Dropped Files | ZeroBOX

Name	cb3ccbb76031e5e0_3c428b1a3e5f57d887ec4b864fac5dcc Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
Size	914.0B
Processes	612 (iexplore.exe) 2264 (iexplore.exe)
Type	data
MD5	`e4a68ac854ac5242460afd72481b2a44`
SHA1	`df3c24f9bfd666761b268073fe06d1cc8d4f82a4`
SHA256	`cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f`
CRC32	`5017495B`
ssdeep	`24:c0oGlGm7qGlGd7SK1tcudP5M/C0VQYyL4R3fum:+JnJ17tcudRMq6QsF`
Yara	None matched
VirusTotal	Search for analysis

Name	464e8337dd63a811_3c428b1a3e5f57d887ec4b864fac5dcc Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Size	252.0B
Processes	612 (iexplore.exe) 2264 (iexplore.exe)
Type	data
MD5	`b1df970efa3b7441ccf26560e0f490f3`
SHA1	`31e8e8468aa35f5c19d26976bd8a344c4ef8ac20`
SHA256	`464e8337dd63a8119835ff3956ac1e44e6726839421dec6088b9c0ece75977c9`
CRC32	`55355E19`
ssdeep	`6:kKRI4N1LDaHJcbjcalgRAOAUSW0zeEpV1Ew1OXISMlcV/:jLA/tWOxSW0zeYrsMlU/`
Yara	None matched
VirusTotal	Search for analysis

Name	8bf1dd0de3307087_{4cbcf1f2-1410-11f0-ac50-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{4CBCF1F2-1410-11F0-AC50-94DE278C3274}.dat
Size	3.5KB
Processes	612 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`b5483f04aec8d0fc41e872f635927338`
SHA1	`0afbf14156f0baa54b2fd860c14e4d6870c6ea35`
SHA256	`8bf1dd0de3307087ccaba8fc4a984f426f6424b859c07073819905d88ef5ac04`
CRC32	`A59EB21E`
ssdeep	`12:rl0oXGFtlXDrEgmfoB66F8DrEgmf4x6qTNl5/U9baxEKtHaK+w0Qe+Ln9qYR:rMlTGlGwfNlialh+bEhq6`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis

Name	2493ed4369b7a574_recoverystore.{4cbcf1f1-1410-11f0-ac50-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{4CBCF1F1-1410-11F0-AC50-94DE278C3274}.dat
Size	4.5KB
Processes	612 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`39cfce98ac38241ed445ffc7cba8fffb`
SHA1	`63588c9fdd8310e4af3439b22f2e4890e9d2e0df`
SHA256	`2493ed4369b7a574a4daa0ed8e36c46beecf4fb93782e75536c573c114e51fa6`
CRC32	`6CBE57F9`
ssdeep	`12:rlfF2yrEg5+IaCrI0F7+F2zWrEg5+IaCrI0F7ugQNlTqbaxt6Vw2mNlTqbaxt6V4:rqy5/1zW5/3QNlWj0NlWj`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis