Dropped Files | ZeroBOX

Name	6c129bc74eb2acfe_kchatruqt6hgjobhkpb9efqz.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\kcHaTrUQt6hgjObHKpB9efQZ.exe
Size	4.3KB
Processes	2444 (china.png)
Type	HTML document, ASCII text
MD5	`6c88b11c2401dbb7471f91243d8be15b`
SHA1	`50ea92a36e7519691260b4ddc2db85f667d9a4dd`
SHA256	`6c129bc74eb2acfe3dabff48bcac3b776be73c9e47e3c4404cf7cc071820ea6c`
CRC32	`B6DC6CC2`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsE1sgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmEsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	58e0479cf9279c38_m1sijdzc5jwukm5ix2seaq6r.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\m1sIJDzc5jWukm5IX2SEAQ6R.exe
Size	4.3KB
Processes	2444 (china.png)
Type	HTML document, ASCII text
MD5	`7e40f2f155622902053b4efb21693768`
SHA1	`2bfa691d9c2c324e80b2859aa7fa981b4c38cb6e`
SHA256	`58e0479cf9279c38215f9464cb16a14cefdcfef4ede68abe3e32e1ce88304e64`
CRC32	`1C91B0FD`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsE9sgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmQsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	f9349585a2393d43_4fzajx0wwj0i5qvzyhgq9rmo.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\4fzaJx0WwJ0i5QvzyhgQ9RMo.exe
Size	494.0KB
Processes	2444 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis