e49677
SHA256 4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1
CRC32 23C03491
ssdeep 3:ol3lYdn:4Wn
Yara None matched
VirusTotal Search for analysis
Name e696e282f03dfdab_image003.png
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\결의대회초안.files\image003.png
Size 291.4KB
Processes 2740 (WINWORD.EXE)
Type PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
MD5 87ccd649551a3a9fa62b3b690832189e
SHA1 dcf8f281fd630bdc74f289143937cc64b15fdfad
SHA256 e696e282f03dfdab765f15501619a1f024d6a02b09edf3d4ef1eb5da6abfffac
CRC32 F8455282
ssdeep 6144:MERMpGpKlBXyqSmkHPH7J0zQO557HWQINLpUTQB46d0Q:MERtKlBCd1DGjz72VpUsvd0Q
Yara
  • PNG_Format_Zero - PNG Format
VirusTotal Search for analysis