Name | f7f8f0ade2febe7a_user.config |
---|---|
Filepath | c:\users\test22\appdata\local\fromfriendlyname\odinakax.exe_url_3kbuquvqm1dhyadzhcnr1rtfd2nvohch\4.926.604.616\user.config |
Size | 2.2MB |
Processes | 2232 (odinakax.exe) |
Type | XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators |
MD5 | 801a5561621be1e8495b78a3946694ee |
SHA1 | 9a21b55ede6026872b0613cf0414da0a988f8271 |
SHA256 | f7f8f0ade2febe7aa4b7ff622f5233fd73458dde8d86e925d06ad9aec43e6cfe |
CRC32 | 107E395C |
ssdeep | 12288:uDjqcsNdk7TaHWbyAzezj/gPJrblkd0OSg/PRHY0QzwSbnuY4/TXXIBlGjOqyhvy:YwKT0OkGAuoKqFR |
Yara | None matched |
VirusTotal | Search for analysis |
Name |
e3b0c44298fc1c14_h4nrb02e.tmp
Empty file or file not found
|
---|---|
Filepath | C:\Users\test22\AppData\Local\FromFriendlyName\odinakax.exe_Url_3kbuquvqm1dhyadzhcnr1rtfd2nvohch\4.926.604.616\h4nrb02e.tmp |
Size | 0.0B |
Type | empty |
MD5 | d41d8cd98f00b204e9800998ecf8427e |
SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
CRC32 | 00000000 |
ssdeep | 3:: |
Yara | None matched |
VirusTotal | Search for analysis |
Name | cf11d6b3c18d4c02_d93f411851d7c929.customdestinations-ms |
---|---|
Filepath | c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms |
Size | 7.8KB |
Processes | 2888 (powershell.exe) |
Type | data |
MD5 | f2f5505600e2895c007b3ff3cfe3d4aa |
SHA1 | f0235a3c8056872d55eeef803d1bc33bac37a753 |
SHA256 | cf11d6b3c18d4c02466b670bcb0394ac49382e6a87ad58d2561f2660922b586c |
CRC32 | 9AF5ED3C |
ssdeep | 96:EtuCojGCPDXBqvsqvJCwoJtuCojGCPDXBqvsEHyqvJCworc7HwxGlUVul:Etu6XoJtu6bHnorXxY |
Yara |
|
VirusTotal | Search for analysis |