| Name | 690a8f05b5f818ba__cjvdnberkfbwqwrpbjverv.vbs |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\_Cjvdnberkfbwqwrpbjverv.vbs |
| Size | 192.0B |
| Processes | 2084 (AcrobatDC.exe) |
| Type | ASCII text, with no line terminators |
| MD5 | 74f55f23ebf74f9da3fbd5ab2ac493b3 |
| SHA1 | 51a1fc7dba4d13c87e3fbf13015488d51af9d815 |
| SHA256 | 690a8f05b5f818ba64f8b719b2dff7c8e0639d1e83cf2321f099de39e34df83b |
| CRC32 | 82362D82 |
| ssdeep | 3:FER/n0eFHgSSJJF2uV1HeGAFddGeWLCXknRAumWxpcL4EaKC5SufyM1K/RFofD68:FER/lFHsCu/eGgdEYmRAumQpcLJaZ5Sy |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 49c4a85bce2fb8cb_d93f411851d7c929.customDestinations-ms~RF12e59fa.TMP |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF12e59fa.TMP |
| Size | 7.8KB |
| Processes | 1796 (powershell.exe) 196 (powershell.exe) |
| Type | data |
| MD5 | 4eba3b6a4f05a26106a2d772c79da044 |
| SHA1 | 45ae375ea2f305e4409aabc22803cd1471f0983e |
| SHA256 | 49c4a85bce2fb8cb6db4279591d0966cbd2fb84bc43f252ee5ad14d3d615b2b5 |
| CRC32 | 2DF7F691 |
| ssdeep | 96:YtuCaGCPDXBqvsqvJCwo9tuCaGCPDXBqvsEHyqvJCworM7HwxWlUVul:YtzXo9tzbHnornxo |
| Yara |
|
| VirusTotal | Search for analysis |