Dropped Files | ZeroBOX

Name	8315e63be6354b00_{5a5a6014-03bc-11ec-9d79-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{5A5A6014-03BC-11EC-9D79-94DE278C3274}.dat
Size	4.5KB
Processes	2528 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`724847295bfe94cb9e3f9570264e22b5`
SHA1	`efc1c7930cde04712b3f243bcf41ca9baaf0389e`
SHA256	`8315e63be6354b005252816834ddbd829f3ffe8974557ff3e390d464d1c4f7f1`
CRC32	`08D14483`
ssdeep	`12:rl0ZGF6drEgmfe76F6+rEgmfV7qgONlH5baxgv/Q1tGDNlX9baxRzKtHaK+wQq:reGW+GzONlZM/QNlNJlh+nq`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis

Name	9d3d13c55b2614c0_590aee7bdd69b59b.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms
Size	7.8KB
Processes	1108 (powershell.exe)
Type	data
MD5	`3eb6fb80f9dbbc1201de9e762252141b`
SHA1	`c6d1e6ea5f2fef6f4458695b8ed7586aed429f1c`
SHA256	`9d3d13c55b2614c0615acea119139123b2a29f2a0daded7edd5146e4614a78e6`
CRC32	`23B7285A`
ssdeep	`96:YtuCaGCPDXBqvsqvJCwo9tuCaGCPDXBqvsEHyqvJCwor/tDHXyWlUVul:YtzXo9tzbHnorlTyo`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	5816394d79b1f659_recoverystore.{5a5a6013-03bc-11ec-9d79-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{5A5A6013-03BC-11EC-9D79-94DE278C3274}.dat
Size	4.5KB
Processes	2528 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`9089dece05214ae6a6d85ccf95af4ecb`
SHA1	`b1f8ece11f19b985c95b606b8e5e5425bb5e5cc7`
SHA256	`5816394d79b1f6592094dcb9ffd76bf7568ec8ce05e175b47ccc8338ff60980e`
CRC32	`FC2963E2`
ssdeep	`12:rlfF2BDrEg5+IaCrI0F7+F2JrEg5+IaCrI0F7ugQNlTqbaxemG8vXNlTqbaxemGf:rqBD5/1J5/3QNlWlwNlWl`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis