Dropped Files | ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Dropped Files | ZeroBOX

Name	9421a3bc2c3c3659_~$липень.docx Submit file
Size	162.0B
Type	data
MD5	`b535126b77a1363eb52f129d2414fac1`
SHA1	`6c90d75b8c0f880e674293a002943e2946f74c7b`
SHA256	`9421a3bc2c3c3659ae65ff60cf49f91e1ae787f42508fbe9d9fba11983223a04`
CRC32	`47881478`
ssdeep	`3:yW2lWRdIJtdW6L7rbK71FFIt5M8/:y1lWkjdWmXbK7rW5Mc`
Yara	None matched
VirusTotal	Search for analysis

Name	cdbd1d12ca9d5740_~wrs{4e1a364f-e488-49fa-b8ca-c4dd48169fc8}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{4E1A364F-E488-49FA-B8CA-C4DD48169FC8}.tmp
Size	14.5KB
Processes	2284 (WINWORD.EXE)
Type	data
MD5	`d0b919f15bf94d2d69c729550e038072`
SHA1	`914bd2295c0b6532f480919f66eca96240d3e66a`
SHA256	`cdbd1d12ca9d57403b4b742b2e3c7922d95835b9cac091ce936d89690e01d9e1`
CRC32	`C660F622`
ssdeep	`192:h0txJufEeEZqdQ8+R0ReXYKyLO6Lc2ohytJ9U1wWlIB+duLXMsgU/8OJJSKUKlDa:hOJZXNqlKyLO6o2Oyt4bSlJSKhlD+XJP`
Yara	None matched
VirusTotal	Search for analysis

Name	36aee4d029bf3688_fsd-cnry.fsd Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Office\15.0\OfficeFileCache\LocalCacheFileEditManager\FSD-CNRY.FSD
Size	128.0KB
Processes	2284 (WINWORD.EXE)
Type	data
MD5	`29462c1e1625dec9194dc3707a94ee71`
SHA1	`a85f5ba6ccaef80def0c1ee36d11f8031cded6f9`
SHA256	`36aee4d029bf36882da5d24b5a3004b202ac45f8dec842e6c27543b37246404b`
CRC32	`45382F88`
ssdeep	`48:I3lvBDVm4iMOyKxXtQT/SsFZcr0leTZhTZHNlSLOr3nOLsrBQ2TZ6Q2TZ:KlZsBNoQVX/MLW3n8c14`
Yara	None matched
VirusTotal	Search for analysis

Name	eaf9cdc741596275_centraltable.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Office\15.0\OfficeFileCache\CentralTable.ini
Size	36.0B
Processes	2284 (WINWORD.EXE)
Type	data
MD5	`1f830b53ca33a1207a86ce43177016fa`
SHA1	`bdf230e1f33afba5c9d5a039986c6505e8b09665`
SHA256	`eaf9cdc741596275e106dddcf8aba61240368a8c7b0b58b08f74450d162337ef`
CRC32	`BA4496DE`
ssdeep	`3:5NixJlElGUR:WrEcUR`
Yara	None matched
VirusTotal	Search for analysis

Name	dd4e1bf5743fe3bd_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2284 (WINWORD.EXE)
Type	data
MD5	`681efaf5c87b2a94915cd0ab96fb6bdc`
SHA1	`b84376f8b6a09e8733ee0a3f7a2f91d4c356442d`
SHA256	`dd4e1bf5743fe3bd73b9306cd3cc8530b7bb0d9f830fe48095fa11449e39874c`
CRC32	`E8B74A7A`
ssdeep	`3:yW2lWRdIJtdW6L7rbK71FFIt5cA/l:y1lWkjdWmXbK7rW5cA/l`
Yara	None matched
VirusTotal	Search for analysis

Name	e73d9fab37cd6bf9_centraltable.laccdb Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Office\15.0\OfficeFileCache\CentralTable.laccdb
Size	128.0B
Processes	2284 (WINWORD.EXE) 352 (MSOSYNC.EXE)
Type	data
MD5	`0c2be3153a6602550b658e4bb5f073d5`
SHA1	`3fe515761d3c3744fcb12b10de15e0d94ed36ba9`
SHA256	`e73d9fab37cd6bf9f8a66e6de08e8178a7d5b5d7ee7bd314f7a25132b17ec5f8`
CRC32	`D05CFEE4`
ssdeep	`3:IkFafOkFaV:zQu`
Yara	None matched
VirusTotal	Search for analysis

Name	a307cc255ebb5f8e_centraltable.accdb Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Office\15.0\OfficeFileCache\CentralTable.accdb
Size	472.0KB
Processes	2284 (WINWORD.EXE)
Type	Microsoft Access Database
MD5	`ce7c32d636eccd3d6c6ee2957dece353`
SHA1	`56b9eebe7ee8c47ea35c650fe9dcfefd5b65f6ce`
SHA256	`a307cc255ebb5f8eff4cbd5d62508453af8eb1b31c3e38f33d77e3dc5bf7fe99`
CRC32	`D2BCEEA8`
ssdeep	`384:2GRVZCofISFSaI7ITRusHhGF9D4SNSkmVZO4FiZ:lZC4TI7KRugCtSxKZ`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{115416f0-e41a-4485-aa38-c20a7712dbd0}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{115416F0-E41A-4485-AA38-C20A7712DBD0}.tmp
Size	1.0KB
Processes	2284 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis

Name	9e1ea4e600e1af6f_fsf-{0e1eee64-e8c6-4e2a-9759-63cf07fd8988}.fsf Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Office\15.0\OfficeFileCache\LocalCacheFileEditManager\FSF-{0E1EEE64-E8C6-4E2A-9759-63CF07FD8988}.FSF
Size	114.0B
Processes	2284 (WINWORD.EXE)
Type	data
MD5	`acd73c80f7a45a5dd32e25ff6001e9c5`
SHA1	`0d176a722653bfe472c170b53de8de3a13dfe8c1`
SHA256	`9e1ea4e600e1af6f451c2eb76d842ad3b1509e3c33cdf1bc8aaf4e8042bd3633`
CRC32	`95571EAF`
ssdeep	`3:yVlgsRlzlJlQ7sOljIVKklVSDcdUmbIRg276:yPblzlE7/l0EsVS4d/kRg22`
Yara	None matched
VirusTotal	Search for analysis

Name	fbb2220fb912caae_fsd-{c965fa20-59ff-401f-bb39-3cd8c09c8d74}.fsd Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Office\15.0\OfficeFileCache\LocalCacheFileEditManager\FSD-{C965FA20-59FF-401F-BB39-3CD8C09C8D74}.FSD
Size	128.0KB
Processes	2284 (WINWORD.EXE)
Type	data
MD5	`607ad8d232cb7b2c6fca780dbb29e742`
SHA1	`26e6e8258e0909c6cd1354388eee11e6f1f93a5f`
SHA256	`fbb2220fb912caae1fd4fe8ccdf4f7cdf9097a50a8c889aa027bc1a588bb7b09`
CRC32	`2E4C17AF`
ssdeep	`24:I3FCuH1aM0B3cQ9i2MNxY9up752uC+7l9K+7xC74PAGN4T4XislN2zm4zl+eGTNg:I3YBrIGup3xs+Qhp4X0z7z7AEPU9U`
Yara	None matched
VirusTotal	Search for analysis

Name	23814a2897e5145d_fsd-cnry.fsd Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Office\15.0\OfficeFileCache\FSD-CNRY.FSD
Size	128.0KB
Processes	2284 (WINWORD.EXE)
Type	data
MD5	`b9f12b3eab839c1fff25f8b2dfed71ea`
SHA1	`ed3da0860c183cac769067b6161aaa8d199726a4`
SHA256	`23814a2897e5145d6ae853c351272a5b7f1ab55e5ef5e025594f751645eefee4`
CRC32	`1674424E`
ssdeep	`48:I3b9BBgcL/GKdm6nI+3dZ+fMSKRF4nlr3LPZ:KbHBgbKS0Z+mRFS3zZ`
Yara	None matched
VirusTotal	Search for analysis