Dropped Files | ZeroBOX

Name	a4227f970003e584_cqermvyqlvyx56cisbvi2jac.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\cqERmVYqLvYX56cISbvI2JAC.exe
Size	4.3KB
Processes	2648 (china.png)
Type	HTML document, ASCII text
MD5	`8808a2f04ab85db70c768107961fdaf3`
SHA1	`0cba3b92c1f8e793bebbef31f8ae3bf5872de0b4`
SHA256	`a4227f970003e584493e621ecd489487447d1ca903e6169ee59441193a7e7aef`
CRC32	`79604A39`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsGsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmGsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	606caf098ae527de_agdmwksejotjybfqvib27z0d.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\agdMwkSEJotjyBFQViB27z0d.exe
Size	4.3KB
Processes	2648 (china.png)
Type	HTML document, ASCII text
MD5	`65f9442019818e8590a5dad841e00943`
SHA1	`77269b74611cb17215e483dba2e30c7434b1813b`
SHA256	`606caf098ae527ded3901c38009f774b8e92ed7fd5fd0ee15951c363c6c00596`
CRC32	`6ABA5618`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsDsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmDsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	f9349585a2393d43_x98ehfxlp9s6rjvj1ak8ewuu.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\X98EHfxlp9S6rjVj1Ak8EWUu.exe
Size	494.0KB
Processes	2648 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis