Dropped Files | ZeroBOX

Name	cb3ccbb76031e5e0_3c428b1a3e5f57d887ec4b864fac5dcc Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
Size	914.0B
Processes	2228 (iexplore.exe) 3048 (iexplore.exe)
Type	data
MD5	`e4a68ac854ac5242460afd72481b2a44`
SHA1	`df3c24f9bfd666761b268073fe06d1cc8d4f82a4`
SHA256	`cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f`
CRC32	`5017495B`
ssdeep	`24:c0oGlGm7qGlGd7SK1tcudP5M/C0VQYyL4R3fum:+JnJ17tcudRMq6QsF`
Yara	None matched
VirusTotal	Search for analysis

Name	6b37112403fd5dce_recoverystore.{64c41c51-1ee3-11f0-ac50-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{64C41C51-1EE3-11F0-AC50-94DE278C3274}.dat
Size	4.5KB
Processes	3048 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`9d37f6a52fd250a505a3c847bc2db937`
SHA1	`fba3d25007fe565a49ff5f3debd59e9ce9fe620a`
SHA256	`6b37112403fd5dcee41d0107b8db1324d965feedf6757fdeabbd8ac8406b000d`
CRC32	`D5B02D59`
ssdeep	`12:rlfF2QrEg5+IaCrI0F7+F2CrEg5+IaCrI0F7ugQNlTqbaxKKre8NlTqbaxKKLeve:rqQ5/1C5/3QNlW+NlW`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis

Name	4b9e41d13937699e_3c428b1a3e5f57d887ec4b864fac5dcc Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Size	252.0B
Processes	2228 (iexplore.exe) 3048 (iexplore.exe)
Type	data
MD5	`1e53803964d714c0a356868f2d78a4a7`
SHA1	`f3173309205951894f49b972c70a95a6c875fae2`
SHA256	`4b9e41d13937699e45d9224fbbf808422ad47108e8edb29fa0157be14ef4105a`
CRC32	`490ACFED`
ssdeep	`6:kKWpLDpKbjcalgRAOAUSW0zeEpV1Ew1OXISMlcV/:epLPtWOxSW0zeYrsMlU/`
Yara	None matched
VirusTotal	Search for analysis

Name	7e60fcadfc3b2197_{64c41c52-1ee3-11f0-ac50-94de278c3274}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{64C41C52-1EE3-11F0-AC50-94DE278C3274}.dat
Size	3.5KB
Processes	3048 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`5432001e953b84cc328aa92ffb5445a4`
SHA1	`0e824bd68ae7039737f6db713d11006b06e8739c`
SHA256	`7e60fcadfc3b21970025849b9674435d95d823326c83335c34d23ea7c4c2341f`
CRC32	`D214E298`
ssdeep	`12:rl0oXGFMlXDrEgmfoB66FvADrEgmf4x6qTNl5/U9baxEKtHaK+wLP5caG8RdiR:rtlTGyUGwfNlialh+EBcaJ+`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis