Dropped Files | ZeroBOX
Name ae3c3fa03cce23e6_recoverystore.{bd2bd9e3-ba49-11ed-ac50-94de278c3274}.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{BD2BD9E3-BA49-11ED-AC50-94DE278C3274}.dat
Size 5.0KB
Processes 2032 (iexplore.exe)
Type Composite Document File V2 Document, Cannot read section info
MD5 7a03694739666499e2f610bffe29e5f4
SHA1 245ef846abf57d208ab6c26638f38d5d8a05da5c
SHA256 ae3c3fa03cce23e6ea713db951746b2d8e35310a9a21a045c3347ed1aca7cae7
CRC32 9761BC68
ssdeep 12:rlfF2olrEg5+IaCrI0CI7eF2y8TrEgmZ+IaCrI0CIc8GmRVOeMiqI771NlTqbaxc:rqol5/fy8TG5/k85jBM+NlWptNlWp2
Yara
  • Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal Search for analysis
Name 664ce38b3c7e467f_{bd2bd9e4-ba49-11ed-ac50-94de278c3274}.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{BD2BD9E4-BA49-11ED-AC50-94DE278C3274}.dat
Size 4.5KB
Processes 2032 (iexplore.exe)
Type Composite Document File V2 Document, Cannot read section info
MD5 2210c08f5314ae238c9db0e24941fd6a
SHA1 218c7ec91699b1d02c2bf7273fb2073e726c1b1c
SHA256 664ce38b3c7e467f2922e04f2f8cea43ba2098178b579ad4c84be6a469c4a6b0
CRC32 E12C23AA
ssdeep 12:rlxAFMljrEgm8GL7KFRLDrEgm8Gr7qsLNl26abax1NlgfRbax5Gb:rphG8BPG8WLNlIoNlsYGb
Yara
  • Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal Search for analysis
Name 7e770d407300130b_dad[1].dat
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VKMIWH9C\DAD[1].dat
Size 364.5KB
Processes 1776 (iexplore.exe)
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 ab11e5dc1a241c130be0fafdaa8f0365
SHA1 32a6b44c14dae0812354668d3a92c5e0813d014c
SHA256 7e770d407300130b0c06334538012b428b5e3c79aface62c34b64ff11ea97929
CRC32 E9F9B00A
ssdeep 6144:zLW2NznOFtq/skjGGzrlZYQeO8bSeZCZvsvTWDiSUYrwI4kdJQnJIIp:hcSsN8rrYTOVeR6U+J0
Yara
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
VirusTotal Search for analysis