Dropped Files | ZeroBOX

Name	c9a134b99924409f_e3vilhlntau7adg3xikhkxtv.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\E3viLHLntau7aDg3xIKhKxtv.exe
Size	4.3KB
Processes	1896 (china.png)
Type	HTML document, ASCII text
MD5	`a3a8ddfd2ca9bff8ff9c64451e0d207d`
SHA1	`66cf6bc435ba970a6b2d9a327d648741b9d66b59`
SHA256	`c9a134b99924409fd5aba1ded19dba128061ff41b92d30303ead8667baffb9a5`
CRC32	`10ABAE09`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsQsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmQsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	b8c98f0c0e197836_idtpycdt8nuh1wxw6ntg6qt5.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\IDtPYcdT8NuH1wxw6NTG6Qt5.exe
Size	4.3KB
Processes	1896 (china.png)
Type	HTML document, ASCII text
MD5	`3ed8d95fd2893c5370ce8399346f6f7b`
SHA1	`9726f6728b86719abc0fb63b7784f889188045d6`
SHA256	`b8c98f0c0e197836d5351c371f4e0098c41a5b5c296f607d5095fc53e9db234f`
CRC32	`902064D5`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsELsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmgsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	f9349585a2393d43_zv3vtsp2txhv9zswpqm5fg2k.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\Zv3VtsP2TxHv9ZSWPQM5FG2k.exe
Size	494.0KB
Processes	1896 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis