Dropped Files | ZeroBOX
Name 8ba8d1e86bba4fa7_~$...xx.......doc
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\~$...xx.......doc
Size 162.0B
Processes 1680 (WINWORD.EXE)
Type data
MD5 f4f69432423822d6767aef433abc2379
SHA1 46dd37de4188a11d5cea9a5893b92861ede76f9d
SHA256 8ba8d1e86bba4fa7421f365c8e7607ad96a750e347f9187e0d4e586a983ff85b
CRC32 E6AD50A3
ssdeep 3:yW2lWRdkXllldW6L7H1ldK7CmHFIt3YnNt:y1lW2/dWmxldK7CyW3YP
Yara None matched
VirusTotal Search for analysis
Name 1ee6d4522c5343f9_~wrs{b6a424cd-5825-4470-9fad-b9a3d194b318}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{B6A424CD-5825-4470-9FAD-B9A3D194B318}.tmp
Size 14.5KB
Processes 1680 (WINWORD.EXE)
Type data
MD5 b723b507eb9c5030fa1c6149a004c152
SHA1 d6ba8b305d9df4d39b0053a1a51f0ad5403954b6
SHA256 1ee6d4522c5343f9c204fb1d8f757c612b29d494907034deaea7f39a518e94d5
CRC32 C06E5F21
ssdeep 384:DvWgJmSRU3VGZuC1VrNCEYhdmgV63gZ5P+Gyhk6c0wM:DRUlml1W1dmgVsgZx6wM
Yara None matched
VirusTotal Search for analysis
Name 3ff71a39c007f644_~$normal.dotm
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size 162.0B
Processes 1680 (WINWORD.EXE)
Type data
MD5 a27020351dce9c090126374e7339009a
SHA1 2b67bf180b95ae6716b3145e0f5c60e4bcce973c
SHA256 3ff71a39c007f644a3c04b6dd8736ad239e45d8f46a939cd20db854c7abffd26
CRC32 15FBB358
ssdeep 3:yW2lWRdkXllldW6L7H1ldK7CmHFIt3YcQStn:y1lW2/dWmxldK7CyW3Ycjn
Yara None matched
VirusTotal Search for analysis
Name 4826c0d860af884d_~wrs{be4cde57-8279-41d0-b946-07cb50716005}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BE4CDE57-8279-41D0-B946-07CB50716005}.tmp
Size 1.0KB
Processes 1680 (WINWORD.EXE)
Type data
MD5 5d4d94ee7e06bbb0af9584119797b23a
SHA1 dbb111419c704f116efa8e72471dd83e86e49677
SHA256 4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1
CRC32 23C03491
ssdeep 3:ol3lYdn:4Wn
Yara None matched
VirusTotal Search for analysis