Dropped Files | ZeroBOX

Name	7aece9af35518444_avkszsm9lj8diof5kkmbdmlz.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\AVKszSM9LJ8dIof5kkmBDMlz.exe
Size	4.3KB
Processes	1108 (china.png)
Type	HTML document, ASCII text
MD5	`a96a2ff7ccabd2ebc078e2b6dbc12f29`
SHA1	`8d45edadc6c8c2e2475d066b1405a5b5e117622a`
SHA256	`7aece9af355184444eaa8a0d40b315c21639fc697104ef02540294a1a9ca2a4d`
CRC32	`13C598DB`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsGsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmGsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	f9349585a2393d43_2yyzcwjxtuszq3yynjfxlues.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\2YyzCWjxtUSZq3yyNJfxluEs.exe
Size	494.0KB
Processes	1108 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis

Name	93d69125f04ca611_pqwuadax52wrix33mfa8buwx.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\pQWuaDax52wRIx33mFA8buwX.exe
Size	4.3KB
Processes	1108 (china.png)
Type	HTML document, ASCII text
MD5	`2a1e5f429d2f11717a0ae328f51227bb`
SHA1	`4d0f7e7e9d963b28642a3c7d855a59f7ed62d94e`
SHA256	`93d69125f04ca61157b26db51e7effb19eb18765913244a56aba84429467457f`
CRC32	`977F9E9B`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRs8sgszbGD:1j9jhjYjWK/lyH+kMBRADh/pm8sgsfGD`
Yara	None matched
VirusTotal	Search for analysis