| Name | d3c7a36fa0843707_gewubbi.url |
|---|---|
| Filepath | C:\Users\Public\Libraries\gewubbI.url |
| Size | 96.0B |
| Processes | 1868 (vbc.exe) |
| Type | MS Windows 95 Internet shortcut text (URL=<file:"C:\\Users\\Public\\Libraries\\Ibbuweg\\Ibbuweg.exe">), ASCII text, with CRLF line terminators |
| MD5 | c7d7c5609faa91cdb8003e51db54e79d |
| SHA1 | a61f29f7cfccb77a9c01bb29accc9dc0ac175393 |
| SHA256 | d3c7a36fa08437075bbf3f0cc62a3726c716f5cdcac021729d0b0eda40690fb4 |
| CRC32 | B2173EDE |
| ssdeep | 3:HRAbABGQYmTWAX+rSF55i0XM5S5UwSJovsGKd7ovn:HRYFVmTWDyzOovsb7yn |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 24222300c78180b5_Trast.bat |
|---|---|
| Filepath | C:\Users\Public\Trast.bat |
| Size | 34.0B |
| Processes | 1868 (vbc.exe) |
| Type | ASCII text, with no line terminators |
| MD5 | 4068c9f69fcd8a171c67f81d4a952a54 |
| SHA1 | 4d2536a8c28cdcc17465e20d6693fb9e8e713b36 |
| SHA256 | 24222300c78180b50ed1f8361ba63cb27316ec994c1c9079708a51b4a1a9d810 |
| CRC32 | 7F4F9BF9 |
| ssdeep | 3:LjTnaHF5wlM:rnaHSM |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 37c59c8398279916_KDECO.bat |
|---|---|
| Filepath | C:\Users\Public\KDECO.bat |
| Size | 155.0B |
| Processes | 1868 (vbc.exe) |
| Type | ASCII text, with no line terminators |
| MD5 | 213c60adf1c9ef88dc3c9b2d579959d2 |
| SHA1 | e4d2ad7b22b1a8b5b1f7a702b303c7364b0ee021 |
| SHA256 | 37c59c8398279916cfce45f8c5e3431058248f5e3bef4d9f5c0f44a7d564f82e |
| CRC32 | 42292F53 |
| ssdeep | 3:LjT5LJJFIf9oM3KN6QNb3DM9bWQqA5SkrF2VCceGAFddGeWLCXlRA3+OR:rz81R3KnMMQ75ieGgdEYlRA/R |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 3a4ba599c19a4648_nest |
|---|---|
| Filepath | C:\Users\Public\nest |
| Size | 9.0B |
| Processes | 1868 (vbc.exe) |
| Type | ASCII text, with CRLF line terminators |
| MD5 | 00923a190f23977a8dcfbaacf0931b9d |
| SHA1 | fb08e418f8acabb79d12f3b73745cd3548859ff9 |
| SHA256 | 3a4ba599c19a4648f8be49316b3e183afb451e6c814b5bff9bc629bcb4f689be |
| CRC32 | 1ED9B692 |
| ssdeep | 3:mwz7:mA7 |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | f35f2658455a2e40_UKO.bat |
|---|---|
| Filepath | C:\Users\Public\UKO.bat |
| Size | 250.0B |
| Processes | 1868 (vbc.exe) |
| Type | ASCII text, with CRLF line terminators |
| MD5 | eaf8d967454c3bbddbf2e05a421411f8 |
| SHA1 | 6170880409b24de75c2dc3d56a506fbff7f6622c |
| SHA256 | f35f2658455a2e40f151549a7d6465a836c33fa9109e67623916f889849eac56 |
| CRC32 | 8C4E367F |
| ssdeep | 6:rgnMXd1CQnMXd1COm8hnaHNHIXUnMXd1CoD9c1uOw1H1gOvOBAn:rgamIHIXUaXe1uOeVqy |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 7f7af3d03481bb68_ibbuweg.exe |
|---|---|
| Filepath | C:\Users\Public\Libraries\Ibbuweg\Ibbuweg.exe |
| Size | 690.5KB |
| Processes | 1868 (vbc.exe) |
| Type | PE32 executable (GUI) Intel 80386, for MS Windows |
| MD5 | aa4b9c043e923952fee38447b9dd0b43 |
| SHA1 | 14b12aeacdd0ae6ba8e1215c192f513c29bfef6f |
| SHA256 | 7f7af3d03481bb68e11a68e958ce6d8e96701a053eaa458e7010a4a85643cad3 |
| CRC32 | 675543F3 |
| ssdeep | 12288:cLJ8IaEF3CbhMemzpeVhpEj7c0DFtIGnu8:cLJRaElQMePyNtI |
| Yara |
|
| VirusTotal | Search for analysis |
| Name | 45aa3957c2986526_nest.bat |
|---|---|
| Filepath | C:\Users\Public\nest.bat |
| Size | 53.0B |
| Processes | 1868 (vbc.exe) |
| Type | ASCII text, with CRLF line terminators |
| MD5 | 8ada51400b7915de2124baaf75e3414c |
| SHA1 | 1a7b9db12184ab7fd7fce1c383f9670a00adb081 |
| SHA256 | 45aa3957c29865260a78f03eef18ae9aebdbf7bea751ecc88be4a799f2bb46c7 |
| CRC32 | 989CB101 |
| ssdeep | 3:LjT9fnMXdemzCK0vn:rZnMXd1CV |
| Yara | None matched |
| VirusTotal | Search for analysis |