| Name | c4ff6c8f3a8803b3_tmp859A.tmp |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\tmp859A.tmp |
| Size | 1.6KB |
| Processes | 232 (covid.exe) |
| Type | XML 1.0 document, ASCII text, with CRLF line terminators |
| MD5 | 2fdc0e638dfae4475e8901bcbb313262 |
| SHA1 | 36ce8a5fc75e80ffaf0fd6d3d30fddd367c8d180 |
| SHA256 | c4ff6c8f3a8803b359dd38de37065ddc9ad68180cee018ecdb6454f7ece9792f |
| CRC32 | BCB5E2D8 |
| ssdeep | 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKB0tn:cbhf7IlNQQ/rydbz9I3YODOLNdq3k |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 97fff79eb7a9d306_run.dat |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat |
| Size | 8.0B |
| Processes | 9100 (RegSvcs.exe) |
| Type | data |
| MD5 | 2e1419703949cb7b0b193089cff89654 |
| SHA1 | 7ca145f7e314120c07663960bb3f1dcff88349f2 |
| SHA256 | 97fff79eb7a9d306e6945bbf1167555dd5b82561e7b2cbadd564299baf1fa0e8 |
| CRC32 | 13B6C099 |
| ssdeep | 3:ijU8t:ijlt |
| Yara | None matched |
| VirusTotal | Search for analysis |