| Name | 49c4a85bce2fb8cb_d93f411851d7c929.customdestinations-ms |
|---|---|
| Filepath | c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms |
| Size | 7.8KB |
| Processes | 1608 (powershell.exe) |
| Type | data |
| MD5 | 4eba3b6a4f05a26106a2d772c79da044 |
| SHA1 | 45ae375ea2f305e4409aabc22803cd1471f0983e |
| SHA256 | 49c4a85bce2fb8cb6db4279591d0966cbd2fb84bc43f252ee5ad14d3d615b2b5 |
| CRC32 | 2DF7F691 |
| ssdeep | 96:YtuCaGCPDXBqvsqvJCwo9tuCaGCPDXBqvsEHyqvJCworM7HwxWlUVul:YtzXo9tzbHnornxo |
| Yara |
|
| VirusTotal | Search for analysis |
| Name | b853638ff1636d7c_windows10decemberupdate.vbs |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Windows10DecemberUpdate.vbs |
| Size | 103.0B |
| Processes | 1608 (powershell.exe) |
| Type | ASCII text, with CRLF line terminators |
| MD5 | 14018b187db799953ca17d0530dcefbf |
| SHA1 | eac2f8b2ec186c5867261f310cf0e59acd09a1c3 |
| SHA256 | b853638ff1636d7c40ebcc3cd3ff725a2c963395b93a2b50e79e950b8dd33b0d |
| CRC32 | 2A372646 |
| ssdeep | 3:jcnTm8nh0egSXnGQqPJH0wxMCLkFFCObn:jWCqhlGQO0wKjFzb |
| Yara | None matched |
| VirusTotal | Search for analysis |