Dropped Files | ZeroBOX
Name 471840d0d8b4d8ac_{d0d46b18-d34f-11ed-ac50-94de278c3274}.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D0D46B18-D34F-11ED-AC50-94DE278C3274}.dat
Size 3.5KB
Processes 2032 (iexplore.exe)
Type Composite Document File V2 Document, Cannot read section info
MD5 009bda0cec1f38caa873ad2b4107ef65
SHA1 0e09686db38fc20da7d543356f4c7fec8d830c52
SHA256 471840d0d8b4d8ac314af52726aac0a86f0dbb9946272df16f77217c15f67d36
CRC32 7B6E2539
ssdeep 12:rl0oXGF2o0xrEgmf8x76F8vrEgmfS7qTNlg89baxfKtHaK+w9hlvzG86u4Q:r95xG0lvGVNlJrlh+2hGY
Yara
  • Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal Search for analysis
Name 89b18d10e819be4a_recoverystore.{d0d46b17-d34f-11ed-ac50-94de278c3274}.dat
Submit file
Filepath C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D0D46B17-D34F-11ED-AC50-94DE278C3274}.dat
Size 4.5KB
Processes 2032 (iexplore.exe)
Type Composite Document File V2 Document, Cannot read section info
MD5 7ce6869ebcfd273ae60c78b7f8ab6332
SHA1 3f4830384f612e20fe4a9791c76f98f3b96bd67c
SHA256 89b18d10e819be4ae58fc244d5c0fd52795950fa4a12e47dcd1f6d2bfb10ab64
CRC32 083FC310
ssdeep 12:rlfF2carEg5+IaCrI0F7+F2zrEg5+IaCrI0F7ugQNlTqbaxHVlONlTqbaxHVl5:rqca5/1z5/3QNlWEVlONlWEVl5
Yara
  • Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal Search for analysis
Name 0ed5b0823e71e0e3_590aee7bdd69b59b.customdestinations-ms
Submit file
Filepath c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms
Size 7.8KB
Processes 240 (powershell.exe)
Type data
MD5 f4a8a3e56bca0190031a365f104571cf
SHA1 7a4eac7016b8feca961f757cfe05bfeb4b76c10f
SHA256 0ed5b0823e71e0e3262a8a73ff269499135b20c9c5aa71e34b57a9f43218ed41
CRC32 E95A2C69
ssdeep 96:QtuC6GCPDXBqvsqvJCwoFtuC6GCPDXBqvsEHyqvJCworQStDHXyWlUVul:QtbXoFtbbHnorFTyo
Yara
  • Generic_Malware_Zero - Generic Malware
  • Antivirus - Contains references to security software
VirusTotal Search for analysis