Dropped Files | ZeroBOX
Name 4826c0d860af884d_~wrs{d0f010b3-d030-4d18-95db-023d9f846984}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{D0F010B3-D030-4D18-95DB-023D9F846984}.tmp
Size 1.0KB
Processes 1328 (WINWORD.EXE)
Type data
MD5 5d4d94ee7e06bbb0af9584119797b23a
SHA1 dbb111419c704f116efa8e72471dd83e86e49677
SHA256 4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1
CRC32 23C03491
ssdeep 3:ol3lYdn:4Wn
Yara None matched
VirusTotal Search for analysis
Name cfc3054c0360bc24_2c9c4959.emf
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2C9C4959.emf
Size 4.9KB
Processes 1328 (WINWORD.EXE)
Type Windows Enhanced Metafile (EMF) image data version 0x10000
MD5 556fa1046a06f5a8237cdbef295d230c
SHA1 0a9a4e23b7875e69d1e266e61e4b0275db0f3eab
SHA256 cfc3054c0360bc24bd12301b819e32da714edab265f07b6d160e712126acc815
CRC32 6CB88B3F
ssdeep 24:YJhfE9MN44HTfqFjsdB3g6G7OdE5qOppcWfswKnZFwG6uvX5YXmkZdHkHtXBUAib:c10MNVgsdBg6qjpLkwOEG6kpYjdHkNMb
Yara None matched
VirusTotal Search for analysis
Name cc6214d67b6c9c45_~$normal.dotm
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size 162.0B
Processes 1328 (WINWORD.EXE)
Type data
MD5 57c528817382a3538ec35dd5cf4be558
SHA1 5d8a2dd5b3b1ffa58c0f40b541058090be2d3caa
SHA256 cc6214d67b6c9c45c54102a97e49bb4c067e3fea454996ec098795d59c825f02
CRC32 CC573495
ssdeep 3:yW2lWRdvL7YMlbK7g7lxItO/OtjgWIart/:y1lWnlxK7ghqO2OWIet
Yara None matched
VirusTotal Search for analysis
Name a43d9560dcce682b_~$02_1465137480.doc
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\~$02_1465137480.doc
Size 162.0B
Processes 1328 (WINWORD.EXE)
Type data
MD5 4e5b4bb754943df80025725a177adf54
SHA1 40307f563f22e2405c38373b987c04384ee45f24
SHA256 a43d9560dcce682bdc4a945ddd8687e1991fd40f1f234c01cf5d085edf3429a6
CRC32 5786582B
ssdeep 3:yW2lWRdvL7YMlbK7g7lxItMsKlOtjgWIart/:y1lWnlxK7ghqMs+OOWIet
Yara None matched
VirusTotal Search for analysis