| Name | a107cba0525d21a9_tmp9912.tmp |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\tmp9912.tmp |
| Size | 1.6KB |
| Processes | 8072 (afo.exe) |
| Type | XML 1.0 document, ASCII text, with CRLF line terminators |
| MD5 | b2890640df02963219a0dcfce036ffd9 |
| SHA1 | e5cd4b80e892b2a729f262e382ee9fd6f6a58b4b |
| SHA256 | a107cba0525d21a97a360337012ae7583a0c894c1fffac1509577c552eb08c7f |
| CRC32 | 2BF1DE18 |
| ssdeep | 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBrtn:cbhf7IlNQQ/rydbz9I3YODOLNdq3b |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 98cd5e0c361f9d3f_tmp9C5E.tmp |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\tmp9C5E.tmp |
| Size | 1.3KB |
| Processes | 2600 (afo.exe) |
| Type | XML 1.0 document, ASCII text, with CRLF line terminators |
| MD5 | 2d4bf44577dee42abe1498a4c9a06dea |
| SHA1 | 6187b670e225cef33ca09ea8fa04a0e9c9ec6d45 |
| SHA256 | 98cd5e0c361f9d3fbd3c03cccd4bf9f146d6b5dae4c94271b732d8e50493d9aa |
| CRC32 | 8A44A666 |
| ssdeep | 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Zjxtn:cbk4oL600QydbQxIYODOLedq3Yjj |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | bb9181b3935b8681_tmp9DB7.tmp |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\tmp9DB7.tmp |
| Size | 1.3KB |
| Processes | 2600 (afo.exe) |
| Type | XML 1.0 document, ASCII text, with CRLF line terminators |
| MD5 | be81f72fa4dbc827132836ee2af92c96 |
| SHA1 | fe5ded04ab4932dea6cf414e9e4428f43da70d03 |
| SHA256 | bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f |
| CRC32 | 7AA438E3 |
| ssdeep | 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | cd46b87b88e5e4a6_task.dat |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat |
| Size | 42.0B |
| Processes | 2600 (afo.exe) |
| Type | ASCII text, with no line terminators |
| MD5 | f0e2a1e740520b6464f12b1a6183e3bd |
| SHA1 | 0cc90ca37a1427ba915be0a31d33ddbb60dde963 |
| SHA256 | cd46b87b88e5e4a6bca8a2b664a2b7979e7983556600a3eb755373379c50c844 |
| CRC32 | 8F4B069B |
| ssdeep | 3:oNmWxpcL4E2J5xAI+KL4An:oNmQpcLJ23f6An |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 664b9a931b40a33b_run.dat |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat |
| Size | 8.0B |
| Processes | 2600 (afo.exe) |
| Type | data |
| MD5 | e898851dc26b09336561c8c24f7979b7 |
| SHA1 | b533db49d03403315bb12af9f172bd87e457197d |
| SHA256 | 664b9a931b40a33b4a4a0d3781317cb82159b30ae8a016df330fb5be6015ee54 |
| CRC32 | B019F4A2 |
| ssdeep | 3:912ut:XN |
| Yara | None matched |
| VirusTotal | Search for analysis |