Dropped Files | ZeroBOX

Name	f9349585a2393d43_45bbzvzivqwsikslkqyoyky7.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\45BBZvZIVQWsikslKqYOykY7.exe
Size	494.0KB
Processes	2216 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis

Name	0a358d9610fd6c2d_fmhivczgiibfbo9lqmczeikd.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\fMhIvcZgiIbfbo9lqmCzEIkD.exe
Size	4.3KB
Processes	2216 (china.png)
Type	HTML document, ASCII text
MD5	`9c5f401777ce45f6e892741da1d1edf8`
SHA1	`25df68ec1121f7c789724e610d42b51ef90ff0a8`
SHA256	`0a358d9610fd6c2da9212e5aa844916290dc4b65e21e1dd155c31b5879eb9e66`
CRC32	`87BC25F3`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsmFsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmmFsgsf0`
Yara	None matched
VirusTotal	Search for analysis

Name	d889c76679c25875_znkoe3azjdpmrxfe3lxxdpas.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\zNkOe3AZJDpMrxFE3LXxDPAS.exe
Size	4.3KB
Processes	2216 (china.png)
Type	HTML document, ASCII text
MD5	`49ca0807ceecbf2bd0700d05b4318b62`
SHA1	`c8c9cfb1f08ff9561492be59024439d8fb8219db`
SHA256	`d889c76679c258755506b88e36bd3e724f57f621873d620934bb6e105f595dff`
CRC32	`964E8975`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsOsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmOsgsfGD`
Yara	None matched
VirusTotal	Search for analysis