Dropped Files | ZeroBOX

Name	04a0eff04313b55c_y3h4j9i5xfj4qdpfe3bmlr1j.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\y3h4J9I5XfJ4qDpFe3Bmlr1J.exe
Size	4.3KB
Processes	2220 (china.png)
Type	HTML document, ASCII text
MD5	`cc40eb3dda5f92ab7deb5b6c0cf19ebc`
SHA1	`517d833866ba2bd19a7eddc55587cb50d95dcaa4`
SHA256	`04a0eff04313b55c6cbab42a9b5b15db74baba27f454d318c4516cc326696972`
CRC32	`225683D2`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsHsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmHsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	39e1968d948c42e4_f9hhatkxzvztdchg57mtipwa.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\F9hhatkxzVZTdChG57mTipWA.exe
Size	4.3KB
Processes	2220 (china.png)
Type	HTML document, ASCII text
MD5	`66fd510c9c329ea26b7d4b5700f024e9`
SHA1	`6eca4b003d8b396f7ab5872b29c993628aa27884`
SHA256	`39e1968d948c42e4fd907e54ec6e337866fd7cc5ba371b5888a1e4a6576a4baa`
CRC32	`EADF2B8D`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRs7sgszbGD:1j9jhjYjWK/lyH+kMBRADh/pm7sgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	f9349585a2393d43_fovwfilgs6e31uxsjcaq6ra6.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\fOvWFILgs6E31UXSjcaQ6ra6.exe
Size	494.0KB
Processes	2220 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis