Dropped Files | ZeroBOX
Name e4e4707632a36b8e_~wrs{e8cdec34-8c29-442f-8dc0-d156ce3f00bd}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E8CDEC34-8C29-442F-8DC0-D156CE3F00BD}.tmp
Size 1.5KB
Processes 2564 (WINWORD.EXE)
Type data
MD5 c07fbbe5bafd39d7b0d8dedbf5291c24
SHA1 609f33ff0eef7d1742d3410b9c97533a59930b5e
SHA256 e4e4707632a36b8ef39b0c7910165db21e74981c173452b4bdcb8e4b49e242e2
CRC32 1F49B90B
ssdeep 6:IiiiiiiiiiE/bYflo3dc8++ZYSySkssqA1+tKHO9:S/XtG+aSpk1j1+tKHS
Yara None matched
VirusTotal Search for analysis
Name b530c41ce3f7df16_~wrd0001.doc
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0001.doc
Size 32.0KB
Processes 2564 (WINWORD.EXE)
Type data
MD5 5c3791c51c89677a2b879fcd4e182b18
SHA1 e83691be7e61a50ffd5329ab388a19402cf3030a
SHA256 b530c41ce3f7df16ba50621dd2b836b600b1600f14e5d89b241d71363c9b6392
CRC32 02267CC3
ssdeep 384:5e7BM2uToSF14A8DQaimhBDVz2+iKaCby7LUOf9:58BGToSqsxmhBDiUG7Lff9
Yara
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name 5d6ef4d41e9968fb_~wrd0000.doc
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0000.doc
Size 43.0KB
Processes 2564 (WINWORD.EXE)
Type data
MD5 50a0256e33cbfd2d2e7e8233160b16ca
SHA1 c4a142e1cf81ad0d6bb0ce3325c82b6fed0bf945
SHA256 5d6ef4d41e9968fbcc41225c7d54abbf163dfd1e4215af725a624fa8367f2c86
CRC32 644E0582
ssdeep 384:5e7BM2uToSF14A8DQaimhBDVz2+iKaCby7LUOfeaHrJKtsZVKJYFL:58BGToSqsxmhBDiUG7LffX1VZ
Yara
  • Generic_Malware_Zero - Generic Malware
VirusTotal Search for analysis
Name f607e2379936c174_~$2fd62fafe61f46ad967c84dd7fbca80d31ad4729fed051d527d9ba45857fd6.doc
Submit file
Filepath C:\Users\test22\AppData\Local\Temp\~$2fd62fafe61f46ad967c84dd7fbca80d31ad4729fed051d527d9ba45857fd6.doc
Size 162.0B
Processes 2564 (WINWORD.EXE)
Type data
MD5 9d2712cc4134de931248b45fe20b6f9d
SHA1 4b52bf229205a708b35aa5b0975398951dc21136
SHA256 f607e2379936c174eb1d1d2f409cb16731b80e5ccc416accffdd5372d43e0015
CRC32 FB70BC71
ssdeep 3:yW2lWRdvL7YMlbK7lhZpnNWVlnDjl:y1lWnlxK7RpnELnD
Yara None matched
VirusTotal Search for analysis
Name 54f507e2c70f5daf_~$normal.dotm
Submit file
Filepath C:\Users\test22\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
Size 162.0B
Processes 2564 (WINWORD.EXE)
Type data
MD5 795ff036b98f8a1cc744054f66b78892
SHA1 fe2b667600e88736f16aaa469416189e5c562deb
SHA256 54f507e2c70f5daf7c599d479469910fc078b742e045047ae0032c419fb3ea4b
CRC32 BDA5E6D1
ssdeep 3:yW2lWRdvL7YMlbK7ltn/l:y1lWnlxK7
Yara None matched
VirusTotal Search for analysis
Name 4826c0d860af884d_~wrs{bfb6cb33-d795-45a3-83f9-e6d7f4190124}.tmp
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{BFB6CB33-D795-45A3-83F9-E6D7F4190124}.tmp
Size 1.0KB
Processes 2564 (WINWORD.EXE)
Type data
MD5 5d4d94ee7e06bbb0af9584119797b23a
SHA1 dbb111419c704f116efa8e72471dd83e86e49677
SHA256 4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1
CRC32 23C03491
ssdeep 3:ol3lYdn:4Wn
Yara None matched
VirusTotal Search for analysis