Dropped Files | ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Dropped Files | ZeroBOX

Name	5198fa0f5db0645b_~$normal.dotm Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size	162.0B
Processes	2560 (WINWORD.EXE)
Type	data
MD5	`8eb7ef27966ff233cf87b14b723ff88a`
SHA1	`8c0734adcb7a05ccf6d588c3a11749fd6c902126`
SHA256	`5198fa0f5db0645b75383f7ff4a2a183b1233d88fa1585d3b72289901f4338ae`
CRC32	`8D0535B5`
ssdeep	`3:yW2lWRdvL7YMlbK7l0:y1lWnlxK7S`
Yara	None matched
VirusTotal	Search for analysis

Name	1d9a624209987037_~wrs{e8d4ec34-8c29-4436-b1c2-d856fa3109bd}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E8D4EC34-8C29-4436-B1C2-D856FA3109BD}.tmp
Size	1.5KB
Processes	2560 (WINWORD.EXE)
Type	data
MD5	`781de77cf1d12a5d8b6546521a49fe98`
SHA1	`8f9d509b69cf555af78269f84e2d1982348def0f`
SHA256	`1d9a6242099870372adc957ac3b1f7e44970cf2f6d581c5a4ba4fc8e2e47ce43`
CRC32	`23CA3BE7`
ssdeep	`6:IiiiiiiiiiE/bYflo3dc8++ZYSySkssqA1+tKHs3yn:S/XtG+aSpk1j1+tKHsK`
Yara	None matched
VirusTotal	Search for analysis

Name	b530c41ce3f7df16_~wrd0001.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0001.doc
Size	32.0KB
Processes	2560 (WINWORD.EXE)
Type	data
MD5	`5c3791c51c89677a2b879fcd4e182b18`
SHA1	`e83691be7e61a50ffd5329ab388a19402cf3030a`
SHA256	`b530c41ce3f7df16ba50621dd2b836b600b1600f14e5d89b241d71363c9b6392`
CRC32	`02267CC3`
ssdeep	`384:5e7BM2uToSF14A8DQaimhBDVz2+iKaCby7LUOf9:58BGToSqsxmhBDiUG7Lff9`
Yara	Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	5d6ef4d41e9968fb_~wrd0000.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0000.doc
Size	43.0KB
Processes	2560 (WINWORD.EXE)
Type	data
MD5	`50a0256e33cbfd2d2e7e8233160b16ca`
SHA1	`c4a142e1cf81ad0d6bb0ce3325c82b6fed0bf945`
SHA256	`5d6ef4d41e9968fbcc41225c7d54abbf163dfd1e4215af725a624fa8367f2c86`
CRC32	`644E0582`
ssdeep	`384:5e7BM2uToSF14A8DQaimhBDVz2+iKaCby7LUOfeaHrJKtsZVKJYFL:58BGToSqsxmhBDiUG7LffX1VZ`
Yara	Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	44ef3c2fd495287e_~$2fd62fafe61f46ad967c84dd7fbca80d31ad4729fed051d527d9ba45857fd6.doc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\~$2fd62fafe61f46ad967c84dd7fbca80d31ad4729fed051d527d9ba45857fd6.doc
Size	162.0B
Processes	2560 (WINWORD.EXE)
Type	data
MD5	`e51abd2d0ad9b03bcaa3b54357fd6614`
SHA1	`90efd1873323434e4ed4c13554d92cff5aad5ac0`
SHA256	`44ef3c2fd495287e5841d35c72b1acce88359a0f7d40f11b7aeb95b847c3f79e`
CRC32	`D2A4ED5A`
ssdeep	`3:yW2lWRdvL7YMlbK7lhZ2nc8:y1lWnlxK7RB8`
Yara	None matched
VirusTotal	Search for analysis

Name	4826c0d860af884d_~wrs{bfb6cb33-d795-45a3-83f9-e6d7f4190124}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BFB6CB33-D795-45A3-83F9-E6D7F4190124}.tmp
Size	1.0KB
Processes	2560 (WINWORD.EXE)
Type	data
MD5	`5d4d94ee7e06bbb0af9584119797b23a`
SHA1	`dbb111419c704f116efa8e72471dd83e86e49677`
SHA256	`4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1`
CRC32	`23C03491`
ssdeep	`3:ol3lYdn:4Wn`
Yara	None matched
VirusTotal	Search for analysis