Dropped Files | ZeroBOX

Name	cd9d48eea0f7bfc3_{d633c33e-1ad2-11f0-91c7-080027c2f7b0}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D633C33E-1AD2-11F0-91C7-080027C2F7B0}.dat
Size	4.5KB
Processes	300 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`d96f6063587127b5959038fb9606eb19`
SHA1	`67bf21eb5c641df1fe91a295b20f60dedf649ed4`
SHA256	`cd9d48eea0f7bfc3042548c9ce76a00545401ade0908da7d3cc8b1297798d30c`
CRC32	`01BBF47A`
ssdeep	`12:rl0ZGFgxrEgmfe76F3QrEgmfV7qgONlH5baxQm/Q1dIILNlX9bax8KtHaK+wYII:rsxGzQGzONlZhRPIKNlNSlh+HI`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis

Name	cb3ccbb76031e5e0_3c428b1a3e5f57d887ec4b864fac5dcc Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
Size	914.0B
Processes	300 (iexplore.exe)
Type	data
MD5	`e4a68ac854ac5242460afd72481b2a44`
SHA1	`df3c24f9bfd666761b268073fe06d1cc8d4f82a4`
SHA256	`cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f`
CRC32	`5017495B`
ssdeep	`24:c0oGlGm7qGlGd7SK1tcudP5M/C0VQYyL4R3fum:+JnJ17tcudRMq6QsF`
Yara	None matched
VirusTotal	Search for analysis

Name	0e38f9a75ff6e3b4_3c428b1a3e5f57d887ec4b864fac5dcc Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Size	252.0B
Processes	300 (iexplore.exe)
Type	data
MD5	`5e918d27f323a30d8c1239c81429945c`
SHA1	`c8226372da7c161b5a5fa18197c0603f6e869b85`
SHA256	`0e38f9a75ff6e3b46502e8486069110e7c9fa04b544b8dc40c1cfb544b5ca1f3`
CRC32	`FCD5EFB0`
ssdeep	`6:kKFDLLDPCbjcalgRAOAUSW0zeEpV1Ew1OXISMlcV/:FLLjhtWOxSW0zeYrsMlU/`
Yara	None matched
VirusTotal	Search for analysis

Name	0681451b83441f05_recoverystore.{d633c33d-1ad2-11f0-91c7-080027c2f7b0}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D633C33D-1AD2-11F0-91C7-080027C2F7B0}.dat
Size	4.5KB
Processes	300 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`b7b3ca0dec159d058f978413731aa33c`
SHA1	`ff5961430d973e2d8b69be97a405f8279b5460f0`
SHA256	`0681451b83441f05dad7eba9d8a0149a8463058eb37ca074c05ff966149e265c`
CRC32	`8AD3B3AD`
ssdeep	`12:rlfF2ekQrEg5+IaCrI0F7+F2zrEg5+IaCrI0F7ugQNlTqbax0wNlTqbax0:rqrQ5/1z5/3QNlWtwNlWt`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis