Dropped Files | ZeroBOX

Name	0ed5b0823e71e0e3_590aee7bdd69b59b.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms
Size	7.8KB
Processes	1592 (powershell.exe)
Type	data
MD5	`f4a8a3e56bca0190031a365f104571cf`
SHA1	`7a4eac7016b8feca961f757cfe05bfeb4b76c10f`
SHA256	`0ed5b0823e71e0e3262a8a73ff269499135b20c9c5aa71e34b57a9f43218ed41`
CRC32	`E95A2C69`
ssdeep	`96:QtuC6GCPDXBqvsqvJCwoFtuC6GCPDXBqvsEHyqvJCworQStDHXyWlUVul:QtbXoFtbbHnorFTyo`
Yara	Generic_Malware_Zero - Generic Malware Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	6a18baef27740fc9_{8221ed3e-cdea-11ed-ac50-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{8221ED3E-CDEA-11ED-AC50-94DE278C3274}.dat
Size	3.5KB
Processes	3056 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`4ef82198d1b2e876c6a3ddfdba98b976`
SHA1	`3c4f487f76f2c20542988ce682e8b51dde328a0d`
SHA256	`6a18baef27740fc937c34d8702bd6cd832436c5439d43ffcede6ccb2a11e51fe`
CRC32	`C51A0F79`
ssdeep	`12:rl0oXGFnEAxrEgmf8x76FlmrEgmfS7qTNlg89baxfKtHaK+w9hlvzG86u4Q:rmxG0KmGVNlJrlh+2hGY`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis

Name	167416ac3c072cce_recoverystore.{8221ed3d-cdea-11ed-ac50-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{8221ED3D-CDEA-11ED-AC50-94DE278C3274}.dat
Size	4.5KB
Processes	3056 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`ce3306efe7807a50865a1971f9ed68cc`
SHA1	`b5cca05aa449a548c80390fbdb1e190c9b5ce3c9`
SHA256	`167416ac3c072cce0b8d7d7568c594d78a7ccaf3ef056dd7310f8adf4822985d`
CRC32	`34A53EAF`
ssdeep	`12:rlfF2qrEg5+IaCrI0F7+F2krEg5+IaCrI0F7ugQNlTqbax7jONlTqbax7j:rqq5/1k5/3QNlWsyNlWs`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis