| Name | a9220271c0eb79e5_d93f411851d7c929.customdestinations-ms |
|---|---|
| Filepath | c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms |
| Size | 7.8KB |
| Processes | 2464 (powershell.exe) |
| Type | data |
| MD5 | b0c9ff441742f3847ea27da9dee7f2cd |
| SHA1 | c42a1eb32ba953a0ce5d8635caabf71b5b281495 |
| SHA256 | a9220271c0eb79e5750e0d0e62058ecac560e09cdf9e82ef61aeeabada5d48a4 |
| CRC32 | 0BBCAB1A |
| ssdeep | 96:RutuCOGCPDXBqvsqvJCwo+utuCOGCPDXBqvsEHyqvJCworSP7Hwxf2lUVul:UtvXoxtvbHnorrxQ |
| Yara |
|
| VirusTotal | Search for analysis |
| Name | a51eb251f696457a_zazkjbgbjmfzqsno |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\zazkjbgbjmfzqsno |
| Size | 435.0B |
| Processes | 3008 (InstallUtil.exe) 2676 (InstallUtil.exe) |
| Type | ASCII text, with CRLF line terminators |
| MD5 | 453a6b7949477c770a13cfa7e6bcbb6f |
| SHA1 | 387ae697aff4261e610c8a47182c430b4f5e4d5a |
| SHA256 | a51eb251f696457a0ea5efa1291069f2857a5209a1434b42b1c31959fb015564 |
| CRC32 | 4BB1D58F |
| ssdeep | 6:QAXvqKwHNx7hzIRMCADAwzRZvSAmY/SPIFvBnDWncnDWAwb:Qqwz5UMCADzRAGaetyngyAwb |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | b3d510ef04275ca8_eeghiqcgh |
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\eeghiqcgh |
| Size | 2.0B |
| Processes | 2884 (InstallUtil.exe) |
| Type | Little-endian UTF-16 Unicode text, with no line terminators |
| MD5 | f3b25701fe362ec84616a93a45ce9998 |
| SHA1 | d62636d8caec13f04e28442a0a6fa1afeb024bbb |
| SHA256 | b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209 |
| CRC32 | 88F83096 |
| ssdeep | 3:Qn:Qn |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name |
e3b0c44298fc1c14_pyuriinavenvg
Empty file or file not found
|
|---|---|
| Filepath | C:\Users\test22\AppData\Local\Temp\pyuriinavenvg |
| Size | 0.0B |
| Type | empty |
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| CRC32 | 00000000 |
| ssdeep | 3:: |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | fdea895e3833b4a6_logs.dat |
|---|---|
| Filepath | C:\Users\test22\AppData\Roaming\remcos\logs.dat |
| Size | 144.0B |
| Processes | 2676 (InstallUtil.exe) |
| Type | data |
| MD5 | 1a9d102636a4311e57474a6868b054ea |
| SHA1 | 98e1fc487b992753e8fbd541e46c8faac1b668b1 |
| SHA256 | fdea895e3833b4a66cdebbf46c8ba1550953a33904af1fa884b26e31327556c0 |
| CRC32 | A1A5CAA8 |
| ssdeep | 3:rnlJldfN+lNXld65JWRal2Jl+7R0DAlBG45klovDl6v:96NK5YcIeeDAlOWAv |
| Yara | None matched |
| VirusTotal | Search for analysis |