Dropped Files | ZeroBOX

Name	5f760b7e1de614a5_mxqekzr.exe Submit file
Filepath	C:\Program Files (x86)\Microsoft Krptvw\Mxqekzr.exe
Size	15.1MB
Processes	2560 (ceshi.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`651549239e1b3bba64442f92d890db6d`
SHA1	`55a8d0c1469e943ef454666ff442c7f21cf235b0`
SHA256	`5f760b7e1de614a5b1eb8f8b92b53f5cf94c8ac6b9db8db71c544c79d151cd91`
CRC32	`06576483`
ssdeep	`49152:hHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHK:U`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	7baee22c9834bef6_netsyst96.dll Submit file
Filepath	C:\Program Files\AppPatch\NetSyst96.dll
Size	239.0KB
Processes	2560 (ceshi.exe)
Type	data
MD5	`8c19d83ff359a1b77cb06939c2e5f0cb`
SHA1	`a01a199e6f6f3e84cef5c7e6251a2b1291217885`
SHA256	`7baee22c9834bef64f0c1b7f5988d9717855942d87c82f019606d07589bc51a9`
CRC32	`1C445980`
ssdeep	`6144:HmbyEr/rerH3HOkzOBhVKaWcu4iXZrOBV:HEyEA+kzIKiu4w`
Yara	None matched
VirusTotal	Search for analysis