Dropped Files | ZeroBOX

Name	dd013e6b31759ea0_axvrwjhqm.hp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\axvrwjhqm.hp
Size	205.1KB
Processes	2548 (nvpn.exe)
Type	data
MD5	`c78298d9dc2aa394bea365d5837a8349`
SHA1	`99e8ec0fefc3edab686f6a840ceae75dff3efa44`
SHA256	`dd013e6b31759ea037a25facb6ac24fdd884a04ae5bb607a8ad6af400fd6ad4b`
CRC32	`48964F00`
ssdeep	`6144:oSoWLrUkYEY0QFGPusfU65C5GXm01wdwXpli:4QYzYuFxGXjwdYU`
Yara	None matched
VirusTotal	Search for analysis

Name	997242c520c2a643_jvvbbwmcda.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\jvvbbwmcda.exe
Size	171.0KB
Processes	2548 (nvpn.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`7f1193528553395e064f4d3c4425e9f6`
SHA1	`14030101197f13a5b5f1d6ea54d341609fe082fa`
SHA256	`997242c520c2a643699d29f75914969c3f31f8058fbe8ecf0840b8206df5b22a`
CRC32	`8912D21F`
ssdeep	`1536:VZeWBu76KbF+IFsuPHZ0lOvmqQz3gysL7Pl8t7q88+Tc4dfs8jcdmxa1mJtex1B2:LuDb42lQsfBd+ndKmxvJUxzhv`
Yara	Malicious_Library_Zero - Malicious_Library UPX_Zero - UPX packed file PE_Header_Zero - PE File Signature IsPE32 - (no description) OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_nsjF099.tmp Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\nsjF099.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis