Dropped Files | ZeroBOX

Name	c351aacd49dd5f68_q8wp03snlswzombl7fjabpjw.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\Q8wP03sNlSwZOmbl7FJabpjW.exe
Size	4.3KB
Processes	2020 (china.png)
Type	HTML document, ASCII text
MD5	`2a03f7fdbb706aec0adadfc6557578b1`
SHA1	`886a2efdf08789d9ff5057594e4556fb8fc5c196`
SHA256	`c351aacd49dd5f68ec3fef63453e9b340cd7a5833ef8c8fec4c6d898956d9f09`
CRC32	`938ADD0F`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsOsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmOsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	fd6aefc0f9d4e011_dy56czk0bsp9s7poup7itvtv.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\dy56cZK0BSp9s7PoUp7ITvtv.exe
Size	4.3KB
Processes	2020 (china.png)
Type	HTML document, ASCII text
MD5	`1be203f6d592dd5315f289aa256d655b`
SHA1	`b38667ef18c2e2498b9ad030df063fd2c4720fd8`
SHA256	`fd6aefc0f9d4e01144d49fe660482954de061b799d7e2cfc98c9c0ecdc54a51e`
CRC32	`13BBB189`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsTsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmTsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	f9349585a2393d43_iuorrr6kyzeg3bdldrdlepsb.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\IuorrR6kYZEG3BDLdRdlePSB.exe
Size	494.0KB
Processes	2020 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis