Dropped Files | ZeroBOX

Name	9ae415f2ddc27b1c_install.ps1 Submit file
Filepath	C:\Users\Public\install.ps1
Size	182.6KB
Processes	2752 (iexplore.exe)
Type	ASCII text, with very long lines, with CRLF line terminators
MD5	`fb9d34322f06b76fe35e30fabea11437`
SHA1	`7b27796d4777e06d98122d69531797a395dc39e9`
SHA256	`9ae415f2ddc27b1cb22c2a68564d41da3cb01aeee36f65534b65fd0a55873f34`
CRC32	`DFB3AB97`
ssdeep	`3072:L7bgezAGx+v9KZMgeGUpWbzqaQwmZIJ5DeAuDsj0+80waivgqlenngI3+obfc3r8:LQnGAvwJe4bjQwmZ+tKG0+9iInj3+obH`
Yara	None matched
VirusTotal	Search for analysis

Name	65eddc7ca87bcf39_recoverystore.{c4aceb05-25b0-11ec-9d79-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{C4ACEB05-25B0-11EC-9D79-94DE278C3274}.dat
Size	4.5KB
Processes	2072 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`4fb1b9a85558ec8052e9660569823640`
SHA1	`54b3525a4000ebc4f24aea2a98315a5769723bb4`
SHA256	`65eddc7ca87bcf397058a11fc1d376bfcf9f9e3d63bca8886888ba5ef0964868`
CRC32	`1AAC7BFF`
ssdeep	`12:rlfF2prEg5+IaCrI0F7+F2vrEg5+IaCrI0F7ugQNlTqbaxPw2wjywXNlTqbaxPwZ:rqp5/1v5/3QNlWVBNlWlJ`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis

Name	0f463bf515ae489c_{c4aceb06-25b0-11ec-9d79-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{C4ACEB06-25B0-11EC-9D79-94DE278C3274}.dat
Size	4.5KB
Processes	2072 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`7c76fa2f9fdf1d91d29b6a899b334210`
SHA1	`df74850b1697a01c4549d37f00c0700fea29b14b`
SHA256	`0f463bf515ae489c530276d346f576ae5f8637145547d463690e105c821bbae5`
CRC32	`0879E27A`
ssdeep	`12:rl0ZGFJrEgmfe76FgrEgmfV7qgONlH5baxgv/Q14aDNlX9baxRzKtHaK+we:rNG0GzONlZMNNlNJlh+N`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis