Dropped Files | ZeroBOX

Name	f9349585a2393d43_72yrzfjguzugvjvogjqmwj9w.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\72yRzFjguZuGvJvoGjqMwJ9W.exe
Size	494.0KB
Processes	2232 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis

Name	4a65b2ef5bfa3965_s0w3ltgmzu4qxghkoohjg2qa.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\s0w3lTgmzu4QXghKoohJg2qA.exe
Size	4.3KB
Processes	2232 (china.png)
Type	HTML document, ASCII text
MD5	`03f7c28d108878dfd17bf626e2dabe5d`
SHA1	`3ef721e764c7c01727843da182bd32f0045fdb46`
SHA256	`4a65b2ef5bfa39658e631f491d4d59297dab6e3699893b09d30d5d5360c07511`
CRC32	`0AD56F64`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsisgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmisgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	3bb4e48b8f620808_nrzg8bjzkw6teoxtlyf8vazf.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\NRZG8bjzKw6teOxtLYf8vaZf.exe
Size	4.3KB
Processes	2232 (china.png)
Type	HTML document, ASCII text
MD5	`3bc9a25d43c63433bd143af2178c2d99`
SHA1	`1025ea61815d8abda827219b71c630d3fb33ab13`
SHA256	`3bb4e48b8f620808aacb204b2a6c3cd729cbf020bf2ea08283f91f8c79050add`
CRC32	`8ECED08B`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsOsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmOsgsfGD`
Yara	None matched
VirusTotal	Search for analysis