Dropped Files | ZeroBOX

Name	531e0b398fed4792_z9cipgklolzmalsmynbmqeif.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\z9CipGkLOlZMALsmyNBmQEIf.exe
Size	4.3KB
Processes	1016 (china.png)
Type	HTML document, ASCII text
MD5	`fcf3a4fde86abad8a10d56e699db05e6`
SHA1	`5cc8bb643fb6c3f3b3a74bb9e9abd4869c1b278b`
SHA256	`531e0b398fed47925daa87a1dff65214a25478086155c00be8f698bf859e84ff`
CRC32	`6EC7D0A4`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRs3IsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmYsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	a6f64f399ac2d994_ydtcaacj13zekgpyusvl7hi4.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\yDtcAacj13zeKGpYuSvL7HI4.exe
Size	4.3KB
Processes	1016 (china.png)
Type	HTML document, ASCII text
MD5	`f5cacf195aa8cbae092f8f04165845e3`
SHA1	`816d36aa4be0a0d1f676b598b271e162009bee33`
SHA256	`a6f64f399ac2d994aa34561d716de42573b4931ef38a94500770c1887d453340`
CRC32	`55380EAA`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRs3hsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmRsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	f9349585a2393d43_hxrlgwgi4acms8z73ydsc8fy.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\hXRlGwGI4aCms8Z73yDsC8fY.exe
Size	494.0KB
Processes	1016 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis