Dropped Files | ZeroBOX

Name	5b091e06177f21e4_fve6gofzkldqndrjvquu0zvs.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\fvE6gofzKldqNdrjvqUu0Zvs.exe
Size	4.3KB
Processes	996 (china.png)
Type	HTML document, ASCII text
MD5	`0c1e7e61e0fda8ebe092d6add23b631e`
SHA1	`90b2e6d5e77832fc3683a4802177cc94ceeca6d5`
SHA256	`5b091e06177f21e44175ab5bd4364cc7ed3a94258e3eecf989d0f0420ace5aa6`
CRC32	`B7CB7045`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsZRsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pm7sgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	f9349585a2393d43_wcuvbokgavyakrpfqdly1mus.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\wcUVBOKGAVyAKrPfQDLy1mUS.exe
Size	494.0KB
Processes	996 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis

Name	a9f807e06dc6b3bb_hfeykovzfymfpdolwfyvwnsb.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\HfeykoVZfYmFPdOlWfyVwNSB.exe
Size	4.3KB
Processes	996 (china.png)
Type	HTML document, ASCII text
MD5	`ffdd57e44eb88fb16977bb2a4a2a6fe3`
SHA1	`3c5d24bb179e37fb1d77f3bff8beace87535ab4d`
SHA256	`a9f807e06dc6b3bbad70b52277330e45a970e704fa0db5995486a26ad33ec758`
CRC32	`2F86BCC6`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsxsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmxsgsfGD`
Yara	None matched
VirusTotal	Search for analysis