Dropped Files | ZeroBOX

Name	1df4628adccf9814_recoverystore.{d79963f9-1ad2-11f0-ac50-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D79963F9-1AD2-11F0-AC50-94DE278C3274}.dat
Size	4.5KB
Processes	1636 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`ba9e0851d6e28f8d37350a58edbbbe3c`
SHA1	`2c5602e19c113b8ea9fa94058066e2bc91e1243a`
SHA256	`1df4628adccf9814954124ecdeddd10a3291076bcdd8cd43812d3d807e2d251b`
CRC32	`EC249E1D`
ssdeep	`12:rlfF2LQrEg5+IaCrI0F7+F2ErEg5+IaCrI0F7ugQNlTqbaxDNlTqbax:rqLQ5/1E5/3QNlWqNlW`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis

Name	cb3ccbb76031e5e0_3c428b1a3e5f57d887ec4b864fac5dcc Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
Size	914.0B
Processes	1636 (iexplore.exe) 1188 (iexplore.exe)
Type	data
MD5	`e4a68ac854ac5242460afd72481b2a44`
SHA1	`df3c24f9bfd666761b268073fe06d1cc8d4f82a4`
SHA256	`cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f`
CRC32	`5017495B`
ssdeep	`24:c0oGlGm7qGlGd7SK1tcudP5M/C0VQYyL4R3fum:+JnJ17tcudRMq6QsF`
Yara	None matched
VirusTotal	Search for analysis

Name	fee43eff5b8c1dba_3c428b1a3e5f57d887ec4b864fac5dcc Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Size	252.0B
Processes	1636 (iexplore.exe) 1188 (iexplore.exe)
Type	data
MD5	`f134f4ffa2cc1af2678859fde23e682a`
SHA1	`61963bb51f20987962ba1d26d2f8755a1e021291`
SHA256	`fee43eff5b8c1dbaa0c876c2e377a671fcf6dd1be0e69b0cb60be248696591d1`
CRC32	`4EF5F7C2`
ssdeep	`6:kKV5LDC+7tCbjcalgRAOAUSW0zeEpV1Ew1OXISMlcV/:d5L5rtWOxSW0zeYrsMlU/`
Yara	None matched
VirusTotal	Search for analysis

Name	46d9b95cf958ccf5_{d79963fa-1ad2-11f0-ac50-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D79963FA-1AD2-11F0-AC50-94DE278C3274}.dat
Size	4.5KB
Processes	1636 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`fc8942bb2c0ce5e6372bfd89097f4402`
SHA1	`cd7557359bdaae2c9b7a40431b3e64fd2a29c6b0`
SHA256	`46d9b95cf958ccf5192c9849210c2dc4010a409e4cf6c636f136b923e9006588`
CRC32	`099C752B`
ssdeep	`12:rl0ZGF4rEgmfe76FyPQrEgmfV7qgONlH5baxgv/Q1CJ4DNlX9baxRzKtHaK+wkMe:rkG+QGzONlZMIENlNJlh+DMe`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis