popup
Dropped Files | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Files

Name 5198fa0f5db0645b_~$normal.dotm
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size 162.0B
Processes 1116 (WINWORD.EXE)
Type data
MD5 8eb7ef27966ff233cf87b14b723ff88a
SHA1 8c0734adcb7a05ccf6d588c3a11749fd6c902126
SHA256 5198fa0f5db0645b75383f7ff4a2a183b1233d88fa1585d3b72289901f4338ae
CRC32 8D0535B5
ssdeep 3:yW2lWRdvL7YMlbK7l0:y1lWnlxK7S
Yara None matched
VirusTotal Search for analysis
Name 94c659f53f3f7f4d_~wrs{f73a6d3e-e3df-4d31-a321-448daad216ad}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F73A6D3E-E3DF-4D31-A321-448DAAD216AD}.tmp
Size 1.9KB
Processes 1116 (WINWORD.EXE)
Type data
MD5 80dab0627108fe9bfbeab43ff9896f46
SHA1 cd2d659f3502c6eca893a9b8e77c2c68d630c4f3
SHA256 94c659f53f3f7f4d031a00662d52754f30cdddf7f706cf29622d4e038182862d
CRC32 7501A86D
ssdeep 12:9uRu2ZsEzUGjwZfpQevkBlxVtOGOin7V30gqEVW1Wo4BaKdWOlV/J:r2Z/zH6vkdnO3ip3bqD4Ba2H/J
Yara
  • Antivirus - Contains references to security software
VirusTotal Search for analysis
Name 6e81d4ee708c4404_~$gop.dotm
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\~$GOP.dotm
Size 162.0B
Processes 1116 (WINWORD.EXE)
Type data
MD5 472dff074d68d9915bcebe7ffa91a18e
SHA1 5c1cf95449e9a14e443aeb54d5ca4cd51f14b6bb
SHA256 6e81d4ee708c44047338e372faa6284c8a56fac88820acd377c01a89b41e2edb
CRC32 3D0B3EF6
ssdeep 3:yW2lWRdvL7YMlbK7lZync8:y1lWnlxK73t8
Yara None matched
VirusTotal Search for analysis
Name b3d510ef04275ca8_excludedictionaryen0409.lex
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex
Size 2.0B
Processes 1116 (WINWORD.EXE)
Type Little-endian UTF-16 Unicode text, with no line terminators
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
CRC32 88F83096
ssdeep 3:Qn:Qn
Yara None matched
VirusTotal Search for analysis
Name 4826c0d860af884d_~wrs{49f0111d-868e-4fa0-b0e0-7477ab9be03f}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{49F0111D-868E-4FA0-B0E0-7477AB9BE03F}.tmp
Size 1.0KB
Processes 1116 (WINWORD.EXE)
Type data
MD5 5d4d94ee7e06bbb0af9584119797b23a
SHA1 dbb111419c704f116efa8e72471dd83e86e49677
SHA256 4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1
CRC32 23C03491
ssdeep 3:ol3lYdn:4Wn
Yara None matched
VirusTotal Search for analysis