| Name | d78bc23b0ca3eddf_task.dat |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\task.dat |
| Size | 57.0B |
| Processes | 2656 (RegSvcs.exe) |
| Type | ASCII text, with no line terminators |
| MD5 | d685103573539b7e9fdbf5f1d7dd96ce |
| SHA1 | 4b2fe6b5c0b37954b314fcaee1f12237a9b02d07 |
| SHA256 | d78bc23b0ca3eddf52d56ab85cdc30a71b3756569cb32aa2f6c28dbc23c76e8e |
| CRC32 | B30A2583 |
| ssdeep | 3:oMty8WbSX/MNn:oMLWus |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 5256061397437391_run.dat |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\run.dat |
| Size | 8.0B |
| Processes | 2656 (RegSvcs.exe) |
| Type | data |
| MD5 | 2b447ea0fcdb47a4d2d0a3c8b2437ac5 |
| SHA1 | d9340e620913c73b8d0cbb712e144dfd2215908d |
| SHA256 | 525606139743739110c0eccc37c236b522934a32a1522486ca8950dc213d5eb3 |
| CRC32 | FA41E236 |
| ssdeep | 3:/s8:n |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 9a77409a4cffd7c1_tmp65D.tmp |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\tmp65D.tmp |
| Size | 1.6KB |
| Processes | 1868 (plugmanzx.exe) |
| Type | XML 1.0 document, ASCII text, with CRLF line terminators |
| MD5 | 2a4c5a942767b4215dd4b7406b3ab0d4 |
| SHA1 | bc41b3161f8242ef217b7c43d957a014004d6a45 |
| SHA256 | 9a77409a4cffd7c1e60b5afe9f44c3db3356bbbe32f223a163571ff9f90638be |
| CRC32 | 781C63D2 |
| ssdeep | 24:2dH4+SEqCH/7IlNMFQ/rlMhEMjnGpwjpIgUYODOLD9RJh7h8gKBk5tn:cbhf7IlNQQ/rydbz9I3YODOLNdq3U |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | dc3ae604991c9bb8_settings.bak |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bak |
| Size | 24.0B |
| Type | data |
| MD5 | acd3fb4310417dc77fe06f15b0e353e6 |
| SHA1 | 80e7002e655eb5765fdeb21114295cb96ad9d5eb |
| SHA256 | dc3ae604991c9bb8ff8bc4502ae3d0db8a3317512c0f432490b103b89c1a4368 |
| CRC32 | 0E770DA4 |
| ssdeep | 3:9bzY6oRDIvYk:RzWDI3 |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | f8098a6290118f29_settings.bin |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\settings.bin |
| Size | 40.0B |
| Processes | 2656 (RegSvcs.exe) |
| Type | data |
| MD5 | 4e5e92e2369688041cc82ef9650eded2 |
| SHA1 | 15e44f2f3194ee232b44e9684163b6f66472c862 |
| SHA256 | f8098a6290118f2944b9e7c842bd014377d45844379f863b00d54515a8a64b48 |
| CRC32 | C6B6460B |
| ssdeep | 3:9bzY6oRDT6P2bfVn1:RzWDT621 |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | c51e12d18cc66442_tmp97A.tmp |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\tmp97A.tmp |
| Size | 1.3KB |
| Processes | 2656 (RegSvcs.exe) |
| Type | XML 1.0 document, ASCII text, with CRLF line terminators |
| MD5 | 40b11ef601fb28f9b2e69d36857bf2ec |
| SHA1 | b6454020ad2ceed193f4792b77001d0bd741b370 |
| SHA256 | c51e12d18cc664425f6711d8ae2507068884c7057092cfa11884100e1e9d49e1 |
| CRC32 | 3D2F2EDC |
| ssdeep | 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0mn4xtn:cbk4oL600QydbQxIYODOLedq3Z4j |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | bb9181b3935b8681_tmpA75.tmp |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\tmpA75.tmp |
| Size | 1.3KB |
| Processes | 2656 (RegSvcs.exe) |
| Type | XML 1.0 document, ASCII text, with CRLF line terminators |
| MD5 | be81f72fa4dbc827132836ee2af92c96 |
| SHA1 | fe5ded04ab4932dea6cf414e9e4428f43da70d03 |
| SHA256 | bb9181b3935b8681a71b578f8166883e61380de6181df82d05f14829323fbf0f |
| CRC32 | 7AA438E3 |
| ssdeep | 24:2dH4+S/4oL600QlMhEMjn5pwjVLUYODOLG9RJh7h8gK0Rb5xtn:cbk4oL600QydbQxIYODOLedq3Sb5j |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 83b9cae66800c768_storage.dat |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\storage.dat |
| Size | 416.8KB |
| Processes | 2656 (RegSvcs.exe) |
| Type | data |
| MD5 | 653dddcb6c89f6ec51f3ddc0053c5914 |
| SHA1 | 4cf7e7d42495ce01c261e4c5c4b8bf6cd76ccee5 |
| SHA256 | 83b9cae66800c768887fb270728f6806cbebdead9946fa730f01723847f17ff9 |
| CRC32 | D300AB58 |
| ssdeep | 6144:zKfHbamD8WN+JQYrjM7Ei2CsFJjyh9zvgPonV5HqZcPVT4Eb+Z6no3QSzjeMsdF/:zKf137EiDsTjevgArYcPVLoTQS+0iv |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | aafc7b40c5fe680a_catalog.dat |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\017BD04F-B3BF-45B6-8167-9E8F41FF87BF\catalog.dat |
| Size | 232.0B |
| Processes | 2656 (RegSvcs.exe) |
| Type | data |
| MD5 | 9e7d0351e4df94a9b0badceb6a9db963 |
| SHA1 | 76c6a69b1c31cea2014d1fd1e222a3dd1e433005 |
| SHA256 | aafc7b40c5fe680a2bb549c3b90aabaac63163f74fffc0b00277c6bbff88b757 |
| CRC32 | 695E297D |
| ssdeep | 3:XrURGizD7cnRNGbgCFKRNX/pBK0jCV83ne+VdWPiKgmR7kkmefoeLBizbCuVkqYM:X4LDAnybgCFcps0OafmCYDlizZr/i/Oh |
| Yara | None matched |
| VirusTotal | Search for analysis |