| Name | f825dd89181e7435_d93f411851d7c929.customdestinations-ms |
|---|---|
| Filepath | c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms |
| Size | 7.8KB |
| Processes | 5096 (powershell.exe) |
| Type | data |
| MD5 | 61d3b003e73f968491bb9de05318fcbd |
| SHA1 | abb40732bf72a072c5b176449fdb8f1c56383e03 |
| SHA256 | f825dd89181e743525684aff8d99cc6d78046e461147c33b6f7a182b98c58ea9 |
| CRC32 | 76116DE9 |
| ssdeep | 96:wtuCiGCPDXBqvsqvJCwoNtuCiGCPDXBqvsEHyqvJCworc7HwxGlUVul:wt7XoNt7bHnorXxY |
| Yara |
|
| VirusTotal | Search for analysis |
| Name |
e3b0c44298fc1c14_0ejsxxhk.tmp
Empty file or file not found
|
|---|---|
| Filepath | C:\Users\test22\AppData\Local\BindDefinitions\shedyx.exe_Url_2k4vf4nereut3hbtsik0qhzo30ky0ihy\1.926.358.134\0ejsxxhk.tmp |
| Size | 0.0B |
| Type | empty |
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| CRC32 | 00000000 |
| ssdeep | 3:: |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | f48a486eb81aa493_user.config |
|---|---|
| Filepath | c:\users\test22\appdata\local\binddefinitions\shedyx.exe_url_2k4vf4nereut3hbtsik0qhzo30ky0ihy\1.926.358.134\user.config |
| Size | 2.0MB |
| Processes | 7132 (shedyx.exe) |
| Type | XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators |
| MD5 | e5c240ab45f98e0516c3d9de400c011b |
| SHA1 | e922fcd6bc6d7ce16a0f9a474a0d4e04aaa2f924 |
| SHA256 | f48a486eb81aa49330a8e2b582bf379a2a8d2596cd60dd9e1ac714647ec74520 |
| CRC32 | 52B4D34A |
| ssdeep | 12288:vbjQJoKAin/Qqlkxo6AOBr99mfjBMqRy3GF9y6nBjkzB1OUS5kYsrLBNeUZ8aymd:kPbbUZi9+rt5hWK |
| Yara | None matched |
| VirusTotal | Search for analysis |