Dropped Files | ZeroBOX

Name	625bfe794fc8420f_{d70a56e2-1ad2-11f0-ac50-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D70A56E2-1AD2-11F0-AC50-94DE278C3274}.dat
Size	4.5KB
Processes	2172 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`b0a9a6e2d446a11fad7f57fe8c542ad8`
SHA1	`bfafb6ec0c3ac8cfa929ddb00554198749e946ac`
SHA256	`625bfe794fc8420fe735a9e3cce39c4d59cfc79da5e5a7bac2674afa5e151081`
CRC32	`F5476909`
ssdeep	`12:rl0ZGFWUrEgmfe76FiQrEgmfV7qgONlH5baxgv/Q1okDNlX9baxRzKtHaK+wO:r5GuQGzONlZMGeNlNJlh+d`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis

Name	cb3ccbb76031e5e0_3c428b1a3e5f57d887ec4b864fac5dcc Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
Size	914.0B
Processes	2172 (iexplore.exe)
Type	data
MD5	`e4a68ac854ac5242460afd72481b2a44`
SHA1	`df3c24f9bfd666761b268073fe06d1cc8d4f82a4`
SHA256	`cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f`
CRC32	`5017495B`
ssdeep	`24:c0oGlGm7qGlGd7SK1tcudP5M/C0VQYyL4R3fum:+JnJ17tcudRMq6QsF`
Yara	None matched
VirusTotal	Search for analysis

Name	78c826aae28447c5_3c428b1a3e5f57d887ec4b864fac5dcc Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Size	252.0B
Processes	2172 (iexplore.exe)
Type	data
MD5	`455583f9170bb5851b910f3057ccdebb`
SHA1	`706c620be1e2b0f190199fde924cb4e9de61396e`
SHA256	`78c826aae28447c578a6f379c0144c47486add8f25682d02c8a58ed995ce409f`
CRC32	`400D61DC`
ssdeep	`6:kKnHK4LDE1cbjcalgRAOAUSW0zeEpV1Ew1OXISMlcV/:vRLY1/tWOxSW0zeYrsMlU/`
Yara	None matched
VirusTotal	Search for analysis

Name	8693df63ff4e0f81_recoverystore.{d70a56e1-1ad2-11f0-ac50-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D70A56E1-1AD2-11F0-AC50-94DE278C3274}.dat
Size	4.5KB
Processes	2172 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`e684276b4f5134f0f954073b73c874ff`
SHA1	`84b76ab16d7333e31c10913389b3ce1178d50a1e`
SHA256	`8693df63ff4e0f8177b8d69283b178e0a783e1daa81d2b15884c6adfd8c718f0`
CRC32	`B59C9930`
ssdeep	`12:rlfF20FQrEg5+IaCrI0F7+F21drEg5+IaCrI0F7ugQNlTqbax7tRNlTqbax6qtgt:rq0FQ5/11d5/3QNlWWNlW`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis