| Name | a9220271c0eb79e5_d93f411851d7c929.customdestinations-ms |
|---|---|
| Filepath | c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms |
| Size | 7.8KB |
| Processes | 2708 (powershell.exe) |
| Type | data |
| MD5 | b0c9ff441742f3847ea27da9dee7f2cd |
| SHA1 | c42a1eb32ba953a0ce5d8635caabf71b5b281495 |
| SHA256 | a9220271c0eb79e5750e0d0e62058ecac560e09cdf9e82ef61aeeabada5d48a4 |
| CRC32 | 0BBCAB1A |
| ssdeep | 96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:UtvXoxtvbHnorrxQ |
| Yara |
|
| VirusTotal | Search for analysis |
| Name | c2aa52c7618b42b1_tmp3880.tmp |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\tmp3880.tmp |
| Size | 1.5KB |
| Processes | 2348 (.winlogon.exe) |
| Type | XML 1.0 document, ASCII text |
| MD5 | cc55eb6222772dc48491b89474f2de09 |
| SHA1 | 7375678134f10ceba6640626d58d0f00768fc609 |
| SHA256 | c2aa52c7618b42b18c1522453b69d917f994f265ab4ea3a598c0606ec9e3dd73 |
| CRC32 | 2213323C |
| ssdeep | 24:2di4+S2qhH/1ny1mEUnrKMhEMOFGpwOzNgU3ODOiIQRvh7hwrgXuNtY9gJxvn:cgefAYrFdOFzOzN33ODOiDdKrsuT4Qv |
| Yara | None matched |
| VirusTotal | Search for analysis |