Dropped Files | ZeroBOX

Name	cb3ccbb76031e5e0_3c428b1a3e5f57d887ec4b864fac5dcc Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
Size	914.0B
Processes	508 (iexplore.exe)
Type	data
MD5	`e4a68ac854ac5242460afd72481b2a44`
SHA1	`df3c24f9bfd666761b268073fe06d1cc8d4f82a4`
SHA256	`cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f`
CRC32	`5017495B`
ssdeep	`24:c0oGlGm7qGlGd7SK1tcudP5M/C0VQYyL4R3fum:+JnJ17tcudRMq6QsF`
Yara	None matched
VirusTotal	Search for analysis

Name	08b35d8af20c2f70_{89ccdc68-22cc-11f0-91c7-080027c2f7b0}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{89CCDC68-22CC-11F0-91C7-080027C2F7B0}.dat
Size	4.5KB
Processes	508 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`e400bb16b7e0213bec67f09379e34870`
SHA1	`5d9d8790586a951971d57503003a528b2fdceafa`
SHA256	`08b35d8af20c2f7005f6fa82e6f532530c2a64476d4cd0fce5a714bb8ba79292`
CRC32	`97774C54`
ssdeep	`12:rl0ZGF2rorEgmfS76FEYrEgmfcB7qgONlLNbaxlUm/Q1EtwOrNlb9baxOhKtHaKn:rKoGUYGKONlZHRywINlZklh+6w`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis

Name	ea2cdb06a6b32ace_3c428b1a3e5f57d887ec4b864fac5dcc Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Size	252.0B
Processes	508 (iexplore.exe)
Type	data
MD5	`dcb13a14e9e5d3c571dca064b8f07d69`
SHA1	`64291d8db4447deb833284cebaf9ab401ec7b12c`
SHA256	`ea2cdb06a6b32ace144207d4467337f8f46d28f4ae873f6910a871b7113205c9`
CRC32	`BA937E1C`
ssdeep	`6:kKzWRlhLDIIbjcalgRAOAUSW0zeEpV1Ew1OXISMlcV/:bW1LMrtWOxSW0zeYrsMlU/`
Yara	None matched
VirusTotal	Search for analysis

Name	6e3193ab326a7890_recoverystore.{89ccdc67-22cc-11f0-91c7-080027c2f7b0}.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{89CCDC67-22CC-11F0-91C7-080027C2F7B0}.dat
Size	4.5KB
Processes	508 (iexplore.exe)
Type	Composite Document File V2 Document, Cannot read section info
MD5	`8ad4222b0dfe9ad952bfc655d4aaf5e4`
SHA1	`22e7bf4fc5306e193274b7c3d1100a44485ad8e4`
SHA256	`6e3193ab326a7890cfa0bdbdfe311a770e0b1ae7f842d5a4a5c1ce07c47c89c7`
CRC32	`5E76FD73`
ssdeep	`12:rlfF2TrEg5+IaCrI0F7+F2crEg5+IaCrI0F7ugQNlTqbaxU/Q1I5NlTqbaxU/A1k:rqT5/1c5/3QNlWr/Q1I5NlWr/A1IE1I`
Yara	Microsoft_Office_File_Zero - Microsoft Office File
VirusTotal	Search for analysis