flash

YOUJIIHNINHEOW.docx

Status: finished
Submission Time: 15.01.2020 00:03:55
Clean

Comments

Tags

Details

  • Analysis ID:
    201042
  • API (Web) ID:
    299874
  • Analysis Started:
    15.01.2020 00:03:56
  • Analysis Finished:
    15.01.2020 00:12:52
  • MD5:
    8b333b98880b483348df0047255ff909
  • SHA1:
    3143956e6d186c5b3e9d0bb623fcd514040ef911
  • SHA256:
    8528175d71362ce5cbc2391290d3f3ed231afd24d8c6ed80a860ea20a1facc9e
  • Technologies:
Full Report Engine Info Verdict Score Reports

System: Windows 7 SP1 (with Office 2010 SP2, IE 11, FF 54, Chrome 60, Acrobat Reader DC 17, Java 8.0.1440.1, Flash 30.0.0.113)

clean
0/100

System: Windows 10 64 bit (version 1803) with Office 2016, Adobe Reader DC 19, Chrome 70, Firefox 63, Java 8.171, Flash 30.0.0.113
Run Condition: Potential for more IOCs and behavior

clean
0/100

URLs

Name Detection
http://www.wps.cn/officeDocument/2013/wpsCustomData

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{5B5C6400-9B09-4FB1-905C-30B04EB864E3}.tmp
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{8456B3ED-5E4A-49DB-90D4-06382A294152}.tmp
data
#
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\YOUJIIHNINHEOW.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Sun Sep 24 13:01:35 2017, mtime=Sun Sep 24 13:01:35 2017, atime=Tue Jan 14 22:04:53 2020, length=11806, window=hide
#
Click to see the 4 hidden entries
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
#
C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex
Little-endian UTF-16 Unicode text, with no line terminators
#
C:\Users\user\Desktop\~$UJIIHNINHEOW.docx
data
#