Dropped Files | ZeroBOX
Name c0cebc4d4ccc00e3_~$normal.dotm
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size 162.0B
Processes 2548 (WINWORD.EXE)
Type data
MD5 2f732d370aa1b97ba3852f6d88d94fcc
SHA1 db77894be9180fae2e208c1600462c90dcee103d
SHA256 c0cebc4d4ccc00e39ebff052f7a2490d7d07e1b285e6fc8a443c05eb8530d0a0
CRC32 89DC27CD
ssdeep 3:yW2lWRdvL7YMlbK7l1nlX:y1lWnlxK7
Yara None matched
VirusTotal Search for analysis
Name 26c3becbc98f4378_~$g##################################gg.doc
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\~$G##################################GG.doc
Size 162.0B
Processes 2548 (WINWORD.EXE)
Type data
MD5 2889b426a2218d86656a60f92e9810e1
SHA1 cc2292aa175c2e32f8a5a8ecc6bac3d02999e43f
SHA256 26c3becbc98f437870c451e7395b18800850c74f4e1bde02546ffddb013fd95f
CRC32 FCFCF864
ssdeep 3:yW2lWRdvL7YMlbK7lhZXnkonlH:y1lWnlxK7RUonl
Yara None matched
VirusTotal Search for analysis
Name 4826c0d860af884d_~wrs{bfb6cb33-d795-45a3-83f9-e6d7f4190124}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BFB6CB33-D795-45A3-83F9-E6D7F4190124}.tmp
Size 1.0KB
Processes 2548 (WINWORD.EXE)
Type data
MD5 5d4d94ee7e06bbb0af9584119797b23a
SHA1 dbb111419c704f116efa8e72471dd83e86e49677
SHA256 4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1
CRC32 23C03491
ssdeep 3:ol3lYdn:4Wn
Yara None matched
VirusTotal Search for analysis
Name a3ac49dce828a25c_~wrs{6cec7ede-2df8-4904-a0d8-8568c704ecc4}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{6CEC7EDE-2DF8-4904-A0D8-8568C704ECC4}.tmp
Size 14.0KB
Processes 2548 (WINWORD.EXE)
Type data
MD5 0aecd824ab59ac75b29b3d48c6200ef8
SHA1 70f1327df217f37a7ab7576935146b1410cc38b6
SHA256 a3ac49dce828a25c437232d4957c6bb036b4bd48893753e3f940f78da3a11e77
CRC32 659EF7A0
ssdeep 384:PQQXrmrGX9DHxFXH2TwZ2RH6+1pzt/LWFqL:PQQXrjX9DHxF32sG6ozt/a8
Yara None matched
VirusTotal Search for analysis