Dropped Files | ZeroBOX

Name	a111996fc4f7ca4a_agb5jd0v5vnlmxir30x72mzr.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\aGb5jd0V5vNLMXIr30x72Mzr.exe
Size	4.3KB
Processes	2948 (china.png)
Type	HTML document, ASCII text
MD5	`3824b7c6b32f3835f8cfc63fa0e7af1f`
SHA1	`7e378b5540da5e4f5fe5bbf682af5aebca3060a4`
SHA256	`a111996fc4f7ca4a88b4af3e1c5c567762024b42674f5d4b8b883d880117fab4`
CRC32	`68D8A8C1`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRshsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmhsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	f9349585a2393d43_4f3si3pak2xjhmbvrivohobw.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\4F3Si3PaK2XJHMbVriVoHOBw.exe
Size	494.0KB
Processes	2948 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis

Name	d93285a5c13fea16_f7xf5htcls9fpu2s0vlyspx4.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\F7xf5hTcLS9fpU2s0vLyspx4.exe
Size	4.3KB
Processes	2948 (china.png)
Type	HTML document, ASCII text
MD5	`41f7435fc1fa36b015b19514d73d19fc`
SHA1	`be93134b04ab775f60e88547f0a29e37b9bbd6d2`
SHA256	`d93285a5c13fea16c27090831a6382e70aeaf4761b9a867bbfb582d0904ffae7`
CRC32	`11CD672A`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRs4sgszbGD:1j9jhjYjWK/lyH+kMBRADh/pm4sgsfGD`
Yara	None matched
VirusTotal	Search for analysis