Dropped Files | ZeroBOX
Name c56446f972ab0948_~wrs{c4e2f51f-da36-49fc-b9d5-108ccc5c54a4}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C4E2F51F-DA36-49FC-B9D5-108CCC5C54A4}.tmp
Size 98.0B
Processes 1156 (WINWORD.EXE)
Type data
MD5 12799adc01d641612e28b8625d189516
SHA1 3ab10bf4c8807d0a8abbd82ac17885cb7d884e8f
SHA256 c56446f972ab0948bcb0eab677125d95c1c29b66e8962ce200fb9a5532bacab9
CRC32 8502512D
ssdeep 3:ilKl+TKlcfglcfl4WloFlRlMcNylRflKNel+fW+PQn:ilKl7c4cNR25lMcjUlOWdn
Yara None matched
VirusTotal Search for analysis
Name a7b27baa84367ae8_~$normal.dotm
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size 162.0B
Processes 1156 (WINWORD.EXE)
Type data
MD5 33c03d9f36369781bd754fd2c7fd2223
SHA1 a0502ffb5a82f677487ef918469e22394e4f04c5
SHA256 a7b27baa84367ae86bc17bf44ef138369b2525c057a5124ce18dc80c1d94272b
CRC32 C4AFFC6B
ssdeep 3:yW2lWRd6ff/W6L7fFZJK7cnuIt5rztl:y1lWOff/WmhXK7cnV5ll
Yara None matched
VirusTotal Search for analysis
Name 4826c0d860af884d_~wrs{be4cdff3-8279-41d0-b946-07cb50716005}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDFF3-8279-41D0-B946-07CB50716005}.tmp
Size 1.0KB
Processes 1156 (WINWORD.EXE)
Type data
MD5 5d4d94ee7e06bbb0af9584119797b23a
SHA1 dbb111419c704f116efa8e72471dd83e86e49677
SHA256 4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1
CRC32 23C03491
ssdeep 3:ol3lYdn:4Wn
Yara None matched
VirusTotal Search for analysis
Name 1a0832cb46bb7401_~$tracted_at_0x21a0a.rtf
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\~$tracted_at_0x21a0a.rtf
Size 162.0B
Processes 1156 (WINWORD.EXE)
Type data
MD5 1e8c737843263d0580f885b660d3c956
SHA1 78bf07d6ef6ddb2fa37dfe79c985f3bf104472e8
SHA256 1a0832cb46bb7401f7851ee6e9da6c3c651df06d5ff5d9cf5e41a0091d3e3d44
CRC32 8D6CCCFE
ssdeep 3:yW2lWRd6ff/W6L7fFZJK7cnuIt5rcSllln:y1lWOff/WmhXK7cnV5z
Yara None matched
VirusTotal Search for analysis