Dropped Files | ZeroBOX

Name	8e0bda6a39c619a6_firstrun.log Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\outlook logging\firstrun.log
Size	143.0B
Processes	2628 (OUTLOOK.EXE)
Type	diff output, ASCII text, with CRLF line terminators
MD5	`9d7e60ffac96d25fd7fc4b424262daa4`
SHA1	`22da60bec21db1d62e9c0eb2572288a0b99efe78`
SHA256	`8e0bda6a39c619a63c2ba63058ba5d83b7cdb977379dc4a4bf8c467fd2593f30`
CRC32	`60E07FBD`
ssdeep	`3:YD2FjWWCcYWNdjmIN1QyJ/RgAItX1QkgMXWgAIQrgvXKQO9sen:YD5ENFmpyJeHSkgMGgTyQO5n`
Yara	None matched
VirusTotal	Search for analysis

Name	e7e2f57ddb2c7bb7_msout12.pip Submit file
Filepath	C:\Users\test22\AppData\Roaming\Microsoft\Office\MSOut12.pip
Size	1.7KB
Processes	2628 (OUTLOOK.EXE)
Type	data
MD5	`53a49990b06c6df246d12a39d1742306`
SHA1	`885d8c76633eb89f0b4b81d570df5e684122e5f6`
SHA256	`e7e2f57ddb2c7bb778352a11393906719a0407e17914d3491f466aad81a55c51`
CRC32	`709DD012`
ssdeep	`48:dgmU9S1Y5lI2RXbclxLj2xaIK0tTDdGkgiU:y9uY5NRLczj2AIEUU`
Yara	None matched
VirusTotal	Search for analysis

Name	1c65565978c56081_mapisvc.inf Submit file
Filepath	C:\Program Files (x86)\Common Files\System\MSMAPI\1042\MAPISVC.INF
Size	558.0B
Processes	2628 (OUTLOOK.EXE)
Type	ASCII text, with CRLF line terminators
MD5	`9eb30c474d25ba91c08d10d49c528b60`
SHA1	`a90953adfea2e4129205f3d74d647c39e26c77b1`
SHA256	`1c65565978c56081df2d2cfa69936c2a7deb2be6f3145e0bc330c3977d840587`
CRC32	`F68A890C`
ssdeep	`12:n6neGnezQMyFqH52gHqF2gH0t9Dzxx4bRQctBAVk3J6:n6Z5MyF22B2R9Q1QcId`
Yara	None matched
VirusTotal	Search for analysis

Name	b8b0022b20b79d0a_frmcache.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT
Size	240.1KB
Processes	2628 (OUTLOOK.EXE)
Type	data
MD5	`9eeac4564118823529664d6e6b4c9861`
SHA1	`564ed5aede747cdf041db52fa702e657baa9b2e1`
SHA256	`b8b0022b20b79d0aad04914d7b97f426476e6eae1c4b1d8b59edac48ef4836b7`
CRC32	`195A3E4C`
ssdeep	`3072:a9gg8ngg7miGu2GqoQBrt0FvXU8nhZr10xE:M0Xmi2z8n7r10W`
Yara	None matched
VirusTotal	Search for analysis