Dropped Files | ZeroBOX

Name	f9349585a2393d43_efqjrhddh7jsqbhwrsu6zxoy.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\eFqjrhdDh7JsQbHWRsu6ZXOY.exe
Size	494.0KB
Processes	2088 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis

Name	1478e19661f36e75_mngfz5ixqqytwykeb866a92x.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\MngfZ5IxQqyTwYkeb866a92x.exe
Size	4.3KB
Processes	2088 (china.png)
Type	HTML document, ASCII text
MD5	`016c2f97ea7ce895aa1d3aa68b88b5a0`
SHA1	`6a1743d06eb89f73a077af26e675d732831e5863`
SHA256	`1478e19661f36e754cd8aab59ba6ba2601c7a283ebc8af5de712841226ca7f20`
CRC32	`4A928D95`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsUsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmUsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	fc04bcffb85fa6bd_m57y98t9lm6mazyzpcx7mtcu.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\m57Y98T9Lm6mazyzpcX7MTcU.exe
Size	4.3KB
Processes	2088 (china.png)
Type	HTML document, ASCII text
MD5	`ceecae8d2ef394e3526914cd072f4223`
SHA1	`53a1bc9c3726a2f60f05776c3dbe49e3595db979`
SHA256	`fc04bcffb85fa6bd271985695ff2fba2cf13549b7d07c198338b5382c7d70da1`
CRC32	`AA2478E8`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsfsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmfsgsfGD`
Yara	None matched
VirusTotal	Search for analysis