Dropped Files | ZeroBOX

Name	b1fef470e0a1efa5_fc87hjwcvx8sfrnr6sgc0djk.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\Fc87hjwCvX8Sfrnr6sgc0DJk.exe
Size	4.3KB
Processes	2388 (china.png)
Type	HTML document, ASCII text
MD5	`edeff92ad891418044d414644a583326`
SHA1	`d57a6a4a7e8dad919e3701442fa38a4d89e1a411`
SHA256	`b1fef470e0a1efa50efb6a108549059eac79f07a17e0b3fae5b5c6ba621a1b34`
CRC32	`0AF5CEAC`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsosgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmosgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	f9349585a2393d43_4joxboabsxq3abapbmthbutt.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\4jOXbOaBSXQ3abaPBMthbutT.exe
Size	494.0KB
Processes	2388 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis

Name	2f59d924172f05d0_tpovv5lk4jrz50rrjhrlf7qq.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\tPOVV5lk4jRZ50rRjhRLF7qQ.exe
Size	4.3KB
Processes	2388 (china.png)
Type	HTML document, ASCII text
MD5	`7a00fa403b2796b5ffd5d21254ed57d2`
SHA1	`026f0c375cb7309655d9925de47c883b05ffae84`
SHA256	`2f59d924172f05d030e262e829262967f5fb476560caf76f156f21a85143d25d`
CRC32	`5318DC45`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsnsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmnsgsfGD`
Yara	None matched
VirusTotal	Search for analysis