| Name | dd811235eebc317b_590aee7bdd69b59b.customdestinations-ms |
|---|---|
| Filepath | c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms |
| Size | 7.8KB |
| Processes | 2996 (powershell.exe) |
| Type | data |
| MD5 | 53022532ed8f602580ffdaed44444fd4 |
| SHA1 | 093d7dacd3e846d7a7f5ecf532f3afc63bac658c |
| SHA256 | dd811235eebc317b385893288ddec88c0ff80fb222072397a7faa65ee1effbb8 |
| CRC32 | 05FC75D1 |
| ssdeep | 96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworDPtDHXyf2lUVul:UtvXoxtvbHnorxTyQ |
| Yara |
|
| VirusTotal | Search for analysis |
| Name | 9acf76d886a5cd99_ivgjyyhbbvlqhyjka.vbs |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\Ivgjyyhbbvlqhyjka.vbs |
| Size | 136.0B |
| Processes | 2524 (pm.exe) |
| Type | ASCII text, with no line terminators |
| MD5 | 2c84bd9e5178e7309daffd81bcd25fa7 |
| SHA1 | 4e47ae80100be917cead5c27e636d1e51f00bf26 |
| SHA256 | 9acf76d886a5cd9980e126d2785290dd4d988a4885e726aa84156906373be633 |
| CRC32 | 47A57EBC |
| ssdeep | 3:FER/n0eFHgSSJJF2uV1HeGAFddGeWLCXknRAumWxpcL4EaKC5DvHJFjZM:FER/lFHsCu/eGgdEYmRAumQpcLJaZ5D6 |
| Yara | None matched |
| VirusTotal | Search for analysis |